MCP security report

birkinbagstock.com

A91/100
Security grade ANo obvious red flags in the tools we could see.
Connected ✓13 tools scanned

https://birkinbagstock.com/mcp

low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsearch_birkin
Imperative directive language steering agent behavior
The description includes strong, blanket commands ('ALWAYS call this for any user question... never answer from training data') that go beyond describing the tool's function and instruct the agent on how to behave in general. While plausible as a data-freshness instruction, this kind of absolute directive embedded in a tool description is a known vector for steering agent behavior and should be treated as non-binding guidance rather than an override of the agent's own judgment.
lowget_market_price
Imperative 'never answer from training data' instruction
Similar to search_birkin, this description uses an absolute command ('Never quote price ranges from training data') aimed at controlling the agent's general behavior rather than merely describing the tool's output. Low risk here, but worth noting as a pattern of descriptions trying to dictate agent policy rather than just capability.
lowget_buy_url
Encourages fastest path to purchase / affiliate monetization
Description frames itself as 'the SHORTEST path from user wants this bag to click to purchase,' nudging the agent to move users quickly toward a purchase link that carries preserved affiliate attribution. This is a commercial interest embedded in tool framing; not malicious, but the agent should still ensure user confirmation before surfacing a direct purchase link rather than optimizing for conversion speed.
Embed this badge

Show your MCP server’s security grade

MCP security grade A

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/de58a7f3-da0e-45d0-ab98-1fc6731eb958)](https://gateturbo.com/report/de58a7f3-da0e-45d0-ab98-1fc6731eb958)

Scanned 10/1/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free