{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Instinct provides company-level intelligence on managed-service providers. Research technology, vendors, reputation, hiring, revenue estimates, maturity signals, and market benchmarks. It is read-only, excludes personal contact data, covers specified English-speaking regions, and uses prepaid credits.","did":"5a33a960-4103-4f17-a22d-6386162bde53","documentation_url":"https://mcp.mspmcp.com/docs","editorial_description":{"extended_description":"Coverage is North America, the UK and Ireland, and Australia and New Zealand. Tools inspect infrastructure, security exposure, SEO, web performance, social activity, territory data, and recent changes. Credit purchasing and billing remain on the service's website.","schema_version":1,"summary":"Instinct provides company-level intelligence on managed-service providers.\nResearch technology, vendors, reputation, hiring, revenue estimates, maturity signals, and market benchmarks.\nIt is read-only, excludes personal contact data, covers specified English-speaking regions, and uses prepaid credits."},"homepage_url":"","icon":"","id":"5a33a960-4103-4f17-a22d-6386162bde53","installs":0,"last_scanned":"","license":"","long_description":"Coverage is North America, the UK and Ireland, and Australia and New Zealand. Tools inspect infrastructure, security exposure, SEO, web performance, social activity, territory data, and recent changes. Credit purchasing and billing remain on the service's website.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Complete inventory contains only get/count operations.","reasoning":"Read-only proprietary data is Low.","risk_type":"private_data_read","severity":"low","title":"Reads proprietary MSP intelligence","triggering_tools_or_skills":["get_company_profile_full","get_security_exposure","get_breach_disclosure"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5a33a960-4103-4f17-a22d-6386162bde53.json","what_it_proves":"Candidate PR #125 record identity (name \"Instinct\", publisher, type web_connector) and 30 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5a33a960-4103-4f17-a22d-6386162bde53: complete tool_names inventory (30 tools), remote streamable-http endpoint https://mcp.mspmcp.com/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"Instinct exposes only get/count market-intelligence tools.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5a33a960-4103-4f17-a22d-6386162bde53","reviewed_at":"2026-10-10","reviewer_notes":"All 30 names reviewed; official docs were not discoverable in the review search.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":30,"tools_or_skills_total":30},"name":"Instinct","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5a33a960-4103-4f17-a22d-6386162bde53&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mcp.mspmcp.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Fox & Crow Inc.","publisher_url":"https://mspmcp.com/","remote_url":"https://mcp.mspmcp.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Read-only proprietary data is Low.","evidence":"Reads proprietary MSP intelligence: Complete inventory contains only get/count operations.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads proprietary MSP intelligence","triggering_tools":["get_company_profile_full","get_security_exposure","get_breach_disclosure"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@foxcrowgroup.com","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"count_companies"},{"description":"","name":"count_social_activity"},{"description":"","name":"get_accessibility_audit"},{"description":"","name":"get_breach_disclosure"},{"description":"","name":"get_business_density"},{"description":"","name":"get_companies"},{"description":"","name":"get_company"},{"description":"","name":"get_company_benchmark"},{"description":"","name":"get_company_profile_full"},{"description":"","name":"get_company_services"},{"description":"","name":"get_content_velocity"},{"description":"","name":"get_detected_vendors"},{"description":"","name":"get_fcml_score_breakdown"},{"description":"","name":"get_hiring_detail"},{"description":"","name":"get_hiring_signals"},{"description":"","name":"get_infrastructure_profile"},{"description":"","name":"get_ip_hosting_profile"},{"description":"","name":"get_location_profile"},{"description":"","name":"get_network_membership"},{"description":"","name":"get_recent_changes"},{"description":"","name":"get_reputation"},{"description":"","name":"get_revenue_estimate"},{"description":"","name":"get_security_exposure"},{"description":"","name":"get_seo_profile"},{"description":"","name":"get_serp_visibility"},{"description":"","name":"get_social_presence"},{"description":"","name":"get_tech_profile"},{"description":"","name":"get_territory_health"},{"description":"","name":"get_web_performance"},{"description":"","name":"get_website_intelligence"}],"tools_count":30,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5a33a960-4103-4f17-a22d-6386162bde53","uuid":"09c2efff-afdc-5bcf-9250-e4b5240dd7d4","verification_tier":"community","version":""},"query_key":"instinct","schema_version":1,"status":"match"}