MCP security report

mcp.aave.com

D64/100
Security grade DA few things are worth a closer look before connecting.
Connected ✓40 tools scanned

https://mcp.aave.com/

mediumprepare_action
Instructs agent to bypass user confirmation on financial parameters
The description explicitly tells the model: 'Choose sensible values, build it, and say what you chose - do not stop to ask the user first, because they see the transaction before they sign it.' This is an embedded behavioral directive aimed at the AI rather than a description of the tool's mechanics. It nudges the agent to autonomously pick amounts/parameters for supply, borrow, withdraw, and repay actions instead of confirming intent with the user first. While the on-chain signature is a final safeguard, encouraging the agent to skip clarifying questions before constructing financial transactions undermines a normal safety practice, especially for ambiguous requests where 'sensible values' is subjective (e.g., how much to borrow/withdraw).
mediumprepare_sgho_action
Instructs agent to bypass user confirmation on financial parameters
Contains the same directive pattern: 'Choose sensible values, build it, and say what you chose rather than stopping to ask.' This tells the AI to decide deposit/withdraw amounts unilaterally rather than confirming with the user before building a transaction, which is a behavioral instruction to the agent beyond simply describing the tool's function.
lowget_markets
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowprepare_action
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowpreview_action
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowprepare_stkgho_migrate
Instructs agent to act without seeking permission first
The description states: 'Non-custodial, so build it rather than asking permission first.' Combined with the tool covering an entire (unread) balance with no amount parameter, this pushes the agent toward building an all-or-nothing migration transaction without first confirming with the user, relying solely on the user noticing details before signing. This is a mild instance of the same pattern seen in prepare_action and prepare_sgho_action of discouraging user check-ins before constructing transactions.
Embed this badge

Show your MCP server’s security grade

MCP security grade D

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/f1275660-56c4-41ab-b43e-abb4d971a9b3)](https://gateturbo.com/report/f1275660-56c4-41ab-b43e-abb4d971a9b3)

Scanned 9/6/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free