{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"9ad60975e3c051a4c3855627dc5fcaaf95b94c0084a556100e292b57003e3ed4","risk":"high"},"proposal_file":"final-evidence-proposals.json","rationale":"Current endpoint-specific documentation resolves the read/write boundary. Medium confidence rests on this new evidence and explicit version difference, not on renaming the earlier Low. Current official Agent Context MCP reference names the exact stored endpoint and enumerates its replacement tool interface.","remaining_evidence_gaps":["Runtime deployment and grant-specific access were not tested. The eight stored wrappers are stale relative to the current two-tool documentation."],"review_key":"claudesec:b0c5d8af-d932-4bf4-b23f-27b9a294f66c","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://fivetran.com/docs/context-layer/agent-context-mcp"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Provides business context from connected enterprise systems through Fivetran Agent Context. Search knowledge, schemas, concepts and analytical metadata for AI-assisted work. Bring context from services such as GitHub, Jira, Salesforce, Gong, Slab and Zendesk into conversation.","did":"b0c5d8af-d932-4bf4-b23f-27b9a294f66c","documentation_url":"https://fivetran.com/docs/getting-started","editorial_description":{"extended_description":"The connection supports data-aware assistants, coding workflows and custom AI applications. Public documentation and feedback tools complement the connected enterprise sources.","schema_version":1,"summary":"Provides business context from connected enterprise systems through Fivetran Agent Context.\nSearch knowledge, schemas, concepts and analytical metadata for AI-assisted work.\nBring context from services such as GitHub, Jira, Salesforce, Gong, Slab and Zendesk into conversation."},"homepage_url":"","icon":"","id":"b0c5d8af-d932-4bf4-b23f-27b9a294f66c","installs":0,"last_scanned":"","license":"","long_description":"The connection supports data-aware assistants, coding workflows and custom AI applications. Public documentation and feedback tools complement the connected enterprise sources.","manual_assessment":"unassessed","manual_review":{"all_findings":[],"assessment_status":"provisional","auth_and_scopes":"Authentication may connect many enterprise systems, but fixed wrapper names do not disclose their sub-actions.","blocked_missing_evidence":["Exhaustive action schemas for github_new, jira, salesforce, zendesk_new, gongio and slab","Per-action read/write/destructive/messaging/credential annotations","Authentication scopes and confirmation semantics"],"confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b0c5d8af-d932-4bf4-b23f-27b9a294f66c.json","what_it_proves":"Candidate PR #125 record identity (name \"AgentContext\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b0c5d8af-d932-4bf4-b23f-27b9a294f66c: complete tool_names inventory (8 tools), remote streamable-http endpoint https://api.fivetran.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"AgentContext exposes opaque GitHub/Jira/Salesforce/Zendesk/Gong/Slab wrappers with no action schemas.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:b0c5d8af-d932-4bf4-b23f-27b9a294f66c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight wrapper names; the description says agents can “take action” but no per-system action inventory, scope, confirmation or destructive boundaries are present.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"unknown","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"true","filesystem_or_repo_access":"unknown","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"unknown","runs_code_or_queries":"unknown","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"AgentContext","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b0c5d8af-d932-4bf4-b23f-27b9a294f66c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.fivetran.com/legal/privacy","provisional_risk":"high","publication_recommendation":"fix","publisher":"Fivetran","publisher_url":"https://www.fivetran.ai/","remote_url":"https://api.fivetran.ai/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"execute_sql runs read-only queries against the connected destination warehouse using organizational context and provider tables. Warehouse reads expose business information to the connected AI client.","evidence":"https://fivetran.com/docs/context-layer/agent-context-mcp\nDocumented actions: execute_sql","risk_type":"reads_private_data","severity":"medium","title":"Queries private business data through read-only SQL"},{"description":"provide_feedback submits feedback about an answer; it is the only documented write tool, not a source-system mutation API.","evidence":"https://fivetran.com/docs/context-layer/agent-context-mcp\nDocumented actions: provide_feedback","risk_type":"forwards_data_to_third_party","severity":"low","title":"Submits response feedback"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.fivetran.com","tags":["reads_private_data","forwards_data_to_third_party"],"tools":[{"description":"","name":"github_new"},{"description":"","name":"gongio"},{"description":"","name":"jira"},{"description":"","name":"provide_feedback"},{"description":"","name":"public_docs"},{"description":"","name":"salesforce"},{"description":"","name":"slab"},{"description":"","name":"zendesk_new"}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b0c5d8af-d932-4bf4-b23f-27b9a294f66c","uuid":"356f6701-bc53-5888-875e-d4e514c288c3","verification_tier":"community","version":""},"query_key":"agentcontext","schema_version":1,"status":"match"}