{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Brizz analyzes AI-agent conversations, activity, failures, and product issues. Search sessions, inspect tool calls and errors, and query metrics. Manage classifications and investigations in the connected account.","did":"2fd1d01d-8c41-4fb5-b7d8-9809db2f3971","documentation_url":"https://docs.brizz.ai/docs/integrations/mcp-server/overview","editorial_description":{"extended_description":"The inventory includes session spans, events, tool schemas, reports, organization overviews, and usage data. It also supports creating or updating classifications, investigating issues, reporting progress, and updating issues and health checks.","schema_version":1,"summary":"Brizz analyzes AI-agent conversations, activity, failures, and product issues.\nSearch sessions, inspect tool calls and errors, and query metrics.\nManage classifications and investigations in the connected account."},"homepage_url":"","icon":"https://www.brizz.ai/favicon.ico","id":"2fd1d01d-8c41-4fb5-b7d8-9809db2f3971","installs":0,"last_scanned":"","license":"","long_description":"The inventory includes session spans, events, tool schemas, reports, organization overviews, and usage data. It also supports creating or updating classifications, investigating issues, reporting progress, and updating issues and health checks.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete 45-tool inventory explicitly includes brizz_delete_classification.","reasoning":"Deleting a classification can irreversibly remove an analytics taxonomy and associated configuration.","risk_type":"data_deletion","severity":"high","title":"Can delete analytics classifications","triggering_tools_or_skills":["brizz_delete_classification"]},{"evidence":"The reviewed inventory contains persistent create and update operations.","reasoning":"These alter private analytics and issue-tracking state.","risk_type":"data_modification","severity":"medium","title":"Creates and updates classifications, health checks and issues","triggering_tools_or_skills":["brizz_create_classification","brizz_edit_classification_labels","brizz_update_classification","brizz_update_health_check","brizz_update_issue"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for private agent analytics; granular organization and mutation scopes are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2fd1d01d-8c41-4fb5-b7d8-9809db2f3971.json","what_it_proves":"Candidate PR #125 record identity (name \"Brizz\", publisher, type web_connector) and 45 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2fd1d01d-8c41-4fb5-b7d8-9809db2f3971: complete tool_names inventory (45 tools), remote streamable-http endpoint https://platform.brizz.dev/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Brizz reads sensitive agent conversations and can modify or delete analytics classifications.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:2fd1d01d-8c41-4fb5-b7d8-9809db2f3971","reviewed_at":"2026-10-10","reviewer_notes":"brizz_query_metric is a constrained analytics operation, not evidenced arbitrary SQL; ask_agent and continue_agent_conversation are internal analysis interactions rather than proven external messaging.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":45,"tools_or_skills_total":45},"name":"Brizz","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2fd1d01d-8c41-4fb5-b7d8-9809db2f3971&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.brizz.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Brizz","publisher_url":"https://www.brizz.ai/","remote_url":"https://platform.brizz.dev/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a classification can irreversibly remove an analytics taxonomy and associated configuration.","evidence":"Can delete analytics classifications: The complete 45-tool inventory explicitly includes brizz_delete_classification.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Can delete analytics classifications","triggering_tools":["brizz_delete_classification"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These alter private analytics and issue-tracking state.","evidence":"Creates and updates classifications, health checks and issues: The reviewed inventory contains persistent create and update operations.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates classifications, health checks and issues","triggering_tools":["brizz_create_classification","brizz_edit_classification_labels","brizz_update_classification","brizz_update_health_check","brizz_update_issue"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@brizz.ai","tags":["accesses_calendar","accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"brizz_aggregate_sessions"},{"description":"","name":"brizz_aggregate_tool_calls"},{"description":"","name":"brizz_aggregated_data_for_sessions"},{"description":"","name":"brizz_ask_agent"},{"description":"","name":"brizz_continue_agent_conversation"},{"description":"","name":"brizz_create_classification","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These alter private analytics and issue-tracking state."}},{"description":"","name":"brizz_delete_classification","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a classification can irreversibly remove an analytics taxonomy and associated configuration."}},{"description":"","name":"brizz_describe_schema"},{"description":"","name":"brizz_download_report"},{"description":"","name":"brizz_edit_classification_labels","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These alter private analytics and issue-tracking state."}},{"description":"","name":"brizz_get_classification"},{"description":"","name":"brizz_get_conversation"},{"description":"","name":"brizz_get_conversation_item"},{"description":"","name":"brizz_get_issue"},{"description":"","name":"brizz_get_issue_findings"},{"description":"","name":"brizz_get_issue_prompt"},{"description":"","name":"brizz_get_organization_overview"},{"description":"","name":"brizz_get_session"},{"description":"","name":"brizz_get_session_errors"},{"description":"","name":"brizz_get_session_spans"},{"description":"","name":"brizz_get_session_tool_schemas"},{"description":"","name":"brizz_get_sessions_events"},{"description":"","name":"brizz_get_sessions_first_user_messages"},{"description":"","name":"brizz_get_skill"},{"description":"","name":"brizz_get_user_usage"},{"description":"","name":"brizz_health_check"},{"description":"","name":"brizz_investigate_issue"},{"description":"","name":"brizz_list_classifications"},{"description":"","name":"brizz_list_custom_properties"},{"description":"","name":"brizz_list_event_names"},{"description":"","name":"brizz_list_organizations"},{"description":"","name":"brizz_list_reports"},{"description":"","name":"brizz_list_services"},{"description":"","name":"brizz_list_session_filters"},{"description":"","name":"brizz_list_skills"},{"description":"","name":"brizz_preview_classification"},{"description":"","name":"brizz_query_metric"},{"description":"","name":"brizz_report_issue_progress"},{"description":"","name":"brizz_search_issues"},{"description":"","name":"brizz_search_sessions"},{"description":"","name":"brizz_update_agent_run"},{"description":"","name":"brizz_update_classification","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These alter private analytics and issue-tracking state."}},{"description":"","name":"brizz_update_health_check","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These alter private analytics and issue-tracking state."}},{"description":"","name":"brizz_update_issue","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These alter private analytics and issue-tracking state."}},{"description":"","name":"brizz_whoami"}],"tools_count":45,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2fd1d01d-8c41-4fb5-b7d8-9809db2f3971","uuid":"c6a8774c-9c26-57d5-9318-c8f490f3b1e7","verification_tier":"community","version":""},"query_key":"brizz brizz","schema_version":1,"status":"match"}
