{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"ClickFunnels connects Claude to funnels, contacts, courses, store data, and related workflows. Discover available records and actions, then read, create, update, or delete permitted content. Connecting requires team-admin access; selected workspaces and per-category read/write grants define the scope.","did":"5ce1f226-6c03-458c-b1d9-424562bbbe5d","documentation_url":"https://support.myclickfunnels.com/docs/clickfunnels-mcp-server-beta-1/#find-the-mcp-server-app","editorial_description":{"extended_description":"Supported records include emails, forms, blogs, sites, orders, and workflows. The connector discovers each category before acting and uses the ClickFunnels V2 API through OAuth. Workspace switching stays within the authorized connection.","schema_version":1,"summary":"ClickFunnels connects Claude to funnels, contacts, courses, store data, and related workflows.\nDiscover available records and actions, then read, create, update, or delete permitted content.\nConnecting requires team-admin access; selected workspaces and per-category read/write grants define the scope."},"homepage_url":"","icon":"https://agents.myclickfunnels.com/mcp-assets/cf2mcplogo-icon-light-on-dark-512-pad10.png","id":"5ce1f226-6c03-458c-b1d9-424562bbbe5d","installs":0,"last_scanned":"","license":"","long_description":"Supported records include emails, forms, blogs, sites, orders, and workflows. The connector discovers each category before acting and uses the ClickFunnels V2 API through OAuth. Workspace switching stays within the authorized connection.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The Directory inventory includes destroy alongside funnels, contacts, courses and store data described by the listing.","reasoning":"A declared destroy operation on business records is a verified destructive capability, even though the object schemas are absent.","risk_type":"data_deletion","severity":"high","title":"Generic destroy action can delete ClickFunnels records","triggering_tools_or_skills":["destroy"]},{"evidence":"The inventory exposes category discovery plus read_action and take_action rather than a bounded operation list.","reasoning":"The action set can be selected dynamically, so additional write or high-impact actions may be reachable beyond the named top-level tools.","risk_type":"generic_gateway","severity":"low","title":"Category action gateway hides reachable operations","triggering_tools_or_skills":["describe_category","read_action","take_action"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required, but the packet does not establish OAuth scopes or how category actions are authorized.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5ce1f226-6c03-458c-b1d9-424562bbbe5d.json","what_it_proves":"Candidate PR #125 record identity (name \"ClickFunnels\", publisher, type web_connector) and 11 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5ce1f226-6c03-458c-b1d9-424562bbbe5d: complete tool_names inventory (11 tools), remote streamable-http endpoint https://agents.myclickfunnels.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"The declared destroy tool establishes High risk, while the generic action gateway leaves additional capabilities unresolved.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5ce1f226-6c03-458c-b1d9-424562bbbe5d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eleven names. create/update are account mutations; fetch/list are reads; take_action is a generic gateway. Names-only evidence cannot determine whether messaging, payments or deployment actions exist.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"true","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"unknown","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":11,"tools_or_skills_total":11},"name":"ClickFunnels","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5ce1f226-6c03-458c-b1d9-424562bbbe5d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.clickfunnels.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"ClickFunnels","publisher_url":"https://www.clickfunnels.com/","remote_url":"https://agents.myclickfunnels.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: A declared destroy operation on business records is a verified destructive capability, even though the object schemas are absent.","evidence":"Generic destroy action can delete ClickFunnels records: The Directory inventory includes destroy alongside funnels, contacts, courses and store data described by the listing.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Generic destroy action can delete ClickFunnels records","triggering_tools":["destroy"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The action set can be selected dynamically, so additional write or high-impact actions may be reachable beyond the named top-level tools.","evidence":"Category action gateway hides reachable operations: The inventory exposes category discovery plus read_action and take_action rather than a bounded operation list.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"low","title":"Category action gateway hides reachable operations","triggering_tools":["describe_category","read_action","take_action"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.myclickfunnels.com/","tags":["deletes_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"create"},{"description":"","name":"current_workspace"},{"description":"","name":"describe_category"},{"description":"","name":"destroy","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: A declared destroy operation on business records is a verified destructive capability, even though the object schemas are absent."}},{"description":"","name":"fetch"},{"description":"","name":"list"},{"description":"","name":"list_workspaces"},{"description":"","name":"read_action"},{"description":"","name":"switch_workspace"},{"description":"","name":"take_action"},{"description":"","name":"update"}],"tools_count":11,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5ce1f226-6c03-458c-b1d9-424562bbbe5d","uuid":"3d3b1f44-a0d1-5152-8bda-5452f7fdc515","verification_tier":"community","version":""},"query_key":"clickfunnels","schema_version":1,"status":"match"}