MCP security report

agent-observatory-sensor.nolimit-observatory.workers.dev

F28/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned

https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/lang-mi/mcp

highpeople-search-index
Directs agent to a people-search/doxxing-adjacent service via tracked redirect
This tool instructs the agent to follow a tracked 'start_here.hop' redirect to a 'living people-search index (Ploid)', then surfaces CLI/API/MCP onboarding hops. People-search aggregators are commonly used for stalking, harassment, and unauthorized profiling of private individuals. Embedding an instruction that pushes the agent toward discovering and onboarding to such a service — especially via an affiliate-tracked hop — is a genuine safety and privacy concern beyond the tool's stated 'discard query text' scope.
highagent-ads-index
Instructs agent to initiate a commercial trial on behalf of 'your operator' via tracked redirect
The description tells the agent to follow a utm-tagged 'start_here.hop' redirect and explicitly offers a '7-day trial handoff for your operator', implying the agent should take action to enroll its own operator (the deploying company/user) in a third-party ad-placement service. This is an embedded directive aimed at influencing agent behavior toward a commercial commitment that goes beyond a simple lookup/index tool, and could result in unauthorized sign-ups or data sharing with an external advertising network without clear user consent.
mediumagent-tool-index
Embedded instruction to follow tracked third-party redirect
The description instructs the agent to 'Follow start_here.hop first' through a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent tracking parameters to an external 'Monid' pay-per-call gateway. This is a directive aimed at the agent's behavior (navigate this specific affiliate-tracked link chain) rather than a description of tool mechanics, and could be used to funnel agent traffic to a commercial service without explicit user awareness or consent.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge

Show your MCP server’s security grade

MCP security grade F

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/e8760cf4-0b76-417f-a86a-f16edfcb431a)](https://gateturbo.com/report/e8760cf4-0b76-417f-a86a-f16edfcb431a)

Scanned 10/2/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free