{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"CityTracker provides read-only access to public property records across New York City's five boroughs. Query permits, violations, deeds, mortgages, owners, tax lots, zoning, and related records. The service joins data from NYC and New York State open-data sources.","did":"53e2aa0c-9818-4327-b4f8-95da06052d01","documentation_url":"https://citytracker.ai/api","editorial_description":{"extended_description":"Coverage includes DOB and HPD records, ACRIS documents, certificates of occupancy, facade filings, 311 requests, assessments, and tax lien sales. It also includes New York State liquor licenses and retail food stores. Schema tools list and describe queryable tables.","schema_version":1,"summary":"CityTracker provides read-only access to public property records across New York City's five boroughs.\nQuery permits, violations, deeds, mortgages, owners, tax lots, zoning, and related records.\nThe service joins data from NYC and New York State open-data sources."},"homepage_url":"","icon":"","id":"53e2aa0c-9818-4327-b4f8-95da06052d01","installs":0,"last_scanned":"","license":"","long_description":"Coverage includes DOB and HPD records, ACRIS documents, certificates of occupancy, facade filings, 311 requests, assessments, and tax lien sales. It also includes New York State liquor licenses and retail food stores. Schema tools list and describe queryable tables.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The single query tool is paired with table discovery over a joined public-data warehouse.","reasoning":"Arbitrary data query execution is High under the taxonomy.","risk_type":"query_execution","severity":"high","title":"Runs generic data queries","triggering_tools_or_skills":["query"]},{"evidence":"Description explicitly says data comes from NYC/NY State open-data portals.","reasoning":"The underlying data is public.","risk_type":"public_data_read","severity":"low","title":"Reads NYC public real-estate data","triggering_tools_or_skills":["overview","list_tables","describe_table"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capabilities can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"No authentication; only public datasets are described.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/53e2aa0c-9818-4327-b4f8-95da06052d01.json","what_it_proves":"Candidate PR #125 record identity (name \"citytracker.ai\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/53e2aa0c-9818-4327-b4f8-95da06052d01: complete tool_names inventory (4 tools), remote streamable-http endpoint https://citytracker.ai/api/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"CityTracker exposes a generic query over joined public datasets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:53e2aa0c-9818-4327-b4f8-95da06052d01","reviewed_at":"2026-10-10","reviewer_notes":"All four names reviewed; official API docs page was not fetched, so query language restrictions remain runtime-verification items.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"citytracker.ai","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=53e2aa0c-9818-4327-b4f8-95da06052d01&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://citytracker.ai/terms/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"CityTracker","publisher_url":"https://citytracker.ai/","remote_url":"https://citytracker.ai/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary data query execution is High under the taxonomy.","evidence":"Runs generic data queries: The single query tool is paired with table discovery over a joined public-data warehouse.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Runs generic data queries","triggering_tools":["query"]},{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: The underlying data is public.","evidence":"Reads NYC public real-estate data: Description explicitly says data comes from NYC/NY State open-data portals.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Reads NYC public real-estate data","triggering_tools":["overview","list_tables","describe_table"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"chris@citytracker.ai","tags":["network_access","reads_public_data","runs_code","web_connector"],"tools":[{"description":"","name":"describe_table"},{"description":"","name":"list_tables"},{"description":"","name":"overview"},{"description":"","name":"query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary data query execution is High under the taxonomy."}}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/53e2aa0c-9818-4327-b4f8-95da06052d01","uuid":"4e93b71d-4bab-5ea1-82c3-1eb0b0563422","verification_tier":"community","version":""},"query_key":"citytracker citytracker ai","schema_version":1,"status":"match"}