{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-28","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"high","description":"JP Bid searches Japanese public procurement notices from the KKJ portal. Filter opportunities, extract requirements, assess qualification fit, and prepare shortlist or calendar exports. It does not write to KKJ or external systems; available tools depend on the account tier.","did":"5ff4a631-cd8a-4fec-86b8-2ff99a04f883","documentation_url":"https://github.com/sugukurukabe/koko-call-mcp","editorial_description":{"extended_description":"Rank opportunities, examine past awards, and draft internal review packets or questions. Exports use CSV or ICS. Remote access uses OAuth or a reviewer API key; Free access has four tools, while Pro and reviewer access provide the full set. Saved searches and document caches are temporary.","schema_version":1,"summary":"JP Bid searches Japanese public procurement notices from the KKJ portal.\nFilter opportunities, extract requirements, assess qualification fit, and prepare shortlist or calendar exports.\nIt does not write to KKJ or external systems; available tools depend on the account tier."},"homepage_url":"","icon":"https://mcp.bid-jp.com/favicon.png","id":"5ff4a631-cd8a-4fec-86b8-2ff99a04f883","installs":0,"last_scanned":"","license":"","long_description":"Rank opportunities, examine past awards, and draft internal review packets or questions. Exports use CSV or ICS. Remote access uses OAuth or a reviewer API key; Free access has four tools, while Pro and reviewer access provide the full set. Saved searches and document caches are temporary.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official documentation says these tools persist search criteria and produce ICS, packet and shortlist export artifacts.","reasoning":"Saved criteria and generated files are durable user-workspace changes, though they neither submit bids nor contact agencies.","risk_type":"data_modification","severity":"medium","title":"Saves bid searches and generates review artifacts","triggering_tools_or_skills":["save_search","create_bid_calendar","create_bid_review_packet","export_bid_shortlist"]},{"evidence":"The repository says the tool temporarily fetches bid PDF/HTML requirements with SSRF defenses.","reasoning":"The connector fetches external documents and returns untrusted procurement content into the model.","risk_type":"arbitrary_network_access","severity":"low","title":"Retrieves procurement attachments","triggering_tools_or_skills":["extract_bid_requirements"]}],"assessment_status":"provisional","auth_and_scopes":"The remote endpoint uses OAuth 2.0 with PKCE; public bid data is read-only, while authenticated Pro features persist saved searches and generated artifacts.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5ff4a631-cd8a-4fec-86b8-2ff99a04f883.json","what_it_proves":"Candidate PR #125 record identity (name \"JP Bid\", publisher, type interactive_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5ff4a631-cd8a-4fec-86b8-2ff99a04f883: complete tool_names inventory (17 tools), remote streamable-http endpoint https://mcp.bid-jp.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:50:48Z","url_or_path":"https://github.com/sugukurukabe/koko-call-mcp","what_it_proves":"The official repository documents the bid-search tools as public-procurement research plus saved searches, internal packets, ICS export and SSRF-defended PDF/HTML extraction."}],"primary_reason":"JP Bid writes saved searches and export artifacts but does not submit bids or financial transactions.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:5ff4a631-cd8a-4fec-86b8-2ff99a04f883","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 17 Directory tools and the official tool table. The repository currently lists additional Investor Radar tools absent from the packet; refresh the Directory inventory even though those documented extras remain research/watchlist operations.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"JP Bid","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5ff4a631-cd8a-4fec-86b8-2ff99a04f883&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mcp.bid-jp.com/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"スグクル株式会社","publisher_url":"https://sugu-kuru.co.jp/","remote_url":"https://mcp.bid-jp.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Saved criteria and generated files are durable user-workspace changes, though they neither submit bids nor contact agencies.","evidence":"Saves bid searches and generates review artifacts: Official documentation says these tools persist search criteria and produce ICS, packet and shortlist export artifacts.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Saves bid searches and generates review artifacts","triggering_tools":["save_search","create_bid_calendar","create_bid_review_packet","export_bid_shortlist"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: The connector fetches external documents and returns untrusted procurement content into the model.","evidence":"Retrieves procurement attachments: The repository says the tool temporarily fetches bid PDF/HTML requirements with SSRF defenses.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Retrieves procurement attachments","triggering_tools":["extract_bid_requirements"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"mcp@bid-jp.com","tags":["accesses_calendar","forwards_data_to_third_party","interactive_connector","modifies_data","network_access","oauth_required"],"tools":[{"description":"","name":"analyze_past_awards"},{"description":"","name":"assess_bid_qualification"},{"description":"","name":"check_saved_search"},{"description":"","name":"create_bid_calendar","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Saved criteria and generated files are durable user-workspace changes, though they neither submit bids nor contact agencies."}},{"description":"","name":"create_bid_review_packet","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Saved criteria and generated files are durable user-workspace changes, though they neither submit bids nor contact agencies."}},{"description":"","name":"draft_bid_questions"},{"description":"","name":"explain_bid_fit"},{"description":"","name":"export_bid_shortlist","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Saved criteria and generated files are durable user-workspace changes, though they neither submit bids nor contact agencies."}},{"description":"","name":"extract_bid_requirements"},{"description":"","name":"get_bid_detail"},{"description":"","name":"list_recent_bids"},{"description":"","name":"list_saved_searches"},{"description":"","name":"rank_bids"},{"description":"","name":"save_search","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Saved criteria and generated files are durable user-workspace changes, though they neither submit bids nor contact agencies."}},{"description":"","name":"search_bids"},{"description":"","name":"search_bids_app"},{"description":"","name":"summarize_bids_by_org"}],"tools_count":17,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/5ff4a631-cd8a-4fec-86b8-2ff99a04f883","uuid":"d5d9fa77-2bac-5afd-a90b-f46ce6cfbbab","verification_tier":"community","version":""},"query_key":"jp bid","schema_version":1,"status":"match"}