{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-25","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connect Claude to your Cezanne HR Learning workspace. Review people, learning content, progress, events and survey responses. Manage users, teams, content and enrollments within your existing account permissions.","did":"c40462c0-4d09-45ae-a2ab-05614bab1e71","documentation_url":"https://developers.learnamp.com/","editorial_description":{"extended_description":"Supported changes include user creation and updates, deactivation or reactivation, team membership, content-item management, learning assignments and task deletion. Connect with OAuth using your workspace address and an account whose connector access has been enabled by Cezanne HR. The integration acts as your account; permission prompts distinguish lookups from modifications and deletions.","schema_version":1,"summary":"Connect Claude to your Cezanne HR Learning workspace.\nReview people, learning content, progress, events and survey responses.\nManage users, teams, content and enrollments within your existing account permissions."},"homepage_url":"","icon":"https://cezannehr.com/wp-content/uploads/2026/01/cropped-favicon.png","id":"c40462c0-4d09-45ae-a2ab-05614bab1e71","installs":0,"last_scanned":"","license":"","long_description":"Supported changes include user creation and updates, deactivation or reactivation, team membership, content-item management, learning assignments and task deletion. Connect with OAuth using your workspace address and an account whose connector access has been enabled by Cezanne HR. The integration acts as your account; permission prompts distinguish lookups from modifications and deletions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The API-shaped inventory explicitly deletes items, tasks, teams and users.","reasoning":"These destructive actions can remove learning data and access.","risk_type":"data_deletion","severity":"high","title":"Deletes learning and user resources","triggering_tools_or_skills":["deleteV1ItemsId","deleteV1TasksId","deleteV1TeamsId","deleteV1UsersId"]},{"evidence":"These tools change user access state.","reasoning":"Account activation is a powerful admin action.","risk_type":"credential_admin","severity":"high","title":"Deactivates and reactivates users","triggering_tools_or_skills":["putV1UsersIdDeactivate","putV1UsersIdReactivate"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication exposes broad learning-space administration; exact roles are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c40462c0-4d09-45ae-a2ab-05614bab1e71.json","what_it_proves":"Candidate PR #125 record identity (name \"Cezanne HR Learning\", publisher, type web_connector) and 58 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c40462c0-4d09-45ae-a2ab-05614bab1e71: complete tool_names inventory (58 tools), remote streamable-http endpoint https://api-mcp.learnamp.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Cezanne HR Learning can delete users, teams, tasks and learning items and deactivate accounts.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c40462c0-4d09-45ae-a2ab-05614bab1e71","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 58 names; deletion endpoints are unambiguous.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":58,"tools_or_skills_total":58},"name":"Cezanne HR Learning","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c40462c0-4d09-45ae-a2ab-05614bab1e71&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://learnamp.com/policies/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Cezanne HR","publisher_url":"https://cezannehr.com/","remote_url":"https://api-mcp.learnamp.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These destructive actions can remove learning data and access.","evidence":"Deletes learning and user resources: The API-shaped inventory explicitly deletes items, tasks, teams and users.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes learning and user resources","triggering_tools":["deleteV1ItemsId","deleteV1TasksId","deleteV1TeamsId","deleteV1UsersId"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Account activation is a powerful admin action.","evidence":"Deactivates and reactivates users: These tools change user access state.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Deactivates and reactivates users","triggering_tools":["putV1UsersIdDeactivate","putV1UsersIdReactivate"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://learnamp.com/support","tags":["accesses_calendar","accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"deleteV1ItemsId","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive actions can remove learning data and access."}},{"description":"","name":"deleteV1TasksId","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive actions can remove learning data and access."}},{"description":"","name":"deleteV1TeamsByExternalIdExternalId"},{"description":"","name":"deleteV1TeamsByExternalIdExternalIdUsersUserId"},{"description":"","name":"deleteV1TeamsId","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive actions can remove learning data and access."}},{"description":"","name":"deleteV1TeamsTeamIdUsersUserId"},{"description":"","name":"deleteV1UsersId","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive actions can remove learning data and access."}},{"description":"","name":"getV1Activities"},{"description":"","name":"getV1AuthLearningspacesSubdomain"},{"description":"","name":"getV1Channels"},{"description":"","name":"getV1ChannelsChannelIdUsersProgress"},{"description":"","name":"getV1CommunitiesTeamIdPosts"},{"description":"","name":"getV1Enrollments"},{"description":"","name":"getV1EnrollmentsId"},{"description":"","name":"getV1Events"},{"description":"","name":"getV1EventsId"},{"description":"","name":"getV1Items"},{"description":"","name":"getV1ItemsFind"},{"description":"","name":"getV1ItemsId"},{"description":"","name":"getV1ItemsIdChannels"},{"description":"","name":"getV1ItemsIdLearnlists"},{"description":"","name":"getV1Languages"},{"description":"","name":"getV1Learnlists"},{"description":"","name":"getV1LearnlistsId"},{"description":"","name":"getV1LearnlistsIdContents"},{"description":"","name":"getV1McpStatus"},{"description":"","name":"getV1Me"},{"description":"","name":"getV1Roles"},{"description":"","name":"getV1RolesOwner"},{"description":"","name":"getV1Surveys"},{"description":"","name":"getV1SurveysId"},{"description":"","name":"getV1SurveysIdResponses"},{"description":"","name":"getV1Tasks"},{"description":"","name":"getV1Teams"},{"description":"","name":"getV1TeamsByExternalIdExternalId"},{"description":"","name":"getV1TeamsByExternalIdExternalIdUsers"},{"description":"","name":"getV1TeamsId"},{"description":"","name":"getV1TeamsTeamIdUsers"},{"description":"","name":"getV1Users"},{"description":"","name":"getV1UsersByIntegrationExternalIdIntegrationId"},{"description":"","name":"getV1UsersCustomFields"},{"description":"","name":"getV1UsersId"},{"description":"","name":"getV1UsersUserIdChannelsProgress"},{"description":"","name":"getV1Verbs"},{"description":"","name":"postV1Enrollments"},{"description":"","name":"postV1Items"},{"description":"","name":"postV1Teams"},{"description":"","name":"postV1TeamsByExternalIdExternalIdUsers"},{"description":"","name":"postV1TeamsTeamIdUsers"},{"description":"","name":"postV1TeamsUsers"},{"description":"","name":"postV1Users"},{"description":"","name":"putV1ItemsId"},{"description":"","name":"putV1TeamsByExternalIdExternalId"},{"description":"","name":"putV1TeamsId"},{"description":"","name":"putV1UsersByIntegrationExternalIdIntegrationId"},{"description":"","name":"putV1UsersId"},{"description":"","name":"putV1UsersIdDeactivate","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Account activation is a powerful admin action."}},{"description":"","name":"putV1UsersIdReactivate","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Account activation is a powerful admin action."}}],"tools_count":58,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c40462c0-4d09-45ae-a2ab-05614bab1e71","uuid":"5929466a-01ce-5b81-aedc-e1b3e58ab507","verification_tier":"community","version":""},"query_key":"cezanne hr cezanne hr learning","schema_version":1,"status":"match"}