MCP security report

briefing-service.wholemind.workers.dev

A97/100
Security grade ANo obvious red flags in the tools we could see.
Connected ✓4 tools scanned

https://briefing-service.wholemind.workers.dev/mcp

low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowrender_briefing
Arbitrary URI fetching via feeds parameter
The 'feeds' parameter accepts up to 30 arbitrary URIs that will be fetched by the server to build a briefing. If this tool is backed by a service that fetches these URLs server-side, it could be used for SSRF against internal network resources or to exfiltrate data by encoding it in fetched URLs. Not necessarily malicious given the tool's stated purpose, but worth validating that fetched targets are restricted to public feed content and that responses aren't used to inject unvetted content back into the agent's context.
Embed this badge

Show your MCP server’s security grade

MCP security grade A

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/e7b1ecd6-5579-4442-acb8-7ac401d744ab)](https://gateturbo.com/report/e7b1ecd6-5579-4442-acb8-7ac401d744ab)

Scanned 9/14/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free