{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manages local business listings and performance through Moz Local. Organize locations, inspect listing discrepancies and network sync status, and review rankings. Create, update, close or cancel locations, with writes identified as live-data changes.","did":"b375e3a4-0e1e-4b7d-9e44-78bbf6cf2877","documentation_url":"https://moz.com/api/docs/guides/mcp-servers","editorial_description":{"extended_description":"Reporting includes Google Business Profile impressions and leads, Local Grid history and keyword rankings. Account and group tools organize locations across brands, while field-level network checks help diagnose listing inconsistencies.","schema_version":1,"summary":"Manages local business listings and performance through Moz Local.\nOrganize locations, inspect listing discrepancies and network sync status, and review rankings.\nCreate, update, close or cancel locations, with writes identified as live-data changes."},"homepage_url":"","icon":"","id":"b375e3a4-0e1e-4b7d-9e44-78bbf6cf2877","installs":0,"last_scanned":"","license":"","long_description":"Reporting includes Google Business Profile impressions and leads, Local Grid history and keyword rankings. Account and group tools organize locations across brands, while field-level network checks help diagnose listing inconsistencies.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The tools change listings synced across external networks.","reasoning":"They affect live public business presence.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates/updates/closes/cancels production business locations/listings","triggering_tools_or_skills":["LocalLocationCreate","LocalLocationUpdate","LocalLocationClose","LocalLocationCancel"]},{"evidence":"These tools remove/withdraw durable listing state.","reasoning":"They can make businesses disappear from directories.","risk_type":"data_deletion","severity":"high","title":"Cancels/closes locations and removes them from groups","triggering_tools_or_skills":["LocalLocationCancel","LocalLocationClose","LocalGroupLocationRemove"]},{"evidence":"The tools administer listing-account/group organization.","reasoning":"They are privileged workspace actions.","risk_type":"credential_admin","severity":"high","title":"Creates accounts/groups and changes location membership","triggering_tools_or_skills":["LocalAccountCreate","LocalGroupCreate","LocalGroupLocationAdd"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes Moz Local accounts/groups/locations/listing networks.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b375e3a4-0e1e-4b7d-9e44-78bbf6cf2877.json","what_it_proves":"Candidate PR #125 record identity (name \"Moz Local\", publisher, type web_connector) and 32 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b375e3a4-0e1e-4b7d-9e44-78bbf6cf2877: complete tool_names inventory (32 tools), remote streamable-http endpoint https://api.moz.com/mcp/v1/local, auth_posture auth_required, directory tier community"}],"primary_reason":"Moz Local manages and withdraws live listings across networks.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b375e3a4-0e1e-4b7d-9e44-78bbf6cf2877","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 32 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":32,"tools_or_skills_total":32},"name":"Moz Local","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b375e3a4-0e1e-4b7d-9e44-78bbf6cf2877&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://moz.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Moz","publisher_url":"https://moz.com/","remote_url":"https://api.moz.com/mcp/v1/local","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect live public business presence.","evidence":"Creates/updates/closes/cancels production business locations/listings: The tools change listings synced across external networks.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates/updates/closes/cancels production business locations/listings","triggering_tools":["LocalLocationCreate","LocalLocationUpdate","LocalLocationClose","LocalLocationCancel"]},{"description":"This connector can permanently remove data or resources. Review findings: They can make businesses disappear from directories.","evidence":"Cancels/closes locations and removes them from groups: These tools remove/withdraw durable listing state.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Cancels/closes locations and removes them from groups","triggering_tools":["LocalLocationCancel","LocalLocationClose","LocalGroupLocationRemove"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged workspace actions.","evidence":"Creates accounts/groups and changes location membership: The tools administer listing-account/group organization.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Creates accounts/groups and changes location membership","triggering_tools":["LocalAccountCreate","LocalGroupCreate","LocalGroupLocationAdd"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@moz.com","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"LocalAccountCreate","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged workspace actions."}},{"description":"","name":"LocalAccountList"},{"description":"","name":"LocalAccountLookup"},{"description":"","name":"LocalGroupCreate","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged workspace actions."}},{"description":"","name":"LocalGroupFilterAccount"},{"description":"","name":"LocalGroupList"},{"description":"","name":"LocalGroupLocationAdd","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged workspace actions."}},{"description":"","name":"LocalGroupLocationList"},{"description":"","name":"LocalGroupLocationRemove","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can make businesses disappear from directories."}},{"description":"","name":"LocalGroupLookup"},{"description":"","name":"LocalLocationCancel","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can make businesses disappear from directories."}},{"description":"","name":"LocalLocationCategoryList"},{"description":"","name":"LocalLocationClose","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can make businesses disappear from directories."}},{"description":"","name":"LocalLocationCreate","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect live public business presence."}},{"description":"","name":"LocalLocationFilterAccount"},{"description":"","name":"LocalLocationFilterStatus"},{"description":"","name":"LocalLocationInsightGbpImpressionHistoryFetch"},{"description":"","name":"LocalLocationInsightGbpImpressionTotalFetch"},{"description":"","name":"LocalLocationInsightGbpLeadHistoryFetch"},{"description":"","name":"LocalLocationLevelList"},{"description":"","name":"LocalLocationLevelUpdate"},{"description":"","name":"LocalLocationList"},{"description":"","name":"LocalLocationListingList"},{"description":"","name":"LocalLocationLocalGridHistoryFetch"},{"description":"","name":"LocalLocationLocalGridKeywordList"},{"description":"","name":"LocalLocationLookup"},{"description":"","name":"LocalLocationNetworkFieldIssueList"},{"description":"","name":"LocalLocationNetworkFieldStatusList"},{"description":"","name":"LocalLocationNetworkList"},{"description":"","name":"LocalLocationNetworkStatusList"},{"description":"","name":"LocalLocationRankingHistoryFetch"},{"description":"","name":"LocalLocationUpdate","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect live public business presence."}}],"tools_count":32,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b375e3a4-0e1e-4b7d-9e44-78bbf6cf2877","uuid":"b31c7370-8fc9-5b44-8b85-0b4a406ce756","verification_tier":"community","version":""},"query_key":"moz local","schema_version":1,"status":"match"}