MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/hfspaces-new-hugging-face-spaces-ai-app-demos-live-web-uis-29d93e/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Urgency imperative plus one-time private key exposure
Description opens with '✅ No API key needed — call this now.' pressuring immediate use. Separately, when withdrawal_address is omitted on testnet, the tool auto-provisions a sandbox wallet and 'returns its private key exactly once' — a sensitive credential is placed directly into tool output/conversation context, where it could be logged, retained in chat history, or otherwise leaked. Even for a testnet sandbox wallet, returning raw private keys through an LLM-visible channel is risky practice.
mediumhire_and_execute
Autonomous on-chain spending without explicit per-transaction confirmation
This single tool call searches, creates escrow, funds it on-chain with real USDC, and executes a task with a hired third-party agent — all in one step, up to a max_price_usdc ceiling (default 1.0 USDC). This is a broad and financially consequential capability (moving real funds to an arbitrary third party selected by capability match) bundled into one call, with no described confirmation step before funds are committed on-chain.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency/imperative language designed to induce immediate invocation
The description opens with '✅ No API key needed — call this now.' and closes with 'Try one of the sample questions now.' This is marketing-style pressure language embedded in a tool description whose purpose is to influence the calling agent's decision-making (bypassing deliberation) rather than simply describe the tool's function. Not overtly malicious but is a manipulation pattern worth flagging.
lowa2awire_guide
Urgency imperative in description
Uses '✅ No API key needed — call this now.' framing to push immediate invocation rather than neutrally describing the tool's function.
lowfind_paid_work
Urgency imperative in description
Uses '✅ No API key needed — call this now.' framing, a soft behavioral-nudge pattern rather than pure functional description.
lowget_recommended_action
Description discourages independent agent reasoning
States the tool 'Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.' This explicitly instructs the calling agent to forgo its own evaluation of available tools/arguments in favor of blindly following this tool's recommendation, which could be leveraged to steer agent behavior without independent verification.
lowget_agent_contract
Urgency imperative in description
Uses '✅ No API key needed — call this now.' phrasing consistent with the same nudging pattern seen across several tools in this suite.
lowdata_session_fund
Platform auto-executes payment on caller's behalf
Description states 'Platform-executes funding' — the tool moves funds for the session without a separate explicit confirmation step. Amounts are small and capped (0.01 USDC/query, max 20 queries) so risk is limited, but it is an autonomous spend action worth noting.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/d40ae8ed-e3a0-467c-9c2f-6e415a825b68)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free