{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-01","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Appllama is a reference library of mobile-app screens and flows. Search apps, onboarding, paywalls, and interface elements in Claude. Explore design examples alongside the library's revenue context.","did":"2f07c8d3-a131-4c82-8d89-be0bf302f06f","documentation_url":"https://appllama.io/mcp","editorial_description":{"extended_description":"Tools retrieve individual apps, screens, flows, and saved boards, and list screens within an app. The library is aimed at founders, designers, and product teams researching mobile interfaces. The connector requires authentication.","schema_version":1,"summary":"Appllama is a reference library of mobile-app screens and flows.\nSearch apps, onboarding, paywalls, and interface elements in Claude.\nExplore design examples alongside the library's revenue context."},"homepage_url":"","icon":"https://public.appllama.io/llama.png","id":"2f07c8d3-a131-4c82-8d89-be0bf302f06f","installs":0,"last_scanned":"","license":"","long_description":"Tools retrieve individual apps, screens, flows, and saved boards, and list screens within an app. The library is aimed at founders, designers, and product teams researching mobile interfaces. The connector requires authentication.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All 12 declared tools are get/list/search operations; account boards and credits are private to the authenticated user.","reasoning":"The connector reads private and licensed design-research data but exposes no mutation or spend action.","risk_type":"private_data_read","severity":"low","title":"Reads design-library content, account boards and credit balance","triggering_tools_or_skills":["get_app","get_board","get_credits","get_screen","list_my_boards","search_apps","search_screens"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for Appllama account data; exact scopes are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2f07c8d3-a131-4c82-8d89-be0bf302f06f.json","what_it_proves":"Candidate PR #125 record identity (name \"Appllama\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2f07c8d3-a131-4c82-8d89-be0bf302f06f: complete tool_names inventory (12 tools), remote streamable-http endpoint https://mcp.appllama.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Appllama is a read-only research connector for app designs and account boards.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:2f07c8d3-a131-4c82-8d89-be0bf302f06f","reviewed_at":"2026-10-10","reviewer_notes":"get_credits reads balance only; no tool name evidences credit consumption or purchase, although ordinary service access may have plan limits.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"Appllama","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2f07c8d3-a131-4c82-8d89-be0bf302f06f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://appllama.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Appllama","publisher_url":"https://appllama.io/","remote_url":"https://mcp.appllama.io/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The connector reads private and licensed design-research data but exposes no mutation or spend action.","evidence":"Reads design-library content, account boards and credit balance: All 12 declared tools are get/list/search operations; account boards and credits are private to the authenticated user.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads design-library content, account boards and credit balance","triggering_tools":["get_app","get_board","get_credits","get_screen","list_my_boards","search_apps","search_screens"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://appllama.io/support","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_app"},{"description":"","name":"get_board"},{"description":"","name":"get_credits"},{"description":"","name":"get_element_screens"},{"description":"","name":"get_flow_apps"},{"description":"","name":"get_screen"},{"description":"","name":"list_app_screens"},{"description":"","name":"list_flows"},{"description":"","name":"list_my_boards"},{"description":"","name":"list_ui_elements"},{"description":"","name":"search_apps"},{"description":"","name":"search_screens"}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2f07c8d3-a131-4c82-8d89-be0bf302f06f","uuid":"e19e7046-6e28-566d-9036-cbbede30a9a1","verification_tier":"community","version":""},"query_key":"appllama","schema_version":1,"status":"match"}