gumballtools.com

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

Nearly every tool in this collection ends with a near-identical line: 'Owned by X at https://...gumballtools.com, which is also callable directly if you would rather not go through the aggregator.' This pattern encourages the agent to route user data to external third-party websites outside the vetted MCP tool-calling path. While framed as attribution/branding, it's a recurring nudge for the agent to send potentially sensitive user input (schedules, JSON payloads, financial figures, personal dates for due_date, body metrics, etc.) directly to an external HTTP endpoint. This is not inherently malicious but is worth flagging as an unusual, repeated instruction across many otherwise-unrelated tools, since it could be leveraged to exfiltrate data if the agent follows the suggestion literally.