{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Research artists and manage music-industry workflows with Chatmu. Explore audience and streaming performance, prepare releases and connect with industry contacts. Create promotional videos, manage social posts and send outreach through your connected account.","did":"cec15557-ddad-4e4b-920c-7bbc084789c5","documentation_url":"https://chatmu.io/help/mcp-docs","editorial_description":{"extended_description":"Distribution tools cover drafts, audio or artwork uploads, metadata and submission for review. Analytics include geography, retention, playlists, radio and charts, alongside artist or collaborator discovery. Networking tools manage contacts and pitches; mass-email campaigns are capped at 500 recipients and require confirmation. OAuth uses your Chatmu account.","schema_version":1,"summary":"Research artists and manage music-industry workflows with Chatmu.\nExplore audience and streaming performance, prepare releases and connect with industry contacts.\nCreate promotional videos, manage social posts and send outreach through your connected account."},"homepage_url":"","icon":"https://data.chatmu.io/Chatmu%20Objects/branding/favicon.png","id":"cec15557-ddad-4e4b-920c-7bbc084789c5","installs":0,"last_scanned":"","license":"","long_description":"Distribution tools cover drafts, audio or artwork uploads, metadata and submission for review. Analytics include geography, retention, playlists, radio and charts, alongside artist or collaborator discovery. Networking tools manage contacts and pitches; mass-email campaigns are capped at 500 recipients and require confirmation. OAuth uses your Chatmu account.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly sends email and publishes/reschedules connected social content.","reasoning":"External communications as the artist/manager are High impact.","risk_type":"messaging_as_user","severity":"high","title":"Email and social posts can be sent or published","triggering_tools_or_skills":["networking_send_email","publish_social_post","reschedule_social_post"]},{"evidence":"The complete inventory exposes multiple explicit deletion actions.","reasoning":"These destructively remove music and relationship workflow records.","risk_type":"data_deletion","severity":"high","title":"Songs, distribution drafts, contacts, pitches and templates can be deleted","triggering_tools_or_skills":["delete_chatmu_song","delete_distribution_draft","networking_delete_contact","networking_delete_pitch","delete_video_template"]},{"evidence":"The tools create and submit distribution packages to a release workflow.","reasoning":"Submitting music distribution is a production release action.","risk_type":"deployment_infrastructure","severity":"high","title":"Music distribution can be prepared and submitted for review","triggering_tools_or_skills":["start_music_distribution_draft","patch_distribution_metadata","submit_distribution_for_review"]},{"evidence":"The tool set directly persists broad operational content.","reasoning":"These actions materially change user data.","risk_type":"data_modification","severity":"medium","title":"Contacts, campaigns, videos and catalog metadata can be created/updated","triggering_tools_or_skills":["networking_create_contact","networking_manage_campaigns","render_chatmu_video","update_chatmu_song_metadata"]},{"evidence":"The connector runs at https://mcp-chatmu.aaatmi.com/mcp-oauth without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Chatmu is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.0 connects the Chatmu music-industry account and social/distribution integrations; exact scopes are not published.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cec15557-ddad-4e4b-920c-7bbc084789c5.json","what_it_proves":"Candidate PR #125 record identity (name \"Chatmu\", publisher, type interactive_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cec15557-ddad-4e4b-920c-7bbc084789c5: complete tool_names inventory (131 tools), remote streamable-http endpoint https://mcp-chatmu.aaatmi.com/mcp-oauth, auth_posture auth_required, directory tier community"}],"primary_reason":"Chatmu can publish social/email content, delete catalog/workflow records and submit music distribution.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:cec15557-ddad-4e4b-920c-7bbc084789c5","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 131 tools. The packet description says around 132 active tools, a minor count drift, but the declared High actions are unambiguous.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":131,"tools_or_skills_total":131},"name":"Chatmu","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cec15557-ddad-4e4b-920c-7bbc084789c5&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://chatmu.io/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AAATMI","publisher_url":"https://aaatmi.com/","remote_url":"https://mcp-chatmu.aaatmi.com/mcp-oauth","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External communications as the artist/manager are High impact.","evidence":"Email and social posts can be sent or published: The inventory explicitly sends email and publishes/reschedules connected social content.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Email and social posts can be sent or published","triggering_tools":["networking_send_email","publish_social_post","reschedule_social_post"]},{"description":"This connector can permanently remove data or resources. Review findings: These destructively remove music and relationship workflow records.","evidence":"Songs, distribution drafts, contacts, pitches and templates can be deleted: The complete inventory exposes multiple explicit deletion actions.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Songs, distribution drafts, contacts, pitches and templates can be deleted","triggering_tools":["delete_chatmu_song","delete_distribution_draft","networking_delete_contact","networking_delete_pitch","delete_video_template"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Submitting music distribution is a production release action.","evidence":"Music distribution can be prepared and submitted for review: The tools create and submit distribution packages to a release workflow.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Music distribution can be prepared and submitted for review","triggering_tools":["start_music_distribution_draft","patch_distribution_metadata","submit_distribution_for_review"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change user data.","evidence":"Contacts, campaigns, videos and catalog metadata can be created/updated: The tool set directly persists broad operational content.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Contacts, campaigns, videos and catalog metadata can be created/updated","triggering_tools":["networking_create_contact","networking_manage_campaigns","render_chatmu_video","update_chatmu_song_metadata"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@chatmu.io","tags":["accesses_calendar","code_deployment","deletes_data","interactive_connector","modifies_data","network_access","oauth_required","sends_messages_as_you"],"tools":[{"description":"","name":"RAG_artist_context"},{"description":"","name":"analyze_artist_growth_trends"},{"description":"","name":"analyze_audience_conversion"},{"description":"","name":"analyze_cross_platform_performance"},{"description":"","name":"analyze_growth_rates_fixed"},{"description":"","name":"analyze_industry_tiers"},{"description":"","name":"analyze_instagram_media"},{"description":"","name":"analyze_label_history"},{"description":"","name":"analyze_market_locations"},{"description":"","name":"analyze_niche_compatibility"},{"description":"","name":"analyze_raw_audio_url"},{"description":"","name":"analyze_social_to_streaming_conversion"},{"description":"","name":"artist_current_stats"},{"description":"","name":"artist_details"},{"description":"","name":"artist_top_geographic_data"},{"description":"","name":"audience_demographics"},{"description":"","name":"cancel_social_post"},{"description":"","name":"chatmu_get_doc_article"},{"description":"","name":"chatmu_search_docs"},{"description":"","name":"confirm_chatmu_asset_upload"},{"description":"","name":"confirm_distribution_uploads"},{"description":"","name":"create_video_template"},{"description":"","name":"debug_geographic_data"},{"description":"","name":"delete_chatmu_song","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructively remove music and relationship workflow records."}},{"description":"","name":"delete_distribution_draft","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructively remove music and relationship workflow records."}},{"description":"","name":"delete_external_audio"},{"description":"","name":"delete_video_template","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructively remove music and relationship workflow records."}},{"description":"","name":"detect_ai_music_song"},{"description":"","name":"discover_breakout_artists"},{"description":"","name":"discover_dominant_genres"},{"description":"","name":"discover_potential_collaborators"},{"description":"","name":"edit_chatmu_song_lyrics"},{"description":"","name":"engagement_by_location"},{"description":"","name":"extract_contacts_from_web"},{"description":"","name":"find_emerging_local_talent"},{"description":"","name":"find_genre_competitors"},{"description":"","name":"find_global_superstars"},{"description":"","name":"find_latest_editorial_placements"},{"description":"","name":"find_local_opening_acts"},{"description":"","name":"find_similar_artists_advanced"},{"description":"","name":"find_strategic_opening_acts"},{"description":"","name":"geographic_growth_analysis"},{"description":"","name":"get_album_metadata"},{"description":"","name":"get_artist_active_playlists"},{"description":"","name":"get_artist_albums"},{"description":"","name":"get_artist_briefing"},{"description":"","name":"get_artist_distributions"},{"description":"","name":"get_artist_events"},{"description":"","name":"get_artist_growth_trajectory"},{"description":"","name":"get_artist_live_history"},{"description":"","name":"get_artist_playlist_reach"},{"description":"","name":"get_artist_radio_spins"},{"description":"","name":"get_artist_radio_stats"},{"description":"","name":"get_artist_retention"},{"description":"","name":"get_artist_songs"},{"description":"","name":"get_available_charts"},{"description":"","name":"get_available_genres"},{"description":"","name":"get_chart_ranking"},{"description":"","name":"get_chatmu_asset_upload_url"},{"description":"","name":"get_collaborator_identifiers"},{"description":"","name":"get_collaborator_profile"},{"description":"","name":"get_distribution_draft_details"},{"description":"","name":"get_distribution_upload_urls"},{"description":"","name":"get_edition_lineup"},{"description":"","name":"get_fans_dna_details"},{"description":"","name":"get_festival_complete_data"},{"description":"","name":"get_global_song_chart"},{"description":"","name":"get_instagram_posts"},{"description":"","name":"get_platform_audience"},{"description":"","name":"get_playlist_platforms"},{"description":"","name":"get_publisher_identifiers"},{"description":"","name":"get_publisher_profile"},{"description":"","name":"get_radios"},{"description":"","name":"get_released_song_metadata"},{"description":"","name":"get_saved_artists_for_distribution"},{"description":"","name":"get_social_calendar"},{"description":"","name":"get_social_post_analytics"},{"description":"","name":"get_social_post_history"},{"description":"","name":"get_song_performance_and_charts"},{"description":"","name":"import_external_audio"},{"description":"","name":"list_analyzed_fans_dna"},{"description":"","name":"list_chatmu_songs"},{"description":"","name":"list_connected_social_accounts"},{"description":"","name":"list_video_rendering_jobs"},{"description":"","name":"list_video_templates"},{"description":"","name":"market_potential_analysis"},{"description":"","name":"networking_claim_mail_alias"},{"description":"","name":"networking_create_contact","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change user data."}},{"description":"","name":"networking_create_pitch"},{"description":"","name":"networking_delete_contact","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructively remove music and relationship workflow records."}},{"description":"","name":"networking_delete_pitch","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructively remove music and relationship workflow records."}},{"description":"","name":"networking_get_contacts"},{"description":"","name":"networking_get_mail_alias"},{"description":"","name":"networking_get_pitches"},{"description":"","name":"networking_manage_campaigns","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change user data."}},{"description":"","name":"networking_read_inbox"},{"description":"","name":"networking_send_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External communications as the artist/manager are High impact."}},{"description":"","name":"networking_update_contact"},{"description":"","name":"open_chatmu_catalog_uploader"},{"description":"","name":"open_chatmu_lyrics_editor"},{"description":"","name":"open_chatmu_social_calendar"},{"description":"","name":"open_chatmu_song_sorter"},{"description":"","name":"open_chatmu_video_creator"},{"description":"","name":"open_distribution_uploader"},{"description":"","name":"open_distribution_wizard"},{"description":"","name":"open_social_post_composer"},{"description":"","name":"patch_distribution_metadata","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Submitting music distribution is a production release action."}},{"description":"","name":"predict_artist_trajectory"},{"description":"","name":"publish_social_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External communications as the artist/manager are High impact."}},{"description":"","name":"render_chatmu_video","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change user data."}},{"description":"","name":"reschedule_social_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External communications as the artist/manager are High impact."}},{"description":"","name":"resolve_platform_url"},{"description":"","name":"schedule_future_task"},{"description":"","name":"search_artist"},{"description":"","name":"search_chatmu_artists_db"},{"description":"","name":"search_chatmu_festivals"},{"description":"","name":"search_chatmu_songs"},{"description":"","name":"search_festivals"},{"description":"","name":"search_global_market_playlists"},{"description":"","name":"search_live_music_venues"},{"description":"","name":"search_skills"},{"description":"","name":"search_specific_location"},{"description":"","name":"search_verified_curators"},{"description":"","name":"song_identity_resolver"},{"description":"","name":"start_music_distribution_draft","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Submitting music distribution is a production release action."}},{"description":"","name":"submit_distribution_for_review","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Submitting music distribution is a production release action."}},{"description":"","name":"transcribe_audio_url_lyrics"},{"description":"","name":"update_chatmu_song_metadata","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change user data."}},{"description":"","name":"update_video_template"},{"description":"","name":"upload_social_media_file"},{"description":"","name":"upload_song_for_create_videos"}],"tools_count":131,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/cec15557-ddad-4e4b-920c-7bbc084789c5","uuid":"0a8eab65-8d7b-5bf2-8e12-8ad4fac3e59b","verification_tier":"community","version":""},"query_key":"chatmu","schema_version":1,"status":"match"}