{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Interactive Connector","confidence":"medium","description":"Provides read-only swap information and order tracking for Stable.com. Check supported assets, indicative rates and fees, wallet balances and existing swap status. It does not execute trades, move funds or give investment advice; actions stay on Stable.com.","did":"29a958b0-0f61-4ee2-8a93-78b38cda1e73","documentation_url":"https://github.com/stable-com/evm-smart-contracts/tree/main/docs","editorial_description":{"extended_description":"Tools cover token allowances, supported-network configuration, single-chain and cross-chain swap status, and indicative quotes. Quote retrieval is informational rather than an instruction to exchange assets.","schema_version":1,"summary":"Provides read-only swap information and order tracking for Stable.com.\nCheck supported assets, indicative rates and fees, wallet balances and existing swap status.\nIt does not execute trades, move funds or give investment advice; actions stay on Stable.com."},"homepage_url":"","icon":"","id":"29a958b0-0f61-4ee2-8a93-78b38cda1e73","installs":0,"last_scanned":"","license":"","long_description":"Tools cover token allowances, supported-network configuration, single-chain and cross-chain swap status, and indicative quotes. Quote retrieval is informational rather than an instruction to exchange assets.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All seven tools get or validate information; the description explicitly says the connector cannot execute trades, move or hold funds.","reasoning":"Quoting and tracking already-started swaps is read-only blockchain/service access.","risk_type":"public_data_read","severity":"low","title":"Reads swap quotes, public balances and transaction status","triggering_tools_or_skills":["account_get_allowances","account_get_balances","swap_get_config","swap_get_crosschain_status","swap_get_quote","swap_get_singlechain_status","swap_validate_lock"]}],"assessment_status":"provisional","auth_and_scopes":"The endpoint is declared no-auth; it reads public-chain account state and already-started swap status, with no transaction-signing capability in the inventory.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/29a958b0-0f61-4ee2-8a93-78b38cda1e73.json","what_it_proves":"Candidate PR #125 record identity (name \"Stable.com\", publisher, type interactive_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/29a958b0-0f61-4ee2-8a93-78b38cda1e73: complete tool_names inventory (7 tools), remote streamable-http endpoint https://api-defi.stable.com/v1/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"Stable.com is a no-auth read-only quote and swap-status companion with no transaction action.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:29a958b0-0f61-4ee2-8a93-78b38cda1e73","reviewed_at":"2026-10-10","reviewer_notes":"The official GitHub docs fetch failed. Verify that swap_validate_lock only validates on-chain state and never signs or submits a transaction.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"false","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Stable.com","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=29a958b0-0f61-4ee2-8a93-78b38cda1e73&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://stable.com/privacy-centre","provisional_risk":null,"publication_recommendation":"accept","publisher":"Stable.com","publisher_url":"https://www.unlimit.com/","remote_url":"https://api-defi.stable.com/v1/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: Quoting and tracking already-started swaps is read-only blockchain/service access.","evidence":"Reads swap quotes, public balances and transaction status: All seven tools get or validate information; the description explicitly says the connector cannot execute trades, move or hold funds.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Reads swap quotes, public balances and transaction status","triggering_tools":["account_get_allowances","account_get_balances","swap_get_config","swap_get_crosschain_status","swap_get_quote","swap_get_singlechain_status","swap_validate_lock"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"help@stable.com","tags":["interactive_connector","network_access","reads_public_data"],"tools":[{"description":"","name":"account_get_allowances"},{"description":"","name":"account_get_balances"},{"description":"","name":"swap_get_config"},{"description":"","name":"swap_get_crosschain_status"},{"description":"","name":"swap_get_quote"},{"description":"","name":"swap_get_singlechain_status"},{"description":"","name":"swap_validate_lock"}],"tools_count":7,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/29a958b0-0f61-4ee2-8a93-78b38cda1e73","uuid":"c594e4fe-88e6-5e74-a61c-02767c7681b6","verification_tier":"community","version":""},"query_key":"stable com stable com","schema_version":1,"status":"match"}