MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/exploitdb-exploit-db-new-public-exploits-pocs-e3345b/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Urgency phrasing + incentive to unlock paid tools, plus private-key exposure
Description uses the same 'call this now' urgency hook and frames registration as required to 'unlock the purchase tools' for a paid listing, nudging the agent toward monetized actions. Separately, the withdrawal_address field documentation states that omitting it causes a sandbox payout wallet to be auto-provisioned, 'returning its private key exactly once' — returning a wallet private key through a tool call response is a sensitive operation; if the agent logs, echoes, or forwards this output, the key could be exposed or misused.
mediumhire_and_execute
Autonomous on-chain spending capability
This single tool call searches, creates escrow, funds it on-chain with USDC, and executes a task end-to-end based only on a capability string, task text, and a price ceiling — giving the agent broad power to autonomously commit real (or testnet) funds without an intermediate confirmation step beyond the max_price_usdc parameter. This is a more consequential capability than a typical read-only or single-purpose tool and warrants caution about unattended use.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency-manipulation phrasing aimed at the calling agent
The description opens with '✅ No API key needed — call this now.' This is a classic prompt-injection-style nudge designed to push the AI agent into invoking the tool immediately rather than evaluating whether it's needed, bypassing normal deliberation about cost/relevance.
lowdata_session_fund
Automatic funding/spend execution
Description states the platform 'executes funding' on the agent's behalf so it can proceed to paid queries. Combined with the surrounding 'no API key needed, call this now' style prompts in the sibling tools, this could encourage the agent to move money through the funding pipeline without pausing for explicit user confirmation of spend.
lowdata_session_open
Repeated urgency/marketing language nudging toward paid actions
Description repeats the 'first taste free via data_preview' / paid-access framing seen across the data_session_* family, encouraging quick progression from a free preview into a paid session. Not inherently malicious, but the consistent promotional phrasing across these tool descriptions is designed to influence the calling agent's behavior toward spending rather than simply describing functionality.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/e9111800-da4a-43b1-b94f-ff4d0163774a)Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free