{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Mindy provides research and proposal support for US federal contractors. Find opportunities, incumbents, awards, teaming partners, pricing data, agency contacts, and market context. Extract solicitation requirements and draft or review proposal sections using connected government-source data.","did":"59ed8cd8-249b-4e05-a523-6af19cda877e","documentation_url":"https://getmindy.ai/mcp","editorial_description":{"extended_description":"The source names SAM.gov, USASpending, SEC EDGAR, GSA CALC, Grants.gov, and NIH RePORTER. Tools also inspect expiring contracts, agency forecasts, grants, SBIR opportunities, compliance matrices, and proposal exports, with contact additions to CRM available.","schema_version":1,"summary":"Mindy provides research and proposal support for US federal contractors.\nFind opportunities, incumbents, awards, teaming partners, pricing data, agency contacts, and market context.\nExtract solicitation requirements and draft or review proposal sections using connected government-source data."},"homepage_url":"","icon":"","id":"59ed8cd8-249b-4e05-a523-6af19cda877e","installs":0,"last_scanned":"","license":"","long_description":"The source names SAM.gov, USASpending, SEC EDGAR, GSA CALC, Grants.gov, and NIH RePORTER. Tools also inspect expiring contracts, agency forecasts, grants, SBIR opportunities, compliance matrices, and proposal exports, with contact additions to CRM available.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Tool explicitly writes contacts to a CRM.","reasoning":"Persistent CRM modification is Medium.","risk_type":"data_modification","severity":"medium","title":"Adds federal contacts to CRM","triggering_tools_or_skills":["add_contacts_to_crm"]},{"evidence":"Tools create persistent/downloadable business documents.","reasoning":"Artifact creation is Medium.","risk_type":"file_write","severity":"medium","title":"Builds and exports proposal/report artifacts","triggering_tools_or_skills":["export_proposal","draft_proposal","generate_market_report"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/59ed8cd8-249b-4e05-a523-6af19cda877e.json","what_it_proves":"Candidate PR #125 record identity (name \"Mindy\", publisher, type web_connector) and 49 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/59ed8cd8-249b-4e05-a523-6af19cda877e: complete tool_names inventory (49 tools), remote streamable-http endpoint https://mcp.getmindy.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Mindy writes contacts to CRM and creates/exports proposal and market-report artifacts.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:59ed8cd8-249b-4e05-a523-6af19cda877e","reviewed_at":"2026-10-10","reviewer_notes":"All 49 names reviewed; get_balance suggests possible metering, but official docs did not establish whether tool use consumes paid credits.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":49,"tools_or_skills_total":49},"name":"Mindy","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=59ed8cd8-249b-4e05-a523-6af19cda877e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://getmindy.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Govcon Giants","publisher_url":"https://getmindy.ai/","remote_url":"https://mcp.getmindy.ai/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Persistent CRM modification is Medium.","evidence":"Adds federal contacts to CRM: Tool explicitly writes contacts to a CRM.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Adds federal contacts to CRM","triggering_tools":["add_contacts_to_crm"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: Artifact creation is Medium.","evidence":"Builds and exports proposal/report artifacts: Tools create persistent/downloadable business documents.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Builds and exports proposal/report artifacts","triggering_tools":["export_proposal","draft_proposal","generate_market_report"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@getmindy.ai","tags":["accesses_calendar","filesystem_access","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_contacts_to_crm","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Persistent CRM modification is Medium."}},{"description":"","name":"assess_market_depth"},{"description":"","name":"build_proposal_structure"},{"description":"","name":"derive_company_keywords"},{"description":"","name":"draft_proposal","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Artifact creation is Medium."}},{"description":"","name":"draft_proposal_section"},{"description":"","name":"evaluate_bid_decision"},{"description":"","name":"export_proposal","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Artifact creation is Medium."}},{"description":"","name":"extract_compliance_matrix"},{"description":"","name":"extract_statement_of_work"},{"description":"","name":"find_capable_contractors"},{"description":"","name":"find_predecessor_award"},{"description":"","name":"generate_market_report","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Artifact creation is Medium."}},{"description":"","name":"get_agency_budget_trends"},{"description":"","name":"get_agency_forecasts"},{"description":"","name":"get_agency_intel"},{"description":"","name":"get_agency_spending_detail"},{"description":"","name":"get_award_detail"},{"description":"","name":"get_balance"},{"description":"","name":"get_contractor_award_history"},{"description":"","name":"get_contractor_profile"},{"description":"","name":"get_expiring_contracts"},{"description":"","name":"get_federal_event_series"},{"description":"","name":"get_incumbent_financials"},{"description":"","name":"get_keyword_coverage"},{"description":"","name":"get_market_vocabulary"},{"description":"","name":"get_pricing_intel"},{"description":"","name":"get_recipient_annual_obligations"},{"description":"","name":"get_regulatory_demand"},{"description":"","name":"get_sba_goaling_share"},{"description":"","name":"get_sblo_contact"},{"description":"","name":"get_solicitation_documents"},{"description":"","name":"get_solicitation_incumbent"},{"description":"","name":"get_winning_playbook"},{"description":"","name":"lookup_federal_osbp"},{"description":"","name":"lookup_sam_entity"},{"description":"","name":"match_recompete_sow"},{"description":"","name":"referee_proposal_compliance"},{"description":"","name":"scan_proposal_compliance"},{"description":"","name":"search_agency_opps_by_office"},{"description":"","name":"search_contractors"},{"description":"","name":"search_federal_contacts"},{"description":"","name":"search_federal_events"},{"description":"","name":"search_grants"},{"description":"","name":"search_idv_contracts"},{"description":"","name":"search_past_contracts"},{"description":"","name":"search_podcast_lessons"},{"description":"","name":"search_sam_opportunities"},{"description":"","name":"search_sbir"}],"tools_count":49,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/59ed8cd8-249b-4e05-a523-6af19cda877e","uuid":"c57a9f1d-9c66-5e38-bad0-44b90636ae51","verification_tier":"community","version":""},"query_key":"govcon giants mindy","schema_version":1,"status":"match"}