{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage Brazilian legal-practice records with Advogalia. Review cases, clients and deadlines, and generate drafts from case information. Lawyer review is required; filing, signing and sending happen only in the app.","did":"1331f016-b613-4e13-9a3a-1ea346e0c27e","documentation_url":"https://docs.advogalia.com/mcp","editorial_description":{"extended_description":"The connector creates or updates cases, clients and deadlines and reads DJEN notices or monitored DataJud proceedings. Drafts include petitions, fee proposals and responses to notices, with links to review them in Advogalia. Authorized scopes govern access; drafts may contain placeholders needing completion.","schema_version":1,"summary":"Manage Brazilian legal-practice records with Advogalia.\nReview cases, clients and deadlines, and generate drafts from case information.\nLawyer review is required; filing, signing and sending happen only in the app."},"homepage_url":"","icon":"https://advogalia.com/icon-512.png","id":"1331f016-b613-4e13-9a3a-1ea346e0c27e","installs":0,"last_scanned":"","license":"","long_description":"The connector creates or updates cases, clients and deadlines and reads DJEN notices or monitored DataJud proceedings. Drafts include petitions, fee proposals and responses to notices, with links to review them in Advogalia. Authorized scopes govern access; drafts may contain placeholders needing completion.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The declared tools explicitly create and update persistent case, client and deadline records.","reasoning":"They alter consequential legal-workspace data.","risk_type":"data_modification","severity":"medium","title":"Creates and updates legal cases, clients and deadlines","triggering_tools_or_skills":["advogalia_create_caso","advogalia_create_cliente","advogalia_create_prazo","advogalia_update_caso","advogalia_update_cliente","advogalia_update_prazo"]},{"evidence":"The listing states that client data includes CPF/CNPJ, email and phone and that the connector reads matters, notices and monitored proceedings.","reasoning":"These are sensitive personal and legal records.","risk_type":"private_data_read","severity":"low","title":"Reads client and legal-matter information","triggering_tools_or_skills":["advogalia_get_caso","advogalia_get_cliente","advogalia_list_intimacoes","advogalia_list_monitoramento"]},{"evidence":"The connector retrieves court notices and proceeding updates and uses them to generate legal drafts.","reasoning":"Court and party-authored text can contain adversarial content.","risk_type":"prompt_injection_exposure","severity":"low","title":"Court notices and matter records contain external text","triggering_tools_or_skills":["advogalia_generate_resposta_intimacao","advogalia_list_intimacoes","advogalia_list_monitoramento"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth and user-selected API-key scopes control access to Brazilian legal-office cases, clients and deadlines; exact scope names are not provided.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1331f016-b613-4e13-9a3a-1ea346e0c27e.json","what_it_proves":"Candidate PR #125 record identity (name \"Advogalia\", publisher, type web_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1331f016-b613-4e13-9a3a-1ea346e0c27e: complete tool_names inventory (17 tools), remote streamable-http endpoint https://mcp.advogalia.com/mcp, auth_posture auth_required, declared sensitive data types, directory tier community"}],"primary_reason":"The connector creates and updates legal-office records but the listing explicitly excludes filing, signing and sending.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:1331f016-b613-4e13-9a3a-1ea346e0c27e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 17 names. The official MCP docs URL was inaccessible and is not cited; runtime verification should confirm generated petitions/proposals are returned only as drafts and never submitted.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"Advogalia","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1331f016-b613-4e13-9a3a-1ea346e0c27e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://advogalia.com/privacidade","provisional_risk":null,"publication_recommendation":"accept","publisher":"Advogalia","publisher_url":"https://advogalia.com/","remote_url":"https://mcp.advogalia.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter consequential legal-workspace data.","evidence":"Creates and updates legal cases, clients and deadlines: The declared tools explicitly create and update persistent case, client and deadline records.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates legal cases, clients and deadlines","triggering_tools":["advogalia_create_caso","advogalia_create_cliente","advogalia_create_prazo","advogalia_update_caso","advogalia_update_cliente","advogalia_update_prazo"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: These are sensitive personal and legal records.","evidence":"Reads client and legal-matter information: The listing states that client data includes CPF/CNPJ, email and phone and that the connector reads matters, notices and monitored proceedings.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads client and legal-matter information","triggering_tools":["advogalia_get_caso","advogalia_get_cliente","advogalia_list_intimacoes","advogalia_list_monitoramento"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contato@advogalia.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"advogalia_create_caso","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter consequential legal-workspace data."}},{"description":"","name":"advogalia_create_cliente","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter consequential legal-workspace data."}},{"description":"","name":"advogalia_create_prazo","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter consequential legal-workspace data."}},{"description":"","name":"advogalia_generate_peticao"},{"description":"","name":"advogalia_generate_proposta"},{"description":"","name":"advogalia_generate_resposta_intimacao"},{"description":"","name":"advogalia_get_assistente_prompt"},{"description":"","name":"advogalia_get_caso"},{"description":"","name":"advogalia_get_cliente"},{"description":"","name":"advogalia_list_casos"},{"description":"","name":"advogalia_list_clientes"},{"description":"","name":"advogalia_list_intimacoes"},{"description":"","name":"advogalia_list_monitoramento"},{"description":"","name":"advogalia_list_prazos"},{"description":"","name":"advogalia_update_caso","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter consequential legal-workspace data."}},{"description":"","name":"advogalia_update_cliente","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter consequential legal-workspace data."}},{"description":"","name":"advogalia_update_prazo","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter consequential legal-workspace data."}}],"tools_count":17,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1331f016-b613-4e13-9a3a-1ea346e0c27e","uuid":"888a8947-ae2a-51d5-864c-ea0dbcf905ba","verification_tier":"community","version":""},"query_key":"advogalia advogalia","schema_version":1,"status":"match"}