{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-23","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Avoma brings meeting transcripts, AI notes, scorecards, and team usage into Claude. Find meetings by business context and review discussions, outcomes, or coaching results. The connector can change meeting outcomes, purposes, and privacy under your existing Avoma permissions.","did":"59b487c2-a8e5-45b2-b780-8c78b9b0fb47","documentation_url":"https://help.avoma.com/getting-started-with-avoma-mcp-connector","editorial_description":{"extended_description":"Privacy settings can be private, organization-wide, public, or team-scoped. Tools also list teams, deal stages, meeting types, and outcomes. Access uses OAuth credentials for the connected account.","schema_version":1,"summary":"Avoma brings meeting transcripts, AI notes, scorecards, and team usage into Claude.\nFind meetings by business context and review discussions, outcomes, or coaching results.\nThe connector can change meeting outcomes, purposes, and privacy under your existing Avoma permissions."},"homepage_url":"","icon":"https://cdn.prod.website-files.com/5de236b4d41434460ade73ac/5de60e3eb8a0ed66a1aed92b_Avoma-Icon-Color-32.png","id":"59b487c2-a8e5-45b2-b780-8c78b9b0fb47","installs":0,"last_scanned":"","license":"","long_description":"Privacy settings can be private, organization-wide, public, or team-scoped. Tools also list teams, deal stages, meeting types, and outcomes. Access uses OAuth credentials for the connected account.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Tools persist meeting state/access settings.","reasoning":"Meaningful workspace changes are Medium.","risk_type":"data_modification","severity":"medium","title":"Changes meeting metadata and privacy","triggering_tools_or_skills":["set_meeting_outcome","set_meeting_privacy","set_meeting_purpose"]},{"evidence":"Description and names establish private meeting reads.","reasoning":"Private reads are Low.","risk_type":"private_data_read","severity":"low","title":"Reads transcripts, notes, scorecards and usage","triggering_tools_or_skills":["get_meeting_transcript","get_meeting_notes","list_scorecard_evaluations"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/59b487c2-a8e5-45b2-b780-8c78b9b0fb47.json","what_it_proves":"Candidate PR #125 record identity (name \"Avoma\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/59b487c2-a8e5-45b2-b780-8c78b9b0fb47: complete tool_names inventory (14 tools), remote streamable-http endpoint https://mcp.avoma.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Avoma changes meeting privacy, purpose, and outcome while otherwise reading meeting intelligence.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:59b487c2-a8e5-45b2-b780-8c78b9b0fb47","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"Avoma","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=59b487c2-a8e5-45b2-b780-8c78b9b0fb47&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.avoma.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Avoma","publisher_url":"https://www.avoma.com/","remote_url":"https://mcp.avoma.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium.","evidence":"Changes meeting metadata and privacy: Tools persist meeting state/access settings.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes meeting metadata and privacy","triggering_tools":["set_meeting_outcome","set_meeting_privacy","set_meeting_purpose"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Private reads are Low.","evidence":"Reads transcripts, notes, scorecards and usage: Description and names establish private meeting reads.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads transcripts, notes, scorecards and usage","triggering_tools":["get_meeting_transcript","get_meeting_notes","list_scorecard_evaluations"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"help@avoma.com","tags":["accesses_calendar","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_current_datetime"},{"description":"","name":"get_meeting"},{"description":"","name":"get_meeting_notes"},{"description":"","name":"get_meeting_transcript"},{"description":"","name":"list_deal_stages"},{"description":"","name":"list_meeting_outcomes"},{"description":"","name":"list_meeting_types"},{"description":"","name":"list_meetings"},{"description":"","name":"list_scorecard_evaluations"},{"description":"","name":"list_team_usage_metrics"},{"description":"","name":"list_teams"},{"description":"","name":"set_meeting_outcome","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium."}},{"description":"","name":"set_meeting_privacy","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium."}},{"description":"","name":"set_meeting_purpose","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium."}}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/59b487c2-a8e5-45b2-b780-8c78b9b0fb47","uuid":"3602fc9c-dc68-5414-b800-6dc6df1212cc","verification_tier":"community","version":""},"query_key":"avoma","schema_version":1,"status":"match"}