{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Prox connects Claude to industrial product knowledge for technicians, dealers, and operators. Browse products and knowledge trees, then read diagnostics, parts information, and service procedures. Edit wiki nodes to record changes in the product knowledge graph.","did":"5fae56bf-6349-4e59-982e-137527dee52b","documentation_url":"https://docs.google.com/document/d/1X1IujRcSgOtPD3xHguu8l7A8SmzH-LgTu21BTyotvQM/edit?usp=sharing","editorial_description":{"extended_description":"","schema_version":1,"summary":"Prox connects Claude to industrial product knowledge for technicians, dealers, and operators.\nBrowse products and knowledge trees, then read diagnostics, parts information, and service procedures.\nEdit wiki nodes to record changes in the product knowledge graph."},"homepage_url":"","icon":"","id":"5fae56bf-6349-4e59-982e-137527dee52b","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official documentation says edit_wiki_node performs an exact text replacement and commits it to product version history.","reasoning":"The operation persistently changes industrial product knowledge, albeit with an audit trail and reversible versioning.","risk_type":"data_modification","severity":"medium","title":"Commits corrections to product knowledge","triggering_tools_or_skills":["edit_wiki_node"]},{"evidence":"Official docs say these tools expose workspace products, diagnostic knowledge, parts and service procedures.","reasoning":"The authenticated workspace knowledge may contain proprietary service and product information.","risk_type":"private_data_read","severity":"low","title":"Reads private industrial product knowledge","triggering_tools_or_skills":["list_products","get_product_tree","read_wiki_nodes"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.1 with PKCE is required; access inherits the user’s WorkOS organization permissions and edits are attributed and audited.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5fae56bf-6349-4e59-982e-137527dee52b.json","what_it_proves":"Candidate PR #125 record identity (name \"prox\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5fae56bf-6349-4e59-982e-137527dee52b: complete tool_names inventory (4 tools), remote streamable-http endpoint https://mcp.useprox.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:45:33Z","url_or_path":"https://www.useprox.com/docs/mcp","what_it_proves":"Prox documents all four tools, OAuth 2.1 workspace scoping, read operations and a versioned reversible exact-text edit operation."}],"primary_reason":"Prox has one bounded, audited write tool that edits an authenticated product-knowledge node.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5fae56bf-6349-4e59-982e-137527dee52b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all four tools against the official connector page. No deletion, publication, external messaging or code execution is exposed, and edits are exact-text replacements recorded in version history.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"prox","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5fae56bf-6349-4e59-982e-137527dee52b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://useprox.com/legal/terms","provisional_risk":null,"publication_recommendation":"accept","publisher":"Prox Technologies, Inc.","publisher_url":"https://useprox.com","remote_url":"https://mcp.useprox.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operation persistently changes industrial product knowledge, albeit with an audit trail and reversible versioning.","evidence":"Commits corrections to product knowledge: Official documentation says edit_wiki_node performs an exact text replacement and commits it to product version history.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Commits corrections to product knowledge","triggering_tools":["edit_wiki_node"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The authenticated workspace knowledge may contain proprietary service and product information.","evidence":"Reads private industrial product knowledge: Official docs say these tools expose workspace products, diagnostic knowledge, parts and service procedures.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private industrial product knowledge","triggering_tools":["list_products","get_product_tree","read_wiki_nodes"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@useprox.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"list_products"},{"description":"","name":"get_product_tree"},{"description":"","name":"read_wiki_nodes"},{"description":"","name":"edit_wiki_node","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The operation persistently changes industrial product knowledge, albeit with an audit trail and reversible versioning."}}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5fae56bf-6349-4e59-982e-137527dee52b","uuid":"0d127af9-eca2-5e53-a315-cc59ac440a5b","verification_tier":"community","version":""},"query_key":"prox technologies inc prox","schema_version":1,"status":"match"}