MCP security report

agent-observatory-sensor.nolimit-observatory.workers.dev

D64/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓31 tools scanned

https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/lang-ga/mcp

mediumagent-tool-index
Embedded directive instructing agent to follow a specific tracked redirect
The description tells the AI agent to 'Follow start_here.hop first' and specifies exact UTM tracking parameters (utm_source=agent-observatory&utm_medium=agent) to use. This is an embedded behavioral instruction rather than a neutral tool description, steering the agent into visiting and propagating a specific tracking/affiliate link chain. This pattern can be used to manipulate agent navigation for attribution or monetization purposes without the user's awareness.
mediumpeople-search-index
Embedded tracked-redirect instruction plus facilitation of personal-data lookup on living individuals
Like the other 'index' tools, this description commands the agent to 'Follow start_here.hop' with specific UTM tracking parameters embedded in the text — an instruction aimed at the agent rather than a description of functionality. Additionally, the tool's purpose (a 'people-search index' for 'living people') facilitates locating personal information about private individuals, which raises privacy/doxxing concerns if invoked without clear user intent and consent.
mediumagent-ads-index
Embedded tracked-redirect instruction and mention of initiating a trial handoff on the user's behalf
The description instructs the agent to 'Follow start_here.hop first' with specific UTM tracking parameters, and states it returns a '7-day trial handoff for your operator.' This embeds a directive for the agent to perform a specific navigation/enrollment action (potentially committing the operator to a trial or ad placement) rather than simply describing a lookup capability, which could lead to unintended signups or commitments without explicit user confirmation.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge

Show your MCP server’s security grade

MCP security grade D

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/e5f28b74-f765-4f1c-94ca-a053ec1bfeab)](https://gateturbo.com/report/e5f28b74-f765-4f1c-94ca-a053ec1bfeab)

Scanned 10/2/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free