{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"medium","detail_sha256":"cbe5d6c592957c7b2e8828f398fe168aabd6c4d216246fb30fd14d9bc910c69f","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"High with no visible risk. Snapshot surface (5 tools) is read-only company lookup, financials and ownership (Low). Official docs now list 24 MCP tools including search_employees, get_employee_details and enrich_employee_contacts (email/phone of named individuals), find_people_by_domain, KYB officer/shareholder person search, and credit-consuming prospecting. That is bulk third-party personal-data retrieval plus bounded prepaid-credit spend: Medium. No writes, sends, or uncapped financial actions. First pass was Low for the 5-tool snapshot; revised to Medium after confirming the current official tool list is the live surface the prior review flagged.","review_key":"claudesec:589f3a6c-91a0-42d6-9de8-45a6f9f14a01","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.globaldatabase.com/docs/v2/","https://api.anthropic.com/api/directory/servers (snapshot claude-directory-all-tiers-2026-09-22.json)"],"status":"resolved"},"category":"Interactive Connector","confidence":"medium","description":"Global Database supplies corporate profiles, financials, and ownership information. Find companies by website or LinkedIn URL and inspect shareholders or group structures. Use autocomplete to locate company records for further research.","did":"589f3a6c-91a0-42d6-9de8-45a6f9f14a01","documentation_url":"https://api.globaldatabase.com/docs/v2/#mcp-server","editorial_description":{"extended_description":"","schema_version":1,"summary":"Global Database supplies corporate profiles, financials, and ownership information.\nFind companies by website or LinkedIn URL and inspect shareholders or group structures.\nUse autocomplete to locate company records for further research."},"homepage_url":"","icon":"","id":"589f3a6c-91a0-42d6-9de8-45a6f9f14a01","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"Packet has five tools; official docs list additional KYB, people, registry, prospecting and account tools.","reasoning":"The risk surface cannot be assessed from this snapshot.","risk_type":"identity_discrepancy","severity":"low","title":"Official MCP tool list exceeds packet inventory","triggering_tools_or_skills":[]},{"evidence":"Official docs explicitly label read_reference as costing no credits but do not establish costs for every other tool in evidence reviewed.","reasoning":"Potential paid-credit use could change overall risk.","risk_type":"evidence_gap","severity":"low","title":"Credit consumption is unclear","triggering_tools_or_skills":[]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":"Current complete official MCP tool inventory/schemas and explicit per-tool credit/billing schedule.","confidence":"medium","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/589f3a6c-91a0-42d6-9de8-45a6f9f14a01.json","what_it_proves":"Candidate PR #125 record identity (name \"Global Database\", publisher, type interactive_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/589f3a6c-91a0-42d6-9de8-45a6f9f14a01: complete tool_names inventory (5 tools), remote sse endpoint https://mcp.globaldatabase.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:57:14Z","url_or_path":"https://api.globaldatabase.com/docs/v2/","what_it_proves":"Official API/MCP docs list a broader company, KYB, people, registry and prospecting tool surface than the five Directory tools and distinguish at least one no-credit reference call."}],"primary_reason":"The Directory inventory is stale/incomplete relative to official Global Database MCP documentation, and credit costs are not established for the listed calls.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:589f3a6c-91a0-42d6-9de8-45a6f9f14a01","reviewed_at":"2026-10-10","reviewer_notes":"Need current tools/list, schemas, and per-tool credit schedule before publication.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"unknown","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"unknown","runs_code_or_queries":"unknown","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"Global Database","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=589f3a6c-91a0-42d6-9de8-45a6f9f14a01&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.globaldatabase.com/privacy-policy","provisional_risk":"high","publication_recommendation":"fix","publisher":"Global Database","publisher_url":"https://www.globaldatabase.com","remote_url":"https://mcp.globaldatabase.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"The current tool reference includes employee and contact enrichment that returns personal email, phone and profile information.","evidence":"https://api.globaldatabase.com/docs/v2/\nAvailable Tools > People: 'Email and phone for one named person'","risk_type":"reads_private_data","severity":"medium","title":"Retrieves individual contact and profile data"},{"description":"Company, ownership and financial lookups retrieve commercial reference information through Global Database.","evidence":"https://api.anthropic.com/api/directory/servers (snapshot claude-directory-all-tiers-2026-09-22.json)\n5 tool names\n\nhttps://api.globaldatabase.com/docs/v2/\nMCP Server > Available Tools: Company Lookup / Company Data","risk_type":"reads_public_data","severity":"low","title":"Looks up company and financial reference data"},{"description":"Lookup and enrichment requests can consume credits from the connected Global Database subscription.","evidence":"https://api.globaldatabase.com/docs/v2/\n'Tools spend the same API credits as the matching REST endpoints'","risk_type":"spends_money","severity":"low","title":"Consumes prepaid API credits"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"ion.ghiderman@globaldatabase.com","tags":["reads_private_data","reads_public_data","spends_money"],"tools":[{"description":"","name":"get_company_by_url"},{"description":"","name":"get_company_by_linkedin"},{"description":"","name":"get_company_financials"},{"description":"","name":"get_company_ownership"},{"description":"","name":"autocomplete"}],"tools_count":5,"transport":"sse","type":"interactive_connector","url":"https://claude.ai/directory/589f3a6c-91a0-42d6-9de8-45a6f9f14a01","uuid":"054febbc-1962-5732-9b9c-48afdd98c0aa","verification_tier":"community","version":""},"query_key":"global database","schema_version":1,"status":"match"}