{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Acoustic analyzes customer, product, behavior, and campaign data. Build audience segments, draft messages, and assemble marketing campaigns. Inspect performance and update campaign configuration or status through authenticated access.","did":"eaa79487-e7d0-4d23-92ae-b06a75580bb0","documentation_url":"https://connect.goacoustic.com/hc/en-us/articles/49489659522067-Get-started-with-MCP","editorial_description":{"extended_description":"Explore contact timelines, engagement, product performance, channel reporting, and campaign executions. Tools preview messages or schedules, estimate segment reach, validate campaigns, and manage campaign steps.","schema_version":1,"summary":"Acoustic analyzes customer, product, behavior, and campaign data.\nBuild audience segments, draft messages, and assemble marketing campaigns.\nInspect performance and update campaign configuration or status through authenticated access."},"homepage_url":"","icon":"","id":"eaa79487-e7d0-4d23-92ae-b06a75580bb0","installs":0,"last_scanned":"","license":"","long_description":"Explore contact timelines, engagement, product performance, channel reporting, and campaign executions. Tools preview messages or schedules, estimate segment reach, validate campaigns, and manage campaign steps.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says the connector builds messages and assembles cross-channel campaigns, and the tools create campaign steps and change campaign status/configuration.","reasoning":"A status change can cause customer-facing campaign delivery as the authenticated organization, so live-versus-draft enforcement must be verified.","risk_type":"messaging_as_user","severity":"high","title":"Cross-channel campaign state can be activated or changed","triggering_tools_or_skills":["create_campaign","create_update_campaign_step","update_campaign_configuration","update_campaign_status"]},{"evidence":"Named tools create campaign drafts, create or update segment definitions, and add email sections.","reasoning":"These actions change shared marketing configuration and message content even before a campaign is sent.","risk_type":"data_modification","severity":"medium","title":"Audience segments and campaign content can be persisted","triggering_tools_or_skills":["create_campaign_draft","create_segment_definition","update_segment_definition","add_email_sections"]},{"evidence":"The description identifies contact profiles, identities, preferences, events, engagement, purchase history, sends, segments, and performance as live data.","reasoning":"The combined dataset contains customer identity and behavior information that is sensitive and potentially regulated.","risk_type":"private_data_read","severity":"medium","title":"Contact, behavior, purchase, and campaign data is exposed","triggering_tools_or_skills":["contact","product_contact_timeline","signals","sessions","campaign_executions"]},{"evidence":"Message bodies and customer-derived contact or behavioral content are returned to Claude.","reasoning":"User-generated or imported marketing content is untrusted and can carry prompt-injection text.","risk_type":"prompt_injection_exposure","severity":"low","title":"Customer and message content enters model context","triggering_tools_or_skills":["message","read_channel_body","grep_channel_body","contact"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants Acoustic access to live contacts, products, behaviors, segments, messages, and campaigns; exact channel scopes are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/eaa79487-e7d0-4d23-92ae-b06a75580bb0.json","what_it_proves":"Candidate PR #125 record identity (name \"Acoustic\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/eaa79487-e7d0-4d23-92ae-b06a75580bb0: complete tool_names inventory (85 tools), remote streamable-http endpoint https://mcp.goacoustic.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Acoustic can configure and activate customer-facing campaigns over sensitive contact and behavior data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:eaa79487-e7d0-4d23-92ae-b06a75580bb0","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 85 names; no explicit delete operation appears. Whether update_campaign_status directly schedules/sends requires runtime confirmation.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":85,"tools_or_skills_total":85},"name":"Acoustic","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=eaa79487-e7d0-4d23-92ae-b06a75580bb0&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.acoustic.com/privacy-notice","provisional_risk":null,"publication_recommendation":"accept","publisher":"Acoustic","publisher_url":"https://www.acoustic.com/","remote_url":"https://mcp.goacoustic.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: A status change can cause customer-facing campaign delivery as the authenticated organization, so live-versus-draft enforcement must be verified.","evidence":"Cross-channel campaign state can be activated or changed: The listing says the connector builds messages and assembles cross-channel campaigns, and the tools create campaign steps and change campaign status/configuration.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Cross-channel campaign state can be activated or changed","triggering_tools":["create_campaign","create_update_campaign_step","update_campaign_configuration","update_campaign_status"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions change shared marketing configuration and message content even before a campaign is sent.","evidence":"Audience segments and campaign content can be persisted: Named tools create campaign drafts, create or update segment definitions, and add email sections.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Audience segments and campaign content can be persisted","triggering_tools":["create_campaign_draft","create_segment_definition","update_segment_definition","add_email_sections"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The combined dataset contains customer identity and behavior information that is sensitive and potentially regulated.","evidence":"Contact, behavior, purchase, and campaign data is exposed: The description identifies contact profiles, identities, preferences, events, engagement, purchase history, sends, segments, and performance as live data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Contact, behavior, purchase, and campaign data is exposed","triggering_tools":["contact","product_contact_timeline","signals","sessions","campaign_executions"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.goacoustic.com/hc/en-us","tags":["accesses_messaging","modifies_data","network_access","oauth_required","reads_private_data","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_email_sections","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions change shared marketing configuration and message content even before a campaign is sent."}},{"description":"","name":"api_limits"},{"description":"","name":"campaign"},{"description":"","name":"campaign_executions","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: The combined dataset contains customer identity and behavior information that is sensitive and potentially regulated."}},{"description":"","name":"campaign_instances"},{"description":"","name":"campaign_schedule_preview"},{"description":"","name":"campaigns"},{"description":"","name":"campaigns_dimension"},{"description":"","name":"completed_sessions"},{"description":"","name":"consent_groups_dimension"},{"description":"","name":"consent_strategies"},{"description":"","name":"consent_strategies_dimension"},{"description":"","name":"contact","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: The combined dataset contains customer identity and behavior information that is sensitive and potentially regulated."}},{"description":"","name":"content_building_knowledge"},{"description":"","name":"create_campaign","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: A status change can cause customer-facing campaign delivery as the authenticated organization, so live-versus-draft enforcement must be verified."}},{"description":"","name":"create_campaign_draft","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions change shared marketing configuration and message content even before a campaign is sent."}},{"description":"","name":"create_segment_definition","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions change shared marketing configuration and message content even before a campaign is sent."}},{"description":"","name":"create_update_campaign_step","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: A status change can cause customer-facing campaign delivery as the authenticated organization, so live-versus-draft enforcement must be verified."}},{"description":"","name":"data_set_attribute_categories"},{"description":"","name":"detected_signal_counts"},{"description":"","name":"email_campaign_period_compare"},{"description":"","name":"email_performance_by_campaign"},{"description":"","name":"email_performance_summary"},{"description":"","name":"email_performance_trend"},{"description":"","name":"enabled_strategies"},{"description":"","name":"experiments_dimension"},{"description":"","name":"explain_reporting"},{"description":"","name":"explore_catalog"},{"description":"","name":"explore_metadata"},{"description":"","name":"get_operation_info"},{"description":"","name":"grep_channel_body"},{"description":"","name":"integrations"},{"description":"","name":"mailing"},{"description":"","name":"mailings"},{"description":"","name":"message"},{"description":"","name":"message_folders"},{"description":"","name":"message_links_dimension"},{"description":"","name":"message_performance"},{"description":"","name":"message_tags_dimension"},{"description":"","name":"messages"},{"description":"","name":"messages_dimension"},{"description":"","name":"omni_channel_performance_by_channel"},{"description":"","name":"preview_message"},{"description":"","name":"product"},{"description":"","name":"product_catalog_gap_ranking"},{"description":"","name":"product_category"},{"description":"","name":"product_contact_timeline","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: The combined dataset contains customer identity and behavior information that is sensitive and potentially regulated."}},{"description":"","name":"product_performance_by_category"},{"description":"","name":"product_performance_by_dimension"},{"description":"","name":"product_performance_overview"},{"description":"","name":"product_performance_ranking"},{"description":"","name":"product_performance_summary"},{"description":"","name":"product_performance_timeline"},{"description":"","name":"product_performance_trend"},{"description":"","name":"product_scraper_config"},{"description":"","name":"products"},{"description":"","name":"products_dimension"},{"description":"","name":"read_channel_body"},{"description":"","name":"reporting"},{"description":"","name":"reporting_catalog"},{"description":"","name":"reporting_metadata"},{"description":"","name":"rules"},{"description":"","name":"scheduled_campaigns"},{"description":"","name":"segment_definition"},{"description":"","name":"segment_definition_exists_by_name"},{"description":"","name":"segment_preview"},{"description":"","name":"segment_reach"},{"description":"","name":"segment_size"},{"description":"","name":"segmentation_limits"},{"description":"","name":"segments_dimension"},{"description":"","name":"send_job_progress"},{"description":"","name":"session"},{"description":"","name":"sessions","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: The combined dataset contains customer identity and behavior information that is sensitive and potentially regulated."}},{"description":"","name":"signal_composer_definition"},{"description":"","name":"signal_composer_definitions"},{"description":"","name":"signal_type"},{"description":"","name":"signal_types"},{"description":"","name":"signals","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: The combined dataset contains customer identity and behavior information that is sensitive and potentially regulated."}},{"description":"","name":"strategies"},{"description":"","name":"update_campaign_configuration","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: A status change can cause customer-facing campaign delivery as the authenticated organization, so live-versus-draft enforcement must be verified."}},{"description":"","name":"update_campaign_status","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: A status change can cause customer-facing campaign delivery as the authenticated organization, so live-versus-draft enforcement must be verified."}},{"description":"","name":"update_segment_definition","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions change shared marketing configuration and message content even before a campaign is sent."}},{"description":"","name":"validate_authentication"},{"description":"","name":"validate_campaign"},{"description":"","name":"validate_endpoint"}],"tools_count":85,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/eaa79487-e7d0-4d23-92ae-b06a75580bb0","uuid":"b54a8268-ff6b-5805-aeb5-71d1b62c525b","verification_tier":"community","version":""},"query_key":"acoustic","schema_version":1,"status":"match"}