{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-20","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Research U.S. real-estate development with IQLand. Explore parcels, zoning, construction-cost estimates, comparable sales and build plans. The listed connector also exposes administrative account and content-management operations.","did":"13df4418-cef8-4bca-83a8-fdb9ce620faf","documentation_url":"https://iqland.ai/apps/mcp","editorial_description":{"extended_description":"Research tools include appraisal, development metrics, zoning rules and build-area analysis. Administrative tools include user creation and deletion, role changes, password reset, credits and generic admin requests. Their permissions are not explained in the product description, so access should not be characterized as research-only.","schema_version":1,"summary":"Research U.S. real-estate development with IQLand.\nExplore parcels, zoning, construction-cost estimates, comparable sales and build plans.\nThe listed connector also exposes administrative account and content-management operations."},"homepage_url":"","icon":"https://iqland.ai/images/favicon.ico","id":"13df4418-cef8-4bca-83a8-fdb9ce620faf","installs":0,"last_scanned":"","license":"","long_description":"Research tools include appraisal, development metrics, zoning rules and build-area analysis. Administrative tools include user creation and deletion, role changes, password reset, credits and generic admin requests. Their permissions are not explained in the product description, so access should not be characterized as research-only.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official documentation describes permanent deletion of landing pages, users, bug reports, announcements, contact messages and waitlist entries; none appear in the packet's 16 tools.","reasoning":"These documented actions destroy meaningful resources and data.","risk_type":"data_deletion","severity":"high","title":"Official docs expose irreversible deletion actions absent from Directory","triggering_tools_or_skills":["delete_landing_page","delete_user","delete_bug_report","delete_announcement","delete_contact_message","delete_waitlist_entry"]},{"evidence":"Official documentation lists user creation/deletion, account activation, admin grant/revoke, usage top-up and password-reset actions.","reasoning":"These are broad identity, privilege and credential-administration capabilities.","risk_type":"credential_admin","severity":"high","title":"Official docs expose user and admin privilege controls","triggering_tools_or_skills":["create_user","delete_user","toggle_user_active","toggle_user_admin","grant_user_topup","reset_user_password"]},{"evidence":"The official tool description states that reset_user_password sends a password-reset link to a user email.","reasoning":"It causes an external security message to be sent.","risk_type":"messaging_as_user","severity":"high","title":"Official docs expose password-reset email sending","triggering_tools_or_skills":["reset_user_password"]},{"evidence":"Official documentation says admin_api_request can call any IQLand admin backend endpoint by method and path as a fallback for actions without dedicated tools.","reasoning":"This is an unbounded administrative gateway whose reachable actions exceed the declared inventory.","risk_type":"generic_gateway","severity":"high","title":"Official docs expose arbitrary admin backend requests","triggering_tools_or_skills":["admin_api_request"]},{"evidence":"The official MCP page states 'Tools (53)' and enumerates high-impact admin actions, while candidate_tools_truncated is false and the packet lists only 16 analytics tools.","reasoning":"Severe schema drift hides deletion and administrative capabilities from the candidate risk record.","risk_type":"identity_discrepancy","severity":"low","title":"Directory has 16 tools while official docs list 53","triggering_tools_or_skills":[]},{"evidence":"The documented union returns property data, open-ended Copilot responses, contact submissions and bug reports.","reasoning":"Third-party and user-generated text can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Property, contact and feedback content is externally controlled","triggering_tools_or_skills":["overview","smartbuild","list_contact_messages","list_bug_reports"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth tokens are account-bound, but official docs expose admin tools conditioned on the connected user's permissions; the Directory packet omits those admin actions and their scopes.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/13df4418-cef8-4bca-83a8-fdb9ce620faf.json","what_it_proves":"Candidate PR #125 record identity (name \"IQLand (Official)\", publisher, type web_connector) and 16 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/13df4418-cef8-4bca-83a8-fdb9ce620faf: complete tool_names inventory (16 tools), remote streamable-http endpoint https://mcp.iqland.ai/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:05:11Z","url_or_path":"https://iqland.ai/apps/mcp","what_it_proves":"Official IQLand MCP documentation now lists 53 tools, including irreversible deletions, user/admin controls, password-reset email, Stripe-linked coupon creation and arbitrary admin backend requests, contradicting the 16-tool Directory inventory."}],"primary_reason":"Official documentation exposes 37 more tools than the Directory, including deletion, admin privilege and arbitrary backend actions.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:13df4418-cef8-4bca-83a8-fdb9ce620faf","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 16 Directory names and the official 53-tool page. Regenerate the inventory from current tools/list, remove or tightly scope admin_api_request, and assess every omitted action before publication.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"unknown","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":16,"tools_or_skills_total":16},"name":"IQLand (Official)","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=13df4418-cef8-4bca-83a8-fdb9ce620faf&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://iqland.ai/privacy_policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"IQLand","publisher_url":"https://iqland.ai/","remote_url":"https://mcp.iqland.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These documented actions destroy meaningful resources and data.","evidence":"Official docs expose irreversible deletion actions absent from Directory: Official documentation describes permanent deletion of landing pages, users, bug reports, announcements, contact messages and waitlist entries; none appear in the packet's 16 tools.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Official docs expose irreversible deletion actions absent from Directory","triggering_tools":["delete_landing_page","delete_user","delete_bug_report","delete_announcement","delete_contact_message","delete_waitlist_entry"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad identity, privilege and credential-administration capabilities.","evidence":"Official docs expose user and admin privilege controls: Official documentation lists user creation/deletion, account activation, admin grant/revoke, usage top-up and password-reset actions.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Official docs expose user and admin privilege controls","triggering_tools":["create_user","delete_user","toggle_user_active","toggle_user_admin","grant_user_topup","reset_user_password"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It causes an external security message to be sent.","evidence":"Official docs expose password-reset email sending: The official tool description states that reset_user_password sends a password-reset link to a user email.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Official docs expose password-reset email sending","triggering_tools":["reset_user_password"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: This is an unbounded administrative gateway whose reachable actions exceed the declared inventory.","evidence":"Official docs expose arbitrary admin backend requests: Official documentation says admin_api_request can call any IQLand admin backend endpoint by method and path as a fallback for actions without dedicated tools.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Official docs expose arbitrary admin backend requests","triggering_tools":["admin_api_request"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@iqland.ai","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"appraisal"},{"description":"","name":"estimate_construction_cost"},{"description":"","name":"find_parcel"},{"description":"","name":"get_comparable_sales"},{"description":"","name":"get_development_kpis"},{"description":"","name":"get_highest_resale_plan"},{"description":"","name":"get_optimal_build_area"},{"description":"","name":"get_parcel_zoning"},{"description":"","name":"get_plan"},{"description":"","name":"get_property_info"},{"description":"","name":"get_zoning_regulations"},{"description":"","name":"health"},{"description":"","name":"list_remote_connectors"},{"description":"","name":"overview"},{"description":"","name":"search_properties"},{"description":"","name":"smartbuild"},{"description":"","name":"delete_landing_page","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These documented actions destroy meaningful resources and data."}},{"description":"","name":"delete_user","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad identity, privilege and credential-administration capabilities."}},{"description":"","name":"delete_bug_report","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These documented actions destroy meaningful resources and data."}},{"description":"","name":"delete_announcement","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These documented actions destroy meaningful resources and data."}},{"description":"","name":"delete_contact_message","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These documented actions destroy meaningful resources and data."}},{"description":"","name":"delete_waitlist_entry","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These documented actions destroy meaningful resources and data."}},{"description":"","name":"create_user","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad identity, privilege and credential-administration capabilities."}},{"description":"","name":"toggle_user_active","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad identity, privilege and credential-administration capabilities."}},{"description":"","name":"toggle_user_admin","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad identity, privilege and credential-administration capabilities."}},{"description":"","name":"grant_user_topup","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad identity, privilege and credential-administration capabilities."}},{"description":"","name":"reset_user_password","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It causes an external security message to be sent."}},{"description":"","name":"admin_api_request","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: This is an unbounded administrative gateway whose reachable actions exceed the declared inventory."}},{"description":"","name":"list_contact_messages"},{"description":"","name":"list_bug_reports"}],"tools_count":30,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/13df4418-cef8-4bca-83a8-fdb9ce620faf","uuid":"fe54004a-1fe3-5750-b374-7877125d40fd","verification_tier":"community","version":""},"query_key":"iqland iqland official","schema_version":1,"status":"match"}