{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Work with one authorized Aegis mailbox, calendar and contact list from Claude. Search messages, read attachments, prepare or send replies and organize mail. Only granted permissions are available, and confidential labels block connector access.","did":"ca47432b-18ee-4130-b00e-20933559929e","documentation_url":"https://aegis.email/connector","editorial_description":{"extended_description":"The connector can create calendar events, manage drafts and apply labels or filing changes. Sending, replying, forwarding, trashing and label deletion require confirmation. An owner-marked confidential label prevents access to matching message content, attachments and replies, and the connector cannot remove that protection. Access can be revoked in Aegis settings.","schema_version":1,"summary":"Work with one authorized Aegis mailbox, calendar and contact list from Claude.\nSearch messages, read attachments, prepare or send replies and organize mail.\nOnly granted permissions are available, and confidential labels block connector access."},"homepage_url":"","icon":"https://aegis.email/icon.png","id":"ca47432b-18ee-4130-b00e-20933559929e","installs":0,"last_scanned":"","license":"","long_description":"The connector can create calendar events, manage drafts and apply labels or filing changes. Sending, replying, forwarding, trashing and label deletion require confirmation. An owner-marked confidential label prevents access to matching message content, attachments and replies, and the connector cannot remove that protection. Access can be revoked in Aegis settings.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory exposes explicit send/reply/forward actions for the authorized mailbox.","reasoning":"External email communication as the mailbox owner is High impact.","risk_type":"messaging_as_user","severity":"high","title":"Email can be sent, replied to or forwarded","triggering_tools_or_skills":["send_message","reply_message","forward_message"]},{"evidence":"The declared names and description mark trashing and label deletion as destructive.","reasoning":"These actions remove mailbox data or organization.","risk_type":"data_deletion","severity":"high","title":"Messages can be trashed and labels deleted","triggering_tools_or_skills":["trash_message","delete_label"]},{"evidence":"The inventory contains direct mailbox and calendar write actions.","reasoning":"These persist user data changes.","risk_type":"data_modification","severity":"medium","title":"Drafts, labels, message state and calendar events can be changed","triggering_tools_or_skills":["create_draft","update_draft","create_label","move_message","create_calendar_event"]},{"evidence":"The connector runs at https://app.aegis.email/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation and tool behavior can change independently of this snapshot, so monitoring and runtime verification remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Aegis Mail is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization is required for one Aegis mailbox; granular read/write annotations are described but exact scopes are not listed.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ca47432b-18ee-4130-b00e-20933559929e.json","what_it_proves":"Candidate PR #125 record identity (name \"Aegis Mail\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ca47432b-18ee-4130-b00e-20933559929e: complete tool_names inventory (28 tools), remote streamable-http endpoint https://app.aegis.email/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Aegis Mail can send email and destructively trash mailbox content.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:ca47432b-18ee-4130-b00e-20933559929e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 28 tools. High send and delete actions are explicit from the inventory and listing.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"Aegis Mail","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ca47432b-18ee-4130-b00e-20933559929e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://aegis.email/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Aegis","publisher_url":"https://aegis.email/","remote_url":"https://app.aegis.email/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External email communication as the mailbox owner is High impact.","evidence":"Email can be sent, replied to or forwarded: The complete inventory exposes explicit send/reply/forward actions for the authorized mailbox.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Email can be sent, replied to or forwarded","triggering_tools":["send_message","reply_message","forward_message"]},{"description":"This connector can permanently remove data or resources. Review findings: These actions remove mailbox data or organization.","evidence":"Messages can be trashed and labels deleted: The declared names and description mark trashing and label deletion as destructive.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Messages can be trashed and labels deleted","triggering_tools":["trash_message","delete_label"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist user data changes.","evidence":"Drafts, labels, message state and calendar events can be changed: The inventory contains direct mailbox and calendar write actions.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Drafts, labels, message state and calendar events can be changed","triggering_tools":["create_draft","update_draft","create_label","move_message","create_calendar_event"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@aegis.email","tags":["accesses_calendar","accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"bulk_update_messages"},{"description":"","name":"create_calendar_event","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist user data changes."}},{"description":"","name":"create_draft","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist user data changes."}},{"description":"","name":"create_label","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist user data changes."}},{"description":"","name":"delete_label","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove mailbox data or organization."}},{"description":"","name":"forward_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External email communication as the mailbox owner is High impact."}},{"description":"","name":"get_mailbox_info"},{"description":"","name":"list_calendar_events"},{"description":"","name":"list_contacts"},{"description":"","name":"list_folders"},{"description":"","name":"list_labels"},{"description":"","name":"list_messages"},{"description":"","name":"mark_read"},{"description":"","name":"mark_spam"},{"description":"","name":"mark_unread"},{"description":"","name":"move_message","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist user data changes."}},{"description":"","name":"not_spam"},{"description":"","name":"read_attachment"},{"description":"","name":"read_message"},{"description":"","name":"read_thread"},{"description":"","name":"rename_label"},{"description":"","name":"reply_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External email communication as the mailbox owner is High impact."}},{"description":"","name":"restore_message"},{"description":"","name":"search_messages"},{"description":"","name":"send_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External email communication as the mailbox owner is High impact."}},{"description":"","name":"trash_message","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove mailbox data or organization."}},{"description":"","name":"update_draft","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist user data changes."}},{"description":"","name":"update_message_labels"}],"tools_count":28,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ca47432b-18ee-4130-b00e-20933559929e","uuid":"087a5467-398b-5293-b109-0c00d9abaa56","verification_tier":"community","version":""},"query_key":"aegis mail","schema_version":1,"status":"match"}