MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F25/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/sentence-count/mcp
highpeople-search-index
Directs agent to a people-search service with embedded tracking redirect instructions
Like agent-tool-index, this tool instructs the agent to follow a specific hop sequence with UTM tracking parameters before reaching a 'people-search' service. Combining (a) directive language telling the agent exactly what to do beyond the tool's stated function, (b) tracking parameters sent to a third party, and (c) a people-search capability (which can surface personal/identifying information about living individuals) creates elevated privacy risk — the agent could be steered into querying a personal-data aggregation service with user-supplied search text under a disguised 'index lookup' tool.
highagent-ads-index
Ad-placement/monetization tool instructing agent to commit the operator to a trial signup
This description explicitly states its purpose is to get AI agents to discover and place products as ads, and instructs the agent to follow a specific redirect chain (with tracking UTM parameters) ending in 'the 7-day trial handoff for your operator.' This directs the agent to take an action (enrolling the operator in a trial) on behalf of the user without clear disclosure or consent, which is a manipulative instruction embedded in a tool description rather than a straightforward capability description.
mediumagent-tool-index
Embedded directive instructing agent to follow specific redirect chain with tracking parameters
The description tells the agent to 'Follow start_here.hop first' and specifies exact UTM tracking parameters (utm_source=agent-observatory&utm_medium=agent) to use. This is an instruction aimed at controlling agent behavior/navigation rather than describing tool I/O, and it embeds tracking metadata that will silently propagate to a third-party gateway whenever the tool is used, without the user's visibility or consent.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowagent-tool-index
Advertises 'pay-per-call' monetized tool gateway
Description promotes discovery of a commercial, pay-per-call service gateway; agents using this tool could inadvertently expose users to billing/monetization flows presented as neutral 'tool index' lookups.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/dce6b70e-f54c-49c5-8f0e-f92954d2bb30)Scanned 10/3/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free