{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-08","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"OnlineComponents Search finds electronic components by manufacturer, part number, or keyword. Retrieve stock, specifications, pricing, quantity breaks, and packaging information. Inspect ordering rules and lifecycle status while researching parts and alternatives.","did":"53f193f9-eb73-46ee-b472-9dd6871b5b31","documentation_url":"https://www.onlinecomponents.com/en/claude-connector","editorial_description":{"extended_description":"","schema_version":1,"summary":"OnlineComponents Search finds electronic components by manufacturer, part number, or keyword.\nRetrieve stock, specifications, pricing, quantity breaks, and packaging information.\nInspect ordering rules and lifecycle status while researching parts and alternatives."},"homepage_url":"","icon":"https://www.onlinecomponents.com/downloads/onlinecomponentssmall_icon.jpg","id":"53f193f9-eb73-46ee-b472-9dd6871b5b31","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The complete inventory is search/get and official site exposes the component catalog.","reasoning":"Public read-only catalog access is Low.","risk_type":"public_data_read","severity":"low","title":"Reads public product catalog","triggering_tools_or_skills":["search_parts","get_part"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capabilities can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/53f193f9-eb73-46ee-b472-9dd6871b5b31.json","what_it_proves":"Candidate PR #125 record identity (name \"onlinecomponents Search\", publisher, type web_connector) and 2 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/53f193f9-eb73-46ee-b472-9dd6871b5b31: complete tool_names inventory (2 tools), remote streamable-http endpoint https://mcp.onlinecomponents.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:55:04Z","url_or_path":"https://www.onlinecomponents.com/en/","what_it_proves":"Official distributor catalog confirms public electronic-component, price, stock, and part-number search data."}],"primary_reason":"OnlineComponents only searches public component catalog and stock/price details.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:53f193f9-eb73-46ee-b472-9dd6871b5b31","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were not available.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"false","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":2,"tools_or_skills_total":2},"name":"onlinecomponents Search","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=53f193f9-eb73-46ee-b472-9dd6871b5b31&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.onlinecomponents.com/en/mcp-privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"onlinecomponents","publisher_url":"https://www.onlinecomponents.com/","remote_url":"https://mcp.onlinecomponents.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: Public read-only catalog access is Low.","evidence":"Reads public product catalog: The complete inventory is search/get and official site exposes the component catalog.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Reads public product catalog","triggering_tools":["search_parts","get_part"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.onlinecomponents.com/en/contactuspage/","tags":["network_access","oauth_required","reads_public_data","web_connector"],"tools":[{"description":"","name":"get_part"},{"description":"","name":"search_parts"}],"tools_count":2,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/53f193f9-eb73-46ee-b472-9dd6871b5b31","uuid":"a3bed5c5-5add-5cc4-b3aa-8927786c5bbd","verification_tier":"community","version":""},"query_key":"onlinecomponents search","schema_version":1,"status":"match"}
