{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Revelata deepKPI retrieves financial and operational metrics from US SEC filings. Search KPI time series, company summaries, segments, and filing text. Metrics link to source excerpts, with up to ten years of history.","did":"6c033a05-f6a6-4180-a9b9-a2e06803c5e9","documentation_url":"https://github.com/revelata/deepkpi-agents/blob/main/MCP.md","editorial_description":{"extended_description":"Data is updated daily. Discover available company metrics and filings, then retrieve their text in Markdown for primary-source research.","schema_version":1,"summary":"Revelata deepKPI retrieves financial and operational metrics from US SEC filings.\nSearch KPI time series, company summaries, segments, and filing text.\nMetrics link to source excerpts, with up to ten years of history."},"homepage_url":"","icon":"https://www.revelata.com/favicon.ico","id":"6c033a05-f6a6-4180-a9b9-a2e06803c5e9","installs":0,"last_scanned":"","license":"","long_description":"Data is updated daily. Discover available company metrics and filings, then retrieve their text in Markdown for primary-source research.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs charge one credit per KPI/company search result, three per summary/segments call, and ten per filing-markdown retrieval.","reasoning":"The tools initiate consumption of metered account credits.","risk_type":"financial_transaction","severity":"high","title":"Search and extraction calls consume Revelata credits","triggering_tools_or_skills":["search_kpis","company_summary_search","get_company_summary","get_company_segments","get_sec_filing_markdown"]},{"evidence":"Official current docs list eight tools, while the packet contains ten and includes get_sec_markdown/list_sec_markdowns alongside their current filing-markdown forms.","reasoning":"The catalogue should be reconciled so users see the actual runtime interface.","risk_type":"identity_discrepancy","severity":"low","title":"Directory inventory contains obsolete filing-tool names","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth to a Revelata account is required; metered calls draw from 100 free monthly credits and any added balance.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/6c033a05-f6a6-4180-a9b9-a2e06803c5e9.json","what_it_proves":"Candidate PR #125 record identity (name \"Revelata deepKPI\", publisher, type web_connector) and 10 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/6c033a05-f6a6-4180-a9b9-a2e06803c5e9: complete tool_names inventory (10 tools), remote streamable-http endpoint https://deepkpi-mcp.revelata.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:00:24Z","url_or_path":"https://github.com/revelata/deepkpi-agents/blob/main/MCP.md","what_it_proves":"Official publisher documentation lists eight current tools and charges credits per search result, summary, segment and filing extraction."}],"primary_reason":"Revelata searches and extractions consume account credits, and its packet tool inventory is stale.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:6c033a05-f6a6-4180-a9b9-a2e06803c5e9","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all ten packet tools and the eight-tool official catalogue. The connector is otherwise read-only financial research.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":10,"tools_or_skills_total":10},"name":"Revelata deepKPI","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=6c033a05-f6a6-4180-a9b9-a2e06803c5e9&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://app.termly.io/policy-viewer/policy.html?policyUUID=d43ea6b9-44c7-4fae-b1c7-904c815b67c8","provisional_risk":null,"publication_recommendation":"fix","publisher":"Revelata, Inc.","publisher_url":"https://www.revelata.com/","remote_url":"https://deepkpi-mcp.revelata.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: The tools initiate consumption of metered account credits.","evidence":"Search and extraction calls consume Revelata credits: Official docs charge one credit per KPI/company search result, three per summary/segments call, and ten per filing-markdown retrieval.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Search and extraction calls consume Revelata credits","triggering_tools":["search_kpis","company_summary_search","get_company_summary","get_company_segments","get_sec_filing_markdown"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@revelata.com","tags":["network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"company_summary_search","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: The tools initiate consumption of metered account credits."}},{"description":"","name":"get_company_segments","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: The tools initiate consumption of metered account credits."}},{"description":"","name":"get_company_summary","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: The tools initiate consumption of metered account credits."}},{"description":"","name":"get_sec_filing_markdown","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: The tools initiate consumption of metered account credits."}},{"description":"","name":"get_sec_markdown"},{"description":"","name":"list_kpis"},{"description":"","name":"list_sec_filing_markdowns"},{"description":"","name":"list_sec_markdowns"},{"description":"","name":"query_company_id"},{"description":"","name":"search_kpis","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: The tools initiate consumption of metered account credits."}}],"tools_count":10,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/6c033a05-f6a6-4180-a9b9-a2e06803c5e9","uuid":"a214626a-7a17-5990-8f41-25a273db37c4","verification_tier":"community","version":""},"query_key":"revelata inc revelata deepkpi","schema_version":1,"status":"match"}
