{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"no_auth","category":"Web Connector","confidence":"high","description":"Finds beauty, grooming and wellness appointments on Fresha. Search nearby salons, barbers, spas and studios by service, time, price or amenities. Open the chosen option on Fresha to complete your booking.","did":"204b16e4-9697-4120-894f-84fd585a0e49","documentation_url":"https://www.fresha.com/help-center/knowledge-base/knowledge-base-category/102129-using-fresha-with-claude","editorial_description":{"extended_description":"","schema_version":1,"summary":"Finds beauty, grooming and wellness appointments on Fresha.\nSearch nearby salons, barbers, spas and studios by service, time, price or amenities.\nOpen the chosen option on Fresha to complete your booking."},"homepage_url":"","icon":"","id":"204b16e4-9697-4120-894f-84fd585a0e49","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official docs limit Claude to search and comparison; users are redirected to Fresha for all booking/payment/account operations.","reasoning":"The connector performs read-only marketplace discovery.","risk_type":"public_data_read","severity":"low","title":"Searches beauty venues and appointment availability","triggering_tools_or_skills":["find_beauty_wellness_availability","find_beauty_wellness_venues"]}],"assessment_status":"reviewed","auth_and_scopes":"No authentication is required for connector search; location/date/preferences are forwarded, while account and booking actions remain on Fresha.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/204b16e4-9697-4120-894f-84fd585a0e49.json","what_it_proves":"Candidate PR #125 record identity (name \"Fresha\", publisher, type web_connector) and 2 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/204b16e4-9697-4120-894f-84fd585a0e49: complete tool_names inventory (2 tools), remote streamable-http endpoint https://mcp.fresha.com/claude, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T21:19:34Z","url_or_path":"https://www.fresha.com/help-center/knowledge-base/knowledge-base-category/102129-using-fresha-with-claude","what_it_proves":"Official docs confirm Claude only searches venues/availability; booking, payment, cancellation and rescheduling happen on Fresha after navigation."}],"primary_reason":"Fresha only searches venues and availability; all transactional actions occur outside the connector.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:204b16e4-9697-4120-894f-84fd585a0e49","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed both names and official guide; search may reveal address/location preferences but stores no authenticated account state.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":2,"tools_or_skills_total":2},"name":"Fresha","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=204b16e4-9697-4120-894f-84fd585a0e49&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://terms.fresha.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Fresha","publisher_url":"https://www.fresha.com/","remote_url":"https://mcp.fresha.com/claude","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: The connector performs read-only marketplace discovery.","evidence":"Searches beauty venues and appointment availability: Official docs limit Claude to search and comparison; users are redirected to Fresha for all booking/payment/account operations.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Searches beauty venues and appointment availability","triggering_tools":["find_beauty_wellness_availability","find_beauty_wellness_venues"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.fresha.com/help-center/get-support","tags":["accesses_calendar","network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"find_beauty_wellness_availability"},{"description":"","name":"find_beauty_wellness_venues"}],"tools_count":2,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/204b16e4-9697-4120-894f-84fd585a0e49","uuid":"4dc35425-b35b-5107-b427-dc4ce1cc7b76","verification_tier":"community","version":""},"query_key":"fresha fresha","schema_version":1,"status":"match"}