MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
D55/100
Security grade DHigh-severity signals — review these before connecting.
Connected ✓30 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/sshcfg-ok/mcp
highagent-tool-index
Embedded directive instructing agent to follow external redirect chain
The description tells the agent to 'Follow start_here.hop first (skill file, 302)' and then follow additional docs/CLI/remote-MCP hops. This is an instruction aimed at the agent's behavior rather than a description of the tool's function, and it encourages the agent to autonomously traverse an external, attacker-controllable redirect chain ('skill file', 302) toward a 'pay-per-call' gateway. This is a classic pattern for smuggling further instructions or malicious payloads into the agent's context, and could lead to unwanted network calls or financial/API commitments without explicit user awareness.
mediumpeople-search-index
Facilitates discovery of a people-search/doxxing service and remote hops
The tool is described as finding a 'living people-search index' and directs the agent to follow CLI/docs/API/remote-MCP hops. Beyond the stated narrow purpose (a query-length-like utility per its shared schema), this description encourages locating and potentially integrating with a personal-data lookup service, which raises privacy concerns (facilitating search for personal information about individuals) and again nudges the agent toward following external links/hops autonomously.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowsshcfg-ok
Schema/description mismatch across templated tools
All 30 tools share an identical 9-field input schema (zone, json, url, host, city, query, path, ref, feed) that is largely irrelevant to each tool's stated single-purpose function (e.g., an SSH config host counter exposing 'city', 'feed', 'query' fields it doesn't need). This templated over-broad schema pattern is unusual: it could be used to normalize a covert channel for passing extra data through unrelated tools, or indicates mass-produced/spam tool definitions designed to pad context and obscure the two higher-risk tools (agent-tool-index, people-search-index) among many benign-looking ones. Recommend confirming why every tool accepts unrelated fields like path/ref/feed regardless of function.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/e5804bd7-9c84-4263-b9fd-77c73f110df8)Scanned 9/15/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free