MCP security report

api.helpmyagent.com

A91/100
Security grade ANo obvious red flags in the tools we could see.
Connected ✓63 tools scanned

https://api.helpmyagent.com/mcp

lowcompany_fr_prospecting
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
lowreal_estate_fr_transactions
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowcompany_fr_default_score
Autonomous micropayments without explicit spend confirmation
This tool (and the large majority of the other 'company/fr/*', 'procurement/fr/*', 'real-estate/fr/*', 'compliance/name-screen', 'iban/validate' and 'vat/eu/validate' endpoints) states that 'a successful invocation can consume the advertised x402 payment' and that repeating the call after a completed payment may require a new payment. The schemas contain no parameter or mechanism requiring the calling agent to obtain explicit per-call user confirmation before a real (crypto) payment is triggered. An agent that chains several of these paid endpoints autonomously (e.g., via company/fr/intelligence, company/fr/kyb, or repeated retries) could incur real monetary charges on behalf of the user without an in-band confirmation step. This is not malicious by itself, but it is a broad, cost-bearing capability that should ideally require explicit user opt-in per transaction or a spending cap, which is not enforced by the tool definitions.
Embed this badge

Show your MCP server’s security grade

MCP security grade A

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/f16d72b1-6737-435b-b65c-3cb1f105011f)](https://gateturbo.com/report/f16d72b1-6737-435b-b65c-3cb1f105011f)

Scanned 9/12/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free