{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Operate cross-platform marketing workflows through Matte Nerve. Analyze performance and manage supported ads, creatives, audiences or budgets. Available tools follow the platforms and permissions authorized for your account.","did":"12c5667c-0121-4589-8947-311005c02f2d","documentation_url":"https://docs.nerve.mattemena.com/docs/intro","editorial_description":{"extended_description":"The source names Meta, TikTok, Google and Snapchat Ads, GA4, Google Sheets and HubSpot. The connector discovers schemas and executes available tools, including multiple operations. Authentication uses OAuth, and capabilities depend on the connected services.","schema_version":1,"summary":"Operate cross-platform marketing workflows through Matte Nerve.\nAnalyze performance and manage supported ads, creatives, audiences or budgets.\nAvailable tools follow the platforms and permissions authorized for your account."},"homepage_url":"","icon":"","id":"12c5667c-0121-4589-8947-311005c02f2d","installs":0,"last_scanned":"","license":"","long_description":"The source names Meta, TikTok, Google and Snapchat Ads, GA4, Google Sheets and HubSpot. The connector discovers schemas and executes available tools, including multiple operations. Authentication uses OAuth, and capabilities depend on the connected services.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says the connector manages Meta, TikTok, Google and Snapchat ads, including creating/updating campaigns and reviewing budgets and bidding strategies; executing such changes can authorize or increase advertising spend.","reasoning":"Budget and campaign activation changes can cause paid media charges.","risk_type":"financial_transaction","severity":"high","title":"Can change paid-ad budgets and activate campaigns","triggering_tools_or_skills":["multiExecuteTool"]},{"evidence":"The Directory exposes only schema discovery, tool search and multi-tool execution while the listing describes actions across ads, analytics, CRM and spreadsheets.","reasoning":"The reachable action set is dynamic and not bounded by the four declared names.","risk_type":"generic_gateway","severity":"high","title":"Discovers schemas and executes hidden cross-platform tools","triggering_tools_or_skills":["getToolSchemasTool","multiExecuteTool","searchToolsTool"]},{"evidence":"The listing explicitly says users can create and update campaigns, ad groups, creatives, audiences, keywords and CRM workflows.","reasoning":"Those actions persist material changes across connected platforms.","risk_type":"data_modification","severity":"medium","title":"Creates and updates advertising and CRM records","triggering_tools_or_skills":["multiExecuteTool"]},{"evidence":"The dynamic executor returns content from connected advertising, CRM and spreadsheet platforms.","reasoning":"Connected records and creative text can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Ad, CRM and spreadsheet content is user-controlled","triggering_tools_or_skills":["multiExecuteTool"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.0 with PKCE is described for a Matte Nerve account and connected ad/analytics/CRM platforms, but action schemas and downstream scopes are not enumerated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/12c5667c-0121-4589-8947-311005c02f2d.json","what_it_proves":"Candidate PR #125 record identity (name \"mcp.nerve.mattemena.com\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/12c5667c-0121-4589-8947-311005c02f2d: complete tool_names inventory (4 tools), remote streamable-http endpoint https://mcp.nerve.mattemena.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"The connector can change paid-ad budgets through a dynamic hidden-tool gateway whose full action set is absent.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:12c5667c-0121-4589-8947-311005c02f2d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 4 declared names. The official docs URL was inaccessible and is not cited; publish a complete resolved action inventory and schemas for every tool reachable via multiExecuteTool.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"unknown","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"unknown","sends_messages_as_user":"unknown","spends_or_moves_money":"true"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"mcp.nerve.mattemena.com","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=12c5667c-0121-4589-8947-311005c02f2d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://nerve.mattemena.com/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Matte Nerve","publisher_url":"https://www.mattemena.com/","remote_url":"https://mcp.nerve.mattemena.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Budget and campaign activation changes can cause paid media charges.","evidence":"Can change paid-ad budgets and activate campaigns: The listing says the connector manages Meta, TikTok, Google and Snapchat ads, including creating/updating campaigns and reviewing budgets and bidding strategies; executing such changes can authorize or increase advertising spend.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Can change paid-ad budgets and activate campaigns","triggering_tools":["multiExecuteTool"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The reachable action set is dynamic and not bounded by the four declared names.","evidence":"Discovers schemas and executes hidden cross-platform tools: The Directory exposes only schema discovery, tool search and multi-tool execution while the listing describes actions across ads, analytics, CRM and spreadsheets.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Discovers schemas and executes hidden cross-platform tools","triggering_tools":["getToolSchemasTool","multiExecuteTool","searchToolsTool"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Those actions persist material changes across connected platforms.","evidence":"Creates and updates advertising and CRM records: The listing explicitly says users can create and update campaigns, ad groups, creatives, audiences, keywords and CRM workflows.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates advertising and CRM records","triggering_tools":["multiExecuteTool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@mattemena.com","tags":["modifies_data","network_access","oauth_required","runs_code","spends_money","web_connector"],"tools":[{"description":"","name":"checkConnectionsTool"},{"description":"","name":"getToolSchemasTool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The reachable action set is dynamic and not bounded by the four declared names."}},{"description":"","name":"multiExecuteTool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The reachable action set is dynamic and not bounded by the four declared names."}},{"description":"","name":"searchToolsTool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The reachable action set is dynamic and not bounded by the four declared names."}}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/12c5667c-0121-4589-8947-311005c02f2d","uuid":"322b9acd-4367-58c3-8cbd-1dba1ed837cb","verification_tier":"community","version":""},"query_key":"mcp nerve mattemena com","schema_version":1,"status":"match"}