{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"ADITUS Developer Portal provides ticketing API documentation to Claude. Search guides, list modules or endpoints, and inspect parameters and payload examples. The public connector needs no login and never performs actions against ADITUS systems.","did":"9016cb12-9864-41ff-90c6-b99abb2fac74","documentation_url":"https://developers.aditus.com/mcp","editorial_description":{"extended_description":"Guides cover authentication, scopes, webhook signatures, and shop integration. Documentation can inform ticketing or registration development without granting operational API access.","schema_version":1,"summary":"ADITUS Developer Portal provides ticketing API documentation to Claude.\nSearch guides, list modules or endpoints, and inspect parameters and payload examples.\nThe public connector needs no login and never performs actions against ADITUS systems."},"homepage_url":"","icon":"","id":"9016cb12-9864-41ff-90c6-b99abb2fac74","installs":0,"last_scanned":"","license":"","long_description":"Guides cover authentication, scopes, webhook signatures, and shop integration. Documentation can inform ticketing or registration development without granting operational API access.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All five tools retrieve official docs/examples/guides and the listing explicitly excludes actions against ADITUS systems.","reasoning":"They are public read-only documentation operations.","risk_type":"public_data_read","severity":"low","title":"Searches public ticketing API documentation","triggering_tools_or_skills":["search_docs","list_modules","list_endpoints","get_endpoint","get_guide"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required; tools retrieve public official ADITUS developer documentation only.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9016cb12-9864-41ff-90c6-b99abb2fac74.json","what_it_proves":"Candidate PR #125 record identity (name \"ADITUS Developer Portal MCP\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9016cb12-9864-41ff-90c6-b99abb2fac74: complete tool_names inventory (5 tools), remote streamable-http endpoint https://developers.aditus.com/api/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"ADITUS exposes five public read-only developer-documentation tools.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:9016cb12-9864-41ff-90c6-b99abb2fac74","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all five tools and detailed privacy/behavior statement.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"ADITUS Developer Portal MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9016cb12-9864-41ff-90c6-b99abb2fac74&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://developers.aditus.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"ADITUS GmbH","publisher_url":"https://developers.aditus.com/","remote_url":"https://developers.aditus.com/api/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: They are public read-only documentation operations.","evidence":"Searches public ticketing API documentation: All five tools retrieve official docs/examples/guides and the listing explicitly excludes actions against ADITUS systems.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Searches public ticketing API documentation","triggering_tools":["search_docs","list_modules","list_endpoints","get_endpoint","get_guide"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@aditus.de","tags":["network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"get_endpoint"},{"description":"","name":"get_guide"},{"description":"","name":"list_endpoints"},{"description":"","name":"list_modules"},{"description":"","name":"search_docs"}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9016cb12-9864-41ff-90c6-b99abb2fac74","uuid":"5c978fd6-7a0f-5e7e-ade7-7cf0884b4561","verification_tier":"community","version":""},"query_key":"aditus developer portal mcp","schema_version":1,"status":"match"}
