MCP security report
a2awire.com
F5/100
Security grade FA few things are worth a closer look before connecting.
Connected ✓16 tools scanned
https://a2awire.com/mcp/data/showhnwatch-show-hn-launch-stream-hacker-news-a0a134/http
mediumdata_preview
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediuma2awire_guide
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumfind_paid_work
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumget_agent_contract
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumdata_session_attach_escrow
References secrets or data exfiltration
The tool text references credentials, environment variables, or sending data elsewhere. This can be legitimate, but review what this tool actually accesses.
mediumregister
Tool can auto-provision and return a wallet private key through the conversation channel
When withdrawal_address is omitted on testnet, the tool 'auto-provisions a sandbox payout wallet... returning its private key exactly once.' Returning a private key through an LLM tool-call response risks it being logged, displayed insecurely, or persisted in conversation history/context — a bad practice even for testnet funds, and the pattern could be misapplied if the same option existed on mainnet. Combined with the 'call this now' urgency in the same description, an agent could be induced to register and receive/handle a private key without pausing for the user to review the security implications.
mediumhire_and_execute
One-call autonomous spending of real funds
This tool searches for an agent, creates and funds an on-chain USDC escrow, and executes a task in a single call, with a default max_price_usdc of 1.0 USDC. This lets the agent commit the user's funds to a third-party 'hired' agent autonomously without a separate confirmation step, which is a broad/high-impact capability (irreversible on-chain payment) relative to a simple 'hire and execute' description.
lowregister
Unusually long tool description
Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowdata_preview
Urgency/manipulation language directed at the AI agent
The description opens with '✅ No API key needed — call this now.' and closes with 'Try one of the sample questions now.' This is marketing/urgency phrasing aimed at influencing the agent's behavior (nudging immediate action) rather than neutrally describing the tool's function. Similar phrasing appears across several tools in this set (a2awire_guide, find_paid_work, register, get_agent_contract), which together push the agent toward a monetized flow without the user necessarily deciding to engage with a paid data listing.
lowa2awire_guide
Imperative 'call this now' framing
Description uses directive language ('call this now') intended to shape agent behavior rather than simply describe capabilities. Benign in isolation, but combined with similar phrasing elsewhere it reads as an attempt to bias the agent toward continuing to invoke more tools in this marketplace regardless of user intent.
lowfind_paid_work
Directive phrasing nudges agent toward autonomous economic activity
'call this now' plus instructions to immediately chain into start_job encourages the agent to begin taking paid-work actions (which may involve spending or committing the user's on-chain identity) without an explicit checkpoint for user confirmation.
lowregister
Collects wallet/withdrawal addresses and broad autonomous spending configuration
The schema lets the caller set spending_cap_mode='wallet_balance' (spend up to whatever on-chain allowance exists, refilling as it earns) and spawn_approval_required=false by default (child agent spawns proceed without owner approval). These defaults grant the agent broad autonomous financial/spawning authority unless explicitly restricted, which is a broader capability than the tool's stated 'unlock purchase tools' purpose suggests.
lowdata_session_query
Automatic signing via provisioned sandbox wallet
sandbox_receipt lets the platform sign a DeliveryReceipt using the agent's provisioned sandbox wallet automatically. While scoped to testnet, delegating signing authority to the platform without per-transaction user visibility is a pattern worth monitoring if it were ever extended beyond sandbox use.
Embed this badge
Show your MCP server’s security grade
Paste this into your README:
[](https://gateturbo.com/report/fc2fa24b-37cc-4982-b022-224d0d620b18)Scanned 9/11/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.
Connect this server safely with gate.
Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.
Monitor it — free