{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Basic Memory Cloud stores shared knowledge as editable Markdown notes. Search by meaning or structured fields and follow links between project context. Create memory projects and create, edit, move, or delete notes.","did":"f2f28870-3486-4287-824f-eadde8671d23","documentation_url":"https://docs.basicmemory.com/","editorial_description":{"extended_description":"Inspect recent activity, browse workspaces or directories, and build context from related notes. Schema tools infer, compare, and validate note structure for shared team workflows.","schema_version":1,"summary":"Basic Memory Cloud stores shared knowledge as editable Markdown notes.\nSearch by meaning or structured fields and follow links between project context.\nCreate memory projects and create, edit, move, or delete notes."},"homepage_url":"","icon":"https://basicmemory.com/images/basic-memory/basic-memory-logo-round.png","id":"f2f28870-3486-4287-824f-eadde8671d23","installs":0,"last_scanned":"","license":"","long_description":"Inspect recent activity, browse workspaces or directories, and build context from related notes. Schema tools infer, compare, and validate note structure for shared team workflows.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes delete_note and delete_project over the user's persistent knowledge base.","reasoning":"Deleting a project or note can irreversibly remove decisions, research, and linked context relied on across conversations.","risk_type":"data_deletion","severity":"high","title":"Notes and entire memory projects can be deleted","triggering_tools_or_skills":["delete_note","delete_project"]},{"evidence":"The connector creates projects and persists or reorganizes Markdown notes across the cloud knowledge base.","reasoning":"These writes change long-lived user-owned context that later conversations use.","risk_type":"data_modification","severity":"medium","title":"Persistent notes and projects can be created, edited, written, or moved","triggering_tools_or_skills":["create_memory_project","write_note","edit_note","move_note"]},{"evidence":"The connector retrieves user-authored notes and builds model context from them.","reasoning":"Imported or collaboratively edited notes are untrusted input and may contain instruction-like text.","risk_type":"prompt_injection_exposure","severity":"low","title":"Stored notes and linked context enter model context","triggering_tools_or_skills":["build_context","read_content","search_notes","read_note"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to Basic Memory Cloud workspaces and Markdown-backed projects; exact workspace roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f2f28870-3486-4287-824f-eadde8671d23.json","what_it_proves":"Candidate PR #125 record identity (name \"Basic Memory Cloud\", publisher, type web_connector) and 21 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f2f28870-3486-4287-824f-eadde8671d23: complete tool_names inventory (21 tools), remote streamable-http endpoint https://cloud.basicmemory.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Basic Memory Cloud can delete projects and notes and persistently alter the user's cross-conversation knowledge base.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f2f28870-3486-4287-824f-eadde8671d23","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 21 tools; plain Markdown ownership is stated, but deletion recovery and workspace isolation require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":21,"tools_or_skills_total":21},"name":"Basic Memory Cloud","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f2f28870-3486-4287-824f-eadde8671d23&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://basicmemory.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Basic Memory","publisher_url":"https://basicmemory.com/","remote_url":"https://cloud.basicmemory.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a project or note can irreversibly remove decisions, research, and linked context relied on across conversations.","evidence":"Notes and entire memory projects can be deleted: The inventory explicitly exposes delete_note and delete_project over the user's persistent knowledge base.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Notes and entire memory projects can be deleted","triggering_tools":["delete_note","delete_project"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change long-lived user-owned context that later conversations use.","evidence":"Persistent notes and projects can be created, edited, written, or moved: The connector creates projects and persists or reorganizes Markdown notes across the cloud knowledge base.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Persistent notes and projects can be created, edited, written, or moved","triggering_tools":["create_memory_project","write_note","edit_note","move_note"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@basicmemory.com","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"activity_feed"},{"description":"","name":"build_context"},{"description":"","name":"cloud_info"},{"description":"","name":"create_memory_project","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change long-lived user-owned context that later conversations use."}},{"description":"","name":"delete_note","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a project or note can irreversibly remove decisions, research, and linked context relied on across conversations."}},{"description":"","name":"delete_project","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a project or note can irreversibly remove decisions, research, and linked context relied on across conversations."}},{"description":"","name":"edit_note","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change long-lived user-owned context that later conversations use."}},{"description":"","name":"list_directory"},{"description":"","name":"list_memory_projects"},{"description":"","name":"list_workspaces"},{"description":"","name":"move_note","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change long-lived user-owned context that later conversations use."}},{"description":"","name":"read_content"},{"description":"","name":"read_note"},{"description":"","name":"recent_activity"},{"description":"","name":"release_notes"},{"description":"","name":"schema_diff"},{"description":"","name":"schema_infer"},{"description":"","name":"schema_validate"},{"description":"","name":"search_notes"},{"description":"","name":"view_note"},{"description":"","name":"write_note","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change long-lived user-owned context that later conversations use."}}],"tools_count":21,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f2f28870-3486-4287-824f-eadde8671d23","uuid":"46e28c68-ac85-5492-b05b-8ca1603bc647","verification_tier":"community","version":""},"query_key":"basic memory basic memory cloud","schema_version":1,"status":"match"}