MCP security report

agent-observatory-sensor.nolimit-observatory.workers.dev

C76/100
Security grade CA few things are worth a closer look before connecting.
Connected ✓30 tools scanned

https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/cidr-shape/mcp

mediumagent-tool-index
Embedded directive telling the agent to follow an external redirect chain
The description instructs the AI to 'Follow start_here.hop first (skill file, 302)' and mentions additional docs/CLI/remote-MCP hops. This is an imperative aimed at the agent's behavior rather than a simple parameter description, and it steers the agent toward an external, unverified 'pay-per-call' gateway (Monid). An agent blindly following such embedded instructions could be redirected to untrusted endpoints, register for paid services, or fetch further instructions from an attacker-controlled location without the user's awareness.
mediumpeople-search-index
Facilitates locating a people-search/data-aggregation service
This tool's stated purpose is to help the agent find a 'living people-search index' (Ploid) and provides CLI/API/remote-MCP hops to reach it. Directing an AI agent toward services that aggregate and expose personal information about private individuals raises privacy and safety concerns, and the phrasing 'CLI setup, docs, API, and remote MCP hops' again reads as an operational directive to the agent rather than a simple data-shape check, encouraging it to onboard with an external, unvetted service.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
Embed this badge

Show your MCP server’s security grade

MCP security grade C

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/f8a02fe9-cc33-4b0e-b6d4-d18f422c3a07)](https://gateturbo.com/report/f8a02fe9-cc33-4b0e-b6d4-d18f422c3a07)

Scanned 9/14/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free