{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"high","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"c03d266b683c729c0d0d8faa46df66996cf4a323f21787ed9a800facd9d95cf6","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"First pass Low confirmed. The High (since claude_refresh) has no High card; the manual review kept it provisional over get_api_key. Atly's agentic API docs resolve it: get_api_key is GET /v0/keys/me, returning the caller's tier, email-verified flag and remaining quota without consuming quota. Key creation (create_api_key) and email verification are REST-only and not on MCP. submit_feedback sends a call_id and outcome. Other tools are public place searches. No credential disclosure, private data or consequential writes.","review_key":"claudesec:849cdc63-b518-42fe-8daa-cf7ceec24a36","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://agentic-api.atly.com/v0/docs","catalog-rating-review-2026-10-12/batches/batch-002.jsonl"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Atly finds places ranked for specific preferences using review evidence. Search an area and inspect intent scores, review statements, and place links. Coverage is strongest in the US, with selected coverage in Mexico, Israel, and Thailand.","did":"849cdc63-b518-42fe-8daa-cf7ceec24a36","documentation_url":"https://agentic-api.atly.com/v0/docs","editorial_description":{"extended_description":"Search supports cities, neighborhoods, or coordinates and radius. Some gluten-free results include reported kitchen or cross-contamination indicators; those are not guarantees of food safety. Tools also expose coverage categories and feedback.","schema_version":1,"summary":"Atly finds places ranked for specific preferences using review evidence.\nSearch an area and inspect intent scores, review statements, and place links.\nCoverage is strongest in the US, with selected coverage in Mexico, Israel, and Thailand."},"homepage_url":"","icon":"","id":"849cdc63-b518-42fe-8daa-cf7ceec24a36","installs":0,"last_scanned":"","license":"","long_description":"Search supports cities, neighborhoods, or coordinates and radius. Some gluten-free results include reported kitchen or cross-contamination indicators; those are not guarantees of food safety. Tools also expose coverage categories and feedback.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"These tools retrieve ranked place results, reviewer statements and public place metadata.","reasoning":"They are discovery operations without booking or account mutation.","risk_type":"public_data_read","severity":"low","title":"Searches public place and review-intent data","triggering_tools_or_skills":["get_place","list_areas","list_categories","search_places"]},{"evidence":"This explicit tool forwards user-authored feedback to the publisher.","reasoning":"Feedback is external communication but does not modify the user’s own account/workspace.","risk_type":"third_party_data_forwarding","severity":"low","title":"Submits product feedback to Atly","triggering_tools_or_skills":["submit_feedback"]},{"evidence":"The no-auth connector exposes a tool named get_api_key, but no schema or official explanation establishes whether it returns a public demo token, mints a credential or exposes an existing secret.","reasoning":"The security impact cannot be determined from the name alone.","risk_type":"evidence_gap","severity":"low","title":"Unauthenticated API-key retrieval is unexplained","triggering_tools_or_skills":["get_api_key"]}],"assessment_status":"provisional","auth_and_scopes":"The endpoint is marked no-auth, but get_api_key behavior is undocumented; place search itself uses public Atly data.","blocked_missing_evidence":"Official schema/implementation documentation for get_api_key identifying whose key is returned, whether a credential is created or disclosed, its scopes/lifetime and abuse controls.","confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/849cdc63-b518-42fe-8daa-cf7ceec24a36.json","what_it_proves":"Candidate PR #125 record identity (name \"Atly\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/849cdc63-b518-42fe-8daa-cf7ceec24a36: complete tool_names inventory (7 tools), remote streamable-http endpoint https://agentic-api.atly.com/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"Atly search is read-only, but an unauthenticated get_api_key tool has undocumented credential behavior.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:849cdc63-b518-42fe-8daa-cf7ceec24a36","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all seven tools. A publisher-domain documentation search did not resolve get_api_key; publication should not label the full connector safe until that credential path is explained.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Atly","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=849cdc63-b518-42fe-8daa-cf7ceec24a36&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.atly.com/privacy","provisional_risk":"high","publication_recommendation":"fix","publisher":"Atly","publisher_url":"https://www.atly.com/","remote_url":"https://agentic-api.atly.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"Atly returns place and intent scores. The account-status tool reports your own quota and tier; it does not create or reveal an API credential.","evidence":"https://agentic-api.atly.com/v0/docs\ntool to REST mapping","risk_type":"reads_public_data","severity":"low","title":"Searches public place information"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@atly.com","tags":["reads_public_data"],"tools":[{"description":"","name":"get_api_key"},{"description":"","name":"get_docs"},{"description":"","name":"get_place"},{"description":"","name":"list_areas"},{"description":"","name":"list_categories"},{"description":"","name":"search_places"},{"description":"","name":"submit_feedback"}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/849cdc63-b518-42fe-8daa-cf7ceec24a36","uuid":"12368c50-9dbd-50f0-95b8-51d40e92b223","verification_tier":"community","version":""},"query_key":"atly","schema_version":1,"status":"match"}