{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Scry queries a crawled corpus of web pages, forums, papers, code, and prediction markets. Use bounded SQL, schema inspection, embeddings, and search or fetch tools for research. OAuth creates a revocable, budgetable client key; personal keys are limited to individual, non-commercial research.","did":"4e6812c6-846d-4a86-8aef-9ec7a83b4e3f","documentation_url":"https://scry.io/docs/connect","editorial_description":{"extended_description":"Corpus queries support aggregate questions about terms, authors, communities, or market histories. Additional tools inspect or request coverage, retain research context, and manage service settings. Results are bounded by the available corpus and query limits.","schema_version":1,"summary":"Scry queries a crawled corpus of web pages, forums, papers, code, and prediction markets.\nUse bounded SQL, schema inspection, embeddings, and search or fetch tools for research.\nOAuth creates a revocable, budgetable client key; personal keys are limited to individual, non-commercial research."},"homepage_url":"","icon":"https://scry.io/apple-touch-icon.png","id":"4e6812c6-846d-4a86-8aef-9ec7a83b4e3f","installs":0,"last_scanned":"","license":"","long_description":"Corpus queries support aggregate questions about terms, authors, communities, or market histories. Additional tools inspect or request coverage, retain research context, and manage service settings. Results are bounded by the available corpus and query limits.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Schema discovery plus generic query execution is declared.","reasoning":"Unbounded backend query execution is High.","risk_type":"query_execution","severity":"high","title":"Can issue generic Scry queries","triggering_tools_or_skills":["scry_query","scry_schema"]},{"evidence":"Inventory includes a generic fetch and web-search tools.","reasoning":"User-controlled fetching creates SSRF-like and untrusted-content exposure.","risk_type":"arbitrary_network_access","severity":"low","title":"Can fetch arbitrary web resources","triggering_tools_or_skills":["fetch","exa_search","google_search"]},{"evidence":"The tool explicitly writes remote memory.","reasoning":"This persists user data.","risk_type":"data_modification","severity":"medium","title":"Can write persistent Scry memory","triggering_tools_or_skills":["scry_memory_write"]},{"evidence":"Generic OpenRouter chat forwards content to a dynamically selected model/action surface.","reasoning":"Hidden provider behavior and data forwarding require conservative High assessment.","risk_type":"generic_gateway","severity":"high","title":"Can call an external model gateway","triggering_tools_or_skills":["openrouter_chat"]}],"assessment_status":"provisional","auth_and_scopes":"Authenticated Scry access is implied; provider scopes and query bounds are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4e6812c6-846d-4a86-8aef-9ec7a83b4e3f.json","what_it_proves":"Candidate PR #125 record identity (name \"Scry\", publisher, type web_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4e6812c6-846d-4a86-8aef-9ec7a83b4e3f: complete tool_names inventory (17 tools), remote streamable-http endpoint https://mcp.scry.io/, auth_posture auth_required, directory tier community"}],"primary_reason":"Scry exposes generic query/model gateways, arbitrary fetch, and persistent memory writes.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:4e6812c6-846d-4a86-8aef-9ec7a83b4e3f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 17 names; schemas are needed for scry_query, fetch, and openrouter_chat.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"Scry","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4e6812c6-846d-4a86-8aef-9ec7a83b4e3f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://scry.io/legal/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"ExoPriors","publisher_url":"https://exopriors.com/","remote_url":"https://mcp.scry.io/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded backend query execution is High.; Hidden provider behavior and data forwarding require conservative High assessment.","evidence":"Can issue generic Scry queries: Schema discovery plus generic query execution is declared. | Can call an external model gateway: Generic OpenRouter chat forwards content to a dynamically selected model/action surface.","manual_risk_type":"query_execution,generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["scry_query","scry_schema","openrouter_chat"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: User-controlled fetching creates SSRF-like and untrusted-content exposure.","evidence":"Can fetch arbitrary web resources: Inventory includes a generic fetch and web-search tools.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Can fetch arbitrary web resources","triggering_tools":["fetch","exa_search","google_search"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This persists user data.","evidence":"Can write persistent Scry memory: The tool explicitly writes remote memory.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Can write persistent Scry memory","triggering_tools":["scry_memory_write"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@scry.io","tags":["accesses_messaging","forwards_data_to_third_party","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"exa_search"},{"description":"","name":"fetch"},{"description":"","name":"google_search"},{"description":"","name":"openrouter_chat","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded backend query execution is High.; Hidden provider behavior and data forwarding require conservative High assessment."}},{"description":"","name":"scry_brief"},{"description":"","name":"scry_context"},{"description":"","name":"scry_coverage_estimate"},{"description":"","name":"scry_coverage_request"},{"description":"","name":"scry_coverage_status"},{"description":"","name":"scry_embed"},{"description":"","name":"scry_feedback"},{"description":"","name":"scry_memory_read"},{"description":"","name":"scry_memory_write","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This persists user data."}},{"description":"","name":"scry_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded backend query execution is High.; Hidden provider behavior and data forwarding require conservative High assessment."}},{"description":"","name":"scry_schema","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded backend query execution is High.; Hidden provider behavior and data forwarding require conservative High assessment."}},{"description":"","name":"scry_settings"},{"description":"","name":"search"}],"tools_count":17,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4e6812c6-846d-4a86-8aef-9ec7a83b4e3f","uuid":"7cc514b1-5c3e-57ab-b1d9-0e2a764d8e47","verification_tier":"community","version":""},"query_key":"scry","schema_version":1,"status":"match"}