{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"Futrumi finds Czech restaurant, café, bar, and food recommendations from named experts. Search by place or nearby location and inspect businesses, experts, and individual tips. Results include the expert's original Czech quote and a link to the Futrumi app.","did":"61e502f8-2cde-4382-8934-7b9052410de1","documentation_url":"https://github.com/Fingerlicky/futrumi-mcp","editorial_description":{"extended_description":"The published recommendations come from food critics, chefs, sommeliers, and gastronomy journalists and can identify a specific dish or drink to try.","schema_version":1,"summary":"Futrumi finds Czech restaurant, café, bar, and food recommendations from named experts.\nSearch by place or nearby location and inspect businesses, experts, and individual tips.\nResults include the expert's original Czech quote and a link to the Futrumi app."},"homepage_url":"","icon":"https://futrumi.cz/LogoWithoutBackground.svg","id":"61e502f8-2cde-4382-8934-7b9052410de1","installs":0,"last_scanned":"","license":"","long_description":"The published recommendations come from food critics, chefs, sommeliers, and gastronomy journalists and can identify a specific dish or drink to try.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Every declared operation searches or retrieves restaurant, café, bar, business or expert recommendation data.","reasoning":"The no-auth surface is read-only public discovery with no booking or messaging operation.","risk_type":"public_data_read","severity":"low","title":"Retrieves public venue recommendations","triggering_tools_or_skills":["search_recommendations","find_recommendations_near","get_recommendation","get_business","get_expert","list_experts"]},{"evidence":"Recommendation criteria and approximate location are processed by the hosted Futrumi endpoint.","reasoning":"User search context leaves the assistant for a named third-party discovery service.","risk_type":"third_party_data_forwarding","severity":"low","title":"Sends location and preference queries to Futrumi","triggering_tools_or_skills":["search_recommendations","find_recommendations_near"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required; the six tools access public Czech venue recommendations and expert profiles.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/61e502f8-2cde-4382-8934-7b9052410de1.json","what_it_proves":"Candidate PR #125 record identity (name \"Futrumi\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/61e502f8-2cde-4382-8934-7b9052410de1: complete tool_names inventory (6 tools), remote streamable-http endpoint https://mcp.futrumi.cz/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"Futrumi is a bounded no-auth read-only recommendation service.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:61e502f8-2cde-4382-8934-7b9052410de1","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all six tools. The official GitHub search did not return a useful project page, so result schemas and location retention remain unverified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"Futrumi","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=61e502f8-2cde-4382-8934-7b9052410de1&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://futrumi.cz/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Fingerlicky, s.r.o.","publisher_url":"https://futrumi.cz","remote_url":"https://mcp.futrumi.cz/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: The no-auth surface is read-only public discovery with no booking or messaging operation.","evidence":"Retrieves public venue recommendations: Every declared operation searches or retrieves restaurant, café, bar, business or expert recommendation data.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Retrieves public venue recommendations","triggering_tools":["search_recommendations","find_recommendations_near","get_recommendation","get_business","get_expert","list_experts"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: User search context leaves the assistant for a named third-party discovery service.","evidence":"Sends location and preference queries to Futrumi: Recommendation criteria and approximate location are processed by the hosted Futrumi endpoint.","manual_risk_type":"third_party_data_forwarding","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Sends location and preference queries to Futrumi","triggering_tools":["search_recommendations","find_recommendations_near"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@futrumi.cz (preferred) — alternatively GitHub Issues at https://github.com/Fingerlicky/futrumi-mcp/issues","tags":["forwards_data_to_third_party","network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"search_recommendations"},{"description":"","name":"find_recommendations_near"},{"description":"","name":"get_recommendation"},{"description":"","name":"get_business"},{"description":"","name":"get_expert"},{"description":"","name":"list_experts"}],"tools_count":6,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/61e502f8-2cde-4382-8934-7b9052410de1","uuid":"e7d599d9-820d-5748-a45a-87378da00b87","verification_tier":"community","version":""},"query_key":"futrumi","schema_version":1,"status":"match"}