{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Combines SEO research and blog workflows through Able SEO by VibeSEO. Research keywords and competitors, inspect backlinks, audit sites and review Search Console data. Generate, approve and schedule blog posts within your connected account's projects.","did":"29775246-9001-485d-a74b-ee30979bfec9","documentation_url":"https://vibeseo.dev/mcp","editorial_description":{"extended_description":"Research includes search volume, difficulty, intent, keyword gaps, traffic estimates and backlink history. Search Console reporting covers verified sites' clicks, impressions, queries and pages. Content tools manage drafts and scheduling, while audit tools retrieve prioritized issues and crawled-page summaries.","schema_version":1,"summary":"Combines SEO research and blog workflows through Able SEO by VibeSEO.\nResearch keywords and competitors, inspect backlinks, audit sites and review Search Console data.\nGenerate, approve and schedule blog posts within your connected account's projects."},"homepage_url":"","icon":"https://vibeseo.dev/apple-touch-icon.png","id":"29775246-9001-485d-a74b-ee30979bfec9","installs":0,"last_scanned":"","license":"","long_description":"Research includes search volume, difficulty, intent, keyword gaps, traffic estimates and backlink history. Search Console reporting covers verified sites' clicks, impressions, queries and pages. Content tools manage drafts and scheduling, while audit tools retrieve prioritized issues and crawled-page summaries.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly supports post approval and scheduling against configured publications.","reasoning":"Scheduling approved content can cause it to be externally published as the user or site.","risk_type":"messaging_as_user","severity":"high","title":"Approves and schedules generated posts for publication","triggering_tools_or_skills":["approve_post","schedule_post","unschedule_post","generate_post"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for SEO projects/publications; exact publishing targets, approval roles and queue-credit behavior are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/29775246-9001-485d-a74b-ee30979bfec9.json","what_it_proves":"Candidate PR #125 record identity (name \"Able SEO by VibeSEO\", publisher, type web_connector) and 53 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/29775246-9001-485d-a74b-ee30979bfec9: complete tool_names inventory (53 tools), remote streamable-http endpoint https://mcp.vibeseo.dev/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Able SEO can approve and schedule generated content for external publication.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:29775246-9001-485d-a74b-ee30979bfec9","reviewed_at":"2026-10-10","reviewer_notes":"start_site_audit and URL-backed SEO data create arbitrary-network/prompt-injection exposure. Verify whether refill_queue consumes purchased credits and whether approve_post alone publishes immediately.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":53,"tools_or_skills_total":53},"name":"Able SEO by VibeSEO","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=29775246-9001-485d-a74b-ee30979bfec9&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://vibeseo.dev/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"VibeSEO","publisher_url":"https://vibeseo.dev/","remote_url":"https://mcp.vibeseo.dev/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Scheduling approved content can cause it to be externally published as the user or site.","evidence":"Approves and schedules generated posts for publication: The complete inventory explicitly supports post approval and scheduling against configured publications.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Approves and schedules generated posts for publication","triggering_tools":["approve_post","schedule_post","unschedule_post","generate_post"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://vibeseo.dev/contacts","tags":["network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"approve_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Scheduling approved content can cause it to be externally published as the user or site."}},{"description":"","name":"autocomplete_keywords"},{"description":"","name":"backlink_history"},{"description":"","name":"comparison_keywords"},{"description":"","name":"competitive_overview"},{"description":"","name":"domain_competitor_suggestions"},{"description":"","name":"domain_overview"},{"description":"","name":"domain_top_keywords"},{"description":"","name":"domain_top_pages"},{"description":"","name":"domain_traffic_history"},{"description":"","name":"generate_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Scheduling approved content can cause it to be externally published as the user or site."}},{"description":"","name":"get_audit"},{"description":"","name":"get_audit_summary"},{"description":"","name":"get_backlink_profile"},{"description":"","name":"get_keyword_metrics"},{"description":"","name":"get_location_by_code"},{"description":"","name":"get_month_view"},{"description":"","name":"get_post"},{"description":"","name":"get_project"},{"description":"","name":"get_publication"},{"description":"","name":"get_site_information"},{"description":"","name":"gsc_query_details"},{"description":"","name":"gsc_status"},{"description":"","name":"gsc_summary"},{"description":"","name":"gsc_top_pages"},{"description":"","name":"gsc_top_queries"},{"description":"","name":"gsc_trend"},{"description":"","name":"keyword_gap"},{"description":"","name":"list_audit_issues"},{"description":"","name":"list_audits_for_project"},{"description":"","name":"list_backlinks"},{"description":"","name":"list_cities"},{"description":"","name":"list_competitors"},{"description":"","name":"list_countries"},{"description":"","name":"list_crawled_pages"},{"description":"","name":"list_domain_history"},{"description":"","name":"list_keyword_history"},{"description":"","name":"list_languages"},{"description":"","name":"list_posts"},{"description":"","name":"list_projects"},{"description":"","name":"list_publications"},{"description":"","name":"preposition_keywords"},{"description":"","name":"question_keywords"},{"description":"","name":"refill_queue"},{"description":"","name":"refresh_ideas"},{"description":"","name":"reject_post"},{"description":"","name":"related_keywords"},{"description":"","name":"replace_competitors"},{"description":"","name":"schedule_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Scheduling approved content can cause it to be externally published as the user or site."}},{"description":"","name":"score_keyword"},{"description":"","name":"search_locations"},{"description":"","name":"start_site_audit"},{"description":"","name":"unschedule_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Scheduling approved content can cause it to be externally published as the user or site."}}],"tools_count":53,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/29775246-9001-485d-a74b-ee30979bfec9","uuid":"7d694a68-ae46-5695-8a9c-483ab4b1dd98","verification_tier":"community","version":""},"query_key":"able seo by vibeseo","schema_version":1,"status":"match"}