{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Review gym or coaching clients and business metrics in BurnOn. Build workout templates and programs, assign them to clients and customize sessions. Writes require confirmation and are limited to workouts and client programs.","did":"16659e38-3c3c-40b1-beb4-641408a64520","documentation_url":"https://www.burnon.ai/connect","editorial_description":{"extended_description":"Client context includes logged workouts, exercise history, progress and activity timelines. Coaches use their existing BurnOn permissions. The connector cannot bill clients, send messages, alter memberships or delete data.","schema_version":1,"summary":"Review gym or coaching clients and business metrics in BurnOn.\nBuild workout templates and programs, assign them to clients and customize sessions.\nWrites require confirmation and are limited to workouts and client programs."},"homepage_url":"","icon":"","id":"16659e38-3c3c-40b1-beb4-641408a64520","installs":0,"last_scanned":"","license":"","long_description":"Client context includes logged workouts, exercise history, progress and activity timelines. Coaches use their existing BurnOn permissions. The connector cannot bill clients, send messages, alter memberships or delete data.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official documentation marks these seven tools as writes and limits them to the workout library and client-program copies.","reasoning":"They persist changes to client training plans but cannot bill, message, change membership or delete data.","risk_type":"data_modification","severity":"medium","title":"Creates and assigns workout programs and templates","triggering_tools_or_skills":["assign_program_to_client","create_and_assign_program","create_program","create_workout_template","update_client_program","update_client_workout","update_workout_template"]},{"evidence":"Official docs describe client profiles, workouts, measurements, photo metadata, activity timelines and revenue/attendance metrics.","reasoning":"This is sensitive health-adjacent and business data.","risk_type":"private_data_read","severity":"low","title":"Reads client health, exercise and business metrics","triggering_tools_or_skills":["get_client_activity","get_client_exercise_history","get_client_overview","get_client_progress","get_client_workouts","get_business_metric"]},{"evidence":"Activity timelines, client profiles and coach tasks contain user-authored fields.","reasoning":"Returned client and coach text can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Client activity and task text is user-controlled","triggering_tools_or_skills":["get_client_activity","get_todays_tasks","get_client_overview"]}],"assessment_status":"reviewed","auth_and_scopes":"OAuth 2.1 with PKCE runs every request as the signed-in coach and limits access to records that coach can open; writes are limited to workout templates and client programs.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/16659e38-3c3c-40b1-beb4-641408a64520.json","what_it_proves":"Candidate PR #125 record identity (name \"BurnOn\", publisher, type web_connector) and 26 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/16659e38-3c3c-40b1-beb4-641408a64520: complete tool_names inventory (26 tools), remote streamable-http endpoint https://mcp.burnon.ai/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:09:20Z","url_or_path":"https://www.burnon.ai/connect","what_it_proves":"Official BurnOn documentation lists all 26 tools, identifies exactly seven write actions, documents OAuth and coach-permission scoping, and states the connector cannot bill, message, alter memberships or delete data."}],"primary_reason":"Official docs precisely bound writes to workout templates and client programs and exclude deletion, messaging, membership and billing actions.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:16659e38-3c3c-40b1-beb4-641408a64520","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 26 names against the official exhaustive action list.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":26,"tools_or_skills_total":26},"name":"BurnOn","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=16659e38-3c3c-40b1-beb4-641408a64520&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.burnon.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"BurnOn Inc.","publisher_url":"https://burnon.ai/","remote_url":"https://mcp.burnon.ai/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data.","evidence":"Creates and assigns workout programs and templates: Official documentation marks these seven tools as writes and limits them to the workout library and client-program copies.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and assigns workout programs and templates","triggering_tools":["assign_program_to_client","create_and_assign_program","create_program","create_workout_template","update_client_program","update_client_workout","update_workout_template"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive health-adjacent and business data.","evidence":"Reads client health, exercise and business metrics: Official docs describe client profiles, workouts, measurements, photo metadata, activity timelines and revenue/attendance metrics.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads client health, exercise and business metrics","triggering_tools":["get_client_activity","get_client_exercise_history","get_client_overview","get_client_progress","get_client_workouts","get_business_metric"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@burnon.ai","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"assign_program_to_client","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data."}},{"description":"","name":"create_and_assign_program","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data."}},{"description":"","name":"create_program","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data."}},{"description":"","name":"create_workout_template","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data."}},{"description":"","name":"get_business_metric"},{"description":"","name":"get_client_activity"},{"description":"","name":"get_client_exercise_history"},{"description":"","name":"get_client_overview"},{"description":"","name":"get_client_program"},{"description":"","name":"get_client_programs"},{"description":"","name":"get_client_progress"},{"description":"","name":"get_client_weekly_overview"},{"description":"","name":"get_client_workout"},{"description":"","name":"get_client_workouts"},{"description":"","name":"get_my_profile"},{"description":"","name":"get_program"},{"description":"","name":"get_todays_tasks"},{"description":"","name":"get_workout_template"},{"description":"","name":"list_business_metrics"},{"description":"","name":"list_my_clients"},{"description":"","name":"list_programs"},{"description":"","name":"list_workout_templates"},{"description":"","name":"search_exercises"},{"description":"","name":"update_client_program","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data."}},{"description":"","name":"update_client_workout","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data."}},{"description":"","name":"update_workout_template","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist changes to client training plans but cannot bill, message, change membership or delete data."}}],"tools_count":26,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/16659e38-3c3c-40b1-beb4-641408a64520","uuid":"df26fee5-3fb7-5664-bcdc-11b0556c5c43","verification_tier":"community","version":""},"query_key":"burnon inc burnon","schema_version":1,"status":"match"}