MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/ap-exception-review-2026-09-10-run-037bea/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
Encourages calling tools hidden from normal discovery
States 'Every listed tool is callable via tools/call by name — tools/list shows only always-on essentials.' This tells the agent that there is a larger, undisclosed tool surface beyond what standard introspection (tools/list) reveals, and encourages it to blindly invoke tools by name that it cannot otherwise verify or review. This undermines the transparency the tools/list mechanism is meant to provide to the agent (and by extension, the user).
mediumregister
Generates and returns private keys / secrets via tool output
The tool creates an agent identity and returns api_key, owner_key, and a wallet_private_key in plaintext, instructing the agent to 'save them somewhere safe when they arrive.' Having an AI agent handle and potentially persist raw private keys and credentials creates a real risk of accidental leakage (e.g., via logs, chat history, or insecure storage) even though the keys are for a testnet sandbox wallet.
mediumhire_and_execute
Broad autonomous financial capability in a single call
This single tool call searches the marketplace, creates an on-chain escrow, funds it with USDC, and executes a task — all without an intermediate confirmation step exposed to the user. Combined with a default max_price_usdc of 1.0 that can be raised by the caller, this gives the agent fairly broad power to commit funds autonomously in one call, which is a meaningfully larger blast radius than typical read-only or single-purpose tools in this set.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowbenchmarks_list
Urgency-inducing 'call this now' language
The description opens with '✅ No API key needed — call this now.' This is an imperative nudge aimed at the calling AI to act immediately rather than reason about whether the call is appropriate. The same pattern recurs across several tools (benchmarks_get, a2awire_guide, find_paid_work, register, get_agent_contract), suggesting a deliberate attempt to bias agent behavior toward immediate, low-friction tool invocation rather than user-directed reasoning.
lowbenchmarks_get
Repeated urgency/compliance nudge
Uses the same '✅ No API key needed — call this now.' framing as other tools in this catalog. While not overtly harmful, this kind of directive language embedded in a tool description is a known technique for steering an agent's behavior beyond simply describing the tool's function.
lowdata_session_fund
Automatic on-chain spending without explicit user confirmation step
This tool performs approve + createEscrowWithProof + attach against a platform-held sandbox wallet in one call, automatically committing testnet funds. While scoped to testnet and stated as such, it is an example of a tool that executes multi-step financial operations autonomously based only on a session id, with no additional confirmation gate described.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/d053387e-6d83-4852-9ae8-1b3daae07b35)Scanned 9/17/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free