{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-14","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"8b0d128bd89d763cc282fd82dacdf7a073e3c86b16812f2e92e131140a061154","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"First pass Medium retained. Matia's MCP tool reference names exactly three write tools: 'Run an integration action' (trigger an integration sync), enable/disable a data-quality monitor, and update asset governance (tag, certify, describe, or update issue status). Writes are role-gated and re-checked server-side, and connector credentials are never returned. Triggering a sync of an already-configured integration and toggling a monitor are bounded and reversible; neither changes pipeline configuration, deletes resources or deploys. Reads include issue-evidence rows from the warehouse (scoped private data). This gives Medium. The prior 'opaque gateway' concern is resolved by the tool reference. Note docs list 24 tools vs 15 stored (inventory drift).","review_key":"claudesec:896bf7fb-a836-41cd-b1f6-e6cd37f82e85","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://docs.matia.io/","https://docs.matia.io/docs/mcp/tools-reference.md","https://docs.matia.io/docs/mcp/security-and-responsible-use.md","catalog-rating-review-2026-10-12/batches/batch-002.jsonl"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Matia connects Claude to data-pipeline, lineage, observability, and catalog context. Inspect integration runs, issues, monitors, and downstream change impact. With a Matia account, run integration actions and update monitor state or asset governance.","did":"896bf7fb-a836-41cd-b1f6-e6cd37f82e85","documentation_url":"https://docs.matia.io/","editorial_description":{"extended_description":"Tools search audit logs and catalog assets and explain lineage or issues. The connector can complement a separate warehouse connection when investigating underlying data.","schema_version":1,"summary":"Matia connects Claude to data-pipeline, lineage, observability, and catalog context.\nInspect integration runs, issues, monitors, and downstream change impact.\nWith a Matia account, run integration actions and update monitor state or asset governance."},"homepage_url":"","icon":"","id":"896bf7fb-a836-41cd-b1f6-e6cd37f82e85","installs":0,"last_scanned":"","license":"","long_description":"Tools search audit logs and catalog assets and explain lineage or issues. The connector can complement a separate warehouse connection when investigating underlying data.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"No action catalogue/schema is provided for a platform spanning ingestion and reverse ETL.","reasoning":"The hidden action could run data movement, destructive, deployment or messaging operations.","risk_type":"generic_gateway","severity":"low","title":"Executes an unspecified integration action","triggering_tools_or_skills":["run_integration_action"]},{"evidence":"The explicit tool changes production observability state for a monitor.","reasoning":"It materially changes DataOps monitoring, but the name alone does not establish deployment or infrastructure mutation.","risk_type":"data_modification","severity":"medium","title":"Changes monitor state","triggering_tools_or_skills":["set_monitor_state"]},{"evidence":"These tools expose sensitive data-platform topology and operations.","reasoning":"They are read-only retrieval.","risk_type":"private_data_read","severity":"low","title":"Reads data catalog, lineage, assets, issues and audit logs","triggering_tools_or_skills":["get_asset","get_lineage","preview_impact","list_issues","audit_log_search"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; catalog, lineage, monitors, issues and integration actions follow undocumented Matia roles and connector configuration.","blocked_missing_evidence":"Official exhaustive run_integration_action action names/schemas, side effects and role/confirmation controls, including whether it starts/stops connectors, writes warehouse data, sends reverse-ETL updates or deletes resources.","confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/896bf7fb-a836-41cd-b1f6-e6cd37f82e85.json","what_it_proves":"Candidate PR #125 record identity (name \"Matia MCP\", publisher, type web_connector) and 15 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/896bf7fb-a836-41cd-b1f6-e6cd37f82e85: complete tool_names inventory (15 tools), remote streamable-http endpoint https://api.matia.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Matia exposes an opaque integration-action gateway over a DataOps/reverse-ETL platform.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:896bf7fb-a836-41cd-b1f6-e6cd37f82e85","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 15 fixed tools. set_monitor_state independently supports High infrastructure impact; the dynamic action prevents a complete bounded assessment.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":15,"tools_or_skills_total":15},"name":"Matia MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=896bf7fb-a836-41cd-b1f6-e6cd37f82e85&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.matia.io/privacy-policy-versions","provisional_risk":"high","publication_recommendation":"fix","publisher":"Matia","publisher_url":"https://matia.io/","remote_url":"https://api.matia.io/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"Matia retrieves catalog metadata, integration runs, monitoring history and issue-evidence rows from authorized data systems.","evidence":"https://docs.matia.io/docs/mcp/tools-reference.md\nCatalog & Lineage, Observability ('Get issue evidence: breached rows'), Governance & Audit tables","risk_type":"reads_private_data","severity":"medium","title":"Reads data operations and issue evidence"},{"description":"Role-gated write tools can trigger an existing integration sync, toggle a monitor and update asset governance metadata or issue status.","evidence":"https://docs.matia.io/docs/mcp/tools-reference.md\nIntegrations: 'Run an integration action | Write | Trigger an integration sync.'\nhttps://docs.matia.io/docs/mcp/security-and-responsible-use.md\n'How write actions are flagged' - three write tools, role-gated","risk_type":"modifies_data","severity":"medium","title":"Runs configured syncs and updates governance settings"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://matia.support.site","tags":["reads_private_data","modifies_data"],"tools":[{"description":"","name":"audit_log_search"},{"description":"","name":"explain"},{"description":"","name":"get_asset"},{"description":"","name":"get_lineage"},{"description":"","name":"get_monitor"},{"description":"","name":"list_connectors"},{"description":"","name":"list_integration_runs"},{"description":"","name":"list_issues"},{"description":"","name":"list_monitors"},{"description":"","name":"list_tags"},{"description":"","name":"preview_impact"},{"description":"","name":"run_integration_action"},{"description":"","name":"search_catalog"},{"description":"","name":"set_monitor_state","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It materially changes DataOps monitoring, but the name alone does not establish deployment or infrastructure mutation."}},{"description":"","name":"update_asset_governance"}],"tools_count":15,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/896bf7fb-a836-41cd-b1f6-e6cd37f82e85","uuid":"d176e0ab-5178-5561-a865-46fc13b96542","verification_tier":"community","version":""},"query_key":"matia matia mcp","schema_version":1,"status":"match"}