{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"high","description":"FreqBlog retrieves audio-feature metadata for released music tracks. Look up tempo, key, energy, mood, and related attributes by title/artist or music identifiers. Find tracks by BPM, key, or harmonic compatibility without uploading audio.","did":"6145a47f-45fe-4989-b80e-36f0d82a4851","documentation_url":"https://freqblog.com/music-api.html","editorial_description":{"extended_description":"Supported identifiers include ISRC, MusicBrainz ID, and Spotify ID, with batch lookups available. Key results can use standard names, Camelot, and Open Key notation. Other attributes include danceability, valence, acousticness, instrumentalness, and loudness.","schema_version":1,"summary":"FreqBlog retrieves audio-feature metadata for released music tracks.\nLook up tempo, key, energy, mood, and related attributes by title/artist or music identifiers.\nFind tracks by BPM, key, or harmonic compatibility without uploading audio."},"homepage_url":"","icon":"https://freqblog.com/favicon.svg","id":"6145a47f-45fe-4989-b80e-36f0d82a4851","installs":0,"last_scanned":"","license":"","long_description":"Supported identifiers include ISRC, MusicBrainz ID, and Spotify ID, with batch lookups available. Key results can use standard names, Camelot, and Open Key notation. Other attributes include danceability, valence, acousticness, instrumentalness, and loudness.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official documentation marks the hosted music-metadata operations read-only and describes BPM, key, mood and catalogue search results.","reasoning":"The connector returns public/derived track metadata and does not mutate a user account.","risk_type":"public_data_read","severity":"low","title":"Retrieves public music metadata","triggering_tools_or_skills":["get_audio_features","get_audio_features_batch","search_catalog","find_tracks_by_bpm","find_tracks_by_key","find_compatible_keys"]},{"evidence":"The packet lists six tools, while the current official hosted-connector page lists twelve, adding set/recommendation/artist/tag reads.","reasoning":"The rating is unchanged, but the incomplete inventory should be refreshed for accurate disclosure.","risk_type":"identity_discrepancy","severity":"low","title":"Directory inventory omits six current read-only tools","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"The hosted connector is no-auth and uses a shared quota; no user credential or account storage is required.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/6145a47f-45fe-4989-b80e-36f0d82a4851.json","what_it_proves":"Candidate PR #125 record identity (name \"FreqBlog Music Metadata\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/6145a47f-45fe-4989-b80e-36f0d82a4851: complete tool_names inventory (6 tools), remote streamable-http endpoint https://mcp.freqblog.com/mcp, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T20:50:48Z","url_or_path":"https://freqblog.com/","what_it_proves":"FreqBlog documents the hosted connector as no-auth and read-only for music metadata, while also listing a current twelve-tool surface."}],"primary_reason":"FreqBlog is read-only and unauthenticated, but its Directory inventory is stale at six instead of twelve tools.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:6145a47f-45fe-4989-b80e-36f0d82a4851","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all six packet tools and the official current connector reference. The local npm package has a larger surface, but this record points to the hosted no-auth endpoint only.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"FreqBlog Music Metadata","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=6145a47f-45fe-4989-b80e-36f0d82a4851&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://freqblog.com/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"FreqBlog","publisher_url":"https://freqblog.com","remote_url":"https://mcp.freqblog.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: The connector returns public/derived track metadata and does not mutate a user account.","evidence":"Retrieves public music metadata: Official documentation marks the hosted music-metadata operations read-only and describes BPM, key, mood and catalogue search results.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Retrieves public music metadata","triggering_tools":["get_audio_features","get_audio_features_batch","search_catalog","find_tracks_by_bpm","find_tracks_by_key","find_compatible_keys"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@freqblog.com","tags":["network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"get_audio_features"},{"description":"","name":"get_audio_features_batch"},{"description":"","name":"search_catalog"},{"description":"","name":"find_tracks_by_bpm"},{"description":"","name":"find_tracks_by_key"},{"description":"","name":"find_compatible_keys"}],"tools_count":6,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/6145a47f-45fe-4989-b80e-36f0d82a4851","uuid":"96de9ab3-1c28-5f36-8014-80d8b473a621","verification_tier":"community","version":""},"query_key":"freqblog freqblog music metadata","schema_version":1,"status":"match"}