{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-12","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Hindsight organizes go-to-market data into deal context for agents. Search deals, documents, messaging, playbooks, and competitive intelligence using semantic or structured queries. Analyze selected deal data and create datasets for reports such as win-loss research.","did":"5925deaf-09eb-45b4-8dd6-8f63de665f49","documentation_url":"https://docs.usehindsight.com/integrations/mcp","editorial_description":{"extended_description":"Tools retrieve full documents and schemas, select a deal, search knowledge, and upload deal documents or competitive material. The source describes administrative context management and combining calls, emails, CRM notes, and documents.","schema_version":1,"summary":"Hindsight organizes go-to-market data into deal context for agents.\nSearch deals, documents, messaging, playbooks, and competitive intelligence using semantic or structured queries.\nAnalyze selected deal data and create datasets for reports such as win-loss research."},"homepage_url":"","icon":"","id":"5925deaf-09eb-45b4-8dd6-8f63de665f49","installs":0,"last_scanned":"","license":"","long_description":"Tools retrieve full documents and schemas, select a deal, search knowledge, and upload deal documents or competitive material. The source describes administrative context management and combining calls, emails, CRM notes, and documents.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Tools persist GTM data and documents.","reasoning":"Meaningful data creation is Medium.","risk_type":"data_modification","severity":"medium","title":"Creates datasets and uploads knowledge","triggering_tools_or_skills":["create_dataset","upload_deal_document","upload_competitive_intel","upload_to_knowledge_base"]},{"evidence":"Tools fetch arbitrary web content.","reasoning":"Network fetching creates SSRF-like and prompt-injection exposure.","risk_type":"arbitrary_network_access","severity":"low","title":"Scrapes user-supplied URLs","triggering_tools_or_skills":["scrape_url","map_site_urls","search_web"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5925deaf-09eb-45b4-8dd6-8f63de665f49.json","what_it_proves":"Candidate PR #125 record identity (name \"Hindsight\", publisher, type web_connector) and 18 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5925deaf-09eb-45b4-8dd6-8f63de665f49: complete tool_names inventory (18 tools), remote streamable-http endpoint https://app.usehindsight.com/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Hindsight creates datasets and uploads private deal documents/intelligence, plus arbitrary URL scraping.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5925deaf-09eb-45b4-8dd6-8f63de665f49","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":18,"tools_or_skills_total":18},"name":"Hindsight","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5925deaf-09eb-45b4-8dd6-8f63de665f49&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.usehindsight.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Hindsight","publisher_url":"https://www.usehindsight.com/","remote_url":"https://app.usehindsight.com/api/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful data creation is Medium.","evidence":"Creates datasets and uploads knowledge: Tools persist GTM data and documents.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates datasets and uploads knowledge","triggering_tools":["create_dataset","upload_deal_document","upload_competitive_intel","upload_to_knowledge_base"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Network fetching creates SSRF-like and prompt-injection exposure.","evidence":"Scrapes user-supplied URLs: Tools fetch arbitrary web content.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Scrapes user-supplied URLs","triggering_tools":["scrape_url","map_site_urls","search_web"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@usehindsight.com","tags":["forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"analyze_dealgrid_subset"},{"description":"","name":"create_dataset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful data creation is Medium."}},{"description":"","name":"fetch_hindsight_context"},{"description":"","name":"get_deal"},{"description":"","name":"map_site_urls"},{"description":"","name":"pull_full_document"},{"description":"","name":"pull_schema"},{"description":"","name":"scrape_url"},{"description":"","name":"search_across_deals"},{"description":"","name":"search_competitive_assets"},{"description":"","name":"search_competitive_intel"},{"description":"","name":"search_deal_documents"},{"description":"","name":"search_knowledge_base"},{"description":"","name":"search_web"},{"description":"","name":"select_deal"},{"description":"","name":"upload_competitive_intel","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful data creation is Medium."}},{"description":"","name":"upload_deal_document","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful data creation is Medium."}},{"description":"","name":"upload_to_knowledge_base","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful data creation is Medium."}}],"tools_count":18,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5925deaf-09eb-45b4-8dd6-8f63de665f49","uuid":"2528cc47-00af-5ad4-ac09-f7e5cec03ffa","verification_tier":"community","version":""},"query_key":"hindsight hindsight","schema_version":1,"status":"match"}