{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Asset Vision connects Claude to enterprise asset management data and operational workflows. Query records, inspect jobs and dashboards, and render charts. It also supports assigning work, updating job priorities, and planning routes.","did":"48f24ad9-90f8-4932-8bf3-72da056b43ef","documentation_url":"https://www.assetvision.com.au/contact","editorial_description":{"extended_description":"The tool inventory includes inspection lookups, joined and spatial queries, aggregations, schedule analysis, route optimization, and turn-by-turn directions. Schema, contract, register, and assignable-user lookups identify available records.","schema_version":1,"summary":"Asset Vision connects Claude to enterprise asset management data and operational workflows.\nQuery records, inspect jobs and dashboards, and render charts.\nIt also supports assigning work, updating job priorities, and planning routes."},"homepage_url":"","icon":"","id":"48f24ad9-90f8-4932-8bf3-72da056b43ef","installs":0,"last_scanned":"","license":"","long_description":"The tool inventory includes inspection lookups, joined and spatial queries, aggregations, schedule analysis, route optimization, and turn-by-turn directions. Schema, contract, register, and assignable-user lookups identify available records.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector discovers allowed tables/schema and executes queries or aggregations over organization asset data.","reasoning":"User-selected query operations run against private enterprise datasets.","risk_type":"query_execution","severity":"high","title":"Executes table, join and spatial queries","triggering_tools_or_skills":["query_table","query_joined","query_spatial","aggregate_table","aggregate_joined","aggregate_spatial_nearest"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to enterprise asset tables, schedules, inspections, jobs, staff and routing according to Asset Vision permissions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/48f24ad9-90f8-4932-8bf3-72da056b43ef.json","what_it_proves":"Candidate PR #125 record identity (name \"Asset Vision\", publisher, type web_connector) and 31 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/48f24ad9-90f8-4932-8bf3-72da056b43ef: complete tool_names inventory (31 tools), remote streamable-http endpoint https://mcp.assetvision.com.au/v2/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Asset Vision executes structured queries over private asset-management data and can assign jobs/inspections.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:48f24ad9-90f8-4932-8bf3-72da056b43ef","reviewed_at":"2026-10-10","reviewer_notes":"Enforce read-only query semantics and confirm assignees/priority changes.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":31,"tools_or_skills_total":31},"name":"Asset Vision","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=48f24ad9-90f8-4932-8bf3-72da056b43ef&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.assetvision.com.au/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Asset Vision","publisher_url":"https://www.assetvision.com.au/","remote_url":"https://mcp.assetvision.com.au/v2/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-selected query operations run against private enterprise datasets.","evidence":"Executes table, join and spatial queries: The connector discovers allowed tables/schema and executes queries or aggregations over organization asset data.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes table, join and spatial queries","triggering_tools":["query_table","query_joined","query_spatial","aggregate_table","aggregate_joined","aggregate_spatial_nearest"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@assetvision.com.au","tags":["network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"aggregate_joined","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-selected query operations run against private enterprise datasets."}},{"description":"","name":"aggregate_spatial_nearest","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-selected query operations run against private enterprise datasets."}},{"description":"","name":"aggregate_table","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-selected query operations run against private enterprise datasets."}},{"description":"","name":"analyse_schedule"},{"description":"","name":"assign_inspection"},{"description":"","name":"assign_job"},{"description":"","name":"db_ping"},{"description":"","name":"get_about"},{"description":"","name":"get_current_user"},{"description":"","name":"get_dashboard"},{"description":"","name":"get_live_inspection"},{"description":"","name":"get_live_job"},{"description":"","name":"get_table_schema"},{"description":"","name":"get_turn_by_turn"},{"description":"","name":"list_allowed_tables"},{"description":"","name":"list_assignable_users"},{"description":"","name":"list_contracts"},{"description":"","name":"list_joins"},{"description":"","name":"list_module_types"},{"description":"","name":"list_sub_register_types"},{"description":"","name":"optimize_route"},{"description":"","name":"query_joined","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-selected query operations run against private enterprise datasets."}},{"description":"","name":"query_spatial","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-selected query operations run against private enterprise datasets."}},{"description":"","name":"query_table","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-selected query operations run against private enterprise datasets."}},{"description":"","name":"render_chart"},{"description":"","name":"render_chart_image"},{"description":"","name":"render_text_chart"},{"description":"","name":"resolve_module_type"},{"description":"","name":"resolve_sub_register_type"},{"description":"","name":"show_dashboard"},{"description":"","name":"update_job_priority"}],"tools_count":31,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/48f24ad9-90f8-4932-8bf3-72da056b43ef","uuid":"b0adfeb8-feeb-5fc9-aaff-c47dc1e983b9","verification_tier":"community","version":""},"query_key":"asset vision asset vision","schema_version":1,"status":"match"}