Loading…
Data extraction server on Cloudflare Workers with REST and MCP JSON-RPC interfaces, free tier available.
Do not connect
The assessed surface is high-risk. Remediate the findings before connecting.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The smart-data-extractor-worker MCP server exposes 4 tools, focused primarily on web capabilities. Its published description reads: "Data extraction server on Cloudflare Workers with REST and MCP JSON-RPC interfaces, free tier available". It communicates over Streamable HTTP using the 2026-07-28 protocol revision, and does not require authorization to connect. MCPGrade currently rates smart-data-extractor-worker D — the assessed surface is high-risk and should be remediated before use. Its most notable findings include "Data-exfiltration parameters" and "Single tool combines the lethal trifecta". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check smart-data-extractor-worker's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add smart-data-extractor-worker to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://api.lazy-mac.com/smart-data-extractor/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: extract_from_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: extract_from_url
Financial data service providing fundamental information for 30,000+ listed companies across the US, Japan, and Korea, sourced directly from SEC, EDINET, and DART regulatory filings.
Search tours, attraction tickets, and holiday packages across 24 countries.
AI API cost optimization API, deployed via Cloudflare Workers with REST and MCP interfaces.
AI-powered changelog generation API, deployed via Cloudflare Workers with REST and MCP interfaces.
tools/listIdempotent · 30s timeout · Extract structured data from URL content with auto schema learning. Pass `idempotency_key` to deduplicate identical calls within 5 minutes.
Idempotent · 30s timeout · Extract structured data from API response JSON with schema adaptation. Pass `idempotency_key` to deduplicate within 5 minutes.
Idempotent · 30s timeout · Automatically infer JSON Schema from sample data without extraction. Pass `idempotency_key` to deduplicate within 5 minutes.
Idempotent · 30s timeout · Extract data from multiple sources (JSON/JSONL/text) with a single consistent schema. Pass `idempotency_key` to deduplicate within 5 minutes.
One tool reads private data, ingests untrusted content, AND can send data outbound — the three preconditions for autonomous data theft in a single call. A prompt injection reaching this tool can exfiltrate secrets with no further step.
etch (will auto-download and parse), or raw content string (up to 200KB). Max 200KB after fetch.","RecommendationSplit the capabilities across separate least-privilege tools so no single tool can read secrets, read untrusted input, and reach the network at once.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
Agentic visitor analytics with five tools for CRO and session analysis.
52 paid x402 API endpoints for AI agents — crypto, data, DeFi, and market intelligence, settled on Base.
Access Vonage API documentation, code snippets, tutorials, and troubleshooting resources.
Persistent key-value scratchpad for AI agents with session checkpointing and diff support. Tool documentation in Korean.
Multi-step AI agent workflow orchestration API, deployed via Cloudflare Workers with REST and MCP interfaces.
AI agent execution trace auditing API, deployed via Cloudflare Workers with REST and MCP interfaces.
Persistent key-value memory store for AI agents, deployed via Cloudflare Workers with REST and MCP interfaces.