{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"BirdyChat connects Claude to workplace messaging. Read, send, reply to, schedule, and manage messages in individual or group threads. Organize channels and inbox activity, upload attachments, and manage thread members and roles.","did":"5587594a-ac1a-4198-a006-787527fa9c90","documentation_url":"https://docs.birdy.chat/mcp.html","editorial_description":{"extended_description":"Tools archive, move, snooze, and mark threads as read. Messages, scheduled messages, and channels can be edited or deleted; reactions can be added or removed. User and thread lookups provide context.","schema_version":1,"summary":"BirdyChat connects Claude to workplace messaging.\nRead, send, reply to, schedule, and manage messages in individual or group threads.\nOrganize channels and inbox activity, upload attachments, and manage thread members and roles."},"homepage_url":"","icon":"","id":"5587594a-ac1a-4198-a006-787527fa9c90","installs":0,"last_scanned":"","license":"","long_description":"Tools archive, move, snooze, and mark threads as read. Messages, scheduled messages, and channels can be edited or deleted; reactions can be added or removed. User and thread lookups provide context.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Tools explicitly communicate externally.","reasoning":"Messaging as user is High.","risk_type":"messaging_as_user","severity":"high","title":"Sends messages and scheduled messages","triggering_tools_or_skills":["birdychat_messages_create","birdychat_scheduled_messages_send"]},{"evidence":"Tools explicitly delete meaningful collaboration data.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Deletes messages and channels","triggering_tools_or_skills":["birdychat_messages_delete","birdychat_channels_delete"]},{"evidence":"These tools administer conversation access.","reasoning":"Access administration is High.","risk_type":"credential_admin","severity":"high","title":"Changes thread members and roles","triggering_tools_or_skills":["birdychat_threads_users_add","birdychat_threads_users_remove","birdychat_threads_users_roles_add"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability may drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5587594a-ac1a-4198-a006-787527fa9c90.json","what_it_proves":"Candidate PR #125 record identity (name \"BirdyChat\", publisher, type web_connector) and 35 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5587594a-ac1a-4198-a006-787527fa9c90: complete tool_names inventory (35 tools), remote streamable-http endpoint https://birdy.chat/api/v1/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"BirdyChat sends/deletes messages, manages channels, and changes member roles.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5587594a-ac1a-4198-a006-787527fa9c90","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":35,"tools_or_skills_total":35},"name":"BirdyChat","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5587594a-ac1a-4198-a006-787527fa9c90&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.birdy.chat/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"BirdyChat","publisher_url":"https://www.birdy.chat/","remote_url":"https://birdy.chat/api/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Messaging as user is High.","evidence":"Sends messages and scheduled messages: Tools explicitly communicate externally.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends messages and scheduled messages","triggering_tools":["birdychat_messages_create","birdychat_scheduled_messages_send"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Deletes messages and channels: Tools explicitly delete meaningful collaboration data.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes messages and channels","triggering_tools":["birdychat_messages_delete","birdychat_channels_delete"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access administration is High.","evidence":"Changes thread members and roles: These tools administer conversation access.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Changes thread members and roles","triggering_tools":["birdychat_threads_users_add","birdychat_threads_users_remove","birdychat_threads_users_roles_add"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@birdy.chat","tags":["accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"birdychat_attachments_create"},{"description":"","name":"birdychat_capabilities_thread_types"},{"description":"","name":"birdychat_channels_create"},{"description":"","name":"birdychat_channels_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"birdychat_channels_get"},{"description":"","name":"birdychat_channels_list"},{"description":"","name":"birdychat_channels_update"},{"description":"","name":"birdychat_messages_create","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Messaging as user is High."}},{"description":"","name":"birdychat_messages_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"birdychat_messages_get"},{"description":"","name":"birdychat_messages_list"},{"description":"","name":"birdychat_messages_patch"},{"description":"","name":"birdychat_messages_reactions_create"},{"description":"","name":"birdychat_messages_reactions_delete"},{"description":"","name":"birdychat_messages_update"},{"description":"","name":"birdychat_ping"},{"description":"","name":"birdychat_scheduled_messages_create"},{"description":"","name":"birdychat_scheduled_messages_delete"},{"description":"","name":"birdychat_scheduled_messages_get"},{"description":"","name":"birdychat_scheduled_messages_list"},{"description":"","name":"birdychat_scheduled_messages_send","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Messaging as user is High."}},{"description":"","name":"birdychat_scheduled_messages_update"},{"description":"","name":"birdychat_threads_archive"},{"description":"","name":"birdychat_threads_create"},{"description":"","name":"birdychat_threads_get"},{"description":"","name":"birdychat_threads_list"},{"description":"","name":"birdychat_threads_mark_read"},{"description":"","name":"birdychat_threads_move"},{"description":"","name":"birdychat_threads_snooze"},{"description":"","name":"birdychat_threads_users_add","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access administration is High."}},{"description":"","name":"birdychat_threads_users_remove","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access administration is High."}},{"description":"","name":"birdychat_threads_users_roles_add","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access administration is High."}},{"description":"","name":"birdychat_threads_users_roles_remove"},{"description":"","name":"birdychat_users_get"},{"description":"","name":"birdychat_users_list"}],"tools_count":35,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5587594a-ac1a-4198-a006-787527fa9c90","uuid":"d7e9296f-1eb6-54a8-b5af-d70f608b8444","verification_tier":"community","version":""},"query_key":"birdychat","schema_version":1,"status":"match"}