{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Check factual claims against external sources with Lenz. Choose fast assessments or deeper multi-model verification and ask follow-up questions. Connect through OAuth or an API key; checks are subject to plan quotas.","did":"dd330696-cf97-4e87-8dc2-4189c3fc9e41","documentation_url":"https://lenz.io/mcp-server","editorial_description":{"extended_description":"Deep verification returns a sourced verdict, summary, and reasoning trace across framing, research, debate, review, and conclusion stages. Inspect completed checks or remaining usage. Results can be reviewed against their citations and are not infallible.","schema_version":1,"summary":"Check factual claims against external sources with Lenz.\nChoose fast assessments or deeper multi-model verification and ask follow-up questions.\nConnect through OAuth or an API key; checks are subject to plan quotas."},"homepage_url":"","icon":"https://lenz.io/static/root/icon-512.png","id":"dd330696-cf97-4e87-8dc2-4189c3fc9e41","installs":0,"last_scanned":"","license":"","long_description":"Deep verification returns a sourced verdict, summary, and reasoning trace across framing, research, debate, review, and conclusion stages. Inspect completed checks or remaining usage. Results can be reviewed against their citations and are not infallible.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Completed verifications can later be fetched with get_verification and consume plan allotment.","reasoning":"This creates persistent job/result state, though it does not modify external content.","risk_type":"data_modification","severity":"medium","title":"Fact-check jobs create retrievable verification records","triggering_tools_or_skills":["assess_claim","verify_claim"]},{"evidence":"The fact-checking pipeline independently researches web sources based on user-supplied claims.","reasoning":"The user influences network retrieval, but the service does not expose arbitrary raw URL fetches.","risk_type":"arbitrary_network_access","severity":"low","title":"Claims trigger research across external web sources","triggering_tools_or_skills":["assess_claim","verify_claim"]},{"evidence":"Externally authored research is returned.","reasoning":"Sources may contain adversarial content.","risk_type":"prompt_injection_exposure","severity":"low","title":"Independent web sources enter model context","triggering_tools_or_skills":["verify_claim","ask_followup"]},{"evidence":"The connector runs at https://lenz.io/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Lenz is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth or a Lenz API key grants plan quota; exact retention and visibility of verification records are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/dd330696-cf97-4e87-8dc2-4189c3fc9e41.json","what_it_proves":"Candidate PR #125 record identity (name \"Lenz\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/dd330696-cf97-4e87-8dc2-4189c3fc9e41: complete tool_names inventory (6 tools), remote streamable-http endpoint https://lenz.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Lenz creates quota-consuming fact-check verification records but performs no external write or transaction.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:dd330696-cf97-4e87-8dc2-4189c3fc9e41","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 6 tools. Free/monthly allotments are not treated as a direct financial charge without per-call billing evidence.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"Lenz","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=dd330696-cf97-4e87-8dc2-4189c3fc9e41&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://lenz.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Lenz","publisher_url":"https://lenz.io/","remote_url":"https://lenz.io/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This creates persistent job/result state, though it does not modify external content.","evidence":"Fact-check jobs create retrievable verification records: Completed verifications can later be fetched with get_verification and consume plan allotment.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Fact-check jobs create retrievable verification records","triggering_tools":["assess_claim","verify_claim"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: The user influences network retrieval, but the service does not expose arbitrary raw URL fetches.","evidence":"Claims trigger research across external web sources: The fact-checking pipeline independently researches web sources based on user-supplied claims.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Claims trigger research across external web sources","triggering_tools":["assess_claim","verify_claim"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://lenz.io/contact","tags":["forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"ask_followup"},{"description":"","name":"assess_claim","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This creates persistent job/result state, though it does not modify external content."}},{"description":"","name":"check_usage"},{"description":"","name":"get_verification"},{"description":"","name":"select_claims"},{"description":"","name":"verify_claim","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This creates persistent job/result state, though it does not modify external content."}}],"tools_count":6,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/dd330696-cf97-4e87-8dc2-4189c3fc9e41","uuid":"d72922ed-7999-53ae-9b50-80605ed1aa60","verification_tier":"community","version":""},"query_key":"lenz lenz","schema_version":1,"status":"match"}