{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-14","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Build and inspect webhook pipelines in Hookie. Query events, configure endpoints, routing rules or destinations, and replay deliveries. New connections are read-only until expanded in the console; roles and granted scopes both limit access.","did":"d728361d-1d22-4a1f-9f86-7f653cb9ec4e","documentation_url":"https://docs.hookie.ai/","editorial_description":{"extended_description":"Create projects, ingest keys, record views, and workflows, inspect delivery responses, or send test events. Billing is inaccessible, and tools cannot delete projects or drop dataset records. OAuth actions are attributed in the audit log; revocation applies to the next call.","schema_version":1,"summary":"Build and inspect webhook pipelines in Hookie.\nQuery events, configure endpoints, routing rules or destinations, and replay deliveries.\nNew connections are read-only until expanded in the console; roles and granted scopes both limit access."},"homepage_url":"","icon":"","id":"d728361d-1d22-4a1f-9f86-7f653cb9ec4e","installs":0,"last_scanned":"","license":"","long_description":"Create projects, ingest keys, record views, and workflows, inspect delivery responses, or send test events. Billing is inaccessible, and tools cannot delete projects or drop dataset records. OAuth actions are attributed in the audit log; revocation applies to the next call.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The explicit tool creates an ingest key.","reasoning":"Creating a credential that can submit events is a powerful security action.","risk_type":"credential_admin","severity":"high","title":"New ingest credentials can be minted","triggering_tools_or_skills":["create_ingest_key"]},{"evidence":"The tools deliver signed webhook events onward.","reasoning":"This sends external content as the workspace.","risk_type":"messaging_as_user","severity":"high","title":"Events can be sent or replayed to destinations","triggering_tools_or_skills":["send_test_event","replay_delivery"]},{"evidence":"The complete inventory declares destructive configuration deletion.","reasoning":"These actions can break live integrations.","risk_type":"data_deletion","severity":"high","title":"Destinations, rules, webhooks and views can be deleted","triggering_tools_or_skills":["delete_destination","delete_rule","delete_webhook","delete_record_view"]},{"evidence":"The connector configures production event-routing infrastructure.","reasoning":"Changing delivery routes/workflows affects live systems.","risk_type":"deployment_infrastructure","severity":"high","title":"Webhook routing and AI workflows can be created","triggering_tools_or_skills":["create_webhook","create_rule","create_workflow","create_destination"]},{"evidence":"The service captures provider/user-submitted payloads.","reasoning":"Webhook content is untrusted.","risk_type":"prompt_injection_exposure","severity":"low","title":"Webhook payloads and responses enter model context","triggering_tools_or_skills":["get_record","query_records","list_deliveries"]},{"evidence":"The connector runs at https://app.hookie.ai/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"app.hookie.ai is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects a Hookie workspace; exact roles for keys, destinations and event replay are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d728361d-1d22-4a1f-9f86-7f653cb9ec4e.json","what_it_proves":"Candidate PR #125 record identity (name \"app.hookie.ai\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d728361d-1d22-4a1f-9f86-7f653cb9ec4e: complete tool_names inventory (28 tools), remote streamable-http endpoint https://app.hookie.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Hookie can mint ingest keys, send events, delete integrations and reconfigure production routing.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d728361d-1d22-4a1f-9f86-7f653cb9ec4e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 28 tools. Exact destination allowlists and replay confirmation require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"app.hookie.ai","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d728361d-1d22-4a1f-9f86-7f653cb9ec4e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://hookie.ai/legal/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Brady Cusack","publisher_url":"https://hookie.ai/","remote_url":"https://app.hookie.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating a credential that can submit events is a powerful security action.","evidence":"New ingest credentials can be minted: The explicit tool creates an ingest key.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"New ingest credentials can be minted","triggering_tools":["create_ingest_key"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This sends external content as the workspace.","evidence":"Events can be sent or replayed to destinations: The tools deliver signed webhook events onward.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Events can be sent or replayed to destinations","triggering_tools":["send_test_event","replay_delivery"]},{"description":"This connector can permanently remove data or resources. Review findings: These actions can break live integrations.","evidence":"Destinations, rules, webhooks and views can be deleted: The complete inventory declares destructive configuration deletion.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Destinations, rules, webhooks and views can be deleted","triggering_tools":["delete_destination","delete_rule","delete_webhook","delete_record_view"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Changing delivery routes/workflows affects live systems.","evidence":"Webhook routing and AI workflows can be created: The connector configures production event-routing infrastructure.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Webhook routing and AI workflows can be created","triggering_tools":["create_webhook","create_rule","create_workflow","create_destination"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@hookie.ai","tags":["accesses_calendar","code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"create_destination","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Changing delivery routes/workflows affects live systems."}},{"description":"","name":"create_ingest_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating a credential that can submit events is a powerful security action."}},{"description":"","name":"create_project"},{"description":"","name":"create_record_view"},{"description":"","name":"create_rule","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Changing delivery routes/workflows affects live systems."}},{"description":"","name":"create_webhook","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Changing delivery routes/workflows affects live systems."}},{"description":"","name":"create_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Changing delivery routes/workflows affects live systems."}},{"description":"","name":"delete_destination","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can break live integrations."}},{"description":"","name":"delete_record_view","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can break live integrations."}},{"description":"","name":"delete_rule","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can break live integrations."}},{"description":"","name":"delete_webhook","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can break live integrations."}},{"description":"","name":"get_project_overview"},{"description":"","name":"get_record"},{"description":"","name":"list_datasets"},{"description":"","name":"list_deliveries"},{"description":"","name":"list_destinations"},{"description":"","name":"list_projects"},{"description":"","name":"list_record_views"},{"description":"","name":"list_rules"},{"description":"","name":"list_webhooks"},{"description":"","name":"list_workflows"},{"description":"","name":"query_records"},{"description":"","name":"query_webhook_records"},{"description":"","name":"replay_delivery","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This sends external content as the workspace."}},{"description":"","name":"send_test_event","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This sends external content as the workspace."}},{"description":"","name":"update_destination"},{"description":"","name":"update_rule"},{"description":"","name":"update_webhook"}],"tools_count":28,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d728361d-1d22-4a1f-9f86-7f653cb9ec4e","uuid":"1e264d77-7281-5867-ab18-449d617dc214","verification_tier":"community","version":""},"query_key":"brady cusack app hookie ai","schema_version":1,"status":"match"}