{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Rho brings business banking accounts, statements, and transactions into Claude. Retrieve records for financial analysis and modeling. The listed tools do not make payments, transfers, or card changes.","did":"307630e5-375c-41b7-8b64-ca6194b2d707","documentation_url":"https://docs.rho.co/","editorial_description":{"extended_description":"Tools list and retrieve accounts, statements, and individual transactions through an authenticated Rho connection. Although the broader Rho platform includes cards, treasury, invoicing, bill pay, and expenses, those operational capabilities are not exposed in this inventory.","schema_version":1,"summary":"Rho brings business banking accounts, statements, and transactions into Claude.\nRetrieve records for financial analysis and modeling.\nThe listed tools do not make payments, transfers, or card changes."},"homepage_url":"","icon":"","id":"307630e5-375c-41b7-8b64-ca6194b2d707","installs":0,"last_scanned":"","license":"","long_description":"Tools list and retrieve accounts, statements, and individual transactions through an authenticated Rho connection. Although the broader Rho platform includes cards, treasury, invoicing, bill pay, and expenses, those operational capabilities are not exposed in this inventory.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All six declared tools are get/list operations over the connected Rho account.","reasoning":"The data is extremely sensitive financial information, but no payment, transfer, invoice or mutation tool is present.","risk_type":"private_data_read","severity":"low","title":"Reads private bank accounts, statements and transactions","triggering_tools_or_skills":["getAccount","getStatement","getTransaction","listAccounts","listStatements","listTransactions"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for the connected Rho business account; the packet does not list granular financial-data scopes.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/307630e5-375c-41b7-8b64-ca6194b2d707.json","what_it_proves":"Candidate PR #125 record identity (name \"Rho\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/307630e5-375c-41b7-8b64-ca6194b2d707: complete tool_names inventory (6 tools), remote streamable-http endpoint https://rhoapi.rho.co/mcp/v1, auth_posture auth_required, directory tier community"}],"primary_reason":"Rho is a read-only business-finance data connector in the reviewed inventory.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:307630e5-375c-41b7-8b64-ca6194b2d707","reviewed_at":"2026-10-10","reviewer_notes":"The marketing phrase 'act on your finances' is broader than the six stored read-only tools; verify that the live server has not added payment or bill-pay actions.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"Rho","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=307630e5-375c-41b7-8b64-ca6194b2d707&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.rho.co/policies/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Rho","publisher_url":"https://signup.rho.co/","remote_url":"https://rhoapi.rho.co/mcp/v1","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The data is extremely sensitive financial information, but no payment, transfer, invoice or mutation tool is present.","evidence":"Reads private bank accounts, statements and transactions: All six declared tools are get/list operations over the connected Rho account.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private bank accounts, statements and transactions","triggering_tools":["getAccount","getStatement","getTransaction","listAccounts","listStatements","listTransactions"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"clientservice@rho.co","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"getAccount"},{"description":"","name":"getStatement"},{"description":"","name":"getTransaction"},{"description":"","name":"listAccounts"},{"description":"","name":"listStatements"},{"description":"","name":"listTransactions"}],"tools_count":6,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/307630e5-375c-41b7-8b64-ca6194b2d707","uuid":"de6aac45-8916-5807-8a74-6bb8639fa573","verification_tier":"community","version":""},"query_key":"rho rho","schema_version":1,"status":"match"}