{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Country Club for Business manages sponsorship opportunities and target accounts. Review events, maintain prospects and products, and coordinate team members or attendees. Requires an existing account; actions that change or remove data ask first.","did":"9c73747c-5b58-493e-88f5-8cccd0a607dc","documentation_url":"https://country.club/connectors?tab=business","editorial_description":{"extended_description":"Inspect opportunity status and seating, stall or resume opportunities, and review suggested target accounts. Search companies and people, maintain target notes and owners, and manage catalog products within your account's access.","schema_version":1,"summary":"Country Club for Business manages sponsorship opportunities and target accounts.\nReview events, maintain prospects and products, and coordinate team members or attendees.\nRequires an existing account; actions that change or remove data ask first."},"homepage_url":"","icon":"","id":"9c73747c-5b58-493e-88f5-8cccd0a607dc","installs":0,"last_scanned":"","license":"","long_description":"Inspect opportunity status and seating, stall or resume opportunities, and review suggested target accounts. Search companies and people, maintain target notes and owners, and manage catalog products within your account's access.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit delete tools remove shared commercial/team records.","reasoning":"They can destroy durable sponsorship-program data or revoke membership.","risk_type":"data_deletion","severity":"high","title":"Deletes products, target companies and team members","triggering_tools_or_skills":["business_products_delete","business_target_companies_delete","business_team_members_delete"]},{"evidence":"These tools add/invite/update team access.","reasoning":"Team membership is a privileged administrative surface.","risk_type":"credential_admin","severity":"high","title":"Invites and manages business team members","triggering_tools_or_skills":["business_team_members_invite","business_team_members_create","business_team_members_patch"]},{"evidence":"The tools change live sponsorship/account workflows.","reasoning":"They materially alter shared business state.","risk_type":"data_modification","severity":"medium","title":"Changes opportunities, products and target-account state","triggering_tools_or_skills":["business_opportunities_state_update","business_products_update","business_target_companies_set_state"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.1 uses the existing Country Club account and its permissions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9c73747c-5b58-493e-88f5-8cccd0a607dc.json","what_it_proves":"Candidate PR #125 record identity (name \"Country Club for Business\", publisher, type web_connector) and 50 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9c73747c-5b58-493e-88f5-8cccd0a607dc: complete tool_names inventory (50 tools), remote streamable-http endpoint https://mcp.country.club/business/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Country Club can delete shared records and administer team membership.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:9c73747c-5b58-493e-88f5-8cccd0a607dc","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 50 tools; the listing’s “accept opportunities” wording is not backed by a clearly named acceptance tool and should be clarified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":50,"tools_or_skills_total":50},"name":"Country Club for Business","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9c73747c-5b58-493e-88f5-8cccd0a607dc&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://country.club/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Country club","publisher_url":"https://country.club/","remote_url":"https://mcp.country.club/business/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can destroy durable sponsorship-program data or revoke membership.","evidence":"Deletes products, target companies and team members: Explicit delete tools remove shared commercial/team records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes products, target companies and team members","triggering_tools":["business_products_delete","business_target_companies_delete","business_team_members_delete"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Team membership is a privileged administrative surface.; They materially alter shared business state.","evidence":"Invites and manages business team members: These tools add/invite/update team access. | Changes opportunities, products and target-account state: The tools change live sponsorship/account workflows.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["business_team_members_invite","business_team_members_create","business_team_members_patch","business_opportunities_state_update","business_products_update","business_target_companies_set_state"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://country.club/contact","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"business_companies_employees_list"},{"description":"","name":"business_companies_get"},{"description":"","name":"business_companies_search"},{"description":"","name":"business_me"},{"description":"","name":"business_opportunities_cancel_stall"},{"description":"","name":"business_opportunities_get"},{"description":"","name":"business_opportunities_list"},{"description":"","name":"business_opportunities_seating_get"},{"description":"","name":"business_opportunities_stall"},{"description":"","name":"business_opportunities_state_get"},{"description":"","name":"business_opportunities_state_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Team membership is a privileged administrative surface.; They materially alter shared business state."}},{"description":"","name":"business_people_get"},{"description":"","name":"business_people_list"},{"description":"","name":"business_people_match"},{"description":"","name":"business_products_create"},{"description":"","name":"business_products_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable sponsorship-program data or revoke membership."}},{"description":"","name":"business_products_get"},{"description":"","name":"business_products_list"},{"description":"","name":"business_products_patch"},{"description":"","name":"business_products_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Team membership is a privileged administrative surface.; They materially alter shared business state."}},{"description":"","name":"business_requested_people_create"},{"description":"","name":"business_requested_people_delete"},{"description":"","name":"business_requested_people_list"},{"description":"","name":"business_target_companies_contacts_list"},{"description":"","name":"business_target_companies_create"},{"description":"","name":"business_target_companies_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable sponsorship-program data or revoke membership."}},{"description":"","name":"business_target_companies_get"},{"description":"","name":"business_target_companies_list"},{"description":"","name":"business_target_companies_patch"},{"description":"","name":"business_target_companies_recommendations_list"},{"description":"","name":"business_target_companies_set_notes"},{"description":"","name":"business_target_companies_set_state","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Team membership is a privileged administrative surface.; They materially alter shared business state."}},{"description":"","name":"business_target_companies_set_users"},{"description":"","name":"business_target_companies_suggest_list"},{"description":"","name":"business_target_suggestions_accept"},{"description":"","name":"business_target_suggestions_get"},{"description":"","name":"business_target_suggestions_list"},{"description":"","name":"business_target_suggestions_stats"},{"description":"","name":"business_target_users_create"},{"description":"","name":"business_target_users_delete"},{"description":"","name":"business_target_users_list"},{"description":"","name":"business_team_attendees_add"},{"description":"","name":"business_team_attendees_members_list"},{"description":"","name":"business_team_attendees_remove"},{"description":"","name":"business_team_members_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Team membership is a privileged administrative surface.; They materially alter shared business state."}},{"description":"","name":"business_team_members_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable sponsorship-program data or revoke membership."}},{"description":"","name":"business_team_members_get"},{"description":"","name":"business_team_members_invite","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Team membership is a privileged administrative surface.; They materially alter shared business state."}},{"description":"","name":"business_team_members_list"},{"description":"","name":"business_team_members_patch","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Team membership is a privileged administrative surface.; They materially alter shared business state."}}],"tools_count":50,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9c73747c-5b58-493e-88f5-8cccd0a607dc","uuid":"f1448b58-0702-5e80-8ca0-0bd69e8b65b8","verification_tier":"community","version":""},"query_key":"country club country club for business","schema_version":1,"status":"match"}