mcp.tulimoa.com

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

Reviewed all 5 tools (search_listings, get_listing, list_categories, submit_listing, edit_listing). Descriptions are functionally scoped, do not contain hidden instructions aimed at overriding agent behavior, do not request secrets/credentials/env vars, and do not exfiltrate user data to unexpected destinations. Write operations (submit_listing, edit_listing) are appropriately scoped to require authenticated write access and only affect the user's own listings, with clear behavior (pending review status) disclosed. Logo URL handling (fetching and re-encoding an image) is a normal, bounded capability consistent with a directory listing tool and does not represent an unusual SSRF-style risk beyond typical image-hosting features, though it is worth noting as a minor item below.

The tool instructs the backend to download an image from a user-supplied public URL. While benign for its stated purpose, allowing arbitrary URLs for server-side fetching is a common vector for SSRF if not properly validated server-side (e.g., restricting to public internet, disallowing internal/link-local addresses). This is not something the agent can mitigate, but it's worth flagging for the tool implementer to ensure proper URL validation/sandboxing is in place server-side.

Same SSRF-adjacent consideration applies here: logo_url is fetched server-side. Recommend confirming the backend validates/restricts destinations before fetching, but this is a low-severity implementation note rather than an agent-facing manipulation risk.