{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Analyze CallRail reports in Claude through Adzviser. Compare calls, sources, tracking numbers and campaigns. Inspect caller and duration trends for daily checks or periodic reporting.","did":"0450a524-afb9-4b8b-9a1c-9204ab6cef1e","documentation_url":"https://docs.adzviser.com/","editorial_description":{"extended_description":"The connector lists available workspaces, reporting metrics and breakdowns before retrieving the corresponding data. It requires an authenticated Adzviser connection and focuses on reporting rather than changing CallRail campaigns or tracking settings.","schema_version":1,"summary":"Analyze CallRail reports in Claude through Adzviser.\nCompare calls, sources, tracking numbers and campaigns.\nInspect caller and duration trends for daily checks or periodic reporting."},"homepage_url":"","icon":"https://adzviser.com/assets/images/logo.png","id":"0450a524-afb9-4b8b-9a1c-9204ab6cef1e","installs":0,"last_scanned":"","license":"","long_description":"The connector lists available workspaces, reporting metrics and breakdowns before retrieving the corresponding data. It requires an authenticated Adzviser connection and focuses on reporting rather than changing CallRail campaigns or tracking settings.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official pages describe retrieval of CallRail calls, sources, campaigns, conversions, metrics, and breakdowns from connected accounts.","reasoning":"Lead and call-reporting data can contain confidential business and customer information.","risk_type":"private_data_read","severity":"low","title":"CallRail reporting data is readable","triggering_tools_or_skills":["retrieve_reporting_data","list_metrics_and_breakdowns_callrail","list_workspace"]},{"evidence":"Official setup states the user connects CallRail with an API key and then queries it through an Adzviser workspace.","reasoning":"The integration depends on a reusable credential stored for future reporting requests.","risk_type":"persistent_credentials","severity":"low","title":"CallRail API key is retained by the service","triggering_tools_or_skills":[]},{"evidence":"Reporting dimensions may include lead, campaign, and call-derived text originating outside the user-controlled client.","reasoning":"Externally sourced reporting fields should be handled as untrusted data.","risk_type":"prompt_injection_exposure","severity":"low","title":"Call and campaign text can enter context","triggering_tools_or_skills":["retrieve_reporting_data"]}],"assessment_status":"reviewed","auth_and_scopes":"Adzviser workspace authentication plus a CallRail API key connected to a selected company; connector is officially described as read-only reporting.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0450a524-afb9-4b8b-9a1c-9204ab6cef1e.json","what_it_proves":"Candidate PR #125 record identity (name \"Adzviser CallRail\", publisher, type web_connector) and 3 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0450a524-afb9-4b8b-9a1c-9204ab6cef1e: complete tool_names inventory (3 tools), remote streamable-http endpoint https://callrail.mcp.adzviser.com/http, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:48:06Z","url_or_path":"https://adzviser.com/mcp/callrail","what_it_proves":"Official page describes a remote CallRail reporting connector that retrieves metrics and breakdowns for analysis across connected accounts."},{"accessed_at":"2026-10-10T20:48:06Z","url_or_path":"https://adzviser.com/connect/callrail-to-chatgpt-integration","what_it_proves":"Official comparison explicitly calls Adzviser's CallRail connector read-only and says CallRail is connected with an API key to one workspace company."}],"primary_reason":"Official publisher documentation explicitly describes the connector as read-only reporting, matching the complete three-tool inventory.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:0450a524-afb9-4b8b-9a1c-9204ab6cef1e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all three tools against two official pages; no action can update CallRail records or send SMS in this Adzviser connector.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":3,"tools_or_skills_total":3},"name":"Adzviser CallRail","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0450a524-afb9-4b8b-9a1c-9204ab6cef1e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://docs.adzviser.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Adzviser LLC","publisher_url":"https://adzviser.com/","remote_url":"https://callrail.mcp.adzviser.com/http","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Lead and call-reporting data can contain confidential business and customer information.","evidence":"CallRail reporting data is readable: Official pages describe retrieval of CallRail calls, sources, campaigns, conversions, metrics, and breakdowns from connected accounts.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"CallRail reporting data is readable","triggering_tools":["retrieve_reporting_data","list_metrics_and_breakdowns_callrail","list_workspace"]},{"description":"This connector may rely on credentials or tokens that remain valid beyond one request. Review findings: The integration depends on a reusable credential stored for future reporting requests.","evidence":"CallRail API key is retained by the service: Official setup states the user connects CallRail with an API key and then queries it through an Adzviser workspace.","manual_risk_type":"persistent_credentials","remediation":{"block_tool_categories":["privilege"],"steps":["Use short-lived, narrowly scoped credentials where supported.","Store secrets in an approved secret manager and rotate them regularly."]},"risk_type":"requires_persistent_credentials","severity":"low","title":"CallRail API key is retained by the service","triggering_tools":[]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://adzviser.com/contact-us","tags":["network_access","oauth_required","reads_private_data","requires_persistent_credentials","web_connector"],"tools":[{"description":"","name":"list_metrics_and_breakdowns_callrail"},{"description":"","name":"list_workspace"},{"description":"","name":"retrieve_reporting_data"}],"tools_count":3,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0450a524-afb9-4b8b-9a1c-9204ab6cef1e","uuid":"2547bbd8-3d21-59e5-b546-a80b39c6b762","verification_tier":"community","version":""},"query_key":"adzviser llc adzviser callrail","schema_version":1,"status":"match"}