MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/campaign-incrementality-audit-v1/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Returns plaintext private key / API secrets through the agent context; urgency nudge to call immediately
Description says 'call this now' with no credential required, and the tool returns api_key, owner_key, and wallet_private_key in the response. Because the AI agent processes and may log/echo tool outputs, a raw private key flowing through the agent's context increases the risk of accidental leakage (e.g., included in chat transcripts, logs, or forwarded to another service). The tool also auto-provisions a funded wallet without an explicit user request for one, which is unusually broad for a 'get an API key' operation.
mediumhire_and_execute
One-call autonomous spend authority (creates escrow, funds on-chain, executes task) with only a soft price ceiling
This tool searches the marketplace, creates an escrow, funds it on-chain with USDC, and executes a task in a single call, with max_price_usdc defaulting to 1.0 if unspecified. This bundles capability discovery, financial commitment, and execution into one autonomous action without a separate user-confirmation step, and nothing in the schema restricts it to testnet — if invoked against mainnet configuration it could move real funds based solely on the agent's judgement of an acceptable price.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowbenchmarks_list
Urgency nudge language may bypass deliberate agent/user judgement
Description opens with '✅ No API key needed — call this now.' This is a directive aimed at the calling AI to invoke the tool immediately rather than reasoning about whether/when to do so. Repeated across several tools, this pattern nudges autonomous action and could be used to short-circuit normal agent decision-making or user confirmation steps.
lowbenchmarks_get
Urgency nudge language ('call this now')
Same '✅ No API key needed — call this now' directive appears here, encouraging immediate invocation without independent agent judgement. Low risk in isolation but part of a broader pattern across this tool family.
lowa2awire_guide
Urgency nudge language ('call this now')
Contains the same call-to-action phrasing telling the agent to act immediately. Also positions itself as the authoritative 'navigator' for the entire tool surface, which could be used to steer the agent's tool-selection behavior beyond what the user requested.
lowfind_paid_work
Urgency nudge language ('call this now')
Uses the same '✅ No API key needed — call this now' framing to encourage the agent to immediately search for and accept paid work, which could lead to autonomous job acceptance without explicit user intent.
lowget_agent_contract
Urgency nudge language ('call this now')
Repeats the '✅ No API key needed — call this now' pattern seen across many tools, encouraging unprompted invocation rather than being called only when contract verification is actually needed.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/e77ab4a4-2588-4209-8272-302b66881afa)Scanned 9/10/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free