{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage plaintiff-firm client relationships and case information in Kayse. Build dashboards, maintain cases or clients, and inspect call or campaign results. Send case-related email and SMS updates through the connected platform.","did":"cf836173-597b-42af-a518-3d4fdc9bf6f8","documentation_url":"https://docs.kayse.ai/","editorial_description":{"extended_description":"Tools cover case lists, statuses, tasks, notes, custom fields and client merging. Dashboards can analyze case types and marketing sources, while call records and downloadable recordings support review. Configure agents and webhooks, and look up or render message templates for client-service workflows.","schema_version":1,"summary":"Manage plaintiff-firm client relationships and case information in Kayse.\nBuild dashboards, maintain cases or clients, and inspect call or campaign results.\nSend case-related email and SMS updates through the connected platform."},"homepage_url":"","icon":"","id":"cf836173-597b-42af-a518-3d4fdc9bf6f8","installs":0,"last_scanned":"","license":"","long_description":"Tools cover case lists, statuses, tasks, notes, custom fields and client merging. Dashboards can analyze case types and marketing sources, while call records and downloadable recordings support review. Configure agents and webhooks, and look up or render message templates for client-service workflows.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly exposes email and SMS sends.","reasoning":"External client communications as the firm are High impact.","risk_type":"messaging_as_user","severity":"high","title":"Case email and SMS can be sent","triggering_tools_or_skills":["send_email_to_case","send_sms_to_case"]},{"evidence":"The declared tools create principals/invitations and webhook integrations.","reasoning":"Changing access/integrations is a powerful administrative capability.","risk_type":"credential_admin","severity":"high","title":"Agents, invitations and webhooks can be created/administered","triggering_tools_or_skills":["create_agent","create_invitation","resend_invitation","create_webhook","update_webhook"]},{"evidence":"The inventory provides extensive CRM/case writes.","reasoning":"These persist sensitive legal client data.","risk_type":"data_modification","severity":"medium","title":"Cases, clients, notes, tasks and campaigns can be created or updated","triggering_tools_or_skills":["create_case","create_client","create_note","create_case_task","update_case","update_client"]},{"evidence":"The connector runs at https://public-api.kayse.ai/v1/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Kayse for Claude is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for plaintiff-firm case and client data; exact roles/scopes are not published.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cf836173-597b-42af-a518-3d4fdc9bf6f8.json","what_it_proves":"Candidate PR #125 record identity (name \"Kayse for Claude\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cf836173-597b-42af-a518-3d4fdc9bf6f8: complete tool_names inventory (93 tools), remote streamable-http endpoint https://public-api.kayse.ai/v1/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"Kayse can send client email/SMS and administer invitations, agents and webhooks.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:cf836173-597b-42af-a518-3d4fdc9bf6f8","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 93 tools. Official docs redirected to an authenticated login and provided no public schemas; explicit names establish High.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":93,"tools_or_skills_total":93},"name":"Kayse for Claude","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cf836173-597b-42af-a518-3d4fdc9bf6f8&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://kayse.ai/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Case Connect Group LLC DBA Kayse","publisher_url":"https://www.kayse.ai/","remote_url":"https://public-api.kayse.ai/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External client communications as the firm are High impact.","evidence":"Case email and SMS can be sent: The complete inventory explicitly exposes email and SMS sends.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Case email and SMS can be sent","triggering_tools":["send_email_to_case","send_sms_to_case"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data.","evidence":"Agents, invitations and webhooks can be created/administered: The declared tools create principals/invitations and webhook integrations. | Cases, clients, notes, tasks and campaigns can be created or updated: The inventory provides extensive CRM/case writes.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["create_agent","create_invitation","resend_invitation","create_webhook","update_webhook","create_case","create_client","create_note","create_case_task","update_case","update_client"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"help@kayse.ai","tags":["accesses_calendar","accesses_messaging","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_client_to_case"},{"description":"","name":"append_clients_to_case_list"},{"description":"","name":"attach_cases_to_case_list"},{"description":"","name":"call_analytics"},{"description":"","name":"campaign_analytics"},{"description":"","name":"clone_case"},{"description":"","name":"compute_dashboard"},{"description":"","name":"convert_template_pretty_names"},{"description":"","name":"create_agent","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"create_case","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"create_case_list"},{"description":"","name":"create_case_status"},{"description":"","name":"create_case_task","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"create_case_type"},{"description":"","name":"create_case_type_custom_field"},{"description":"","name":"create_client","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"create_dashboard"},{"description":"","name":"create_invitation","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"create_note","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"create_webhook","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"duplicate_case_list"},{"description":"","name":"get_admin"},{"description":"","name":"get_agent"},{"description":"","name":"get_call"},{"description":"","name":"get_campaign"},{"description":"","name":"get_campaign_run"},{"description":"","name":"get_case"},{"description":"","name":"get_case_list"},{"description":"","name":"get_case_status"},{"description":"","name":"get_case_type"},{"description":"","name":"get_client"},{"description":"","name":"get_dashboard"},{"description":"","name":"get_dashboard_builder_catalog"},{"description":"","name":"get_dashboard_builder_templates"},{"description":"","name":"get_download_attachments_archive"},{"description":"","name":"get_download_recordings_archive"},{"description":"","name":"get_form"},{"description":"","name":"get_message_template"},{"description":"","name":"get_system_template"},{"description":"","name":"get_task"},{"description":"","name":"get_webhook"},{"description":"","name":"list_admins"},{"description":"","name":"list_agents"},{"description":"","name":"list_attachment_file_types"},{"description":"","name":"list_attachments"},{"description":"","name":"list_audit_logs"},{"description":"","name":"list_calls"},{"description":"","name":"list_campaign_runs"},{"description":"","name":"list_campaigns"},{"description":"","name":"list_case_custom_fields"},{"description":"","name":"list_case_lists"},{"description":"","name":"list_case_statuses"},{"description":"","name":"list_case_type_custom_fields"},{"description":"","name":"list_case_types"},{"description":"","name":"list_cases"},{"description":"","name":"list_client_message_events"},{"description":"","name":"list_clients"},{"description":"","name":"list_dashboards"},{"description":"","name":"list_forms"},{"description":"","name":"list_hierarchical_case_statuses"},{"description":"","name":"list_invitations"},{"description":"","name":"list_message_templates"},{"description":"","name":"list_messaged_clients"},{"description":"","name":"list_notes"},{"description":"","name":"list_system_templates"},{"description":"","name":"list_tasks"},{"description":"","name":"list_template_variables"},{"description":"","name":"list_voices"},{"description":"","name":"list_webhook_logs"},{"description":"","name":"list_webhooks"},{"description":"","name":"merge_clients"},{"description":"","name":"opt_in_clients"},{"description":"","name":"preview_dashboard_widget"},{"description":"","name":"render_template"},{"description":"","name":"reorder_case_statuses"},{"description":"","name":"replay_webhook_log"},{"description":"","name":"resend_invitation","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"send_email_to_case","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External client communications as the firm are High impact."}},{"description":"","name":"send_sms_to_case","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External client communications as the firm are High impact."}},{"description":"","name":"start_download_attachments_archive"},{"description":"","name":"start_download_recordings_archive"},{"description":"","name":"test_webhook"},{"description":"","name":"update_agent"},{"description":"","name":"update_case","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"update_case_by_external_id"},{"description":"","name":"update_case_list"},{"description":"","name":"update_case_status"},{"description":"","name":"update_case_task"},{"description":"","name":"update_case_type"},{"description":"","name":"update_client","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}},{"description":"","name":"update_dashboard"},{"description":"","name":"update_note"},{"description":"","name":"update_webhook","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing access/integrations is a powerful administrative capability.; These persist sensitive legal client data."}}],"tools_count":93,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/cf836173-597b-42af-a518-3d4fdc9bf6f8","uuid":"7143622b-3124-525e-aa8e-e729bf33841c","verification_tier":"community","version":""},"query_key":"case connect group llc dba kayse kayse for claude","schema_version":1,"status":"match"}