{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Operate venue booking and ticketing workflows in Opendate. Inspect events, sales, offers, financials, contacts, and fan analytics. Create or clear holds, build offers, edit ticket prices, and prepare broadcast drafts within your venue permissions.","did":"e4b2282d-f509-480a-836d-37381f7ad850","documentation_url":"https://help.opendate.io/connecting-conductor-to-claude-mcp","editorial_description":{"extended_description":"Requires an Opendate account. Check availability, convert holds, duplicate events, link offers, export event buyers, and inspect settlements or broadcast engagement. Access is scoped to your authorized venues and teams.","schema_version":1,"summary":"Operate venue booking and ticketing workflows in Opendate.\nInspect events, sales, offers, financials, contacts, and fan analytics.\nCreate or clear holds, build offers, edit ticket prices, and prepare broadcast drafts within your venue permissions."},"homepage_url":"","icon":"","id":"e4b2282d-f509-480a-836d-37381f7ad850","installs":0,"last_scanned":"","license":"","long_description":"Requires an Opendate account. Check availability, convert holds, duplicate events, link offers, export event buyers, and inspect settlements or broadcast engagement. Access is scoped to your authorized venues and teams.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The tool removes a booking hold.","reasoning":"This releases scarce inventory and is operationally destructive.","risk_type":"data_deletion","severity":"high","title":"Real venue holds can be cleared","triggering_tools_or_skills":["clear_hold"]},{"evidence":"These tools alter live commercial terms.","reasoning":"They are financially consequential even without payment execution.","risk_type":"financial_transaction","severity":"high","title":"Ticket prices and artist offers can be changed","triggering_tools_or_skills":["edit_ticket_prices","create_offer","link_offer_to_event"]},{"evidence":"These actions persist venue workflow state.","reasoning":"They change production records.","risk_type":"data_modification","severity":"medium","title":"Events can be duplicated and broadcasts drafted","triggering_tools_or_skills":["duplicate_event","create_broadcast_draft","create_hold"]},{"evidence":"External content is returned.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Submissions, contacts and web search enter model context","triggering_tools_or_skills":["venue_inbound_submissions","contact_lookup","web_search"]},{"evidence":"The connector runs at https://app.opendate.io/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Opendate is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes venue data/actions to authorized teams; exact financial and broadcast-send boundaries are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e4b2282d-f509-480a-836d-37381f7ad850.json","what_it_proves":"Candidate PR #125 record identity (name \"Opendate\", publisher, type web_connector) and 29 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e4b2282d-f509-480a-836d-37381f7ad850: complete tool_names inventory (29 tools), remote streamable-http endpoint https://app.opendate.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Opendate can clear booking holds and change live ticket/offer commercial terms.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e4b2282d-f509-480a-836d-37381f7ad850","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 29 tools. Broadcast sending is not declared; only drafts are created.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":29,"tools_or_skills_total":29},"name":"Opendate","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e4b2282d-f509-480a-836d-37381f7ad850&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.opendate.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Opendate, Inc.","publisher_url":"https://www.opendate.io/","remote_url":"https://app.opendate.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: This releases scarce inventory and is operationally destructive.","evidence":"Real venue holds can be cleared: The tool removes a booking hold.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Real venue holds can be cleared","triggering_tools":["clear_hold"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are financially consequential even without payment execution.","evidence":"Ticket prices and artist offers can be changed: These tools alter live commercial terms.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Ticket prices and artist offers can be changed","triggering_tools":["edit_ticket_prices","create_offer","link_offer_to_event"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They change production records.","evidence":"Events can be duplicated and broadcasts drafted: These actions persist venue workflow state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Events can be duplicated and broadcasts drafted","triggering_tools":["duplicate_event","create_broadcast_draft","create_hold"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"clientsupport@opendate.io","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"check_availability"},{"description":"","name":"clear_hold","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This releases scarce inventory and is operationally destructive."}},{"description":"","name":"contact_lookup"},{"description":"","name":"convert_hold"},{"description":"","name":"create_broadcast_draft","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They change production records."}},{"description":"","name":"create_hold","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They change production records."}},{"description":"","name":"create_offer","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are financially consequential even without payment execution."}},{"description":"","name":"duplicate_event","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They change production records."}},{"description":"","name":"edit_ticket_prices","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are financially consequential even without payment execution."}},{"description":"","name":"export_event_buyers"},{"description":"","name":"help_docs"},{"description":"","name":"link_offer_to_event","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are financially consequential even without payment execution."}},{"description":"","name":"list_broadcast_drafts"},{"description":"","name":"list_templates"},{"description":"","name":"market_events"},{"description":"","name":"team_overview"},{"description":"","name":"venue_broadcast_engagement"},{"description":"","name":"venue_details"},{"description":"","name":"venue_events"},{"description":"","name":"venue_fan_analytics"},{"description":"","name":"venue_financials"},{"description":"","name":"venue_food_and_beverage"},{"description":"","name":"venue_inbound_submissions"},{"description":"","name":"venue_offer_expenses"},{"description":"","name":"venue_offers"},{"description":"","name":"venue_order_lookup"},{"description":"","name":"venue_settlement_report"},{"description":"","name":"venue_ticket_sales"},{"description":"","name":"web_search"}],"tools_count":29,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e4b2282d-f509-480a-836d-37381f7ad850","uuid":"cb93cad1-5b00-5925-9520-2883cc158bfc","verification_tier":"community","version":""},"query_key":"opendate","schema_version":1,"status":"match"}