MCP security report
mcp.easyterritory.ai
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓47 tools scanned
https://mcp.easyterritory.ai/
mediumsubmit_feedback
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumingest_accounts
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumgeocode_address
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumcalculate_route
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumisochrone_build
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumexport_geojson
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
lowworkflow_advisor
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowauto_build
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcluster_points
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowschedule_visits
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowaccount_build
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowrealign
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowterritory_rebalance
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcreate_territory_from_parts
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowanalyze
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowingest_accounts
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowrequest_account_upload
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowcalculate_route
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowisochrone_build
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowseed_build
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowconfigure_map
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowshow_map_overlay
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdiscover_intent
Documents external data push/pull using bearer PAT token
The tool's guidance describes using an 'ezt_pat_' Bearer token to POST/PUT exported Territory Solution data to an external EasyTerritory Designer REST API (and GET it back) outside the MCP surface. This is presented as a documented integration rather than hidden exfiltration, but it does instruct the agent to transmit customer territory/account data to a third-party REST endpoint using a credential. Worth confirming this integration is user-initiated and the PAT is handled only by the user/host, not captured or reused by the agent beyond the stated purpose.
lowexport_geojson
Enables full project data to leave the MCP via Designer push
Description states the GeoJSON artifact 'travels with' styling and is the basis for POSTing to Designer REST/Agent/Projects (FromTerritorySolution) using a Bearer PAT. This is a legitimate documented workflow but represents a broad data-egress path (full territory/point/route data) keyed on a credential not managed by this MCP server itself; flagging for visibility rather than as malicious.
lowimport_geojson
Instructs fetching external project data with user's Bearer PAT
Guidance tells the agent to call GET Designer REST/Agent/Projects and GET .../TerritorySolution using the user's ezt_pat_ Bearer token, then feed the result into import_geojson. This is consistent with a documented pull-from-Designer workflow, but involves the agent handling and using a bearer credential against an external API — reasonable for the stated feature, but worth noting as an external-auth touchpoint.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/eac02edf-8007-4c65-81b3-8b05e02a701c)Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free