{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Research U.S. and Hong Kong markets with Longbridge. Analyze market data, company fundamentals, and your connected account's portfolio. Inspect balances, positions, profit and loss, and order history.","did":"d06c312a-8f61-4239-800b-208ce9166504","documentation_url":"https://open.longbridge.com/docs","editorial_description":{"extended_description":"Research includes filings, news, analyst ratings, screeners, options, warrants, and short-interest data. You can also manage watchlists and alerts or create community topics and replies. Portfolio access uses your Longbridge account.","schema_version":1,"summary":"Research U.S. and Hong Kong markets with Longbridge.\nAnalyze market data, company fundamentals, and your connected account's portfolio.\nInspect balances, positions, profit and loss, and order history."},"homepage_url":"","icon":"https://assets.lbkrs.com/uploads/16774ffa-4203-43b4-90aa-d32ff7ae7dfb/logo.png","id":"d06c312a-8f61-4239-800b-208ce9166504","installs":0,"last_scanned":"","license":"","long_description":"Research includes filings, news, analyst ratings, screeners, options, warrants, and short-interest data. You can also manage watchlists and alerts or create community topics and replies. Portfolio access uses your Longbridge account.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly includes deletion of watchlist/sharelist groups and alerts.","reasoning":"These actions remove meaningful user resources.","risk_type":"data_deletion","severity":"high","title":"Watchlist groups and alerts can be deleted","triggering_tools_or_skills":["delete_watchlist_group","sharelist_delete","alert_delete"]},{"evidence":"The declared tools create externally visible community content.","reasoning":"Posting topics/replies acts as the user.","risk_type":"messaging_as_user","severity":"high","title":"Community topics and replies can be posted","triggering_tools_or_skills":["topic_create","topic_create_reply"]},{"evidence":"The inventory contains persistent account writes.","reasoning":"These modify investment-research organization.","risk_type":"data_modification","severity":"medium","title":"Alerts and watchlists can be created or changed","triggering_tools_or_skills":["alert_add","alert_enable","create_watchlist_group","sharelist_add","update_watchlist_group"]},{"evidence":"Private brokerage data is exposed, but the 126-tool inventory has no place/cancel/modify order action.","reasoning":"Sensitive account access is read-only with respect to trading.","risk_type":"private_data_read","severity":"low","title":"Balances, positions and order history can be read","triggering_tools_or_skills":["account_balance","stock_positions","history_orders","today_orders"]},{"evidence":"The connector runs at https://mcp.longbridge.com/v2 without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Longbridge is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication gives access to Longbridge account data and community/watchlist features; exact scopes are not published.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d06c312a-8f61-4239-800b-208ce9166504.json","what_it_proves":"Candidate PR #125 record identity (name \"Longbridge\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d06c312a-8f61-4239-800b-208ce9166504: complete tool_names inventory (126 tools), remote streamable-http endpoint https://mcp.longbridge.com/v2, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"Longbridge cannot trade in the declared inventory but can delete watchlist resources and post community content.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d06c312a-8f61-4239-800b-208ce9166504","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 126 tools. estimate_max_purchase_quantity and quant_run are analysis only; spends_or_moves_money is false because no order execution tool exists.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":126,"tools_or_skills_total":126},"name":"Longbridge","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d06c312a-8f61-4239-800b-208ce9166504&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://longbridge.com/sg/support/topics/Other/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Longbridge","publisher_url":"https://longbridge.com/","remote_url":"https://mcp.longbridge.com/v2","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions remove meaningful user resources.","evidence":"Watchlist groups and alerts can be deleted: The inventory explicitly includes deletion of watchlist/sharelist groups and alerts.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Watchlist groups and alerts can be deleted","triggering_tools":["delete_watchlist_group","sharelist_delete","alert_delete"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Posting topics/replies acts as the user.","evidence":"Community topics and replies can be posted: The declared tools create externally visible community content.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Community topics and replies can be posted","triggering_tools":["topic_create","topic_create_reply"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These modify investment-research organization.","evidence":"Alerts and watchlists can be created or changed: The inventory contains persistent account writes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Alerts and watchlists can be created or changed","triggering_tools":["alert_add","alert_enable","create_watchlist_group","sharelist_add","update_watchlist_group"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Sensitive account access is read-only with respect to trading.","evidence":"Balances, positions and order history can be read: Private brokerage data is exposed, but the 126-tool inventory has no place/cancel/modify order action.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Balances, positions and order history can be read","triggering_tools":["account_balance","stock_positions","history_orders","today_orders"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://longbridge.com/sg/support/","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","reads_private_data","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"account_balance"},{"description":"","name":"ah_premium"},{"description":"","name":"ah_premium_intraday"},{"description":"","name":"alert_add","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These modify investment-research organization."}},{"description":"","name":"alert_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove meaningful user resources."}},{"description":"","name":"alert_disable"},{"description":"","name":"alert_enable","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These modify investment-research organization."}},{"description":"","name":"alert_list"},{"description":"","name":"anomaly"},{"description":"","name":"broker_holding"},{"description":"","name":"broker_holding_daily"},{"description":"","name":"broker_holding_detail"},{"description":"","name":"brokers"},{"description":"","name":"business_segments"},{"description":"","name":"business_segments_history"},{"description":"","name":"calc_indexes"},{"description":"","name":"candlesticks"},{"description":"","name":"capital_distribution"},{"description":"","name":"capital_flow"},{"description":"","name":"cash_flow"},{"description":"","name":"company"},{"description":"","name":"consensus"},{"description":"","name":"constituent"},{"description":"","name":"corp_action"},{"description":"","name":"create_watchlist_group","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These modify investment-research organization."}},{"description":"","name":"delete_watchlist_group","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove meaningful user resources."}},{"description":"","name":"depth"},{"description":"","name":"dividend"},{"description":"","name":"dividend_detail"},{"description":"","name":"estimate_max_purchase_quantity"},{"description":"","name":"exchange_rate"},{"description":"","name":"executive"},{"description":"","name":"filings"},{"description":"","name":"finance_calendar"},{"description":"","name":"financial_report"},{"description":"","name":"financial_report_latest"},{"description":"","name":"financial_report_snapshot"},{"description":"","name":"financial_statement"},{"description":"","name":"forecast_eps"},{"description":"","name":"fund_holder"},{"description":"","name":"fund_positions"},{"description":"","name":"history_candlesticks_by_date"},{"description":"","name":"history_candlesticks_by_offset"},{"description":"","name":"history_executions"},{"description":"","name":"history_market_temperature"},{"description":"","name":"history_orders"},{"description":"","name":"industry_peers"},{"description":"","name":"industry_rank"},{"description":"","name":"industry_valuation"},{"description":"","name":"industry_valuation_dist"},{"description":"","name":"institution_rating"},{"description":"","name":"institution_rating_detail"},{"description":"","name":"institution_rating_history"},{"description":"","name":"institution_rating_industry_rank"},{"description":"","name":"institutional_views"},{"description":"","name":"intraday"},{"description":"","name":"invest_relation"},{"description":"","name":"ipo_calendar"},{"description":"","name":"ipo_detail"},{"description":"","name":"ipo_listed"},{"description":"","name":"ipo_subscriptions"},{"description":"","name":"margin_ratio"},{"description":"","name":"market_status"},{"description":"","name":"market_temperature"},{"description":"","name":"news"},{"description":"","name":"news_search"},{"description":"","name":"operating"},{"description":"","name":"option_chain_expiry_date_list"},{"description":"","name":"option_chain_info_by_date"},{"description":"","name":"option_quote"},{"description":"","name":"option_volume"},{"description":"","name":"option_volume_daily"},{"description":"","name":"order_detail"},{"description":"","name":"participants"},{"description":"","name":"profit_analysis"},{"description":"","name":"profit_analysis_detail"},{"description":"","name":"quant_run"},{"description":"","name":"quote"},{"description":"","name":"rank_categories"},{"description":"","name":"rank_list"},{"description":"","name":"screener_indicators"},{"description":"","name":"screener_recommend_strategies"},{"description":"","name":"screener_search"},{"description":"","name":"screener_strategy"},{"description":"","name":"screener_user_strategies"},{"description":"","name":"security_list"},{"description":"","name":"shareholder"},{"description":"","name":"shareholder_detail"},{"description":"","name":"shareholder_top"},{"description":"","name":"sharelist_add","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These modify investment-research organization."}},{"description":"","name":"sharelist_create"},{"description":"","name":"sharelist_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove meaningful user resources."}},{"description":"","name":"sharelist_detail"},{"description":"","name":"sharelist_list"},{"description":"","name":"sharelist_popular"},{"description":"","name":"sharelist_remove"},{"description":"","name":"sharelist_sort"},{"description":"","name":"short_margin"},{"description":"","name":"short_positions"},{"description":"","name":"short_trades"},{"description":"","name":"statement_export"},{"description":"","name":"statement_list"},{"description":"","name":"static_info"},{"description":"","name":"stock_positions"},{"description":"","name":"today_executions"},{"description":"","name":"today_orders"},{"description":"","name":"top_movers"},{"description":"","name":"topic"},{"description":"","name":"topic_create","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Posting topics/replies acts as the user."}},{"description":"","name":"topic_create_reply","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Posting topics/replies acts as the user."}},{"description":"","name":"topic_detail"},{"description":"","name":"topic_replies"},{"description":"","name":"topic_search"},{"description":"","name":"trade_stats"},{"description":"","name":"trades"},{"description":"","name":"trading_days"},{"description":"","name":"trading_session"},{"description":"","name":"update_watchlist_group","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These modify investment-research organization."}},{"description":"","name":"valuation"},{"description":"","name":"valuation_comparison"},{"description":"","name":"valuation_history"},{"description":"","name":"valuation_rank"},{"description":"","name":"warrant_issuers"},{"description":"","name":"warrant_list"},{"description":"","name":"warrant_quote"},{"description":"","name":"watchlist"}],"tools_count":126,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d06c312a-8f61-4239-800b-208ce9166504","uuid":"2908d1ad-8988-5601-a778-f7d5c8eb9cfc","verification_tier":"community","version":""},"query_key":"longbridge","schema_version":1,"status":"match"}