{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-12","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Lucidity builds reusable cross-channel marketing reports from connected business data. Query performance and rerun saved report structures with a new reporting period. It never changes ads or bids; connector writes are limited to saved report structures.","did":"53881bd6-4f95-4307-9a27-c46e65c32a21","documentation_url":"https://www.lucidityanalytics.com/claude","editorial_description":{"extended_description":"The source names Meta, Google, Microsoft, LinkedIn, TikTok, GA4, Search Console, Shopify, and Klaviyo, with daily synchronization. Reports can include narrative and recommendations and be delivered as web reports, slides, PDFs, or Word documents. A Lucidity account is required.","schema_version":1,"summary":"Lucidity builds reusable cross-channel marketing reports from connected business data.\nQuery performance and rerun saved report structures with a new reporting period.\nIt never changes ads or bids; connector writes are limited to saved report structures."},"homepage_url":"","icon":"","id":"53881bd6-4f95-4307-9a27-c46e65c32a21","installs":0,"last_scanned":"","license":"","long_description":"The source names Meta, Google, Microsoft, LinkedIn, TikTok, GA4, Search Console, Shopify, and Klaviyo, with daily synchronization. Reports can include narrative and recommendations and be delivered as web reports, slides, PDFs, or Word documents. A Lucidity account is required.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Tool explicitly deletes a template.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Deletes analytics templates","triggering_tools_or_skills":["lucidity_delete_template"]},{"evidence":"Generic query tool operates across connected ad/CRM/commerce sources.","reasoning":"Unbounded query execution is High.","risk_type":"query_execution","severity":"high","title":"Executes data queries","triggering_tools_or_skills":["lucidity_query_data"]},{"evidence":"Tool persists reusable analytics configuration.","reasoning":"Meaningful state modification is Medium.","risk_type":"data_modification","severity":"medium","title":"Saves templates","triggering_tools_or_skills":["lucidity_save_template"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capabilities can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/53881bd6-4f95-4307-9a27-c46e65c32a21.json","what_it_proves":"Candidate PR #125 record identity (name \"Lucidity\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/53881bd6-4f95-4307-9a27-c46e65c32a21: complete tool_names inventory (7 tools), remote streamable-http endpoint https://mcp.lucidityanalytics.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Lucidity deletes templates and executes data queries while saving reusable analytics templates.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:53881bd6-4f95-4307-9a27-c46e65c32a21","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were not available.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Lucidity","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=53881bd6-4f95-4307-9a27-c46e65c32a21&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.lucidityanalytics.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Lucidity LLC","publisher_url":"https://www.lucidityanalytics.com/","remote_url":"https://mcp.lucidityanalytics.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Deletes analytics templates: Tool explicitly deletes a template.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes analytics templates","triggering_tools":["lucidity_delete_template"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded query execution is High.","evidence":"Executes data queries: Generic query tool operates across connected ad/CRM/commerce sources.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes data queries","triggering_tools":["lucidity_query_data"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful state modification is Medium.","evidence":"Saves templates: Tool persists reusable analytics configuration.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Saves templates","triggering_tools":["lucidity_save_template"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@lucidityanalytics.com","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"lucidity_delete_template","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"lucidity_get_performance_summary"},{"description":"","name":"lucidity_get_schema"},{"description":"","name":"lucidity_list_templates"},{"description":"","name":"lucidity_query_data","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded query execution is High."}},{"description":"","name":"lucidity_run_template"},{"description":"","name":"lucidity_save_template","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful state modification is Medium."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/53881bd6-4f95-4307-9a27-c46e65c32a21","uuid":"abd70993-c4df-5dce-aaf3-9dccdd7d0155","verification_tier":"community","version":""},"query_key":"lucidity llc lucidity","schema_version":1,"status":"match"}