{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-02","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Kintsugi helps Claude inspect sales-tax, VAT, and GST compliance information. Review nexus exposure, registrations, filing status, transactions, products, and tax categories. The connector informs decisions but does not file returns, register jurisdictions, or change settings.","did":"544efcb9-47cc-497d-8d84-0420ab327541","documentation_url":"https://help.trykintsugi.com/en-US/trykintsugi/article/Wy-qtcW7-connect-your-kintsugi-account-to-claude-for-tax-compliance-queries","editorial_description":{"extended_description":"Tools retrieve dashboard statistics, organization settings, filing and transaction metrics, registration details, and nexus history. The source also describes tax estimation and customer exemption lookups, while the supplied inventory is chiefly retrieval-oriented.","schema_version":1,"summary":"Kintsugi helps Claude inspect sales-tax, VAT, and GST compliance information.\nReview nexus exposure, registrations, filing status, transactions, products, and tax categories.\nThe connector informs decisions but does not file returns, register jurisdictions, or change settings."},"homepage_url":"","icon":"","id":"544efcb9-47cc-497d-8d84-0420ab327541","installs":0,"last_scanned":"","license":"","long_description":"Tools retrieve dashboard statistics, organization settings, filing and transaction metrics, registration details, and nexus history. The source also describes tax estimation and customer exemption lookups, while the supplied inventory is chiefly retrieval-oriented.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Complete inventory is get/list/preflight; no create/update/delete filing action appears.","reasoning":"Read-only private tax data is Low.","risk_type":"private_data_read","severity":"low","title":"Reads transactions, filings, registrations, and tax settings","triggering_tools_or_skills":["platform_get_transactions_v1_transactions_get","platform_get_filings_v1_filings_get","platform_get_registrations_v1_registrations_get"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capabilities can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/544efcb9-47cc-497d-8d84-0420ab327541.json","what_it_proves":"Candidate PR #125 record identity (name \"Kintsugi\", publisher, type web_connector) and 46 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/544efcb9-47cc-497d-8d84-0420ab327541: complete tool_names inventory (46 tools), remote streamable-http endpoint https://mcp.trykintsugi.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Kintsugi exposes tax-compliance reads and a non-committing registration preflight.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:544efcb9-47cc-497d-8d84-0420ab327541","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 46 names. register_preflight is described by its name as preflight, not submission; runtime should confirm non-persistence.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":46,"tools_or_skills_total":46},"name":"Kintsugi","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=544efcb9-47cc-497d-8d84-0420ab327541&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://trykintsugi.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Kintsugi AI","publisher_url":"https://trykintsugi.com/","remote_url":"https://mcp.trykintsugi.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Read-only private tax data is Low.","evidence":"Reads transactions, filings, registrations, and tax settings: Complete inventory is get/list/preflight; no create/update/delete filing action appears.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads transactions, filings, registrations, and tax settings","triggering_tools":["platform_get_transactions_v1_transactions_get","platform_get_filings_v1_filings_get","platform_get_registrations_v1_registrations_get"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@trykintsugi.com","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"platform_get_address_needs_attention_summary_v1_addresses_needs"},{"description":"","name":"platform_get_address_summary_v1_addresses_summary_get"},{"description":"","name":"platform_get_collected_transactions_for_nexus_v1_nexus"},{"description":"","name":"platform_get_connection_collecting_summary_v1_connections_collec"},{"description":"","name":"platform_get_connections_v1_connections_get"},{"description":"","name":"platform_get_dashboard_charts_v1_dashboard_charts"},{"description":"","name":"platform_get_dashboard_stats_v1_dashboard_stats_get"},{"description":"","name":"platform_get_dashboard_tasks_v1_dashboard_tasks_get"},{"description":"","name":"platform_get_filing_by_id_v1_filings"},{"description":"","name":"platform_get_filing_metrics_v1_metrics_filings_get"},{"description":"","name":"platform_get_filings_by_registration_id_v1_filings_registration"},{"description":"","name":"platform_get_filings_v1_filings_get"},{"description":"","name":"platform_get_min_max_dates_for_connections_v1_transactions_min_m"},{"description":"","name":"platform_get_nexus_details_for_id_v1_nexus"},{"description":"","name":"platform_get_nexus_exposure_history_v1_nexus"},{"description":"","name":"platform_get_nexus_for_org_v1_nexus_get"},{"description":"","name":"platform_get_organization_by_id_v1_organizations"},{"description":"","name":"platform_get_organization_settings_v1_organizations"},{"description":"","name":"platform_get_organizations_by_user_v1_organizations_get"},{"description":"","name":"platform_get_oss_countries_for_registration_v1_registrations"},{"description":"","name":"platform_get_partially_approved_summary_v1_products_partially_ap"},{"description":"","name":"platform_get_pending_states_for_connection_v1_connections"},{"description":"","name":"platform_get_physical_nexus_categories_v1_nexus_physical_nexus_c"},{"description":"","name":"platform_get_physical_nexus_v1_nexus_physical_nexus_get"},{"description":"","name":"platform_get_product_by_id_v1_products"},{"description":"","name":"platform_get_product_categories_v1_products_categories_get"},{"description":"","name":"platform_get_product_classification_status_v1_products_classific"},{"description":"","name":"platform_get_product_config_blocklist_v1_products_configs_blockl"},{"description":"","name":"platform_get_product_config_v1_products_config_get"},{"description":"","name":"platform_get_product_configs_v1_products_configs_get"},{"description":"","name":"platform_get_product_import_preview_v1_products_bulk_classificat"},{"description":"","name":"platform_get_product_import_rejected_file_v1_products_bulk_class"},{"description":"","name":"platform_get_product_import_review_v1_products_bulk_classificati"},{"description":"","name":"platform_get_products_overview_v1_products_overview_get"},{"description":"","name":"platform_get_products_summary_v1_products_summary_get"},{"description":"","name":"platform_get_products_v1_products_get"},{"description":"","name":"platform_get_registration_by_id_v1_registrations"},{"description":"","name":"platform_get_registrations_v1_registrations_get"},{"description":"","name":"platform_get_related_transactions_v1_transactions"},{"description":"","name":"platform_get_transaction_by_external_id_v1_transactions_external"},{"description":"","name":"platform_get_transaction_by_id_v1_transactions"},{"description":"","name":"platform_get_transaction_metrics_v1_metrics_transactions_get"},{"description":"","name":"platform_get_transactions_by_filing_id_v1_transactions_filings"},{"description":"","name":"platform_get_transactions_v1_transactions_get"},{"description":"","name":"platform_list_registration_jurisdictions_v1_registrations_jurisd"},{"description":"","name":"platform_register_preflight_v1_nexus"}],"tools_count":46,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/544efcb9-47cc-497d-8d84-0420ab327541","uuid":"f51eee85-38d9-5c42-b581-da4fe24dc21c","verification_tier":"community","version":""},"query_key":"kintsugi","schema_version":1,"status":"match"}
