{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"TOP researches Croatian public procurement and your matched tenders. Inspect deadlines, documents, suppliers, buyers, competitors, awards, and contract values. Read-only access requires a Tender-Op plan with TOP Connect and follows organization permissions.","did":"a3373671-aa24-489d-adc5-78301e51cde3","documentation_url":"https://tender-op.com/docs/mcp-connector.html","editorial_description":{"extended_description":"Matched tenders are private to your company, while market analytics use published procurement records. Search by company name or OIB and trace participation through individual procurements and contracts. The connector cannot submit bids or change records.","schema_version":1,"summary":"TOP researches Croatian public procurement and your matched tenders.\nInspect deadlines, documents, suppliers, buyers, competitors, awards, and contract values.\nRead-only access requires a Tender-Op plan with TOP Connect and follows organization permissions."},"homepage_url":"","icon":"","id":"a3373671-aa24-489d-adc5-78301e51cde3","installs":0,"last_scanned":"","license":"","long_description":"Matched tenders are private to your company, while market analytics use published procurement records. Search by company name or OIB and trace participation through individual procurements and contracts. The connector cannot submit bids or change records.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All 12 tools retrieve or rank tender/procurement data.","reasoning":"They do not submit bids or contact buyers.","risk_type":"private_data_read","severity":"low","title":"Reads private matched-tender pipeline and public procurement records","triggering_tools_or_skills":["get_relevant_tender","list_relevant_tenders","get_contract_details","rank_competitors"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes the user’s tender pipeline; public procurement analytics are read-only.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a3373671-aa24-489d-adc5-78301e51cde3.json","what_it_proves":"Candidate PR #125 record identity (name \"TOP\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a3373671-aa24-489d-adc5-78301e51cde3: complete tool_names inventory (12 tools), remote streamable-http endpoint https://mcp.tender-op.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"TOP is read-only procurement intelligence.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a3373671-aa24-489d-adc5-78301e51cde3","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 12 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"TOP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a3373671-aa24-489d-adc5-78301e51cde3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://tender-op.com/docs/privacy-policy.html","provisional_risk":null,"publication_recommendation":"accept","publisher":"DFS AI","publisher_url":"https://dfsglobal.ai/","remote_url":"https://mcp.tender-op.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They do not submit bids or contact buyers.","evidence":"Reads private matched-tender pipeline and public procurement records: All 12 tools retrieve or rank tender/procurement data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private matched-tender pipeline and public procurement records","triggering_tools":["get_relevant_tender","list_relevant_tenders","get_contract_details","rank_competitors"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://tender-op.com/docs/support.html","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_buyer_analytics"},{"description":"","name":"get_contract_details"},{"description":"","name":"get_market_analytics"},{"description":"","name":"get_procurement_analytics"},{"description":"","name":"get_relevant_tender"},{"description":"","name":"get_supplier_analytics"},{"description":"","name":"list_buyer_procurements"},{"description":"","name":"list_procurement_participants"},{"description":"","name":"list_relevant_tenders"},{"description":"","name":"list_supplier_procurements"},{"description":"","name":"rank_competitors"},{"description":"","name":"search_analytics_entities"}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a3373671-aa24-489d-adc5-78301e51cde3","uuid":"7555dedd-7e84-5949-9f51-e08bd131474f","verification_tier":"community","version":""},"query_key":"dfs ai top","schema_version":1,"status":"match"}