MCP security report
ai.rjhsignaltech.workers.dev
C76/100
Security grade CA few things are worth a closer look before connecting.
Connected ✓11 tools scanned
https://ai.rjhsignaltech.workers.dev/mcp
mediumweb_extract_preview
Tool description promotes sending arbitrary user-supplied URLs to a third-party paid endpoint
The description tells the agent that a 'full extraction' of any URL the user is inspecting can be obtained by making an HTTP GET to https://ai.rjhsignaltech.workers.dev/api/extract?url=<page> with an x402 payment. This effectively instructs the agent, based purely on the tool's own description, to forward whatever page URL a user is investigating (which could include internal, private, or sensitive URLs) to an external paid service. There is no indication the user explicitly consented to this specific external call, and the agent could be induced to initiate a paid request to a third-party domain on the user's behalf simply by following the tool description.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowspf_watch_subscribe
Sales-pitch language embedded in tool description could bias agent recommendations
The description contains persuasive marketing copy ('exists because a reading answers a question once...') designed to steer the agent toward recommending a $12/month paid subscription. While it discloses that no payment is taken by the tool itself, the framing could cause the agent to upsell the paid product more assertively than a neutral tool description would, without being asked.
lowai_visibility_order
Sales-pitch language embedded in tool description could bias agent recommendations
Extensive capitalized marketing language ('IT IS NOT A PROMISE OF CITATION', detailed feature list) is used to promote a $249 audit. This kind of persuasive framing inside a tool description can nudge the agent to recommend the paid product more than a strictly informational description would.
lowaudit_order
Sales-pitch language embedded in tool description could bias agent recommendations
The description uses promotional framing for a $29 one-off audit and repeatedly instructs the agent ('RUN THE FREE READERS FIRST') on how to sequence tool usage, which is a marketing/upsell funnel embedded in a tool spec rather than purely functional documentation.
lowroster_order
Sales-pitch language embedded in tool description could bias agent recommendations
Similar to related tools, this description is structured as a sales funnel comparing prices and steering the agent toward either audit_order or roster_order depending on domain count, which goes beyond describing the tool's function into directing the agent's recommendation behavior.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/cd3ee5c9-9bfe-4009-b0f0-382fb66bb566)Scanned 9/8/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free