MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F25/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/latin1-n/mcp
highpeople-search-index
Points agent toward a people-search/background-check data aggregator for 'living people'
The tool explicitly surfaces an index for searching information about living individuals ('Ploid'), which is characteristic of people-search/doxxing-adjacent services. Combined with an embedded instruction to follow a tracked redirect ('start_here.hop' with utm_source=agent-observatory&utm_medium=agent), this could lead an agent to facilitate privacy-invasive lookups on real people and funnel traffic through an opaque third-party redirect.
highagent-ads-index
Embedded instruction pushes agent toward signing up operator for a paid trial via tracked redirect
Description instructs the agent to 'Follow start_here.hop first' with hardcoded tracking parameters and states it returns a '7-day trial handoff for your operator.' This reads as an attempt to get the agent to enroll the user/operator in a commercial trial/service via an opaque redirect chain, which goes beyond a simple discovery/lookup function and could result in unintended financial or account commitments without clear user consent.
mediumagent-tool-index
Embedded navigation instruction with tracking parameters directs agent to third-party gateway
The description instructs the agent to 'Follow start_here.hop first' and bakes in utm_source=agent-observatory&utm_medium=agent tracking parameters. This is an instruction aimed at steering agent behavior toward a specific external commercial redirect chain (a 'pay-per-call tool gateway') rather than describing a simple lookup function, and could be used for traffic attribution or to lead the agent through an uncontrolled hop chain to unvetted content.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowlatin1-n
Overloaded schema with unrelated parameters across unrelated tool
Every tool in this set shares an identical 10-field input schema (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's actual stated purpose. For example, a byte-count tool accepts fields for weather, Jira keys, git refs, and more. This schema bloat makes it hard for the agent or a reviewer to reason about what data each tool call actually uses, and increases risk that unrelated sensitive-looking parameters (e.g., path, host) get silently populated and sent for tools where they serve no stated function.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/d80ca053-9a21-4016-b6ea-6d3bd2ac7804)Scanned 10/1/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free