{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-02","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Provides shared company context through Agently's temporal knowledge graph. Search information, inspect entities and relationships, or review recent knowledge episodes. Credentials are pinned to one workspace, with scoped tools for storing or forgetting context.","did":"c05f8812-97bb-4780-a52c-ce6eba3fdd65","documentation_url":"https://agently.dev/docs/mcp-server","editorial_description":{"extended_description":"The graph draws on connected sources such as Slack, Gmail, HubSpot, Linear, GitHub and uploads. Temporal validity distinguishes historical from current records. Access uses workspace API keys or OAuth, and schema lookup helps interpret the graph.","schema_version":1,"summary":"Provides shared company context through Agently's temporal knowledge graph.\nSearch information, inspect entities and relationships, or review recent knowledge episodes.\nCredentials are pinned to one workspace, with scoped tools for storing or forgetting context."},"homepage_url":"","icon":"https://iofpedacrenoxpyeomme.supabase.co/storage/v1/object/public/public-assets/Untitled%20design-35-3-512x512.png","id":"c05f8812-97bb-4780-a52c-ce6eba3fdd65","installs":0,"last_scanned":"","license":"","long_description":"The graph draws on connected sources such as Slack, Gmail, HubSpot, Linear, GitHub and uploads. Temporal validity distinguishes historical from current records. Access uses workspace API keys or OAuth, and schema lookup helps interpret the graph.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs list forget and say it removes facts stored through remember, although it is absent from the Directory packet.","reasoning":"Deleting durable knowledge is destructive to a meaningful company record.","risk_type":"data_deletion","severity":"high","title":"Deletes stored company-brain facts","triggering_tools_or_skills":["forget"]},{"evidence":"Official docs say remember stores a durable fact when write scope is granted.","reasoning":"It persistently changes the shared temporal knowledge graph.","risk_type":"data_modification","severity":"medium","title":"Stores durable company knowledge","triggering_tools_or_skills":["remember"]},{"evidence":"Official docs list seven tools including forget; the packet lists six.","reasoning":"Publishing the smaller inventory hides a destructive reachable capability.","risk_type":"identity_discrepancy","severity":"low","title":"Official action list contains an omitted tool","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth or workspace API keys are supported; write-scoped credentials expose remember and forget within one pinned workspace.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c05f8812-97bb-4780-a52c-ce6eba3fdd65.json","what_it_proves":"Candidate PR #125 record identity (name \"Agently\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c05f8812-97bb-4780-a52c-ce6eba3fdd65: complete tool_names inventory (6 tools), remote streamable-http endpoint https://api.agently.dev/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:00:03Z","url_or_path":"https://agently.dev/docs/mcp-server","what_it_proves":"Official docs enumerate remember and omitted forget, auth modes, write scoping and workspace pinning."}],"primary_reason":"Official Agently docs add a destructive forget tool omitted from the Directory inventory; remember writes durable company knowledge.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:c05f8812-97bb-4780-a52c-ce6eba3fdd65","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 6 Directory names and official docs. The documented seventh tool, forget, is missing and can remove facts stored by remember, so the candidate must be fixed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"Agently","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c05f8812-97bb-4780-a52c-ce6eba3fdd65&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://agently.dev/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Agently","publisher_url":"https://agently.dev/","remote_url":"https://api.agently.dev/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting durable knowledge is destructive to a meaningful company record.","evidence":"Deletes stored company-brain facts: Official docs list forget and say it removes facts stored through remember, although it is absent from the Directory packet.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes stored company-brain facts","triggering_tools":["forget"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It persistently changes the shared temporal knowledge graph.","evidence":"Stores durable company knowledge: Official docs say remember stores a durable fact when write scope is granted.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Stores durable company knowledge","triggering_tools":["remember"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@agently.dev","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"find_entity"},{"description":"","name":"get_neighbors"},{"description":"","name":"get_schema"},{"description":"","name":"recent_episodes"},{"description":"","name":"remember","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It persistently changes the shared temporal knowledge graph."}},{"description":"","name":"search"},{"description":"","name":"forget","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting durable knowledge is destructive to a meaningful company record."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c05f8812-97bb-4780-a52c-ce6eba3fdd65","uuid":"a12ba1b0-2830-5253-a85c-9c626b5d6f25","verification_tier":"community","version":""},"query_key":"agently","schema_version":1,"status":"match"}