{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Scorechain provides blockchain address intelligence and AML risk analysis. Inspect risk scores, entity labels, holdings, transactions, and original funders. Visualize fund flows and interactions across the chains supported by the service.","did":"4e5c29ae-8e78-454b-9d9f-b3f64f90ec75","documentation_url":"https://docs.scorechain.com/","editorial_description":{"extended_description":"Tools retrieve transactions by hash, list asset holders, search addresses and related records, and report supported blockchain coverage. Fund-flow displays include Sankey diagrams and interaction flowcharts.","schema_version":1,"summary":"Scorechain provides blockchain address intelligence and AML risk analysis.\nInspect risk scores, entity labels, holdings, transactions, and original funders.\nVisualize fund flows and interactions across the chains supported by the service."},"homepage_url":"","icon":"","id":"4e5c29ae-8e78-454b-9d9f-b3f64f90ec75","installs":0,"last_scanned":"","license":"","long_description":"Tools retrieve transactions by hash, list asset holders, search addresses and related records, and report supported blockchain coverage. Fund-flow displays include Sankey diagrams and interaction flowcharts.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official docs describe read-only investigation and search of Scorechain data.","reasoning":"Read-only intelligence access is Low.","risk_type":"private_data_read","severity":"low","title":"Reads blockchain intelligence and account data","triggering_tools_or_skills":["get_address","get_transaction","search","visualize_fund_flow"]},{"evidence":"Remote source is not pinned.","reasoning":"Runtime may drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authenticated Scorechain access is implied; exact scopes are not stated on the reviewed overview.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4e5c29ae-8e78-454b-9d9f-b3f64f90ec75.json","what_it_proves":"Candidate PR #125 record identity (name \"Scorechain\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4e5c29ae-8e78-454b-9d9f-b3f64f90ec75: complete tool_names inventory (12 tools), remote streamable-http endpoint https://mcp.scorechain.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:51:32Z","url_or_path":"https://docs.scorechain.com/category/scorechain-mcp","what_it_proves":"Official Scorechain docs describe scoring addresses, tracing fund flows, investigating transactions, and searching the user’s Scorechain data."}],"primary_reason":"The complete inventory and official docs establish read-only blockchain intelligence access.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:4e5c29ae-8e78-454b-9d9f-b3f64f90ec75","reviewed_at":"2026-10-10","reviewer_notes":"All 12 names and the official MCP overview were reviewed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"Scorechain","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4e5c29ae-8e78-454b-9d9f-b3f64f90ec75&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.scorechain.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Scorechain","publisher_url":"https://www.scorechain.com/","remote_url":"https://mcp.scorechain.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Read-only intelligence access is Low.","evidence":"Reads blockchain intelligence and account data: Official docs describe read-only investigation and search of Scorechain data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads blockchain intelligence and account data","triggering_tools":["get_address","get_transaction","search","visualize_fund_flow"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@scorechain.com","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_address"},{"description":"","name":"get_address_assets"},{"description":"","name":"get_address_funder"},{"description":"","name":"get_address_transactions"},{"description":"","name":"get_asset_holders"},{"description":"","name":"get_transaction"},{"description":"","name":"list_blockchains"},{"description":"","name":"score_address"},{"description":"","name":"search"},{"description":"","name":"visualize_fund_flow"},{"description":"","name":"visualize_interactions"},{"description":"","name":"get_entity_types"}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4e5c29ae-8e78-454b-9d9f-b3f64f90ec75","uuid":"2831f693-4bca-5c2d-8dbb-d511e76eedd6","verification_tier":"community","version":""},"query_key":"scorechain scorechain","schema_version":1,"status":"match"}