MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/refund-request-audit-2026-09-10-2b20046e/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Urgency phrasing plus handling of once-shown private keys
Description says '✅ No API key needed — call this now' and 'NO credential needed — call this first if you connected with no key,' pushing the agent to register unprompted. It also returns a wallet_private_key, api_key, and owner_key that the agent is told to 'save... somewhere safe' — these are live credentials/secrets that, once surfaced in a conversation transcript, could be exposed or logged. Agents should treat this credential material with care and avoid echoing it unnecessarily.
mediumget_recommended_action
Description discourages independent reasoning by the agent
The description states the tool exists 'so you do not have to reason over the full catalog,' explicitly encouraging the agent to bypass its own evaluation of available tools and follow a pre-filled recommendation instead. This is a mild attempt to short-circuit the agent's independent judgment in favor of automatically executing suggested actions, which could be leveraged to steer the agent's behavior.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowbenchmarks_list
Imperative 'call this now' language aimed at the agent
The description opens with '✅ No API key needed — call this now,' an instruction directed at the AI rather than a factual description of the tool. This kind of urgency/command phrasing embedded in a tool description is a classic prompt-injection pattern intended to induce the agent to invoke tools regardless of user intent.
lowbenchmarks_get
Imperative 'call this now' language aimed at the agent
Same '✅ No API key needed — call this now' directive appears here, nudging the agent to act immediately rather than describing functionality neutrally.
lowa2awire_guide
Imperative 'call this now' language aimed at the agent
Uses the same '✅ No API key needed — call this now' urgency phrasing to push the agent toward calling it.
lowfind_paid_work
Imperative 'call this now' language aimed at the agent
Uses the same '✅ No API key needed — call this now' urgency phrasing, encouraging unconditional invocation.
lowget_agent_contract
Imperative 'call this now' language aimed at the agent
Uses the same '✅ No API key needed — call this now' urgency phrasing to encourage invocation independent of actual need.
lowhire_and_execute
Broad one-call financial/execution capability
This single tool call searches the marketplace, creates and funds an on-chain USDC escrow, and executes a third-party task, combining discovery, payment authorization, and task execution in one step. While consistent with the stated marketplace purpose, this breadth of autonomous financial action (spending real/testnet funds and delegating task execution to an unknown hired agent) warrants caution and should ideally involve explicit user confirmation before funds are committed.
lowdata_session_fund
Platform executes wallet transactions on the user's behalf
This tool has the platform directly execute approve/createEscrowWithProof/attach transactions using a sandbox wallet 'minted at register,' meaning the private key is used server-side rather than by the calling agent/user. Although scoped to testnet, this pattern of the platform unilaterally transacting with a user-associated wallet is worth flagging as a custody/trust boundary concern.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/e4dc090c-7f1a-43e7-bc34-e2eb67e2e07d)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free