{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"GlacierGrid provides read-only HVAC, refrigeration, and energy data. Review equipment, issues, sensors, connectivity, and savings across your locations. An active account is required; setpoints and alerts cannot be changed.","did":"2e0105f9-c1f3-43df-8fa7-82ff98443123","documentation_url":"https://www.glaciergrid.com/connector","editorial_description":{"extended_description":"Portfolio overviews, issue notifications, thermostat cycles, weather context, and alert recipients help explain site conditions. The service is designed for operators with 50 or more locations. The connector retrieves information without modifying monitored systems.","schema_version":1,"summary":"GlacierGrid provides read-only HVAC, refrigeration, and energy data.\nReview equipment, issues, sensors, connectivity, and savings across your locations.\nAn active account is required; setpoints and alerts cannot be changed."},"homepage_url":"","icon":"","id":"2e0105f9-c1f3-43df-8fa7-82ff98443123","installs":0,"last_scanned":"","license":"","long_description":"Portfolio overviews, issue notifications, thermostat cycles, weather context, and alert recipients help explain site conditions. The service is designed for operators with 50 or more locations. The connector retrieves information without modifying monitored systems.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The complete inventory and official connector page describe account-scoped retrieval of alerts, notifications, sensor readings, equipment status and users.","reasoning":"The data can be operationally sensitive, but the connector is documented as read-only.","risk_type":"private_data_read","severity":"low","title":"Reads private facilities and energy-monitoring data","triggering_tools_or_skills":["get_issues","get_notifications_for_issue","get_sensor_readings","get_thermostat_status","get_users"]}],"assessment_status":"reviewed","auth_and_scopes":"Authentication is required and access is scoped to the locations already covered by the user's GlacierGrid account.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2e0105f9-c1f3-43df-8fa7-82ff98443123.json","what_it_proves":"Candidate PR #125 record identity (name \"GlacierGrid\", publisher, type web_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2e0105f9-c1f3-43df-8fa7-82ff98443123: complete tool_names inventory (17 tools), remote streamable-http endpoint https://mcp.glaciergrid.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:36:54Z","url_or_path":"https://www.glaciergrid.com/connector","what_it_proves":"Official connector documentation confirms account-scoped facility-data retrieval and explicitly says the connector is read-only and never changes set points, closes alerts, or modifies systems."}],"primary_reason":"GlacierGrid provides authenticated, read-only access to private facilities-monitoring data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:2e0105f9-c1f3-43df-8fa7-82ff98443123","reviewed_at":"2026-10-10","reviewer_notes":"Issue and notification text is untrusted account content and can expose the model to prompt injection.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"GlacierGrid","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2e0105f9-c1f3-43df-8fa7-82ff98443123&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.glaciergrid.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"GlacierGrid Inc.","publisher_url":"https://www.glaciergrid.com/","remote_url":"https://mcp.glaciergrid.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The data can be operationally sensitive, but the connector is documented as read-only.","evidence":"Reads private facilities and energy-monitoring data: The complete inventory and official connector page describe account-scoped retrieval of alerts, notifications, sensor readings, equipment status and users.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private facilities and energy-monitoring data","triggering_tools":["get_issues","get_notifications_for_issue","get_sensor_readings","get_thermostat_status","get_users"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@glaciergrid.com","tags":["accesses_calendar","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_alert_recipients"},{"description":"","name":"get_comfort_burden"},{"description":"","name":"get_control_events"},{"description":"","name":"get_device_connectivity"},{"description":"","name":"get_equipment_hvac_status"},{"description":"","name":"get_issues"},{"description":"","name":"get_notifications_for_issue"},{"description":"","name":"get_overview"},{"description":"","name":"get_refrigeration_summary"},{"description":"","name":"get_savings"},{"description":"","name":"get_sensor_readings"},{"description":"","name":"get_thermostat_cycle_summary"},{"description":"","name":"get_thermostat_status"},{"description":"","name":"get_users"},{"description":"","name":"get_weather"},{"description":"","name":"read_resource"},{"description":"","name":"search"}],"tools_count":17,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2e0105f9-c1f3-43df-8fa7-82ff98443123","uuid":"9845b102-3c7d-513d-830a-952b382b1f1d","verification_tier":"community","version":""},"query_key":"glaciergrid inc glaciergrid","schema_version":1,"status":"match"}