{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Stores information in LeapMemory for recall across Claude conversations. Save facts, retrieve relevant memories and load a background briefing. Set, list and update standing preferences; view or delete stored information in the LeapMemory app.","did":"23bf6e10-8173-4375-9023-b655bd19c4b0","documentation_url":"https://leapmemory.com/docs","editorial_description":{"extended_description":"Recall tools return relevant facts with original wording, while separate rule tools manage ongoing preferences. The connector requires an authenticated LeapMemory account. Deletion is described as an app action rather than a listed connector tool.","schema_version":1,"summary":"Stores information in LeapMemory for recall across Claude conversations.\nSave facts, retrieve relevant memories and load a background briefing.\nSet, list and update standing preferences; view or delete stored information in the LeapMemory app."},"homepage_url":"","icon":"","id":"23bf6e10-8173-4375-9023-b655bd19c4b0","installs":0,"last_scanned":"","license":"","long_description":"Recall tools return relevant facts with original wording, while separate rule tools manage ongoing preferences. The connector requires an authenticated LeapMemory account. Deletion is described as an app action rather than a listed connector tool.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The inventory declares memory save and rule create/update actions; the description says saved facts never expire and rules affect how Claude works in future conversations.","reasoning":"These tools make durable cross-conversation changes and can influence later model behavior.","risk_type":"data_modification","severity":"medium","title":"Persists long-term memories and standing rules","triggering_tools_or_skills":["remember","add_rule","update_rule"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required and each user's memory is described as isolated; retention, OAuth scopes and rule visibility are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/23bf6e10-8173-4375-9023-b655bd19c4b0.json","what_it_proves":"Candidate PR #125 record identity (name \"LeapMemory\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/23bf6e10-8173-4375-9023-b655bd19c4b0: complete tool_names inventory (6 tools), remote streamable-http endpoint https://api.leapmemory.com/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"LeapMemory persistently stores user facts and standing behavioral rules.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:23bf6e10-8173-4375-9023-b655bd19c4b0","reviewed_at":"2026-10-10","reviewer_notes":"The official docs URL was inaccessible. Deletion is available only in the separate app according to the description, not through the six connector tools; verify memory retention and isolation at runtime.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"LeapMemory","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=23bf6e10-8173-4375-9023-b655bd19c4b0&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://leapmemory.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Binary Leap","publisher_url":"https://binaryleap.eu/","remote_url":"https://api.leapmemory.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools make durable cross-conversation changes and can influence later model behavior.","evidence":"Persists long-term memories and standing rules: The inventory declares memory save and rule create/update actions; the description says saved facts never expire and rules affect how Claude works in future conversations.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Persists long-term memories and standing rules","triggering_tools":["remember","add_rule","update_rule"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@leapmemory.com","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"briefing"},{"description":"","name":"recall"},{"description":"","name":"remember","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools make durable cross-conversation changes and can influence later model behavior."}},{"description":"","name":"add_rule","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools make durable cross-conversation changes and can influence later model behavior."}},{"description":"","name":"list_rules"},{"description":"","name":"update_rule","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools make durable cross-conversation changes and can influence later model behavior."}}],"tools_count":6,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/23bf6e10-8173-4375-9023-b655bd19c4b0","uuid":"fced890a-c7f6-50e2-b70f-9ba3f59a4992","verification_tier":"community","version":""},"query_key":"binary leap leapmemory","schema_version":1,"status":"match"}