{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Fospha for North and South America retrieves marketing measurement data. Analyze spend, ROAS, attribution, channels, campaigns, trends, and budget forecasts. Connect using your Fospha login to inspect client performance and targets.","did":"a5e0de16-b3e6-485c-a8d2-42b25d5e7903","documentation_url":"https://help-center.fospha.com/help-center/fospha-mcp-setup-onboarding-guide","editorial_description":{"extended_description":"Compare attribution views, benchmarks, custom metrics, markets, and categories. Freshness and help tools provide context for interpreting reporting results.","schema_version":1,"summary":"Fospha for North and South America retrieves marketing measurement data.\nAnalyze spend, ROAS, attribution, channels, campaigns, trends, and budget forecasts.\nConnect using your Fospha login to inspect client performance and targets."},"homepage_url":"","icon":"https://cdn.prod.website-files.com/68385b31d7418dca829caf03/6849421f5fb37a3ebce80b24_Favicon.png","id":"a5e0de16-b3e6-485c-a8d2-42b25d5e7903","installs":0,"last_scanned":"","license":"","long_description":"Compare attribution views, benchmarks, custom metrics, markets, and categories. Freshness and help tools provide context for interpreting reporting results.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The tool name/description indicates annotations can be added to measurement timelines.","reasoning":"It changes shared analytics context but not campaigns.","risk_type":"data_modification","severity":"medium","title":"Creates/updates analytics annotations","triggering_tools_or_skills":["fospha_annotations"]},{"evidence":"The remaining tools retrieve marketing intelligence.","reasoning":"They do not change ad accounts.","risk_type":"private_data_read","severity":"low","title":"Reads private attribution, campaign, benchmark and forecast data","triggering_tools_or_skills":["get_attribution_comparison","get_campaigns","get_summary","forecast_beam"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes Fospha clients and marketing measurement data.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a5e0de16-b3e6-485c-a8d2-42b25d5e7903.json","what_it_proves":"Candidate PR #125 record identity (name \"Fospha (North & South America)\", publisher, type web_connector) and 20 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a5e0de16-b3e6-485c-a8d2-42b25d5e7903: complete tool_names inventory (20 tools), remote streamable-http endpoint https://mcp.us.fospha.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Fospha is read-only measurement except for analytics annotations.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a5e0de16-b3e6-485c-a8d2-42b25d5e7903","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 20 tools; fospha_annotations runtime modes should be verified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":20,"tools_or_skills_total":20},"name":"Fospha (North & South America)","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a5e0de16-b3e6-485c-a8d2-42b25d5e7903&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.fospha.com/application-privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Fospha Corporation","publisher_url":"https://www.fospha.com/","remote_url":"https://mcp.us.fospha.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes shared analytics context but not campaigns.","evidence":"Creates/updates analytics annotations: The tool name/description indicates annotations can be added to measurement timelines.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates analytics annotations","triggering_tools":["fospha_annotations"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They do not change ad accounts.","evidence":"Reads private attribution, campaign, benchmark and forecast data: The remaining tools retrieve marketing intelligence.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private attribution, campaign, benchmark and forecast data","triggering_tools":["get_attribution_comparison","get_campaigns","get_summary","forecast_beam"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"Keith.Robinson@fospha.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"forecast_beam"},{"description":"","name":"fospha_annotations","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes shared analytics context but not campaigns."}},{"description":"","name":"fospha_intro"},{"description":"","name":"get_annotations"},{"description":"","name":"get_attribution_comparison"},{"description":"","name":"get_beam_data"},{"description":"","name":"get_benchmarks"},{"description":"","name":"get_campaign_types"},{"description":"","name":"get_campaigns"},{"description":"","name":"get_channels"},{"description":"","name":"get_clients"},{"description":"","name":"get_custom_categories"},{"description":"","name":"get_custom_metrics"},{"description":"","name":"get_data_freshness"},{"description":"","name":"get_filter_options"},{"description":"","name":"get_markets"},{"description":"","name":"get_summary"},{"description":"","name":"get_targets"},{"description":"","name":"get_trends"},{"description":"","name":"search_help_center"}],"tools_count":20,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a5e0de16-b3e6-485c-a8d2-42b25d5e7903","uuid":"2aef3d45-a5c1-52b4-9273-17ab587bf791","verification_tier":"community","version":""},"query_key":"fospha corporation fospha north south america","schema_version":1,"status":"match"}