{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-05","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Explore astrological charts saved in your Astrotheoros account. Calculate chart relationships or timing and manage attached notes and folders. The connector cannot create, edit or delete charts or change your settings.","did":"06dea78b-6d5d-45a4-941d-23a489e48701","documentation_url":"https://astrotheoros.com/","editorial_description":{"extended_description":"Supported timing and comparison techniques include synastry, composites, draconic charts, annual profections, zodiacal releasing and Vimshottari dasha. Notes may be chart-specific or dated timeline entries, and can be added, edited or deleted. An Astrotheoros account is required.","schema_version":1,"summary":"Explore astrological charts saved in your Astrotheoros account.\nCalculate chart relationships or timing and manage attached notes and folders.\nThe connector cannot create, edit or delete charts or change your settings."},"homepage_url":"","icon":"https://astrotheoros.com/icons/share.png","id":"06dea78b-6d5d-45a4-941d-23a489e48701","installs":0,"last_scanned":"","license":"","long_description":"Supported timing and comparison techniques include synastry, composites, draconic charts, annual profections, zodiacal releasing and Vimshottari dasha. Notes may be chart-specific or dated timeline entries, and can be added, edited or deleted. An Astrotheoros account is required.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares delete_note for notes attached to authenticated charts.","reasoning":"The action irreversibly removes user-authored chart commentary or timeline records.","risk_type":"data_deletion","severity":"high","title":"Saved notes can be deleted","triggering_tools_or_skills":["delete_note"]},{"evidence":"These tools add or edit notes, create and rename folders, and reorganize saved charts.","reasoning":"They persistently alter account data even though charts and settings themselves cannot be edited.","risk_type":"data_modification","severity":"medium","title":"Notes and chart folders can change","triggering_tools_or_skills":["add_note","create_folder","move_charts","rename_folder","update_note"]},{"evidence":"The Directory description says tools use saved charts and notes without requiring birth data to be retyped in chat.","reasoning":"Birth details, relationship charts, and personal annotations are sensitive profile data.","risk_type":"private_data_read","severity":"low","title":"Birth charts and personal notes are readable","triggering_tools_or_skills":["get_chart","get_note","get_synastry","list_charts","list_notes"]},{"evidence":"The connector returns free-form notes attached to charts and dated timeline entries.","reasoning":"Stored note text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"User-authored notes enter context","triggering_tools_or_skills":["get_note","list_notes"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication required for saved astrology charts, notes, folders, and settings; exact scopes and token lifetime are not documented in the retrieved material.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/06dea78b-6d5d-45a4-941d-23a489e48701.json","what_it_proves":"Candidate PR #125 record identity (name \"Astrotheoros\", publisher, type web_connector) and 18 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/06dea78b-6d5d-45a4-941d-23a489e48701: complete tool_names inventory (18 tools), remote streamable-http endpoint https://astrotheoros.com/api/mcp/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Explicit delete_note establishes destructive capability; additional tools persist note and folder changes.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:06dea78b-6d5d-45a4-941d-23a489e48701","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 18 names. Runtime checks should confirm deletion recovery, folder-move effects, chart isolation, OAuth scopes, and whether note writes carry authorship metadata.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":18,"tools_or_skills_total":18},"name":"Astrotheoros","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=06dea78b-6d5d-45a4-941d-23a489e48701&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://app.termly.io/policy-viewer/policy.html?policyUUID=0a00d6de-2e5a-486f-a84c-a4ac22a8881f","provisional_risk":null,"publication_recommendation":"accept","publisher":"Astrotheoros","publisher_url":"https://astrotheoros.com/","remote_url":"https://astrotheoros.com/api/mcp/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: The action irreversibly removes user-authored chart commentary or timeline records.","evidence":"Saved notes can be deleted: The complete inventory explicitly declares delete_note for notes attached to authenticated charts.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Saved notes can be deleted","triggering_tools":["delete_note"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persistently alter account data even though charts and settings themselves cannot be edited.","evidence":"Notes and chart folders can change: These tools add or edit notes, create and rename folders, and reorganize saved charts.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Notes and chart folders can change","triggering_tools":["add_note","create_folder","move_charts","rename_folder","update_note"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Birth details, relationship charts, and personal annotations are sensitive profile data.","evidence":"Birth charts and personal notes are readable: The Directory description says tools use saved charts and notes without requiring birth data to be retyped in chat.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Birth charts and personal notes are readable","triggering_tools":["get_chart","get_note","get_synastry","list_charts","list_notes"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@astrotheoros.com","tags":["deletes_data","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"add_note","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persistently alter account data even though charts and settings themselves cannot be edited."}},{"description":"","name":"create_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persistently alter account data even though charts and settings themselves cannot be edited."}},{"description":"","name":"delete_note","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: The action irreversibly removes user-authored chart commentary or timeline records."}},{"description":"","name":"get_biwheel"},{"description":"","name":"get_chart"},{"description":"","name":"get_composite"},{"description":"","name":"get_note"},{"description":"","name":"get_synastry"},{"description":"","name":"get_transits"},{"description":"","name":"get_vimshottari_dasha"},{"description":"","name":"get_zodiacal_releasing"},{"description":"","name":"list_charts"},{"description":"","name":"list_folders"},{"description":"","name":"list_notes"},{"description":"","name":"move_charts","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persistently alter account data even though charts and settings themselves cannot be edited."}},{"description":"","name":"rename_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persistently alter account data even though charts and settings themselves cannot be edited."}},{"description":"","name":"update_note","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persistently alter account data even though charts and settings themselves cannot be edited."}},{"description":"","name":"whoami"}],"tools_count":18,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/06dea78b-6d5d-45a4-941d-23a489e48701","uuid":"8f9780a0-4428-5782-bd10-67faff9e0b07","verification_tier":"community","version":""},"query_key":"astrotheoros","schema_version":1,"status":"match"}