MCP security report

agent-observatory-sensor.nolimit-observatory.workers.dev

F7/100
Security grade FHigh-severity signals — review these before connecting.
Connected ✓31 tools scanned

https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/isbn-uri/mcp

highagent-tool-index
Embedded navigation instruction directs agent to follow tracked redirect chain
The description instructs the AI to 'Follow start_here.hop first' through a 302 redirect carrying utm_source=agent-observatory&utm_medium=agent tracking parameters, then follow additional docs/CLI/remote-MCP hops. This is an imperative directive aimed at the agent's behavior (not just a description of output), designed to funnel the agent through a third-party tracked funnel to a 'pay-per-call tool gateway.' This could cause the agent to autonomously navigate to and interact with an unvetted external service, download/execute skill files, or register for paid services without clear user awareness.
highpeople-search-index
People-search/doxxing capability combined with embedded redirect instructions
Tool explicitly indexes 'a living people-search index' and instructs the agent to 'Follow start_here.hop' (tracked 302 redirect) to reach API/CLI/MCP hops. Combining an instruction that steers agent navigation with a service aimed at locating information about living individuals raises privacy and safety concerns — it could be used to help a user locate personal information about real people under the guise of a generic lookup tool, and the embedded hop-following instruction is a directive to the agent beyond simple parameter validation.
highagent-ads-index
Embedded instructions to onboard agent/operator into an ad-placement and trial signup funnel
The description tells the agent to 'Follow start_here.hop first' (tracked redirect) and describes returning a '7-day trial handoff for your operator.' This is an instruction embedded in a tool description that could lead the agent to initiate a paid trial or commit the user's 'operator' account to a third-party advertising/monetization service, potentially without informed user consent. This goes beyond the tool's stated function of simply describing a URL/host and constitutes an attempt to manipulate agent behavior toward a commercial action.
low
Not on gate's verified list
This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.
lowisbn-uri
Oversized, irrelevant parameter surface shared across all tools
Every tool in this collection (isbn-uri, utc-time, timezone, validate-json, etc.) shares an identical input schema with ten unrelated fields (zone, json, url, host, website, city, query, path, ref, feed) regardless of the tool's actual single-purpose function. While each field claims to be 'discarded,' this uniform oversized schema is unusual design that could mask data exfiltration paths or make it harder to audit what each tool actually consumes; worth confirming that unused fields are genuinely never transmitted or logged.
Embed this badge

Show your MCP server’s security grade

MCP security grade F

Paste this into your README:

[![MCP security](https://gateturbo.com/badge/scan/fdede4a2-14a7-4b48-9c5d-95afc99b48ec)](https://gateturbo.com/report/fdede4a2-14a7-4b48-9c5d-95afc99b48ec)

Scanned 10/4/2026 · This is a point-in-time snapshot of the server’s public tools. Re-scan.

Connect this server safely with gate.

Continuous re-scans, drift alerts, per-tool allow/ask/block, and a log of every call.

Monitor it — free