{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Analyzes your brand's visibility in AI search through Finseo. Track mentions, placement and sentiment across monitored AI services and prompts. Compare competitors, inspect cited sources and follow visibility trends over time.","did":"2b7e3912-c8d7-4556-9f17-cd2eb82da7d5","documentation_url":"https://docs.finseo.ai/","editorial_description":{"extended_description":"Coverage described includes ChatGPT, Perplexity and Google's AI search experiences. Tools retrieve project prompts, competitor rankings, source lists and visibility time series; they analyze tracked results rather than control search-engine answers.","schema_version":1,"summary":"Analyzes your brand's visibility in AI search through Finseo.\nTrack mentions, placement and sentiment across monitored AI services and prompts.\nCompare competitors, inspect cited sources and follow visibility trends over time."},"homepage_url":"","icon":"","id":"2b7e3912-c8d7-4556-9f17-cd2eb82da7d5","installs":0,"last_scanned":"","license":"","long_description":"Coverage described includes ChatGPT, Perplexity and Google's AI search experiences. Tools retrieve project prompts, competitor rankings, source lists and visibility time series; they analyze tracked results rather than control search-engine answers.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All eight Directory tools get or list project analytics; official docs confirm project-scoped visibility data retrieval.","reasoning":"The connector retrieves private project tracking data without any write action.","risk_type":"private_data_read","severity":"low","title":"Reads tracked AI-search visibility metrics and prompts","triggering_tools_or_skills":["get_competitor_ranking","get_query_fanouts","get_tags","get_top_sources","get_visibility_metrics","get_visibility_timeseries","list_projects","list_prompts"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required and official docs show project access restrictions; the complete connector inventory exposes only list/get retrieval despite broader API capabilities elsewhere.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2b7e3912-c8d7-4556-9f17-cd2eb82da7d5.json","what_it_proves":"Candidate PR #125 record identity (name \"Finseo\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2b7e3912-c8d7-4556-9f17-cd2eb82da7d5: complete tool_names inventory (8 tools), remote streamable-http endpoint https://api.finseo.ai/v1/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:33:21Z","url_or_path":"https://docs.finseo.ai/","what_it_proves":"Official Finseo docs identify visibility-data retrieval APIs and project-scoped authentication, consistent with the connector's eight read tools."}],"primary_reason":"Finseo's connector inventory is read-only AI-visibility analytics.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:2b7e3912-c8d7-4556-9f17-cd2eb82da7d5","reviewed_at":"2026-10-10","reviewer_notes":"Official API docs also mention prompt management, but no such write exists in this complete connector inventory; source/answer content remains prompt-injection-bearing.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Finseo","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2b7e3912-c8d7-4556-9f17-cd2eb82da7d5&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.finseo.ai/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Finseo","publisher_url":"https://www.finseo.ai/","remote_url":"https://api.finseo.ai/v1/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The connector retrieves private project tracking data without any write action.","evidence":"Reads tracked AI-search visibility metrics and prompts: All eight Directory tools get or list project analytics; official docs confirm project-scoped visibility data retrieval.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads tracked AI-search visibility metrics and prompts","triggering_tools":["get_competitor_ranking","get_query_fanouts","get_tags","get_top_sources","get_visibility_metrics","get_visibility_timeseries","list_projects","list_prompts"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@finseo.ai","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_competitor_ranking"},{"description":"","name":"get_query_fanouts"},{"description":"","name":"get_tags"},{"description":"","name":"get_top_sources"},{"description":"","name":"get_visibility_metrics"},{"description":"","name":"get_visibility_timeseries"},{"description":"","name":"list_projects"},{"description":"","name":"list_prompts"}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2b7e3912-c8d7-4556-9f17-cd2eb82da7d5","uuid":"b64cb3a1-d934-5c0e-be7c-18ba47df411f","verification_tier":"community","version":""},"query_key":"finseo finseo","schema_version":1,"status":"match"}