{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Connects Claude to field-team business data in BOB Tools. Query records, manage forms and views, and organize workspace files and images. Build live-data documents or dashboards and publish share links using your account access.","did":"22073f6d-3483-4cbb-80eb-f8956ee64b72","documentation_url":"https://bob.tools/mcp/","editorial_description":{"extended_description":"The platform centers on mobile forms, tables and folders. Connector tools can restructure fields, aggregate records, attach stored images and manage public sharing. OAuth connects your BOB account, while changing or deleting data is marked as a write operation.","schema_version":1,"summary":"Connects Claude to field-team business data in BOB Tools.\nQuery records, manage forms and views, and organize workspace files and images.\nBuild live-data documents or dashboards and publish share links using your account access."},"homepage_url":"","icon":"https://web.bob.tools/icons/Icon-512-circle.png","id":"22073f6d-3483-4cbb-80eb-f8956ee64b72","installs":0,"last_scanned":"","license":"","long_description":"The platform centers on mobile forms, tables and folders. Connector tools can restructure fields, aggregate records, attach stored images and manage public sharing. OAuth connects your BOB account, while changing or deleting data is marked as a write operation.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official BOB MCP documentation describes query/create/update/delete operations behind bob_records and file/folder management behind bob_files.","reasoning":"The compact gateway names hide destructive actions on persistent business data.","risk_type":"data_deletion","severity":"high","title":"Gateway tools can delete workspace records and files","triggering_tools_or_skills":["bob_records","bob_files"]},{"evidence":"Official docs state bob_shares creates public share links and bob_company manages companies/member invitations; the same docs additionally list bob_notify, absent from the Directory inventory.","reasoning":"Public sharing, member invitations and notifications communicate or grant access externally.","risk_type":"messaging_as_user","severity":"high","title":"Can publish shares, invite company members and send notifications","triggering_tools_or_skills":["bob_shares","bob_company"]},{"evidence":"Official docs state a free daily call allowance and that usage beyond it consumes account balance at the documented metered rate for applicable plans.","reasoning":"Automated calls may spend paid service credits.","risk_type":"financial_transaction","severity":"high","title":"Calls can consume paid account balance","triggering_tools_or_skills":["bob_records","bob_docs","bob_images"]},{"evidence":"The Directory has nine tools, while official docs additionally document bob_notify.","reasoning":"The candidate inventory is incomplete relative to the publisher's current action set.","risk_type":"identity_discrepancy","severity":"low","title":"Official documentation lists an extra gateway","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth is required and described as limited to companies/files the account can access; exact scopes, deletion confirmation and invitation roles are not specified.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/22073f6d-3483-4cbb-80eb-f8956ee64b72.json","what_it_proves":"Candidate PR #125 record identity (name \"BOB Tools\", publisher, type web_connector) and 9 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/22073f6d-3483-4cbb-80eb-f8956ee64b72: complete tool_names inventory (9 tools), remote streamable-http endpoint https://api.bob.tools/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:24:12Z","url_or_path":"https://bob.tools/mcp/","what_it_proves":"Official BOB MCP documentation expands each category gateway into create/update/delete actions, public sharing, company-member invitations and notifications, and states the metered call allowance/balance behavior."}],"primary_reason":"BOB's category gateways reach deletion, external sharing/invitations and metered paid calls, and the Directory omits bob_notify.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:22073f6d-3483-4cbb-80eb-f8956ee64b72","reviewed_at":"2026-10-10","reviewer_notes":"Rate on the documented union and refresh the stored inventory. Generic category gateways make action-level confirmation and authorization difficult to assess without runtime schemas.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":9,"tools_or_skills_total":9},"name":"BOB Tools","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=22073f6d-3483-4cbb-80eb-f8956ee64b72&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://bob.tools/pp/","provisional_risk":null,"publication_recommendation":"fix","publisher":"BOB Tools LLP","publisher_url":"https://bob.tools/","remote_url":"https://api.bob.tools/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: The compact gateway names hide destructive actions on persistent business data.","evidence":"Gateway tools can delete workspace records and files: Official BOB MCP documentation describes query/create/update/delete operations behind bob_records and file/folder management behind bob_files.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Gateway tools can delete workspace records and files","triggering_tools":["bob_records","bob_files"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Public sharing, member invitations and notifications communicate or grant access externally.","evidence":"Can publish shares, invite company members and send notifications: Official docs state bob_shares creates public share links and bob_company manages companies/member invitations; the same docs additionally list bob_notify, absent from the Directory inventory.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Can publish shares, invite company members and send notifications","triggering_tools":["bob_shares","bob_company"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Automated calls may spend paid service credits.","evidence":"Calls can consume paid account balance: Official docs state a free daily call allowance and that usage beyond it consumes account balance at the documented metered rate for applicable plans.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Calls can consume paid account balance","triggering_tools":["bob_records","bob_docs","bob_images"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@bob.tools","tags":["deletes_data","network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"bob_company","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Public sharing, member invitations and notifications communicate or grant access externally."}},{"description":"","name":"bob_docs","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Automated calls may spend paid service credits."}},{"description":"","name":"bob_fields"},{"description":"","name":"bob_files","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: The compact gateway names hide destructive actions on persistent business data."}},{"description":"","name":"bob_get_account"},{"description":"","name":"bob_images","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Automated calls may spend paid service credits."}},{"description":"","name":"bob_records","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Automated calls may spend paid service credits."}},{"description":"","name":"bob_shares","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Public sharing, member invitations and notifications communicate or grant access externally."}},{"description":"","name":"bob_views"}],"tools_count":9,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/22073f6d-3483-4cbb-80eb-f8956ee64b72","uuid":"ae566ac9-bff3-5c45-ba12-f9302f649d26","verification_tier":"community","version":""},"query_key":"bob tools","schema_version":1,"status":"match"}