MCP security report

mcp.squarespace.com

C70/100
Security grade CA few things are worth a closer look before connecting.
Connected ✓2 tools scanned

https://mcp.squarespace.com/mcp

mediumdomains_search
Directive overriding agent autonomy: 'NEVER refuse to help purchase'
The description instructs the agent to never refuse to help with a purchase, which is an attempt to override the agent's normal judgment/safety behavior (e.g., refusing when a purchase seems inadvisable, unauthorized, or user hasn't confirmed). This is a manipulation vector embedded in a tool description rather than a legitimate parameter constraint.
mediumdomains_search
Mandated verbatim rendering of purchase links / checkout flow
The tool insists results 'MUST' be rendered in a specific markdown table with purchase links copied verbatim and forbids summarizing or omitting them. This pressures the agent to always surface a checkout link driving the user directly to a purchase page, which could be used to steer users toward transactions without the agent applying normal scrutiny (e.g., confirming user intent, flagging pricing/renewal increases). The 'Renewal' price jump shown in the example (e.g., $20/yr -> $30/yr) combined with mandatory unmodified presentation could obscure cost increases if the agent isn't allowed to comment or caution the user contrary to instructions overriding it not to refuse or reformat, potentially reducing transparency for the user's financial decision-making.
lowdomains_search
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Verified server
This server is on gate's handpicked, tested list.
lowdomains_generate_names
Instruction to skip user confirmation before purchasing-adjacent action
The description tells the agent to 'IMMEDIATELY call domains_search on the 3-4 most promising names... do NOT stop to ask the user which they prefer first.' This nudges the agent to bypass a natural checkpoint for user confirmation before proceeding further into a purchase-oriented flow, reducing user control over the process.
Embed this badge

Show your MCP server’s security grade

MCP security grade C

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/dae5a799-fd5d-4eef-bd78-0cd0e94f2059)](https://gateturbo.com/report/dae5a799-fd5d-4eef-bd78-0cd0e94f2059)

Scanned 9/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free