{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Interactive Connector","confidence":"medium","description":"swissrailways helps compare and configure Swiss travel passes. Calculate ticket prices, review traveler options, and proceed through an external payment link. Swiss Travel Pass products are limited to travelers residing outside Switzerland.","did":"f0ff8e54-bb45-4652-a0e2-e9d322b944c5","documentation_url":"https://www.swissrailways.com/en/about-mcp-connector","editorial_description":{"extended_description":"Options include Swiss Travel Pass, Flex, Half Fare Card, applicable family discounts, and cancellation protection. Prices support CHF, EUR, GBP, and USD. Payment occurs at Switzerland Travel Centre's checkout; check order status afterward.","schema_version":1,"summary":"swissrailways helps compare and configure Swiss travel passes.\nCalculate ticket prices, review traveler options, and proceed through an external payment link.\nSwiss Travel Pass products are limited to travelers residing outside Switzerland."},"homepage_url":"","icon":"","id":"f0ff8e54-bb45-4652-a0e2-e9d322b944c5","installs":0,"last_scanned":"","license":"","long_description":"Options include Swiss Travel Pass, Flex, Half Fare Card, applicable family discounts, and cancellation protection. Prices support CHF, EUR, GBP, and USD. Payment occurs at Switzerland Travel Centre's checkout; check order status afterward.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The tools return travel-pass information, personalized options, prices, and payment-system choices.","reasoning":"This is shopping research and does not itself buy a ticket.","risk_type":"public_data_read","severity":"low","title":"Swiss rail products, options, and prices are retrieved","triggering_tools_or_skills":["swissrailways_fetch_prices","swissrailways_fetch_ticket_options","swissrailways_get_ticket_info"]},{"evidence":"The listing says Claude guides the user to secure checkout, while the inventory only calculates and renders an overview.","reasoning":"The handoff may lead to a purchase, but no submit_order or charge tool is declared.","risk_type":"public_data_read","severity":"low","title":"An order total and secure-checkout overview are prepared","triggering_tools_or_skills":["swissrailways_calculate_order_total_price","swissrailways_render_order_overview"]},{"evidence":"Remote ticket and order information is returned by the hosted connector.","reasoning":"Remote commerce content is untrusted input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Product descriptions and order status enter context","triggering_tools_or_skills":["swissrailways_get_ticket_info","swissrailways_fetch_order_status"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is declared; visible tools configure a prospective order and render a checkout overview but do not submit payment.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f0ff8e54-bb45-4652-a0e2-e9d322b944c5.json","what_it_proves":"Candidate PR #125 record identity (name \"swissrailways\", publisher, type interactive_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f0ff8e54-bb45-4652-a0e2-e9d322b944c5: complete tool_names inventory (8 tools), remote streamable-http endpoint https://anthropic.mcp.swissrailways.com/mcp, auth_posture no_auth, directory tier community"}],"primary_reason":"Swissrailways provides product configuration and checkout handoff without a declared purchase action.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f0ff8e54-bb45-4652-a0e2-e9d322b944c5","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight tools; fetch_order_status may require an opaque order reference, but no user account or PII scope is documented.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"swissrailways","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f0ff8e54-bb45-4652-a0e2-e9d322b944c5&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.swissrailways.com/en/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Switzerland Travel Centre","publisher_url":"https://www.swissrailways.com/en","remote_url":"https://anthropic.mcp.swissrailways.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: This is shopping research and does not itself buy a ticket.; The handoff may lead to a purchase, but no submit_order or charge tool is declared.","evidence":"Swiss rail products, options, and prices are retrieved: The tools return travel-pass information, personalized options, prices, and payment-system choices. | An order total and secure-checkout overview are prepared: The listing says Claude guides the user to secure checkout, while the inventory only calculates and renders an overview.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Reads public or publisher-provided data","triggering_tools":["swissrailways_fetch_prices","swissrailways_fetch_ticket_options","swissrailways_get_ticket_info","swissrailways_calculate_order_total_price","swissrailways_render_order_overview"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.swissrailways.com/en/contact","tags":["interactive_connector","network_access","reads_public_data"],"tools":[{"description":"","name":"swissrailways_calculate_order_total_price"},{"description":"","name":"swissrailways_fetch_billing_person_titles"},{"description":"","name":"swissrailways_fetch_order_payment_systems"},{"description":"","name":"swissrailways_fetch_order_status"},{"description":"","name":"swissrailways_fetch_prices"},{"description":"","name":"swissrailways_fetch_ticket_options"},{"description":"","name":"swissrailways_get_ticket_info"},{"description":"","name":"swissrailways_render_order_overview"}],"tools_count":8,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/f0ff8e54-bb45-4652-a0e2-e9d322b944c5","uuid":"da901fa6-27c4-5ade-ae47-762db8ce84f5","verification_tier":"community","version":""},"query_key":"switzerland travel centre swissrailways","schema_version":1,"status":"match"}