{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-23","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"f35ef6951cefc4a8e92e8adb1addb5647d497f16ce509a3831fcc26350919960","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"Low-confidence entry; resolved by the MCP privacy policy. Seven tools search Infollion's own expert database and value-chain graphs. connect_to_expert dispatches a consultation request (user name, email, phone, expert ID, timestamp, IP) to Infollion's operations team by email, who then arrange an introduction. That is the user's own contact details going to the vendor they chose, not a message sent as the user to third parties, and no payment is made by the tool. No access to the user's private systems or persistent changes to user data. Low, with a Low card describing the request data flow. If Infollion confirms the request is itself a billable commitment, raise to Medium, not High.","review_key":"claudesec:ab1c5846-c97f-4b6a-9935-3238d766904c","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://mcp.infollion.ai/mcp/privacy-policy","https://www.infollion.com/integrations"],"status":"resolved"},"category":"Interactive Connector","confidence":"low","description":"Infollion discovers experts, consultants, and freelancers for research needs. Find profiles by expertise, industry, role, company, or geography and explore value chains. Request a consultation for Infollion's team to arrange an introduction.","did":"ab1c5846-c97f-4b6a-9935-3238d766904c","documentation_url":"https://www.infollion.com/integrations","editorial_description":{"extended_description":"","schema_version":1,"summary":"Infollion discovers experts, consultants, and freelancers for research needs.\nFind profiles by expertise, industry, role, company, or geography and explore value chains.\nRequest a consultation for Infollion's team to arrange an introduction."},"homepage_url":"","icon":"https://mcp.infollion.ai/mcp/favicon.ico","id":"ab1c5846-c97f-4b6a-9935-3238d766904c","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The tool sends a consultation/introduction request to Infollion.","reasoning":"It communicates externally as the connected user.","risk_type":"messaging_as_user","severity":"high","title":"Requests connection to an expert","triggering_tools_or_skills":["connect_to_expert"]},{"evidence":"The listing says Infollion arranges a consultation after the request.","reasoning":"Expert consultations commonly create commercial obligations; exact confirmation/pricing flow is undocumented.","risk_type":"financial_transaction","severity":"high","title":"Initiates a potentially billable expert consultation","triggering_tools_or_skills":["connect_to_expert"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes expert discovery and consultation requests.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ab1c5846-c97f-4b6a-9935-3238d766904c.json","what_it_proves":"Candidate PR #125 record identity (name \"Infollion\", publisher, type interactive_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ab1c5846-c97f-4b6a-9935-3238d766904c: complete tool_names inventory (8 tools), remote streamable-http endpoint https://mcp.infollion.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Infollion can request expert consultations.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:ab1c5846-c97f-4b6a-9935-3238d766904c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight tools; runtime confirmation/pricing behavior should be clarified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Infollion","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ab1c5846-c97f-4b6a-9935-3238d766904c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mcp.infollion.ai/mcp/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"INFOLLION RESEARCH SERVICES LIMITED","publisher_url":"https://www.infollion.com/","remote_url":"https://mcp.infollion.ai/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"Sends research questions to Infollion to retrieve expert and value-chain information.","evidence":"Actions: discover_experts, search_value_chains, describe_value_chain, find_value_chains_for_experts, focus_value_chain_node, open_value_chain_by_cluster, zoom_value_chain. https://mcp.infollion.ai/mcp/privacy-policy — Tools described: discover_experts, value-chain tools, map tools; query history collected","risk_type":"reads_public_data","severity":"low","title":"Searches expert-network information"},{"description":"A consultation request sends your name, email address, phone number and selected expert information to Infollion’s operations team.","evidence":"Actions: connect_to_expert. https://mcp.infollion.ai/mcp/privacy-policy — Requests dispatched to operations team by email incl. name, email, phone, expert ID; kept up to 90 days","risk_type":"forwards_data_to_third_party","severity":"low","title":"Sends contact details when requesting an expert"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.infollion.com/integrations","tags":["reads_public_data","forwards_data_to_third_party"],"tools":[{"description":"","name":"connect_to_expert","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Expert consultations commonly create commercial obligations; exact confirmation/pricing flow is undocumented."}},{"description":"","name":"describe_value_chain"},{"description":"","name":"discover_experts"},{"description":"","name":"find_value_chains_for_experts"},{"description":"","name":"focus_value_chain_node"},{"description":"","name":"open_value_chain_by_cluster"},{"description":"","name":"search_value_chains"},{"description":"","name":"zoom_value_chain"}],"tools_count":8,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/ab1c5846-c97f-4b6a-9935-3238d766904c","uuid":"d4b4f38a-f25a-5b7f-896d-e652593e2383","verification_tier":"community","version":""},"query_key":"infollion research services limited infollion","schema_version":1,"status":"match"}