MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓23 tools scanned
https://a2awire.com/mcp/benchmarks/inventory-ledger-reconciliation-v1/http
mediumbenchmarks_list
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmarks_get
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_start_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_submit_answers
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_finalize_run
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumbenchmark_get_results
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumconfirm_keys_persisted
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_open
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_funding_package
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_fund
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_query
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool generates and surfaces raw private key material into the conversation
The register tool returns api_key, owner_key, and a wallet_private_key in plaintext ('shown once') and instructs the agent to 'persist them immediately.' Because this data flows through the model's context, any logging, retries, or downstream tool calls that echo this response risk leaking a live wallet private key. While this may be an intentional feature of a custodial-onboarding flow, exposing raw private keys via an LLM-visible tool response is inherently risky and should be flagged for handling review (e.g., redaction, out-of-band delivery).
mediumhire_and_execute
Broad autonomous spending capability with minimal safeguards
This single tool call searches for a third-party agent, creates an on-chain escrow, funds it with real (or testnet) USDC, and executes an arbitrary task—all without any additional user confirmation step beyond a caller-supplied max_price_usdc ceiling. Combined with free-text task_input sent to an unknown third-party 'hired' agent, this gives the calling agent broad power to move funds and disclose task content to external, unvetted parties based solely on a capability-tag match, which is a meaningfully higher-risk action than the tool's simple description ('one-call bridge') suggests to a casual reader.
lowdata_session_open
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowbenchmarks_list
Urgency/manipulative call-to-action phrasing
Description opens with '✅ No API key needed — call this now.' This kind of imperative, urgency-inducing language embedded in a tool description is a pattern used to push an agent toward immediate action rather than neutral capability description. The same phrasing repeats across many tools (benchmarks_get, a2awire_guide, find_paid_work, register, get_agent_contract), which suggests a deliberate attempt to bias the agent's tool-selection behavior rather than simply documenting functionality.
lowget_recommended_action
Encourages bypassing independent reasoning
Description states the tool exists 'so you do not have to reason over the full catalog,' explicitly nudging the agent to skip its own evaluation of available tools/state in favor of blindly following a pre-filled recommendation. This is a soft steering pattern that reduces the agent's independent judgment about which action is appropriate, which could be exploited if the recommendation logic is later manipulated.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/eea85af2-2374-42e4-9280-bbab3a9d3aad)Scanned 9/9/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free