{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"high","description":"Research life-sciences regulatory questions with Rhizome AI. Explore precedents and health-authority expectations for trials, endpoints and labeling. Request document-grounded answers and help drafting regulatory materials.","did":"c3720a09-94ac-42b6-a733-62258d70fc65","documentation_url":"https://rhizomeai.com/","editorial_description":{"extended_description":"Rhizome draws on publications from authorities including the FDA, EMA, MHRA and PMDA, with citations to supporting document pages. Its conversational tools let you submit requests, wait for results and revisit conversations; use it to review briefing booklets and draft pre-IND meeting packages or white papers.","schema_version":1,"summary":"Research life-sciences regulatory questions with Rhizome AI.\nExplore precedents and health-authority expectations for trials, endpoints and labeling.\nRequest document-grounded answers and help drafting regulatory materials."},"homepage_url":"","icon":"","id":"c3720a09-94ac-42b6-a733-62258d70fc65","installs":0,"last_scanned":"","license":"","long_description":"Rhizome draws on publications from authorities including the FDA, EMA, MHRA and PMDA, with citations to supporting document pages. Its conversational tools let you submit requests, wait for results and revisit conversations; use it to review briefing booklets and draft pre-IND meeting packages or white papers.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official site describes an AI coworker that searches health-authority sources and drafts cited research.","reasoning":"It returns research and does not submit filings or contact regulators.","risk_type":"private_data_read","severity":"low","title":"Runs cited regulatory research","triggering_tools_or_skills":["rhizome_conversation_message","rhizome_conversation_wait","rhizome_conversation_read","rhizome_conversation_list"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication covers a Rhizome account and usage plan; no regulator submission or document-publication scope is declared.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c3720a09-94ac-42b6-a733-62258d70fc65.json","what_it_proves":"Candidate PR #125 record identity (name \"Rhizome AI\", publisher, type interactive_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c3720a09-94ac-42b6-a733-62258d70fc65: complete tool_names inventory (4 tools), remote streamable-http endpoint https://rhizomeai.com/api/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:02:06Z","url_or_path":"https://rhizomeai.com/","what_it_proves":"Official site establishes a cited regulatory research/briefing service and no external filing action."}],"primary_reason":"Rhizome messages a bounded regulatory research agent and reads cited results.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c3720a09-94ac-42b6-a733-62258d70fc65","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 4 names and official product page. conversation_message is a query to the service, not a message sent as the user to a third party.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"Rhizome AI","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c3720a09-94ac-42b6-a733-62258d70fc65&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://rhizomeai.com/privacypolicy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Rhizome AI","publisher_url":"https://rhizomeai.com/","remote_url":"https://rhizomeai.com/api/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: It returns research and does not submit filings or contact regulators.","evidence":"Runs cited regulatory research: Official site describes an AI coworker that searches health-authority sources and drafts cited research.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Runs cited regulatory research","triggering_tools":["rhizome_conversation_message","rhizome_conversation_wait","rhizome_conversation_read","rhizome_conversation_list"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@rhizomeai.com ","tags":["accesses_messaging","interactive_connector","network_access","oauth_required","reads_private_data"],"tools":[{"description":"","name":"rhizome_conversation_message"},{"description":"","name":"rhizome_conversation_wait"},{"description":"","name":"rhizome_conversation_read"},{"description":"","name":"rhizome_conversation_list"}],"tools_count":4,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/c3720a09-94ac-42b6-a733-62258d70fc65","uuid":"939abc9d-d25a-56b9-af2d-41802084ab62","verification_tier":"community","version":""},"query_key":"rhizome ai","schema_version":1,"status":"match"}