{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-25","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"high","description":"Queries indexed blockchain data through SQD Portal. Explore wallets, transactions, transfers, contracts and chain-level analytics. Hosted access is read-only and unauthenticated, with supported-network discovery.","did":"c17410b0-e936-4e9a-84d4-ff19bc32f2c0","documentation_url":"https://docs.sqd.dev/en/ai/mcp-server","editorial_description":{"extended_description":"Tools cover EVM, Solana, Bitcoin, Substrate and Hyperliquid data, including logs, instructions, calls and fills. Structured results support summaries, tables or charts; entity resolution helps identify tokens and contracts.","schema_version":1,"summary":"Queries indexed blockchain data through SQD Portal.\nExplore wallets, transactions, transfers, contracts and chain-level analytics.\nHosted access is read-only and unauthenticated, with supported-network discovery."},"homepage_url":"","icon":"","id":"c17410b0-e936-4e9a-84d4-ff19bc32f2c0","installs":0,"last_scanned":"","license":"","long_description":"Tools cover EVM, Solana, Bitcoin, Substrate and Hyperliquid data, including logs, instructions, calls and fills. Structured results support summaries, tables or charts; entity resolution helps identify tokens and contracts.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official docs call all Portal MCP tools read-only and describe bounded blockchain transaction/log/analytics queries.","reasoning":"These are database-like reads over public chain data, not arbitrary user SQL or transaction execution.","risk_type":"public_data_read","severity":"low","title":"Queries public blockchain data","triggering_tools_or_skills":["portal_bitcoin_get_analytics","portal_bitcoin_query_transactions","portal_debug_hyperliquid_query_replica_commands","portal_debug_query_blocks","portal_debug_resolve_time_to_block","portal_evm_get_analytics","portal_evm_get_contract_activity","portal_evm_get_contract_deployment","portal_evm_get_ohlc","portal_evm_query_logs","portal_evm_query_token_transfers","portal_evm_query_transactions","portal_get_head","portal_get_network_info","portal_get_recent_activity","portal_get_time_series","portal_get_wallet_summary","portal_hyperliquid_get_analytics","portal_hyperliquid_get_ohlc","portal_hyperliquid_query_fills","portal_list_networks","portal_resolve_entity","portal_solana_get_analytics","portal_solana_query_instructions","portal_solana_query_transactions","portal_substrate_get_analytics","portal_substrate_query_calls","portal_substrate_query_events"]},{"evidence":"Official docs enumerate 31 tools versus 28 in the packet, including portal_tron_query_transactions, portal_tron_query_logs and portal_evm_query_traces.","reasoning":"The catalog should include the complete current read-only surface.","risk_type":"identity_discrepancy","severity":"low","title":"Directory tool list lags official server","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required on the public Portal endpoint.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c17410b0-e936-4e9a-84d4-ff19bc32f2c0.json","what_it_proves":"Candidate PR #125 record identity (name \"SQD\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c17410b0-e936-4e9a-84d4-ff19bc32f2c0: complete tool_names inventory (28 tools), remote streamable-http endpoint https://portal.sqd.dev/mcp, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T21:00:03Z","url_or_path":"https://docs.sqd.dev/en/ai/mcp-server","what_it_proves":"Official docs confirm no-auth, read-only blockchain access and enumerate 31 current tools."}],"primary_reason":"SQD performs read-only blockchain queries and analytics, but official docs list three additional tools absent from the packet.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:c17410b0-e936-4e9a-84d4-ff19bc32f2c0","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 28 Directory names and official docs. Official server v0.8.5 has 31 read-only tools, adding Tron transaction/log queries and EVM traces; candidate inventory should be refreshed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"SQD","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c17410b0-e936-4e9a-84d4-ff19bc32f2c0&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://sqd.dev/imprint","provisional_risk":null,"publication_recommendation":"fix","publisher":"Subsquid Labs GmbH","publisher_url":"https://sqd.dev/","remote_url":"https://portal.sqd.dev/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: These are database-like reads over public chain data, not arbitrary user SQL or transaction execution.","evidence":"Queries public blockchain data: Official docs call all Portal MCP tools read-only and describe bounded blockchain transaction/log/analytics queries.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Queries public blockchain data","triggering_tools":["portal_bitcoin_get_analytics","portal_bitcoin_query_transactions","portal_debug_hyperliquid_query_replica_commands","portal_debug_query_blocks","portal_debug_resolve_time_to_block","portal_evm_get_analytics","portal_evm_get_contract_activity","portal_evm_get_contract_deployment","portal_evm_get_ohlc","portal_evm_query_logs","portal_evm_query_token_transfers","portal_evm_query_transactions","portal_get_head","portal_get_network_info","portal_get_recent_activity","portal_get_time_series","portal_get_wallet_summary","portal_hyperliquid_get_analytics","portal_hyperliquid_get_ohlc","portal_hyperliquid_query_fills","portal_list_networks","portal_resolve_entity","portal_solana_get_analytics","portal_solana_query_instructions","portal_solana_query_transactions","portal_substrate_get_analytics","portal_substrate_query_calls","portal_substrate_query_events"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@sqd.dev","tags":["accesses_calendar","network_access","reads_public_data","web_connector"],"tools":[{"description":"","name":"portal_bitcoin_get_analytics"},{"description":"","name":"portal_bitcoin_query_transactions"},{"description":"","name":"portal_debug_hyperliquid_query_replica_commands"},{"description":"","name":"portal_debug_query_blocks"},{"description":"","name":"portal_debug_resolve_time_to_block"},{"description":"","name":"portal_evm_get_analytics"},{"description":"","name":"portal_evm_get_contract_activity"},{"description":"","name":"portal_evm_get_contract_deployment"},{"description":"","name":"portal_evm_get_ohlc"},{"description":"","name":"portal_evm_query_logs"},{"description":"","name":"portal_evm_query_token_transfers"},{"description":"","name":"portal_evm_query_transactions"},{"description":"","name":"portal_get_head"},{"description":"","name":"portal_get_network_info"},{"description":"","name":"portal_get_recent_activity"},{"description":"","name":"portal_get_time_series"},{"description":"","name":"portal_get_wallet_summary"},{"description":"","name":"portal_hyperliquid_get_analytics"},{"description":"","name":"portal_hyperliquid_get_ohlc"},{"description":"","name":"portal_hyperliquid_query_fills"},{"description":"","name":"portal_list_networks"},{"description":"","name":"portal_resolve_entity"},{"description":"","name":"portal_solana_get_analytics"},{"description":"","name":"portal_solana_query_instructions"},{"description":"","name":"portal_solana_query_transactions"},{"description":"","name":"portal_substrate_get_analytics"},{"description":"","name":"portal_substrate_query_calls"},{"description":"","name":"portal_substrate_query_events"}],"tools_count":28,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c17410b0-e936-4e9a-84d4-ff19bc32f2c0","uuid":"56dda927-4a41-584f-8ecf-d5c9c877cc73","verification_tier":"community","version":""},"query_key":"subsquid labs gmbh sqd","schema_version":1,"status":"match"}