{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"AstraVerify checks public domain email settings and crawler accessibility. Inspect DNS and website signals, suggested fixes, and crawler responses. It requires no account and makes no domain changes; fresh scans are rate-limited.","did":"36dd62b7-1225-4cf5-a1f0-760aab0b168c","documentation_url":"https://astraverify.com/connect","editorial_description":{"extended_description":"Checks cover MX, SPF, DKIM, DMARC, robots rules, redirects, sitemaps, canonical tags, metadata, and structured data. Reports provide scores and suggested fixes. Results are cached and shared, and fresh scans are rate-limited per domain.","schema_version":1,"summary":"AstraVerify checks public domain email settings and crawler accessibility.\nInspect DNS and website signals, suggested fixes, and crawler responses.\nIt requires no account and makes no domain changes; fresh scans are rate-limited."},"homepage_url":"","icon":"https://astraverify.com/logo512-v2.png","id":"36dd62b7-1225-4cf5-a1f0-760aab0b168c","installs":0,"last_scanned":"","license":"","long_description":"Checks cover MX, SPF, DKIM, DMARC, robots rules, redirects, sitemaps, canonical tags, metadata, and structured data. Reports provide scores and suggested fixes. Results are cached and shared, and fresh scans are rate-limited per domain.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The description restricts the service to public pages/DNS and explicitly excludes login and domain writes.","reasoning":"It is a public-domain diagnostic reader; the named crawler fetch is purpose-constrained rather than unrestricted network access.","risk_type":"public_data_read","severity":"low","title":"Scans public DNS and web pages for security and discoverability","triggering_tools_or_skills":["check_discoverability","check_email_security","fetch_as_crawler","get_report","verify_fix"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required; the service reads public DNS and web pages, caches shared results, and does not log in or write to analyzed domains.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/36dd62b7-1225-4cf5-a1f0-760aab0b168c.json","what_it_proves":"Candidate PR #125 record identity (name \"astraverify.com\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/36dd62b7-1225-4cf5-a1f0-760aab0b168c: complete tool_names inventory (5 tools), remote streamable-http endpoint https://astraverify.com/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"AstraVerify is an unauthenticated, read-only public web and DNS diagnostic service.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:36dd62b7-1225-4cf5-a1f0-760aab0b168c","reviewed_at":"2026-10-10","reviewer_notes":"Verify SSRF/private-address blocking for fetch_as_crawler and caching/rate-limit behavior.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"astraverify.com","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=36dd62b7-1225-4cf5-a1f0-760aab0b168c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://astraverify.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AstraVerify","publisher_url":"https://astraverify.com/","remote_url":"https://astraverify.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: It is a public-domain diagnostic reader; the named crawler fetch is purpose-constrained rather than unrestricted network access.","evidence":"Scans public DNS and web pages for security and discoverability: The description restricts the service to public pages/DNS and explicitly excludes login and domain writes.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Scans public DNS and web pages for security and discoverability","triggering_tools":["check_discoverability","check_email_security","fetch_as_crawler","get_report","verify_fix"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hi@astraverify.com","tags":["network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"check_discoverability"},{"description":"","name":"check_email_security"},{"description":"","name":"fetch_as_crawler"},{"description":"","name":"get_report"},{"description":"","name":"verify_fix"}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/36dd62b7-1225-4cf5-a1f0-760aab0b168c","uuid":"ba71e19c-d0b0-5b94-8ba2-34d8098b7db4","verification_tier":"community","version":""},"query_key":"astraverify com","schema_version":1,"status":"match"}