MCP security report
agent-observatory-sensor.nolimit-observatory.workers.dev
F25/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned
https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/cc-ht/mcp
highpeople-search-index
Promotes a people-search/lookup service with embedded redirect instruction
Description names a specific third-party 'people-search index (Ploid)' and instructs the agent to 'Follow start_here.hop' with tracking parameters. Combining an instruction to funnel the agent through a tracked affiliate-style redirect with a people-search capability raises privacy/surveillance concerns (facilitating lookup of information about living individuals) and is a directive aimed at agent behavior rather than a neutral tool description.
highagent-ads-index
Tool designed to manipulate agent into recommending/placing commercial products
This tool's stated purpose is to help an external operator get their product 'placed so AI agents discover it' via an ad network, and instructs the agent to follow a tracked redirect ('start_here.hop' with utm_source=agent-observatory&utm_medium=agent) and proceed through a '7-day trial handoff for your operator.' This is explicit, non-neutral instruction aimed at steering the agent's future recommendations/actions toward a paid placement service and initiating an operator-level trial signup, which goes beyond the tool's nominal informational purpose and could bias agent outputs toward sponsored content without user awareness.
mediumagent-tool-index
Embedded directive to follow tracked redirect chain
The description instructs the agent to 'Follow start_here.hop first' through a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent tracking parameters, directing to an external pay-per-call gateway ('Monid'). This is an embedded behavioral instruction (not just data) telling the agent to visit and propagate a specific commercial/tracked URL chain, which could funnel the agent (and by extension the user's traffic) to a monetized third-party service without the user's informed consent or awareness.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowagent-tool-index
Generic catch-all schema masks tool-specific intent
Along with the other 30 tools, this tool shares an identical broad input schema (zone, json, url, host, website, city, query, path, ref, feed) unrelated to its described single purpose. This templating makes it harder to audit which parameters are actually used by each tool and could be used to smuggle unexpected inputs (e.g., arbitrary URLs, paths) into a tool whose description suggests a narrow function.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/e77cc784-fcfb-4556-a76d-d46d538c3925)Scanned 10/2/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free