{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Check images, video and audio for signs of AI generation or alteration with Diopter. Submit a media link and receive a verdict, confidence score and report. Results can be inconclusive; a Diopter account is required.","did":"c4e05f46-df4c-4607-a0e4-53d25195f324","documentation_url":"https://diopter.ai/integrations/claude","editorial_description":{"extended_description":"Scans are saved in your Diopter dashboard for later review, and pending analyses can be retrieved by request ID. The service is intended for media verification workflows and analyzes existing media rather than generating it. Free accounts have a daily scan allowance.","schema_version":1,"summary":"Check images, video and audio for signs of AI generation or alteration with Diopter.\nSubmit a media link and receive a verdict, confidence score and report.\nResults can be inconclusive; a Diopter account is required."},"homepage_url":"","icon":"","id":"c4e05f46-df4c-4607-a0e4-53d25195f324","installs":0,"last_scanned":"","license":"","long_description":"Scans are saved in your Diopter dashboard for later review, and pending analyses can be retrieved by request ID. The service is intended for media verification workflows and analyzes existing media rather than generating it. Free accounts have a daily scan allowance.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The listing says users share a media link that Diopter downloads and analyzes.","reasoning":"This is user-directed network access, bounded to media detection.","risk_type":"arbitrary_network_access","severity":"low","title":"Fetches media URLs for analysis","triggering_tools_or_skills":["detect_media"]},{"evidence":"The result is stored in the user Diopter dashboard and retrieved by request id.","reasoning":"It reads account analysis data without mutation.","risk_type":"private_data_read","severity":"low","title":"Returns detection results","triggering_tools_or_skills":["get_detection_result"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for the Diopter dashboard; no media publication/write tool exists.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c4e05f46-df4c-4607-a0e4-53d25195f324.json","what_it_proves":"Candidate PR #125 record identity (name \"Diopter AI\", publisher, type web_connector) and 2 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c4e05f46-df4c-4607-a0e4-53d25195f324: complete tool_names inventory (2 tools), remote streamable-http endpoint https://diopter.ai/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:02:06Z","url_or_path":"https://diopter.ai/integrations/claude","what_it_proves":"Official integration page establishes link-based media analysis and report retrieval."}],"primary_reason":"Diopter downloads user-specified media and returns a deepfake-detection report.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c4e05f46-df4c-4607-a0e4-53d25195f324","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed both names and official integration page; runtime should enforce safe URL fetching.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":2,"tools_or_skills_total":2},"name":"Diopter AI","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c4e05f46-df4c-4607-a0e4-53d25195f324&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://diopter.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Diopter AI Inc.","publisher_url":"https://diopter.ai/","remote_url":"https://diopter.ai/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: This is user-directed network access, bounded to media detection.","evidence":"Fetches media URLs for analysis: The listing says users share a media link that Diopter downloads and analyzes.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Fetches media URLs for analysis","triggering_tools":["detect_media"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: It reads account analysis data without mutation.","evidence":"Returns detection results: The result is stored in the user Diopter dashboard and retrieved by request id.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Returns detection results","triggering_tools":["get_detection_result"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://diopter.ai/contact","tags":["forwards_data_to_third_party","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"detect_media"},{"description":"","name":"get_detection_result"}],"tools_count":2,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c4e05f46-df4c-4607-a0e4-53d25195f324","uuid":"6524c4ec-9e14-5ea4-9a15-c4ee86fd4d6f","verification_tier":"community","version":""},"query_key":"diopter ai inc diopter ai","schema_version":1,"status":"match"}
