{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"1stCollab manages influencer campaigns and creator relationships. Review negotiations, contracts, deliverables, content, and campaign performance. With a brand account, update campaigns, respond to offers, and message creators directly.","did":"83dea6b7-411e-4ddc-a12a-eadc76f35bfb","documentation_url":"https://guide.1stcollab.com/en/articles/16546953-connecting-to-the-1stcollab-mcp","editorial_description":{"extended_description":"Tools refine briefs, manage personas or repeat deals, adjust timelines, handle fulfillment, and request usage rights. Reports include engagement, clicks, spend, and billing summaries.","schema_version":1,"summary":"1stCollab manages influencer campaigns and creator relationships.\nReview negotiations, contracts, deliverables, content, and campaign performance.\nWith a brand account, update campaigns, respond to offers, and message creators directly."},"homepage_url":"","icon":"","id":"83dea6b7-411e-4ddc-a12a-eadc76f35bfb","installs":0,"last_scanned":"","license":"","long_description":"Tools refine briefs, manage personas or repeat deals, adjust timelines, handle fulfillment, and request usage rights. Reports include engagement, clicks, spend, and billing summaries.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools communicate directly with creators in partnership/negotiation threads.","reasoning":"They send business and legally/financially consequential content as the brand.","risk_type":"messaging_as_user","severity":"high","title":"Sends creator messages and negotiation responses","triggering_tools_or_skills":["influencers_send_message","influencers_respond_to_negotiation","influencers_respond_to_repeat_deal","influencers_respond_to_usage_rights_counter"]},{"evidence":"The listing says negotiations include rates/deliverables and tools accept/respond to offers and manage contract fulfillment.","reasoning":"These actions can commit or administer paid influencer engagements.","risk_type":"financial_transaction","severity":"high","title":"Responds to paid-deal negotiations and configures repeat deals","triggering_tools_or_skills":["influencers_run_negotiation_plan","influencers_respond_to_negotiation","influencers_configure_repeat_deals","influencers_manage_contract_fulfillment"]},{"evidence":"The explicit tool removes a durable campaign-targeting persona.","reasoning":"It destroys shared marketing configuration.","risk_type":"data_deletion","severity":"high","title":"Deletes an influencer persona","triggering_tools_or_skills":["influencers_delete_persona"]},{"evidence":"These tools persist broad influencer-campaign workflow state.","reasoning":"They materially change campaigns and approvals.","risk_type":"data_modification","severity":"medium","title":"Creates/updates campaigns, briefs, personas and deliverables","triggering_tools_or_skills":["influencers_create_campaign","influencers_create_persona","influencers_update_campaign","influencers_update_brief","influencers_update_deliverable_timeline","influencers_review_content"]},{"evidence":"This tool uploads a file into a creator message thread.","reasoning":"It writes files and supports external communication.","risk_type":"file_write","severity":"medium","title":"Uploads message attachments","triggering_tools_or_skills":["influencers_upload_message_attachment"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a 1stCollab brand account is required; campaign, contract, negotiation, messaging and billing visibility follows brand permissions, which are not enumerated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/83dea6b7-411e-4ddc-a12a-eadc76f35bfb.json","what_it_proves":"Candidate PR #125 record identity (name \"1stCollab\", publisher, type web_connector) and 42 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/83dea6b7-411e-4ddc-a12a-eadc76f35bfb: complete tool_names inventory (42 tools), remote streamable-http endpoint https://mcp.1stcollab.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"1stCollab sends negotiation messages, manages paid creator deals and deletes campaign personas.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:83dea6b7-411e-4ddc-a12a-eadc76f35bfb","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 43 tools. Exact contract-binding thresholds and payment execution are not documented, but responding to rate-bearing negotiations/repeat deals is a consequential financial commitment capability.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":42,"tools_or_skills_total":42},"name":"1stCollab","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=83dea6b7-411e-4ddc-a12a-eadc76f35bfb&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.1stcollab.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"1stCollab","publisher_url":"https://www.1stcollab.com/","remote_url":"https://mcp.1stcollab.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They send business and legally/financially consequential content as the brand.","evidence":"Sends creator messages and negotiation responses: These tools communicate directly with creators in partnership/negotiation threads.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends creator messages and negotiation responses","triggering_tools":["influencers_send_message","influencers_respond_to_negotiation","influencers_respond_to_repeat_deal","influencers_respond_to_usage_rights_counter"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can commit or administer paid influencer engagements.","evidence":"Responds to paid-deal negotiations and configures repeat deals: The listing says negotiations include rates/deliverables and tools accept/respond to offers and manage contract fulfillment.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Responds to paid-deal negotiations and configures repeat deals","triggering_tools":["influencers_run_negotiation_plan","influencers_respond_to_negotiation","influencers_configure_repeat_deals","influencers_manage_contract_fulfillment"]},{"description":"This connector can permanently remove data or resources. Review findings: It destroys shared marketing configuration.","evidence":"Deletes an influencer persona: The explicit tool removes a durable campaign-targeting persona.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes an influencer persona","triggering_tools":["influencers_delete_persona"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change campaigns and approvals.","evidence":"Creates/updates campaigns, briefs, personas and deliverables: These tools persist broad influencer-campaign workflow state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates campaigns, briefs, personas and deliverables","triggering_tools":["influencers_create_campaign","influencers_create_persona","influencers_update_campaign","influencers_update_brief","influencers_update_deliverable_timeline","influencers_review_content"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: It writes files and supports external communication.","evidence":"Uploads message attachments: This tool uploads a file into a creator message thread.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Uploads message attachments","triggering_tools":["influencers_upload_message_attachment"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"help@1stcollab.com","tags":["accesses_messaging","deletes_data","filesystem_access","modifies_data","network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"influencers_configure_repeat_deals","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can commit or administer paid influencer engagements."}},{"description":"","name":"influencers_create_campaign","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change campaigns and approvals."}},{"description":"","name":"influencers_create_persona","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change campaigns and approvals."}},{"description":"","name":"influencers_delete_persona","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: It destroys shared marketing configuration."}},{"description":"","name":"influencers_get_billing_summary"},{"description":"","name":"influencers_get_brief"},{"description":"","name":"influencers_get_campaign_context"},{"description":"","name":"influencers_get_campaign_contexts"},{"description":"","name":"influencers_get_campaign_report"},{"description":"","name":"influencers_get_contract"},{"description":"","name":"influencers_get_contracts"},{"description":"","name":"influencers_get_creator_relationship"},{"description":"","name":"influencers_get_message_thread"},{"description":"","name":"influencers_get_message_threads"},{"description":"","name":"influencers_get_negotiation"},{"description":"","name":"influencers_get_negotiations"},{"description":"","name":"influencers_list_approvals"},{"description":"","name":"influencers_list_briefs"},{"description":"","name":"influencers_list_campaigns"},{"description":"","name":"influencers_list_content"},{"description":"","name":"influencers_list_content_tasks"},{"description":"","name":"influencers_list_contracts"},{"description":"","name":"influencers_list_deliverables"},{"description":"","name":"influencers_list_messages"},{"description":"","name":"influencers_list_negotiations"},{"description":"","name":"influencers_list_personas"},{"description":"","name":"influencers_list_tasks"},{"description":"","name":"influencers_manage_contract_fulfillment","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can commit or administer paid influencer engagements."}},{"description":"","name":"influencers_preview_persona_creators"},{"description":"","name":"influencers_refine_brief_section"},{"description":"","name":"influencers_request_usage_rights"},{"description":"","name":"influencers_respond_to_negotiation","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can commit or administer paid influencer engagements."}},{"description":"","name":"influencers_respond_to_repeat_deal","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They send business and legally/financially consequential content as the brand."}},{"description":"","name":"influencers_respond_to_usage_rights_counter","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They send business and legally/financially consequential content as the brand."}},{"description":"","name":"influencers_review_content","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change campaigns and approvals."}},{"description":"","name":"influencers_run_negotiation_plan","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can commit or administer paid influencer engagements."}},{"description":"","name":"influencers_send_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They send business and legally/financially consequential content as the brand."}},{"description":"","name":"influencers_update_brief","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change campaigns and approvals."}},{"description":"","name":"influencers_update_campaign","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change campaigns and approvals."}},{"description":"","name":"influencers_update_deliverable_timeline","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change campaigns and approvals."}},{"description":"","name":"influencers_update_persona"},{"description":"","name":"influencers_upload_message_attachment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: It writes files and supports external communication."}}],"tools_count":42,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/83dea6b7-411e-4ddc-a12a-eadc76f35bfb","uuid":"857be824-8e0a-5993-b094-0e479ab92f97","verification_tier":"community","version":""},"query_key":"1stcollab 1stcollab","schema_version":1,"status":"match"}