{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"AgendaForge connects Claude to conference, summit, and meetup operations. Review agendas, CFP submissions, speakers, sponsors, registrations, and email activity. Changes and communications are proposals until an organizer approves them inside AgendaForge.","did":"553865aa-64b5-4b4e-9354-5b9121b4d54b","documentation_url":"https://agendaforge.app/developers","editorial_description":{"extended_description":"Read tools search event data and check schedule conflicts. Proposed writes cover sessions, contacts, sponsors, forms, attendee check-in, portal invitations, and messages. Authentication uses OAuth or an organization API key with read/write scopes, and access is limited to organizations you belong to.","schema_version":1,"summary":"AgendaForge connects Claude to conference, summit, and meetup operations.\nReview agendas, CFP submissions, speakers, sponsors, registrations, and email activity.\nChanges and communications are proposals until an organizer approves them inside AgendaForge."},"homepage_url":"","icon":"https://agendaforge.app/favicon.svg","id":"553865aa-64b5-4b4e-9354-5b9121b4d54b","installs":0,"last_scanned":"","license":"","long_description":"Read tools search event data and check schedule conflicts. Proposed writes cover sessions, contacts, sponsors, forms, attendee check-in, portal invitations, and messages. Authentication uses OAuth or an organization API key with read/write scopes, and access is limited to organizations you belong to.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Tools explicitly send external messages and invitations.","reasoning":"External communication is High.","risk_type":"messaging_as_user","severity":"high","title":"Sends attendee/speaker email and portal invitations","triggering_tools_or_skills":["send_email","send_speaker_message","send_speaker_reminder","invite_to_portal"]},{"evidence":"Tools explicitly delete meaningful event records.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Deletes sessions and sponsors","triggering_tools_or_skills":["delete_session","delete_sponsor"]},{"evidence":"These change live event operations.","reasoning":"Operational event actions are High.","risk_type":"deployment_infrastructure","severity":"high","title":"Schedules sessions and checks in attendees","triggering_tools_or_skills":["schedule_session","check_in_attendee"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capabilities can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/553865aa-64b5-4b4e-9354-5b9121b4d54b.json","what_it_proves":"Candidate PR #125 record identity (name \"AgendaForge\", publisher, type web_connector) and 53 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/553865aa-64b5-4b4e-9354-5b9121b4d54b: complete tool_names inventory (53 tools), remote streamable-http endpoint https://mcp.agendaforge.app/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"AgendaForge sends email/invitations, deletes event records, and changes live event schedules.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:553865aa-64b5-4b4e-9354-5b9121b4d54b","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were not available.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":53,"tools_or_skills_total":53},"name":"AgendaForge","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=553865aa-64b5-4b4e-9354-5b9121b4d54b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://agendaforge.app/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AgendaForge","publisher_url":"https://agendaforge.app/","remote_url":"https://mcp.agendaforge.app/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External communication is High.","evidence":"Sends attendee/speaker email and portal invitations: Tools explicitly send external messages and invitations.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends attendee/speaker email and portal invitations","triggering_tools":["send_email","send_speaker_message","send_speaker_reminder","invite_to_portal"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Deletes sessions and sponsors: Tools explicitly delete meaningful event records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes sessions and sponsors","triggering_tools":["delete_session","delete_sponsor"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Operational event actions are High.","evidence":"Schedules sessions and checks in attendees: These change live event operations.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Schedules sessions and checks in attendees","triggering_tools":["schedule_session","check_in_attendee"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@agendaforge.app","tags":["accesses_calendar","accesses_messaging","code_deployment","deletes_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_contact_note"},{"description":"","name":"assign_speaker"},{"description":"","name":"check_in_attendee","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Operational event actions are High."}},{"description":"","name":"check_schedule_conflicts"},{"description":"","name":"create_email_template"},{"description":"","name":"create_event"},{"description":"","name":"create_form"},{"description":"","name":"create_session"},{"description":"","name":"create_session_from_submission"},{"description":"","name":"create_speaker_task"},{"description":"","name":"create_sponsor"},{"description":"","name":"decide_submission"},{"description":"","name":"delete_session","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"delete_sponsor","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"draft_email"},{"description":"","name":"get_agenda"},{"description":"","name":"get_contact"},{"description":"","name":"get_email_activity"},{"description":"","name":"get_event"},{"description":"","name":"get_registration_stats"},{"description":"","name":"get_review_progress"},{"description":"","name":"get_session"},{"description":"","name":"import_contacts"},{"description":"","name":"invite_to_portal","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External communication is High."}},{"description":"","name":"list_attendees"},{"description":"","name":"list_email_templates"},{"description":"","name":"list_events"},{"description":"","name":"list_forms"},{"description":"","name":"list_my_orgs"},{"description":"","name":"list_pending_approvals"},{"description":"","name":"list_sessions"},{"description":"","name":"list_speaker_tasks"},{"description":"","name":"list_speakers"},{"description":"","name":"list_sponsors"},{"description":"","name":"list_submissions"},{"description":"","name":"list_tracks_rooms"},{"description":"","name":"manage_rooms"},{"description":"","name":"manage_tracks"},{"description":"","name":"remove_session_speaker"},{"description":"","name":"request_media_upload"},{"description":"","name":"schedule_session","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Operational event actions are High."}},{"description":"","name":"search"},{"description":"","name":"search_contacts"},{"description":"","name":"semantic_search"},{"description":"","name":"send_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External communication is High."}},{"description":"","name":"send_speaker_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External communication is High."}},{"description":"","name":"send_speaker_reminder","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External communication is High."}},{"description":"","name":"set_submission_status"},{"description":"","name":"update_contact"},{"description":"","name":"update_form"},{"description":"","name":"update_form_pipeline"},{"description":"","name":"update_session"},{"description":"","name":"update_sponsor"}],"tools_count":53,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/553865aa-64b5-4b4e-9354-5b9121b4d54b","uuid":"edc6bd7b-c3ae-55b4-98b7-7ada2f45d05b","verification_tier":"community","version":""},"query_key":"agendaforge","schema_version":1,"status":"match"}