{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Identify and research companies visiting your website with Leadfeeder. Inspect browsing activity, enrich company or contact data, and maintain prospect lists or tags. Connect your own Leadfeeder account and review account usage.","did":"e51d4ae7-2cba-4c80-b8db-1cfd48894c82","documentation_url":"https://docs.leadfeeder.com/api/public/overview-of-the-leadfeeder-mcp-server-370532m0","editorial_description":{"extended_description":"Search business contacts, company signals, financials, and ideal-customer profiles; estimate or run enrichment jobs and configure visit feeds. Business contact data comes from public sources, with removal or opt-out requests available through Leadfeeder's privacy services.","schema_version":1,"summary":"Identify and research companies visiting your website with Leadfeeder.\nInspect browsing activity, enrich company or contact data, and maintain prospect lists or tags.\nConnect your own Leadfeeder account and review account usage."},"homepage_url":"","icon":"","id":"e51d4ae7-2cba-4c80-b8db-1cfd48894c82","installs":0,"last_scanned":"","license":"","long_description":"Search business contacts, company signals, financials, and ideal-customer profiles; estimate or run enrichment jobs and configure visit feeds. Business contact data comes from public sources, with removal or opt-out requests available through Leadfeeder's privacy services.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit destructive tools remove account resources.","reasoning":"These are material deletions.","risk_type":"data_deletion","severity":"high","title":"Lists, tags, custom fields and feeds can be deleted","triggering_tools_or_skills":["delete_list","delete_tag","delete_custom_field","delete_web_visits_custom_feed"]},{"evidence":"These tools persist sales-intelligence changes.","reasoning":"They alter workspace data.","risk_type":"data_modification","severity":"medium","title":"Enrichment jobs, lists, tags and feeds can be created/updated","triggering_tools_or_skills":["create_company_enrichment_job","create_list","assign_tags_to_company","update_campaign"]},{"evidence":"External/person data is returned.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Website visit/contact data enters model context","triggering_tools_or_skills":["search_web_visits","get_contact"]},{"evidence":"The connector runs at https://mcp.leadfeeder.com/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Leadfeeder is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes company/contact intelligence and lists to the signed-in Leadfeeder account.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e51d4ae7-2cba-4c80-b8db-1cfd48894c82.json","what_it_proves":"Candidate PR #125 record identity (name \"Leadfeeder\", publisher, type web_connector) and 58 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e51d4ae7-2cba-4c80-b8db-1cfd48894c82: complete tool_names inventory (58 tools), remote streamable-http endpoint https://mcp.leadfeeder.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Leadfeeder can delete and broadly modify sales-intelligence workspace resources.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e51d4ae7-2cba-4c80-b8db-1cfd48894c82","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 58 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":58,"tools_or_skills_total":58},"name":"Leadfeeder","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e51d4ae7-2cba-4c80-b8db-1cfd48894c82&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.leadfeeder.com/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Leadfeeder","publisher_url":"https://leadfeeder.com/","remote_url":"https://mcp.leadfeeder.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These are material deletions.","evidence":"Lists, tags, custom fields and feeds can be deleted: Explicit destructive tools remove account resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Lists, tags, custom fields and feeds can be deleted","triggering_tools":["delete_list","delete_tag","delete_custom_field","delete_web_visits_custom_feed"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter workspace data.","evidence":"Enrichment jobs, lists, tags and feeds can be created/updated: These tools persist sales-intelligence changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Enrichment jobs, lists, tags and feeds can be created/updated","triggering_tools":["create_company_enrichment_job","create_list","assign_tags_to_company","update_campaign"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@leadfeeder.com","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_company_to_lists"},{"description":"","name":"add_contact_to_lists"},{"description":"","name":"assign_tags_to_company","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter workspace data."}},{"description":"","name":"create_company_enrichment_job","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter workspace data."}},{"description":"","name":"create_custom_field"},{"description":"","name":"create_find_contact_data_job"},{"description":"","name":"create_list","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter workspace data."}},{"description":"","name":"create_tag"},{"description":"","name":"create_web_visits_custom_feed"},{"description":"","name":"delete_custom_field","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_list","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_tag","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_web_visits_custom_feed","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"enrich_ip"},{"description":"","name":"estimate_company_enrichment_job"},{"description":"","name":"estimate_find_contact_data_job"},{"description":"","name":"get_account_info"},{"description":"","name":"get_buyer_persona"},{"description":"","name":"get_buyer_personas"},{"description":"","name":"get_campaign"},{"description":"","name":"get_campaign_stats"},{"description":"","name":"get_campaigns"},{"description":"","name":"get_companies_by_ids"},{"description":"","name":"get_company"},{"description":"","name":"get_company_enrichment_job"},{"description":"","name":"get_company_financials"},{"description":"","name":"get_company_ips"},{"description":"","name":"get_contact"},{"description":"","name":"get_contacts"},{"description":"","name":"get_current_user_info"},{"description":"","name":"get_custom_field"},{"description":"","name":"get_custom_fields"},{"description":"","name":"get_find_contact_data_job"},{"description":"","name":"get_icp"},{"description":"","name":"get_icps"},{"description":"","name":"get_list"},{"description":"","name":"get_lists"},{"description":"","name":"get_tag"},{"description":"","name":"get_tags"},{"description":"","name":"get_web_visits_companies"},{"description":"","name":"get_web_visits_custom_feed"},{"description":"","name":"get_web_visits_custom_feed_folders"},{"description":"","name":"get_web_visits_custom_feeds"},{"description":"","name":"get_web_visits_tracker"},{"description":"","name":"match_companies"},{"description":"","name":"remove_company_from_lists"},{"description":"","name":"remove_contact_from_lists"},{"description":"","name":"search_companies"},{"description":"","name":"search_companies_signals"},{"description":"","name":"search_contacts"},{"description":"","name":"search_web_visits"},{"description":"","name":"unassign_tags_from_company"},{"description":"","name":"update_campaign","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter workspace data."}},{"description":"","name":"update_custom_field"},{"description":"","name":"update_list"},{"description":"","name":"update_tag"},{"description":"","name":"update_web_visits_custom_feed"},{"description":"","name":"usage"}],"tools_count":58,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e51d4ae7-2cba-4c80-b8db-1cfd48894c82","uuid":"fdaedcf5-a032-5749-97c1-3220cd42ee60","verification_tier":"community","version":""},"query_key":"leadfeeder","schema_version":1,"status":"match"}