{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-12","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"high","description":"Looks up AI agents' trust ratings and supporting evidence in Mnemom. Inspect reputation and risk history, verify signed ratings, and obtain an embeddable badge. Agents can also submit alignment information and claim a verifiable identity.","did":"1cad1246-f895-4a58-a044-e84efb2a06ac","documentation_url":"https://docs.mnemom.ai/","editorial_description":{"extended_description":"Directory tools support agent search, reputation lookup and verification of agent bindings and scans. Ratings reflect the evidence recorded by Mnemom; a cryptographic signature verifies the record's provenance, not an agent's future behavior.","schema_version":1,"summary":"Looks up AI agents' trust ratings and supporting evidence in Mnemom.\nInspect reputation and risk history, verify signed ratings, and obtain an embeddable badge.\nAgents can also submit alignment information and claim a verifiable identity."},"homepage_url":"","icon":"https://www.mnemom.ai/images/mnemom_hero.webp","id":"1cad1246-f895-4a58-a044-e84efb2a06ac","installs":0,"last_scanned":"","license":"","long_description":"Directory tools support agent search, reputation lookup and verification of agent bindings and scans. Ratings reflect the evidence recorded by Mnemom; a cryptographic signature verifies the record's provenance, not an agent's future behavior.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs say the claim flow assigns an observed agent identity to the authenticated account and can be supplied a provider API key.","reasoning":"Identity ownership binding is a powerful administrative action and can involve credentials.","risk_type":"credential_admin","severity":"high","title":"Claims agent identities into an account","triggering_tools_or_skills":["claim_agent"]},{"evidence":"The inventory declares setting alignment data and submitting false-negative/false-positive recipe reports.","reasoning":"These persist governance configuration and product feedback.","risk_type":"data_modification","severity":"medium","title":"Writes agent alignment policy and reputation feedback","triggering_tools_or_skills":["put_alignment_by_agent","report_recipe_fn_fp"]},{"evidence":"Packet marks the remote no_auth, while official docs require a bearer token or mnm_ API key for agent management.","reasoning":"Incorrect auth metadata hides persistent credential and ownership risk.","risk_type":"identity_discrepancy","severity":"low","title":"Authentication metadata conflicts with official control-plane docs","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Directory says no_auth, but official docs require a bearer token or API key for the control-plane MCP; public docs MCP is a distinct endpoint.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1cad1246-f895-4a58-a044-e84efb2a06ac.json","what_it_proves":"Candidate PR #125 record identity (name \"Mnemom\", publisher, type web_connector) and 15 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1cad1246-f895-4a58-a044-e84efb2a06ac: complete tool_names inventory (15 tools), remote streamable-http endpoint https://api.mnemom.ai/mcp?profile=directory, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T21:16:38Z","url_or_path":"https://docs.mnemom.ai/","what_it_proves":"Official docs show that the control-plane MCP requires a bearer token/API key, supports agent claiming and alignment-card changes, contradicting Directory no_auth metadata."}],"primary_reason":"Mnemom can claim agent identities and change alignment policy, while its Directory authentication posture is wrong.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:1cad1246-f895-4a58-a044-e84efb2a06ac","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 15 names and official introduction. Correct auth_posture and reconcile current docs tool names with Directory inventory; verify whether claim_agent accepts raw provider keys through MCP.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":15,"tools_or_skills_total":15},"name":"Mnemom","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1cad1246-f895-4a58-a044-e84efb2a06ac&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.mnemom.ai/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Mnemom","publisher_url":"https://www.mnemom.ai/","remote_url":"https://api.mnemom.ai/mcp?profile=directory","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity ownership binding is a powerful administrative action and can involve credentials.; These persist governance configuration and product feedback.","evidence":"Claims agent identities into an account: Official docs say the claim flow assigns an observed agent identity to the authenticated account and can be supplied a provider API key. | Writes agent alignment policy and reputation feedback: The inventory declares setting alignment data and submitting false-negative/false-positive recipe reports.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["claim_agent","put_alignment_by_agent","report_recipe_fn_fp"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@mnemom.ai","tags":["modifies_data","network_access","web_connector"],"tools":[{"description":"","name":"claim_agent","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity ownership binding is a powerful administrative action and can involve credentials.; These persist governance configuration and product feedback."}},{"description":"","name":"get_agent"},{"description":"","name":"get_reputation"},{"description":"","name":"get_reputation_badge"},{"description":"","name":"get_risk_history"},{"description":"","name":"get_started"},{"description":"","name":"list_agents"},{"description":"","name":"preview_compose_alignment_by_agent"},{"description":"","name":"put_alignment_by_agent","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity ownership binding is a powerful administrative action and can involve credentials.; These persist governance configuration and product feedback."}},{"description":"","name":"report_recipe_fn_fp","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity ownership binding is a powerful administrative action and can involve credentials.; These persist governance configuration and product feedback."}},{"description":"","name":"scan_trust"},{"description":"","name":"search_reputation_directory"},{"description":"","name":"verify_agent_binding"},{"description":"","name":"verify_reputation"},{"description":"","name":"verify_scan"}],"tools_count":15,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1cad1246-f895-4a58-a044-e84efb2a06ac","uuid":"eb03e2d2-82e9-5122-b736-dffa9693abb5","verification_tier":"community","version":""},"query_key":"mnemom","schema_version":1,"status":"match"}