{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"RED Atlas provides real-estate data for Puerto Rico and Colombia. Search listings, parcels, transactions, permits, taxes, and market data, or generate valuation and comparables reports. Access uses your RED Atlas account and is billed to its plan.","did":"51c5c08e-8ab4-4a4c-b821-11443ac9f293","documentation_url":"https://api.atlas.red/en/docs?section=mcp-connector","editorial_description":{"extended_description":"Tools provide market statistics, rankings, cross-tabs, trends, location boundaries, and owner/contact enrichment. Results can link back to the RED Atlas app, and generated reports remain available for retrieval.","schema_version":1,"summary":"RED Atlas provides real-estate data for Puerto Rico and Colombia.\nSearch listings, parcels, transactions, permits, taxes, and market data, or generate valuation and comparables reports.\nAccess uses your RED Atlas account and is billed to its plan."},"homepage_url":"","icon":"https://files.atlas.red/red-atlas-logo.png","id":"51c5c08e-8ab4-4a4c-b821-11443ac9f293","installs":0,"last_scanned":"","license":"","long_description":"Tools provide market statistics, rankings, cross-tabs, trends, location boundaries, and owner/contact enrichment. Results can link back to the RED Atlas app, and generated reports remain available for retrieval.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Directory description says access and report creation are billed to the user plan.","reasoning":"Consuming paid plan capacity is High.","risk_type":"financial_transaction","severity":"high","title":"Creates plan-billed valuation reports","triggering_tools_or_skills":["atlas_create_avm_report","atlas_create_comparables_report"]},{"evidence":"Create-report tools persist valuation artifacts retrievable by list/get tools.","reasoning":"Persistent report creation is Medium.","risk_type":"data_modification","severity":"medium","title":"Creates persistent reports","triggering_tools_or_skills":["atlas_create_avm_report","atlas_create_comparables_report"]},{"evidence":"Description explicitly includes owner/contact enrichment.","reasoning":"Private contact data reads are Low.","risk_type":"private_data_read","severity":"low","title":"Reads parcel owners and contacts","triggering_tools_or_skills":["atlas_get_parcel_contacts","atlas_get_record"]},{"evidence":"The remote hosted implementation is not pinned.","reasoning":"Runtime capabilities may change after review.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/51c5c08e-8ab4-4a4c-b821-11443ac9f293.json","what_it_proves":"Candidate PR #125 record identity (name \"RED Atlas API\", publisher, type web_connector) and 16 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/51c5c08e-8ab4-4a4c-b821-11443ac9f293: complete tool_names inventory (16 tools), remote streamable-http endpoint https://apiv3.atlas.red/external-api/v1/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"RED Atlas creates valuation reports billed to the user’s plan.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:51c5c08e-8ab4-4a4c-b821-11443ac9f293","reviewed_at":"2026-10-10","reviewer_notes":"All 16 tools reviewed; official docs URL was inaccessible in the fetcher, but billing is explicit in directory evidence.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":16,"tools_or_skills_total":16},"name":"RED Atlas API","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=51c5c08e-8ab4-4a4c-b821-11443ac9f293&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://api.atlas.red/en/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"RED Atlas","publisher_url":"https://atlas.red/","remote_url":"https://apiv3.atlas.red/external-api/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Consuming paid plan capacity is High.","evidence":"Creates plan-billed valuation reports: Directory description says access and report creation are billed to the user plan.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Creates plan-billed valuation reports","triggering_tools":["atlas_create_avm_report","atlas_create_comparables_report"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Persistent report creation is Medium.","evidence":"Creates persistent reports: Create-report tools persist valuation artifacts retrievable by list/get tools.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates persistent reports","triggering_tools":["atlas_create_avm_report","atlas_create_comparables_report"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Private contact data reads are Low.","evidence":"Reads parcel owners and contacts: Description explicitly includes owner/contact enrichment.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads parcel owners and contacts","triggering_tools":["atlas_get_parcel_contacts","atlas_get_record"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@atlas.red","tags":["modifies_data","network_access","oauth_required","reads_private_data","spends_money","web_connector"],"tools":[{"description":"","name":"atlas_create_avm_report","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Consuming paid plan capacity is High."}},{"description":"","name":"atlas_create_comparables_report","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Consuming paid plan capacity is High."}},{"description":"","name":"atlas_get_parcel_contacts"},{"description":"","name":"atlas_get_record"},{"description":"","name":"atlas_get_report"},{"description":"","name":"atlas_get_stats"},{"description":"","name":"atlas_list_entities"},{"description":"","name":"atlas_list_reports"},{"description":"","name":"atlas_lookup_location"},{"description":"","name":"atlas_market_report"},{"description":"","name":"atlas_pivot"},{"description":"","name":"atlas_query_data"},{"description":"","name":"atlas_read_docs"},{"description":"","name":"atlas_search"},{"description":"","name":"atlas_top_by"},{"description":"","name":"atlas_velocity"}],"tools_count":16,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/51c5c08e-8ab4-4a4c-b821-11443ac9f293","uuid":"2e376d96-414c-5179-95cb-8c9f7e4dce5c","verification_tier":"community","version":""},"query_key":"red atlas red atlas api","schema_version":1,"status":"match"}