{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"2936e0b1f5f4862a8f78aadc3088bff7ee097ed71ade396d75fe1ee572a5458a","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"High is now evidenced. The public tool reference's write matrix for the single mutate tool includes rfp publish/invite_vendor (contacts external vendors), rfp award, intake_session approve/reject, eval update to risk_accepted, and terminal engagement archive. These are consequential external sending and governance decisions across the org's TPRM program, scoped by the user's role and gated only by a model-mediated confirm:true. Visible cards (Low 'opaque mutation', Medium 'mutates records') understate this. Keep High and add a High card. The prior blocker (missing mutate enum) is resolved by the write matrix.","review_key":"claudesec:954d3f9c-3484-4d60-ae71-492167d5011c","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://docs.coverbase.com/mcp/overview","https://docs.coverbase.com/mcp/tool-reference.md"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Coverbase connects vendor risk and procurement records to Claude. Inspect vendors, assessments, findings, contracts, obligations, and subprocessor exposure. Writes require explicit user confirmation and respect your Coverbase role and permissions.","did":"954d3f9c-3484-4d60-ae71-492167d5011c","documentation_url":"https://docs.coverbase.com/mcp/overview","editorial_description":{"extended_description":"Generate portfolio reports and program-health digests, inspect expiring contracts or due obligations, and identify controls needing human review. Confirmed actions can add notes, create findings, start assessments, and update vendor attributes within your account's access.","schema_version":1,"summary":"Coverbase connects vendor risk and procurement records to Claude.\nInspect vendors, assessments, findings, contracts, obligations, and subprocessor exposure.\nWrites require explicit user confirmation and respect your Coverbase role and permissions."},"homepage_url":"","icon":"https://mcp.coverbase.app/logo.png","id":"954d3f9c-3484-4d60-ae71-492167d5011c","installs":0,"last_scanned":"","license":"","long_description":"Generate portfolio reports and program-health digests, inspect expiring contracts or due obligations, and identify controls needing human review. Confirmed actions can add notes, create findings, start assessments, and update vendor attributes within your account's access.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"The listing says writes can add notes, create findings, start assessments and update vendors, but mutation schemas/action enums are not fixed.","reasoning":"Hidden actions may include delete, messaging, contract or privileged operations.","risk_type":"generic_gateway","severity":"low","title":"Executes an opaque mutation","triggering_tools_or_skills":["mutate"]},{"evidence":"Documented examples persist notes/findings/assessments/vendor attributes.","reasoning":"They materially alter TPRM workflows.","risk_type":"data_modification","severity":"medium","title":"Mutates vendor-risk records","triggering_tools_or_skills":["mutate"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth permissions govern vendor/assessment/finding writes; every write requires confirmation.","blocked_missing_evidence":"Exhaustive mutate action enum and schemas, including delete, external questionnaire/message, contract/obligation, approval and role/access actions with confirmation requirements.","confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/954d3f9c-3484-4d60-ae71-492167d5011c.json","what_it_proves":"Candidate PR #125 record identity (name \"Coverbase\", publisher, type web_connector) and 11 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/954d3f9c-3484-4d60-ae71-492167d5011c: complete tool_names inventory (11 tools), remote streamable-http endpoint https://mcp.coverbase.app/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Coverbase uses one opaque mutate gateway for an end-to-end vendor/procurement platform.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:954d3f9c-3484-4d60-ae71-492167d5011c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 11 tools. Query/report tools are reads; confirmation does not reveal the full mutation capability.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":11,"tools_or_skills_total":11},"name":"Coverbase","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=954d3f9c-3484-4d60-ae71-492167d5011c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.coverbase.com/privacy-policy","provisional_risk":"high","publication_recommendation":"fix","publisher":"Coverbase Inc.","publisher_url":"https://www.coverbase.com/","remote_url":"https://mcp.coverbase.app/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"Coverbase’s mutate action can publish RFPs, invite external vendors, award requests and approve or reject intake decisions. A confirmation parameter and the user’s role gate these consequential actions.","evidence":"https://docs.coverbase.com/mcp/tool-reference.md\nWrites > write matrix table; 'no vendor is contacted until publish'; 'engagement / archive is terminal'","risk_type":"modifies_data","severity":"high","title":"Publishes procurement requests and makes approval decisions"},{"description":"The connector retrieves confidential vendors, contracts, findings and workflows from the organization’s third-party risk program.","evidence":"https://docs.coverbase.com/mcp/tool-reference.md\nread dispatchers kinds incl. users, workflows\n\nhttps://docs.coverbase.com/mcp/overview\noverview","risk_type":"reads_private_data","severity":"medium","title":"Reads vendor and contract information"},{"description":"Publishing a request for proposals or inviting vendors can send external procurement communications through the configured workflow.","evidence":"https://docs.coverbase.com/mcp/tool-reference.md\nWrites > write matrix table; 'no vendor is contacted until publish'; 'engagement / archive is terminal'","risk_type":"sends_messages_from_agent","severity":"high","title":"Contacts external vendors through procurement workflows"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@coverbase.ai","tags":["modifies_data","reads_private_data","sends_messages_from_agent"],"tools":[{"description":"","name":"get_report"},{"description":"","name":"mcp_capabilities"},{"description":"","name":"mutate","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter TPRM workflows."}},{"description":"","name":"query_assessments"},{"description":"","name":"query_controls"},{"description":"","name":"query_engagements_contracts"},{"description":"","name":"query_findings"},{"description":"","name":"query_platform"},{"description":"","name":"query_questionnaires"},{"description":"","name":"query_radar"},{"description":"","name":"query_vendors"}],"tools_count":11,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/954d3f9c-3484-4d60-ae71-492167d5011c","uuid":"8979cb62-852b-5784-8669-cad3b0c1757c","verification_tier":"community","version":""},"query_key":"coverbase inc coverbase","schema_version":1,"status":"match"}