{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"SignalSync queries organizational workflow requests and process definitions. Filter work by status, location, or assignee, summarize workloads, and inspect form structures. An active account with at least one accessible tenant is required, and existing tenant permissions apply.","did":"5036bf80-715d-48eb-8abd-84e0d87519d3","documentation_url":"https://help.signalsync.cloud/products/integrations/mcp/claude_mcp_connector","editorial_description":{"extended_description":"","schema_version":1,"summary":"SignalSync queries organizational workflow requests and process definitions.\nFilter work by status, location, or assignee, summarize workloads, and inspect form structures.\nAn active account with at least one accessible tenant is required, and existing tenant permissions apply."},"homepage_url":"","icon":"https://signalsync.cloud/icon.png","id":"5036bf80-715d-48eb-8abd-84e0d87519d3","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Complete inventory and description limit access to query/read of tenant workflow data.","reasoning":"Read-only private workflow access is Low.","risk_type":"private_data_read","severity":"low","title":"Reads workflow requests and definitions","triggering_tools_or_skills":["query_requests","query_workflows_definition"]},{"evidence":"The remote hosted implementation is not pinned.","reasoning":"Runtime capabilities may change after review.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5036bf80-715d-48eb-8abd-84e0d87519d3.json","what_it_proves":"Candidate PR #125 record identity (name \"SignalSync\", publisher, type web_connector) and 2 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5036bf80-715d-48eb-8abd-84e0d87519d3: complete tool_names inventory (2 tools), remote streamable-http endpoint https://api.signalsync.cloud/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:53:28Z","url_or_path":"https://help.signalsync.cloud/","what_it_proves":"Official help center documents tenant permissions, workflows, requests, and enterprise process definitions."}],"primary_reason":"SignalSync exposes only two tenant-scoped read queries.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5036bf80-715d-48eb-8abd-84e0d87519d3","reviewed_at":"2026-10-10","reviewer_notes":"Both tools and official tenant/security context were reviewed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":2,"tools_or_skills_total":2},"name":"SignalSync","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5036bf80-715d-48eb-8abd-84e0d87519d3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://signalsync.ai/legal/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Archibus Solution Center Romania","publisher_url":"http://signalsync.ai/","remote_url":"https://api.signalsync.cloud/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Read-only private workflow access is Low.","evidence":"Reads workflow requests and definitions: Complete inventory and description limit access to query/read of tenant workflow data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads workflow requests and definitions","triggering_tools":["query_requests","query_workflows_definition"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@signalsync.cloud","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"query_requests"},{"description":"","name":"query_workflows_definition"}],"tools_count":2,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5036bf80-715d-48eb-8abd-84e0d87519d3","uuid":"42c71308-f3d6-56b9-80d4-5a376bef9318","verification_tier":"community","version":""},"query_key":"archibus solution center romania signalsync","schema_version":1,"status":"match"}