{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Interactive Connector","confidence":"high","description":"MyRace AI explores road, trail, ultra, marathon, and multisport race results. Find athletes and races, then inspect splits, rankings, pacing, and performance insights. Interactive result cards, leaderboards, and elevation charts present the available race data.","did":"606c4e13-7ad2-46d6-8b85-b182d3dc6232","documentation_url":"https://myrace.ai/connect-claude","editorial_description":{"extended_description":"","schema_version":1,"summary":"MyRace AI explores road, trail, ultra, marathon, and multisport race results.\nFind athletes and races, then inspect splits, rankings, pacing, and performance insights.\nInteractive result cards, leaderboards, and elevation charts present the available race data."},"homepage_url":"","icon":"https://myrace.ai/mcp-logo.svg","id":"606c4e13-7ad2-46d6-8b85-b182d3dc6232","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The official page documents public finish times, splits, rankings and elevation profiles for all seven read-only tools.","reasoning":"The connector only retrieves published race information and analytics.","risk_type":"public_data_read","severity":"low","title":"Retrieves public race and athlete results","triggering_tools_or_skills":["list_races","search_athletes","get_athlete_result","get_race_results","get_elevation_profile"]},{"evidence":"Official documentation says this operation proxies to MyRace’s AI endpoint, which streams Anthropic Claude Sonnet.","reasoning":"The selected athlete/result context is forwarded through the named third-party analysis service.","risk_type":"third_party_data_forwarding","severity":"low","title":"Athlete insight requests reach MyRace AI","triggering_tools_or_skills":["get_athlete_insights"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required; official documentation says the connector exposes only public race results and stores no per-request user state.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/606c4e13-7ad2-46d6-8b85-b182d3dc6232.json","what_it_proves":"Candidate PR #125 record identity (name \"MyRace AI\", publisher, type interactive_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/606c4e13-7ad2-46d6-8b85-b182d3dc6232: complete tool_names inventory (7 tools), remote streamable-http endpoint https://mcp.myrace.ai/mcp, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T20:50:48Z","url_or_path":"https://myrace.ai/connect-claude","what_it_proves":"MyRace states that all seven tools are public, read-only, unauthenticated and expose public race results, with opted-out athletes masked."}],"primary_reason":"MyRace is a documented no-auth, read-only connector over public race results.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:606c4e13-7ad2-46d6-8b85-b182d3dc6232","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all seven tools against the official reviewer section. Public athlete results can still be personal data, but the source explicitly masks opt-outs and does not expose private account data.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"MyRace AI","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=606c4e13-7ad2-46d6-8b85-b182d3dc6232&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://myrace.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"MyRace","publisher_url":"https://myrace.ai/","remote_url":"https://mcp.myrace.ai/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: The connector only retrieves published race information and analytics.","evidence":"Retrieves public race and athlete results: The official page documents public finish times, splits, rankings and elevation profiles for all seven read-only tools.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Retrieves public race and athlete results","triggering_tools":["list_races","search_athletes","get_athlete_result","get_race_results","get_elevation_profile"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: The selected athlete/result context is forwarded through the named third-party analysis service.","evidence":"Athlete insight requests reach MyRace AI: Official documentation says this operation proxies to MyRace’s AI endpoint, which streams Anthropic Claude Sonnet.","manual_risk_type":"third_party_data_forwarding","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Athlete insight requests reach MyRace AI","triggering_tools":["get_athlete_insights"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@myrace.com","tags":["forwards_data_to_third_party","interactive_connector","network_access","reads_public_data"],"tools":[{"description":"","name":"get_athlete_insights"},{"description":"","name":"get_athlete_result"},{"description":"","name":"get_elevation_profile"},{"description":"","name":"get_race_info"},{"description":"","name":"get_race_results"},{"description":"","name":"list_races"},{"description":"","name":"search_athletes"}],"tools_count":7,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/606c4e13-7ad2-46d6-8b85-b182d3dc6232","uuid":"0c09aa29-ad23-5f9c-b60e-f2d0de271eff","verification_tier":"community","version":""},"query_key":"myrace ai","schema_version":1,"status":"match"}