{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Osmosis Analyst researches institutional allocators and investment opportunities. Find leads, meetings, personnel changes, filings, holdings, and advisor relationships. An Osmosis account is required; all tools are read-only.","did":"94245170-2c97-457e-9961-e4c89b06af6a","documentation_url":"https://osmosis.fm/docs/features/set-up-the-osmosis-analyst-mcp","editorial_description":{"extended_description":"Research draws on indexed meeting transcripts, documents, and regulatory filings with citations. Allocator coverage includes pensions, endowments, foundations, insurers, sovereign funds, and family offices. CRM preparation returns structured fields for your pipeline without writing back to a CRM or Osmosis.","schema_version":1,"summary":"Osmosis Analyst researches institutional allocators and investment opportunities.\nFind leads, meetings, personnel changes, filings, holdings, and advisor relationships.\nAn Osmosis account is required; all tools are read-only."},"homepage_url":"","icon":"","id":"94245170-2c97-457e-9961-e4c89b06af6a","installs":0,"last_scanned":"","license":"","long_description":"Research draws on indexed meeting transcripts, documents, and regulatory filings with citations. Allocator coverage includes pensions, endowments, foundations, insurers, sovereign funds, and family offices. CRM preparation returns structured fields for your pipeline without writing back to a CRM or Osmosis.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector exposes generic query functions over its institutional allocator knowledge graph/index.","reasoning":"Flexible query execution is High under the taxonomy even though official data access is read-only.","risk_type":"query_execution","severity":"high","title":"Executes graph/search/signal queries","triggering_tools_or_skills":["query_graph_db","query_search_index","query_signals"]},{"evidence":"These tools expose proprietary investment-relations intelligence.","reasoning":"They do not write to CRM or contact allocators.","risk_type":"private_data_read","severity":"low","title":"Reads licensed allocator opportunities, meetings and leads","triggering_tools_or_skills":["list_opportunities","list_recent_meetings","find_qualified_leads","get_plan_holdings"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; Osmosis knowledge-graph/meeting/opportunity data follows account access and all tools are described read-only.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/94245170-2c97-457e-9961-e4c89b06af6a.json","what_it_proves":"Candidate PR #125 record identity (name \"Osmosis Analyst\", publisher, type web_connector) and 31 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/94245170-2c97-457e-9961-e4c89b06af6a: complete tool_names inventory (31 tools), remote streamable-http endpoint https://mcp.osmosis.fm/mcp/tools, auth_posture auth_required, directory tier community"}],"primary_reason":"Osmosis exposes generic graph/index query execution over proprietary data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:94245170-2c97-457e-9961-e4c89b06af6a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 31 tools. prepare_for_crm only returns structured fields to paste; it does not write to a CRM.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":31,"tools_or_skills_total":31},"name":"Osmosis Analyst","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=94245170-2c97-457e-9961-e4c89b06af6a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://osmosis.fm/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Osmosis Technologies Inc.","publisher_url":"https://osmosis.fm/","remote_url":"https://mcp.osmosis.fm/mcp/tools","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Flexible query execution is High under the taxonomy even though official data access is read-only.","evidence":"Executes graph/search/signal queries: The connector exposes generic query functions over its institutional allocator knowledge graph/index.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes graph/search/signal queries","triggering_tools":["query_graph_db","query_search_index","query_signals"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They do not write to CRM or contact allocators.","evidence":"Reads licensed allocator opportunities, meetings and leads: These tools expose proprietary investment-relations intelligence.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads licensed allocator opportunities, meetings and leads","triggering_tools":["list_opportunities","list_recent_meetings","find_qualified_leads","get_plan_holdings"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"team@osmosis.fm","tags":["accesses_calendar","network_access","oauth_required","reads_private_data","runs_code","web_connector"],"tools":[{"description":"","name":"brief_allocator"},{"description":"","name":"find_allocator"},{"description":"","name":"find_allocator_signals_for_strategy"},{"description":"","name":"find_allocators_by_criteria"},{"description":"","name":"find_consultant_activity"},{"description":"","name":"find_plans_by_dfe"},{"description":"","name":"find_plans_by_holding"},{"description":"","name":"find_plans_by_service_provider"},{"description":"","name":"find_private_credit_leads"},{"description":"","name":"find_qualified_leads"},{"description":"","name":"get_dfe_investments_for_plan"},{"description":"","name":"get_form5500_filing_detail"},{"description":"","name":"get_form5500_filings_for_org"},{"description":"","name":"get_form990_endowment_history_for_org"},{"description":"","name":"get_form990_filing_detail"},{"description":"","name":"get_form990_filings_for_org"},{"description":"","name":"get_opportunity"},{"description":"","name":"get_plan_holdings"},{"description":"","name":"get_service_providers_for_plan"},{"description":"","name":"list_board_members"},{"description":"","name":"list_consultants_for_strategy"},{"description":"","name":"list_meetings_for_allocator"},{"description":"","name":"list_opportunities"},{"description":"","name":"list_recent_meetings"},{"description":"","name":"list_recent_personnel_moves"},{"description":"","name":"list_recent_podcast_episodes"},{"description":"","name":"prepare_for_crm"},{"description":"","name":"query_graph_db","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Flexible query execution is High under the taxonomy even though official data access is read-only."}},{"description":"","name":"query_search_index","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Flexible query execution is High under the taxonomy even though official data access is read-only."}},{"description":"","name":"query_signals","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Flexible query execution is High under the taxonomy even though official data access is read-only."}},{"description":"","name":"search_allocators"}],"tools_count":31,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/94245170-2c97-457e-9961-e4c89b06af6a","uuid":"f79e05b3-4462-51dd-b4b8-54260d916e95","verification_tier":"community","version":""},"query_key":"osmosis analyst","schema_version":1,"status":"match"}