{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Audioscrape searches spoken content from podcasts, public meetings, and uploaded recordings. Retrieve transcripts with speakers, timestamps, and links to relevant moments. Explore entity relationships or transcribe your own audio through authenticated access.","did":"835e642e-3f07-47cb-8856-c0b7300a6013","documentation_url":"https://www.audioscrape.com/docs/integrations/mcp","editorial_description":{"extended_description":"Inspect uploads and transcription status, search speakers or podcasts, and create share links. Private uploaded-audio search is separate from deliberate sharing.","schema_version":1,"summary":"Audioscrape searches spoken content from podcasts, public meetings, and uploaded recordings.\nRetrieve transcripts with speakers, timestamps, and links to relevant moments.\nExplore entity relationships or transcribe your own audio through authenticated access."},"homepage_url":"","icon":"","id":"835e642e-3f07-47cb-8856-c0b7300a6013","installs":0,"last_scanned":"","license":"","long_description":"Inspect uploads and transcription status, search speakers or podcasts, and create share links. Private uploaded-audio search is separate from deliberate sharing.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs state this creates a shareable URL/social preview for a specific moment, including workspace audio.","reasoning":"Creating a share link grants external access and is a security-sensitive sharing action.","risk_type":"credential_admin","severity":"high","title":"Creates a shareable access URL for an audio moment","triggering_tools_or_skills":["create_share_link"]},{"evidence":"Official docs state transcription draws from workspace plan minutes and document per-minute paid usage.","reasoning":"Submitting audio spends limited or paid service credits.","risk_type":"financial_transaction","severity":"high","title":"Consumes metered transcription minutes/credits","triggering_tools_or_skills":["transcribe_audio"]},{"evidence":"Official docs identify this as the sole write tool and say it creates an indexed transcription.","reasoning":"It persists a new private workspace record.","risk_type":"data_modification","severity":"medium","title":"Submits audio into a private searchable workspace","triggering_tools_or_skills":["transcribe_audio"]},{"evidence":"The transcription tool accepts an audio URL and fetch is also present.","reasoning":"The service makes outbound requests to caller-selected content.","risk_type":"arbitrary_network_access","severity":"low","title":"Fetches caller-selected audio URLs for transcription","triggering_tools_or_skills":["transcribe_audio","fetch"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.1 or a workspace API key exposes the public corpus plus that workspace’s private audio; plan quotas are shared across website, MCP and API.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/835e642e-3f07-47cb-8856-c0b7300a6013.json","what_it_proves":"Candidate PR #125 record identity (name \"Audioscrape\", publisher, type web_connector) and 19 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/835e642e-3f07-47cb-8856-c0b7300a6013: complete tool_names inventory (19 tools), remote streamable-http endpoint https://mcp.audioscrape.com/, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://www.audioscrape.com/docs/integrations/mcp","what_it_proves":"Official MCP reference says transcribe_audio submits a URL into the private workspace and create_share_link creates a shareable audio-moment URL; it also documents workspace-scoped OAuth/API-key access."},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://www.audioscrape.com/docs/for-agents","what_it_proves":"Official agent reference says MCP transcriptions/searches consume shared plan quotas, transcription is priced by minute, and shareable excerpt links can expose moments from workspace audio."}],"primary_reason":"Audioscrape can create share links for private audio and consume metered transcription credits.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:835e642e-3f07-47cb-8856-c0b7300a6013","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 19 Directory tools. Official docs inconsistently say 15 or 19 tools and expose request_upload_url on the agent page but not the Directory packet; inventory should be refreshed, though current High findings already stand.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":19,"tools_or_skills_total":19},"name":"Audioscrape","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=835e642e-3f07-47cb-8856-c0b7300a6013&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.audioscrape.com/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Audioscrape Inc.","publisher_url":"https://www.audioscrape.com/","remote_url":"https://mcp.audioscrape.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating a share link grants external access and is a security-sensitive sharing action.; It persists a new private workspace record.","evidence":"Creates a shareable access URL for an audio moment: Official docs state this creates a shareable URL/social preview for a specific moment, including workspace audio. | Submits audio into a private searchable workspace: Official docs identify this as the sole write tool and say it creates an indexed transcription.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["create_share_link","transcribe_audio"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Submitting audio spends limited or paid service credits.","evidence":"Consumes metered transcription minutes/credits: Official docs state transcription draws from workspace plan minutes and document per-minute paid usage.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Consumes metered transcription minutes/credits","triggering_tools":["transcribe_audio"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: The service makes outbound requests to caller-selected content.","evidence":"Fetches caller-selected audio URLs for transcription: The transcription tool accepts an audio URL and fetch is also present.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Fetches caller-selected audio URLs for transcription","triggering_tools":["transcribe_audio","fetch"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.audioscrape.com/support","tags":["forwards_data_to_third_party","modifies_data","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"create_share_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating a share link grants external access and is a security-sensitive sharing action.; It persists a new private workspace record."}},{"description":"","name":"fetch"},{"description":"","name":"get_charts"},{"description":"","name":"get_entity_graph"},{"description":"","name":"get_episode_overview"},{"description":"","name":"get_speaker"},{"description":"","name":"get_transcript"},{"description":"","name":"get_transcription_status"},{"description":"","name":"get_trending"},{"description":"","name":"list_my_datasets"},{"description":"","name":"list_my_uploads"},{"description":"","name":"list_podcast_episodes"},{"description":"","name":"list_recent_transcripts"},{"description":"","name":"search"},{"description":"","name":"search_audio"},{"description":"","name":"search_entities"},{"description":"","name":"search_podcasts"},{"description":"","name":"search_speakers"},{"description":"","name":"transcribe_audio","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Submitting audio spends limited or paid service credits."}}],"tools_count":19,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/835e642e-3f07-47cb-8856-c0b7300a6013","uuid":"c38a0899-bf17-513a-94bf-743fe66a20cd","verification_tier":"community","version":""},"query_key":"audioscrape","schema_version":1,"status":"match"}