{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Ansvar AI supports security, privacy, and regulatory research workflows. Compare requirements, map controls, draft assessments, and investigate vulnerabilities. Trace claims to available sources and mark gaps when verified evidence is unavailable.","did":"ae4b5f7b-6a64-4282-a611-86498a8bf7a0","documentation_url":"https://ansvar.eu/docs/quickstart","editorial_description":{"extended_description":"Workflows cover gap analysis, DPIA, FRIA, privacy or security threat models, and automotive TARA. CVE tools inspect scoring, EPSS, KEV status, exploits, and VEX exports. Register documents, review cited segments, and generate reports or audit packages.","schema_version":1,"summary":"Ansvar AI supports security, privacy, and regulatory research workflows.\nCompare requirements, map controls, draft assessments, and investigate vulnerabilities.\nTrace claims to available sources and mark gaps when verified evidence is unavailable."},"homepage_url":"","icon":"","id":"ae4b5f7b-6a64-4282-a611-86498a8bf7a0","installs":0,"last_scanned":"","license":"","long_description":"Workflows cover gap analysis, DPIA, FRIA, privacy or security threat models, and automotive TARA. CVE tools inspect scoring, EPSS, KEV status, exploits, and VEX exports. Register documents, review cited segments, and generate reports or audit packages.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit tools remove durable compliance source records.","reasoning":"They can destroy audit evidence.","risk_type":"data_deletion","severity":"high","title":"Deletes/unregisters private documents","triggering_tools_or_skills":["delete_my_document","unregister_document"]},{"evidence":"The tools control persistent DPIA/FRIA/threat-model/audit workflows.","reasoning":"They operate production compliance jobs.","risk_type":"deployment_infrastructure","severity":"high","title":"Starts/resumes/cancels regulated analysis workflows","triggering_tools_or_skills":["start_workflow","resume_workflow","cancel_workflow"]},{"evidence":"The tools ingest and generate compliance files.","reasoning":"They materially change/export the workspace.","risk_type":"file_write","severity":"medium","title":"Registers documents and exports reports/VEX/audit packages","triggering_tools_or_skills":["register_document_init","register_document_finalize","export_audit_package","export_vex"]},{"evidence":"These tools persist auditable compliance judgments.","reasoning":"They change regulated workflow state.","risk_type":"data_modification","severity":"medium","title":"Records review decisions and responses","triggering_tools_or_skills":["record_review_decision","submit_response"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes organization standards/workflows and private documents.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ae4b5f7b-6a64-4282-a611-86498a8bf7a0.json","what_it_proves":"Candidate PR #125 record identity (name \"Ansvar AI\", publisher, type web_connector) and 61 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ae4b5f7b-6a64-4282-a611-86498a8bf7a0: complete tool_names inventory (61 tools), remote streamable-http endpoint https://gateway.ansvar.eu/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Ansvar can delete audit documents and control regulated compliance workflows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:ae4b5f7b-6a64-4282-a611-86498a8bf7a0","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 61 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":61,"tools_or_skills_total":61},"name":"Ansvar AI","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ae4b5f7b-6a64-4282-a611-86498a8bf7a0&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://ansvar.eu/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Ansvar AI","publisher_url":"https://ansvar.eu/","remote_url":"https://gateway.ansvar.eu/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can destroy audit evidence.","evidence":"Deletes/unregisters private documents: Explicit tools remove durable compliance source records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes/unregisters private documents","triggering_tools":["delete_my_document","unregister_document"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They operate production compliance jobs.","evidence":"Starts/resumes/cancels regulated analysis workflows: The tools control persistent DPIA/FRIA/threat-model/audit workflows.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Starts/resumes/cancels regulated analysis workflows","triggering_tools":["start_workflow","resume_workflow","cancel_workflow"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They materially change/export the workspace.","evidence":"Registers documents and exports reports/VEX/audit packages: The tools ingest and generate compliance files.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Registers documents and exports reports/VEX/audit packages","triggering_tools":["register_document_init","register_document_finalize","export_audit_package","export_vex"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They change regulated workflow state.","evidence":"Records review decisions and responses: These tools persist auditable compliance judgments.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Records review decisions and responses","triggering_tools":["record_review_decision","submit_response"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"teams@ansvar.eu","tags":["code_deployment","deletes_data","filesystem_access","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"batch_search"},{"description":"","name":"cancel_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They operate production compliance jobs."}},{"description":"","name":"check_applicability"},{"description":"","name":"check_kev_status"},{"description":"","name":"compare_requirements"},{"description":"","name":"create_dfd"},{"description":"","name":"decrypt_receipt"},{"description":"","name":"delete_my_document","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy audit evidence."}},{"description":"","name":"describe_capabilities"},{"description":"","name":"diff"},{"description":"","name":"effective_risk"},{"description":"","name":"effective_risk_inline"},{"description":"","name":"effective_risk_inline_batch"},{"description":"","name":"export_audit_package","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially change/export the workspace."}},{"description":"","name":"export_vex","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially change/export the workspace."}},{"description":"","name":"generate_report"},{"description":"","name":"get_changes"},{"description":"","name":"get_current_step"},{"description":"","name":"get_cve_details"},{"description":"","name":"get_data_freshness"},{"description":"","name":"get_decision"},{"description":"","name":"get_document_segments"},{"description":"","name":"get_epss_score"},{"description":"","name":"get_evidence_requirements"},{"description":"","name":"get_exploits"},{"description":"","name":"get_my_capabilities"},{"description":"","name":"get_org_standard_clause"},{"description":"","name":"get_progress"},{"description":"","name":"get_provision"},{"description":"","name":"get_receipt"},{"description":"","name":"get_regulation_guide"},{"description":"","name":"get_review_context"},{"description":"","name":"get_workflow_threats"},{"description":"","name":"list_coverage"},{"description":"","name":"list_my_documents"},{"description":"","name":"list_org_standards"},{"description":"","name":"list_receipts"},{"description":"","name":"list_scoring_contexts"},{"description":"","name":"list_scoring_policies"},{"description":"","name":"list_workflow_evidence"},{"description":"","name":"list_workflow_types"},{"description":"","name":"list_workflows"},{"description":"","name":"map_controls"},{"description":"","name":"recommend_subagents"},{"description":"","name":"record_review_decision","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They change regulated workflow state."}},{"description":"","name":"register_document"},{"description":"","name":"register_document_finalize","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially change/export the workspace."}},{"description":"","name":"register_document_init","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially change/export the workspace."}},{"description":"","name":"resolve_document_segment"},{"description":"","name":"resume_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They operate production compliance jobs."}},{"description":"","name":"search"},{"description":"","name":"search_by_product"},{"description":"","name":"search_cve"},{"description":"","name":"search_guidance"},{"description":"","name":"search_org_standards"},{"description":"","name":"simulate_control_investment"},{"description":"","name":"start_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They operate production compliance jobs."}},{"description":"","name":"submit_response","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They change regulated workflow state."}},{"description":"","name":"unregister_document","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy audit evidence."}},{"description":"","name":"validate_citation"},{"description":"","name":"verify_receipt"}],"tools_count":61,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ae4b5f7b-6a64-4282-a611-86498a8bf7a0","uuid":"d1c052ee-a43a-5e7f-807b-9576a02df91e","verification_tier":"community","version":""},"query_key":"ansvar ai","schema_version":1,"status":"match"}