{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"PredictLeads supplies structured company intelligence for research and prospecting. Enrich domains or discover companies by hiring, technology, funding, and other criteria. Explore signals from company sites, news, filings, and related sources.","did":"31578ec5-6d2f-4829-86c5-b0f13deb7051","documentation_url":"https://docs.predictleads.com/","editorial_description":{"extended_description":"Signal categories include job openings, financing events, product offerings, key customers, similar companies, technology detections, SEC filings, and GitHub activity. Tools also manage a followed-company list. An authenticated connection is required.","schema_version":1,"summary":"PredictLeads supplies structured company intelligence for research and prospecting.\nEnrich domains or discover companies by hiring, technology, funding, and other criteria.\nExplore signals from company sites, news, filings, and related sources."},"homepage_url":"","icon":"","id":"31578ec5-6d2f-4829-86c5-b0f13deb7051","installs":0,"last_scanned":"","license":"","long_description":"Signal categories include job openings, financing events, product offerings, key customers, similar companies, technology detections, SEC filings, and GitHub activity. Tools also manage a followed-company list. An authenticated connection is required.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly exposes adding and removing company follows, while the remaining tools retrieve structured intelligence.","reasoning":"These operations persistently change monitoring preferences; unfollowing is not treated as destructive deletion of source data.","risk_type":"data_modification","severity":"medium","title":"Changes the account's followed-company list","triggering_tools_or_skills":["follow_company","unfollow_company"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for PredictLeads API and account-follow state; exact scopes and notification behavior are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/31578ec5-6d2f-4829-86c5-b0f13deb7051.json","what_it_proves":"Candidate PR #125 record identity (name \"PredictLeads\", publisher, type web_connector) and 31 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/31578ec5-6d2f-4829-86c5-b0f13deb7051: complete tool_names inventory (31 tools), remote streamable-http endpoint https://mcp.predictleads.com/, auth_posture auth_required, directory tier community"}],"primary_reason":"PredictLeads is mostly company-intelligence retrieval but can modify followed-company state.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:31578ec5-6d2f-4829-86c5-b0f13deb7051","reviewed_at":"2026-10-10","reviewer_notes":"Verify whether following a company creates email/webhook notifications; no outbound notification action is evidenced by the packet.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"false"},"tools_or_skills_reviewed":31,"tools_or_skills_total":31},"name":"PredictLeads","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=31578ec5-6d2f-4829-86c5-b0f13deb7051&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://predictleads.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"PredictLeads","publisher_url":"https://predictleads.com/","remote_url":"https://mcp.predictleads.com/","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change monitoring preferences; unfollowing is not treated as destructive deletion of source data.","evidence":"Changes the account's followed-company list: The complete inventory explicitly exposes adding and removing company follows, while the remaining tools retrieve structured intelligence.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes the account's followed-company list","triggering_tools":["follow_company","unfollow_company"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@predictleads.com","tags":["accesses_calendar","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"api_subscription"},{"description":"","name":"companies"},{"description":"","name":"company"},{"description":"","name":"company_connections"},{"description":"","name":"company_financing_events"},{"description":"","name":"company_github_repositories"},{"description":"","name":"company_job_openings"},{"description":"","name":"company_products"},{"description":"","name":"company_sec_filings"},{"description":"","name":"company_similar_companies"},{"description":"","name":"company_technology_detections"},{"description":"","name":"company_website_evolution"},{"description":"","name":"discover_connection_investors"},{"description":"","name":"discover_job_openings"},{"description":"","name":"discover_products"},{"description":"","name":"discover_technology_technology_detections"},{"description":"","name":"extended_companies"},{"description":"","name":"extended_company"},{"description":"","name":"extended_news_event"},{"description":"","name":"extended_technology_detection"},{"description":"","name":"financing_events"},{"description":"","name":"follow_company","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change monitoring preferences; unfollowing is not treated as destructive deletion of source data."}},{"description":"","name":"followed_companies"},{"description":"","name":"job_opening"},{"description":"","name":"news_event"},{"description":"","name":"product"},{"description":"","name":"sec_filing"},{"description":"","name":"startup_platform_posts"},{"description":"","name":"technologies"},{"description":"","name":"technology"},{"description":"","name":"unfollow_company","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change monitoring preferences; unfollowing is not treated as destructive deletion of source data."}}],"tools_count":31,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/31578ec5-6d2f-4829-86c5-b0f13deb7051","uuid":"aaf2dbc2-22fb-5f42-a54a-b035db69e2c1","verification_tier":"community","version":""},"query_key":"predictleads predictleads","schema_version":1,"status":"match"}