{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-02","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"3df882ec4824c6e066b30d0d3ee96f506fbe618d90cb53b55a258516073924df","risk":"medium"},"proposal_file":"claude-tail-proposals.json","rationale":"Medium with a Medium 'Creates ticket requests' card is consistent. The earlier low-confidence gap (does create_ticket_request reserve inventory or message others?) is now resolved by the help center: a ticket request adds a guest with ticket/pass counts to an event's guest list, stays Pending until a ticket manager approves or denies it, and the platform emails internal ticket managers. No charge, no automatic send to the venue. Internal workflow notifications are not 'sends messages as you', so the unknown domain resolves to no. Reads are limited to what the account can already view (directory permissions text). First pass and final agree.","review_key":"claudesec:bc2f99a7-d53c-494d-8fc9-8592c5bdf601","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://help.artistgrowth.com/en","https://help.artistgrowth.com/en/integrations?hsLang=en","https://help.artistgrowth.com/en/get-to-know-our-guest-list-ticket-request-workflow-help-center"],"status":"resolved"},"category":"Interactive Connector","confidence":"low","description":"Retrieves Artist Growth operations context for music-industry teams. Search roster events and review calendars, day sheets and your tasks. Track existing ticket requests or create a new request.","did":"bc2f99a7-d53c-494d-8fc9-8592c5bdf601","documentation_url":"https://help.artistgrowth.com/en","editorial_description":{"extended_description":"Artist and calendar lists help scope work across the roster for touring, promotion and project coordination.","schema_version":1,"summary":"Retrieves Artist Growth operations context for music-industry teams.\nSearch roster events and review calendars, day sheets and your tasks.\nTrack existing ticket requests or create a new request."},"homepage_url":"","icon":"https://artistgrowth-files.s3.amazonaws.com/mcp/icon.png","id":"bc2f99a7-d53c-494d-8fc9-8592c5bdf601","installs":0,"last_scanned":"","license":"","long_description":"Artist and calendar lists help scope work across the roster for touring, promotion and project coordination.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly includes create_ticket_request alongside search_ticket_requests.","reasoning":"Creating a persistent request in the user's workspace is a meaningful write; external notification behavior is not documented.","risk_type":"data_modification","severity":"medium","title":"Creates ticket requests","triggering_tools_or_skills":["create_ticket_request"]}],"assessment_status":"provisional","auth_and_scopes":"A paid authenticated Artist Growth account is required; declared permissions limit reads to artists, calendars, tasks and events already visible to the user.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/bc2f99a7-d53c-494d-8fc9-8592c5bdf601.json","what_it_proves":"Candidate PR #125 record identity (name \"Artist Growth\", publisher, type interactive_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/bc2f99a7-d53c-494d-8fc9-8592c5bdf601: complete tool_names inventory (7 tools), remote streamable-http endpoint https://mcp.artistgrowth.com/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"},{"accessed_at":"2026-10-10T20:56:14Z","url_or_path":"https://help.artistgrowth.com/en","what_it_proves":"Official publisher help center establishes the product's events, task and integration support surface, but does not document the MCP write semantics."}],"primary_reason":"Artist Growth can create a ticket request in the user's music-operations workspace.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:bc2f99a7-d53c-494d-8fc9-8592c5bdf601","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 7 names and the official help-center landing page. The help page did not document the MCP action schema; runtime verification should confirm whether create_ticket_request reserves inventory, sends a request to others, or only creates an internal record.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Artist Growth","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=bc2f99a7-d53c-494d-8fc9-8592c5bdf601&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.artistgrowth.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Artist Growth","publisher_url":"https://www.artistgrowth.com/","remote_url":"https://mcp.artistgrowth.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"Adds a guest and requested ticket or pass counts to an event’s guest list, pending a ticket manager’s approval. Internal ticket managers receive a notification.","evidence":"Actions: create_ticket_request. https://help.artistgrowth.com/en/get-to-know-our-guest-list-ticket-request-workflow-help-center — Add Guest -> Pending; managers approve/deny; email to ticket-management users","risk_type":"modifies_data","severity":"medium","title":"Creates guest-list ticket requests"},{"description":"Retrieves accessible rosters, calendars, events, tasks and ticket requests from your account.","evidence":"Actions: get_info, list_artists, list_calendars, list_my_tasks, search_events, search_ticket_requests. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — permissions: only artists, calendars, tasks and events your account can view","risk_type":"reads_private_data","severity":"medium","title":"Reads private artist and event information"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.artistgrowth.com/contact-us","tags":["modifies_data","reads_private_data"],"tools":[{"description":"","name":"create_ticket_request","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating a persistent request in the user's workspace is a meaningful write; external notification behavior is not documented."}},{"description":"","name":"get_info"},{"description":"","name":"list_artists"},{"description":"","name":"list_calendars"},{"description":"","name":"list_my_tasks"},{"description":"","name":"search_events"},{"description":"","name":"search_ticket_requests"}],"tools_count":7,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/bc2f99a7-d53c-494d-8fc9-8592c5bdf601","uuid":"f0daa23a-7343-5dbb-86e9-94b5766af58e","verification_tier":"community","version":""},"query_key":"artist growth","schema_version":1,"status":"match"}