Agent Tool Risk Report

api.dashboard.plaid.com

Generated by the Conformant public-subset battery and anchored to the Sigstore/Rekor transparency log. The grade below is tamper-evident: recompute the report’s canonical hash and compare it with the Rekor entry.

https://api.dashboard.plaid.com/mcp/sse

public-subset battery v2.0.0 · Fri, 14 Aug 2026 07:38:38 GMT · report be6d60638e0306bb

Overall B (88/100). Connect with standard review: minor findings to track. Public-subset battery: several checks require vendor credentials; full coverage via Cleared-to-Connect.

Second axis · not part of the grade

Spec 2026-07-28 readiness

NOT OBSERVABLE

Not determinable from the public probe. Credential-gated endpoints do not complete an unauthenticated handshake, so the negotiated revision cannot be read. This is a coverage limit, not a finding.

3 of 6 signals evaluable on the public probe · deprecation windows close 2027-07-28

RDY-01Transport generationcurrent
Streamable HTTP: the transport the 2026-07-28 stateless core is built on.
RDY-02Protocol revisionn/a
Revision negotiation could not be observed.
RDY-03Stateless corecurrent
Operates without a session header, matching the 2026-07-28 stateless core.
RDY-04Client registrationpartial
Exposes a Dynamic Client Registration endpoint and does not advertise CIMD support. DCR is deprecated with a window closing 2027-07-28, but CIMD advertisement is not yet consistently published, so this is reported as a migration item rather than a removal finding.
RDY-05Cacheable tool catalogn/a
Tool catalog cache posture not observable.
RDY-06Deprecated capabilitiesn/a
Capability set not observable.

Readiness measures migration posture against the specification finalized 2026-07-28. It is reported separately because a well-authenticated server on deprecated transport is a migration risk, not a security defect — scoring both on one axis would misprice both. Signals that could not be evaluated are excluded from the score rather than counted as passing.

CFM-01AuthenticationPASS

Endpoint refuses unauthenticated MCP initialize.

CFM-02Authorization (OAuth)WARN

Authentication is enforced but OAuth discovery is incomplete.

Missing WWW-Authenticate challenge. The endpoint rejects anonymous calls but does not return a WWW-Authenticate header, so MCP clients cannot discover how to authenticate (MCP authorization spec requires it).
No OAuth protected-resource metadata. /.well-known/oauth-protected-resource is not served. Clients cannot discover the authorization server per RFC 9728, forcing out-of-band setup.

CFM-03Tool poisoningN/A

Tool surface is behind authentication: requires the authenticated battery (Cleared-to-Connect).

CFM-04Scopes & least privilegeN/A

Tool surface is behind authentication: requires the authenticated battery (Cleared-to-Connect).

CFM-05Secrets exposureN/A

Server metadata is behind authentication: requires the authenticated battery (Cleared-to-Connect).

CFM-06Destructive-tool guardrailsN/A

Tool surface is behind authentication: requires the authenticated battery (Cleared-to-Connect).

CFM-08Transport securityPASS

TLS transport.

CFM-10Exposed configuration surfacePASS

No configuration or credential documents served at well-known paths.

CFM-09Command-injection exposure (advisory)INFO

Tool surface is behind authentication: the command-execution sink surface is not publicly visible. STDIO config-injection hardening (OX Security, 2026-04-15) is attested via Cleared-to-Connect, not remotely tested.

✔ anchoredsha256:be6d60638e03…924bff→ Sigstore/Rekor logIndex 2463224903verify ↗tamper-evident · independently checkable

Embed this grade

The badge URL is stable per server: weekly re-verification updates the grade and date in place. It links to this live anchored report.

<a href="https://conformant.io/report/be6d60638e0306bb" target="_blank" rel="noopener">
  <img src="https://conformant.io/api/badge?server=https%3A%2F%2Fapi.dashboard.plaid.com%2Fmcp%2Fsse" alt="Conformant security grade" width="232" height="44" />
</a>

Scan another server View the registry Get Cleared-to-Connect →