{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"514c3d1a0a76928d89f5a463f40fb1cc9061b54df94a5ab1072c9b34ac433af3","risk":"low"},"proposal_file":"claude-tail-proposals.json","rationale":"Low-confidence entry. Low stands: the single tool ask_texpro answers natural-language questions over Fibre2Fashion's licensed market-intelligence data (prices, trade flows, tariffs, listed-company financials); no user-private data or writes are described, and the OAuth metadata advertises only the openid scope. The publisher doc page is behind an AWS WAF human-verification challenge (HTTP 405) and was not bypassed, so the earlier uncertainty is only partly resolved. Presentation: the Low 'runs_code' card renders as 'Executes Code or Commands' for an NL query tool, and 'Accesses Private Data' mislabels licensed third-party reference data. Replace them with a Low data-flow card.","review_key":"claudesec:93895861-00f5-41f1-9947-861e8a10f6db","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://mcp.fibre2fashion.com/.well-known/oauth-protected-resource"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"TexPro researches textile and apparel markets from Claude. Ask about material prices, trade flows, tariffs, country profiles, company financials, and energy data. A valid TexPro subscription is required, with access determined by existing plan entitlements.","did":"93895861-00f5-41f1-9947-861e8a10f6db","documentation_url":"https://www.fibre2fashion.com/resources/11664/texpro-mcp-connector","editorial_description":{"extended_description":"Results are structured and source-attributed. Data supports sourcing and procurement research through historical price series, HS-code trade analysis, and comparisons of manufacturing markets.","schema_version":1,"summary":"TexPro researches textile and apparel markets from Claude.\nAsk about material prices, trade flows, tariffs, country profiles, company financials, and energy data.\nA valid TexPro subscription is required, with access determined by existing plan entitlements."},"homepage_url":"","icon":"https://static.fibre2fashion.com/images/texprofavicon.ico","id":"93895861-00f5-41f1-9947-861e8a10f6db","installs":0,"last_scanned":"","license":"","long_description":"Results are structured and source-attributed. Data supports sourcing and procurement research through historical price series, HS-code trade analysis, and comparisons of manufacturing markets.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The sole generic question tool returns source-attributed subscription data across prices, trade, duties and company financials.","reasoning":"It is proprietary research data.","risk_type":"private_data_read","severity":"low","title":"Queries licensed textile/sourcing intelligence","triggering_tools_or_skills":["ask_texpro"]},{"evidence":"No underlying query/action schemas are exposed.","reasoning":"The description only supports read-only data questions, but runtime bounds should be documented.","risk_type":"generic_gateway","severity":"low","title":"Uses one opaque natural-language analytics tool","triggering_tools_or_skills":["ask_texpro"]}],"assessment_status":"provisional","auth_and_scopes":"A valid TexPro subscription is required; data access follows the subscriber’s entitlements.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/93895861-00f5-41f1-9947-861e8a10f6db.json","what_it_proves":"Candidate PR #125 record identity (name \"F2F TexPro - Sourcing Intelligence Tool\", publisher, type web_connector) and 1 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/93895861-00f5-41f1-9947-861e8a10f6db: complete tool_names inventory (1 tools), remote streamable-http endpoint https://mcp.fibre2fashion.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"TexPro appears read-only, but its single opaque tool lacks an explicit no-write schema/guarantee.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:93895861-00f5-41f1-9947-861e8a10f6db","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed the sole tool and detailed data categories. No sourcing order, supplier outreach or procurement action is described.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":1,"tools_or_skills_total":1},"name":"F2F TexPro - Sourcing Intelligence Tool","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=93895861-00f5-41f1-9947-861e8a10f6db&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.fibre2fashion.com/policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Fibre2Fashion","publisher_url":"https://www.fibre2fashion.com/","remote_url":"https://mcp.fibre2fashion.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"Sends questions to Fibre2Fashion and returns licensed textile-market information such as prices, trade flows, tariffs and company financials.","evidence":"Actions: ask_texpro. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — id 93895861: tool_names ['ask_texpro']; description lists data available (prices, trade, country profiles, company financials, energy); https://mcp.fibre2fashion.com/.well-known/oauth-protected-resource — scopes_supported ['openid']","risk_type":"reads_public_data","severity":"low","title":"Sends sourcing queries to Fibre2Fashion"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"texprosupport@fibre2fashion.com","tags":["reads_public_data"],"tools":[{"description":"","name":"ask_texpro"}],"tools_count":1,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/93895861-00f5-41f1-9947-861e8a10f6db","uuid":"f0ad3063-293b-563c-9ae5-860dab112bd9","verification_tier":"community","version":""},"query_key":"f2f texpro sourcing intelligence tool","schema_version":1,"status":"match"}