catalyst-zoho-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates communication between an AI agent and official Zoho Catalyst MCP servers. All external URLs provided (
catalyst.zohomcp.com,mcp.zoho.com) are official vendor domains belonging to Zoho. - [SAFE]: The skill explicitly warns against data exposure, specifically noting that certain tools might return secrets in cleartext and instructing the agent to never echo those raw responses or hardcode secrets in prompts.
- [SAFE]: The setup instructions involve standard MCP configuration for known clients (Claude Desktop, Cursor, VS Code) and use standard OAuth 2.0 browser-based authorization flows.
Audit Metadata