MCP security report

mcp.printmoneylab.com

B85/100
Security grade BA few things are worth a closer look before connecting.
Connected ✓18 tools scanned

https://mcp.printmoneylab.com/mcp

mediumget_kimchi_premium
Autonomous micropayment instructions embedded in tool description (pattern repeated across 16 tools)
This tool (and 15 others: get_kr_prices, get_fx_rate, get_stablecoin_premium, get_arbitrage_scanner, get_exchange_alerts, get_market_movers, get_market_read, get_kr_sentiment, get_krw_macro_stress, get_global_vs_korea_divergence, get_global_vs_korea_divergence_deep, get_kr_news_kpop, get_kr_news_kpop_summary, get_kr_news_semiconductor, get_kr_news_semiconductor_summary) instructs the calling agent to autonomously execute an x402 crypto micropayment (USDC on Base/Polygon/Solana) via third-party payment clients (AgentCash, Pay.sh) before or upon each call. If the agent follows this literally, it could initiate real financial transactions using user funds/wallets without an explicit per-call confirmation step from the user. Individually the amounts are tiny ($0.001–$0.10), but across many calls in a session this could accumulate unnoticed spend. No tool in this set describes any user-confirmation or spending-limit safeguard, which is a broader capability (spending money) than what a 'get market data' tool should implicitly require.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowget_kimchi_premium
External documentation/payment links point to a single third-party domain
All paid tools point to the same external docs/payment endpoint (https://api.printmoneylab.com/.well-known/x402). While this is presumably the service's own domain, agents should not be induced to fetch or execute arbitrary content from this link, and the informal/unverified branding ('printmoneylab') combined with a payment protocol reference warrants caution before an agent visits or acts on instructions found at that URL.
Embed this badge

Show your MCP server’s security grade

MCP security grade B

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/d33c19d1-2b3a-4a52-9744-af2d443b05a8)](https://gateturbo.com/report/d33c19d1-2b3a-4a52-9744-af2d443b05a8)

Scanned 9/5/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free