{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Turn notes, documents or ideas into mind maps with CloudMindMaps. Create maps from outlines or FreeMind XML and browse your existing maps. Open the resulting link to edit or collaborate in the browser.","did":"02377d03-c595-4cbb-98a1-fe9f2cac8003","documentation_url":"https://cloudmindmaps.app/mcp","editorial_description":{"extended_description":"Maps use the .mm format compatible with FreeMind and Freeplane. Outline-based creation generates the map structure, while raw XML supports features such as connectors and rich nodes. Sign in with Google; the source describes new maps as private until you choose to share them.","schema_version":1,"summary":"Turn notes, documents or ideas into mind maps with CloudMindMaps.\nCreate maps from outlines or FreeMind XML and browse your existing maps.\nOpen the resulting link to edit or collaborate in the browser."},"homepage_url":"","icon":"https://cloudmindmaps.app/favicon-512.png","id":"02377d03-c595-4cbb-98a1-fe9f2cac8003","installs":0,"last_scanned":"","license":"","long_description":"Maps use the .mm format compatible with FreeMind and Freeplane. Outline-based creation generates the map structure, while raw XML supports features such as connectors and rich nodes. Sign in with Google; the source describes new maps as private until you choose to share them.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Tool names; description: create from outline or raw .mm XML, returns a shareable URL.","reasoning":"Writes new documents; no update, delete or share tool is declared.","risk_type":"data_modification","severity":"medium","title":"Creates mind maps in the user's account","triggering_tools_or_skills":["create_mindmap","create_mindmap_from_outline"]},{"evidence":"Description: 'browse the maps you own or that are shared with you'.","reasoning":"Maps shared by others are third-party content returned to context.","risk_type":"private_data_read","severity":"low","title":"Reads owned and shared mind maps","triggering_tools_or_skills":["list_mindmaps","get_mindmap"]},{"evidence":"Directory remote.url is cloudmindmaps.app/mcp; no pinned source or version is available for the server.","reasoning":"Tool behaviour can change server-side after review; ratings rest on the 2026-09-22 snapshot.","risk_type":"provenance_uncertainty","severity":"low","title":"Closed hosted MCP server for CloudMindMaps can change without notice","triggering_tools_or_skills":[]}],"assessment_status":"reviewed","auth_and_scopes":"Directory: auth_required (Google sign-in per description); site also documents an API-key stdio package; scopes unknown.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/02377d03-c595-4cbb-98a1-fe9f2cac8003.json","what_it_proves":"Candidate PR #125 record identity (name \"CloudMindMaps\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/02377d03-c595-4cbb-98a1-fe9f2cac8003: complete tool_names inventory (4 tools), remote streamable-http endpoint https://cloudmindmaps.app/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:29:10Z","url_or_path":"https://cloudmindmaps.app/","what_it_proves":"CloudMindMaps site: MCP connector creates mind maps in the user's account; maps private by default with opt-in sharing/public links; setup shown via API key and npx cloudmindmaps-mcp; Google/Microsoft sign-in for the web app."}],"primary_reason":"Two create tools add new mind maps to the user's account; the rest of the four-tool inventory is read-only.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:02377d03-c595-4cbb-98a1-fe9f2cac8003","reviewed_at":"2026-10-10","reviewer_notes":"Identity consistent (cloudmindmaps.app). Reviewed all 4 tool names. Documentation URL https://cloudmindmaps.app/mcp is the MCP endpoint itself (HTTP 405 on GET); used the homepage instead. Site documents an API-key local package while the Directory lists a remote OAuth connector; minor auth-description mismatch noted.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"CloudMindMaps","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=02377d03-c595-4cbb-98a1-fe9f2cac8003&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://cloudmindmaps.app/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"CloudMindMaps","publisher_url":"https://cloudmindmaps.app/","remote_url":"https://cloudmindmaps.app/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Writes new documents; no update, delete or share tool is declared.","evidence":"Creates mind maps in the user's account: Tool names; description: create from outline or raw .mm XML, returns a shareable URL.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates mind maps in the user's account","triggering_tools":["create_mindmap","create_mindmap_from_outline"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Maps shared by others are third-party content returned to context.","evidence":"Reads owned and shared mind maps: Description: 'browse the maps you own or that are shared with you'.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads owned and shared mind maps","triggering_tools":["list_mindmaps","get_mindmap"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"cloudmindmaps@janrezab.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"create_mindmap","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Writes new documents; no update, delete or share tool is declared."}},{"description":"","name":"create_mindmap_from_outline","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Writes new documents; no update, delete or share tool is declared."}},{"description":"","name":"get_mindmap"},{"description":"","name":"list_mindmaps"}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/02377d03-c595-4cbb-98a1-fe9f2cac8003","uuid":"3c0e3359-a2f7-561a-bffd-6e535147c657","verification_tier":"community","version":""},"query_key":"cloudmindmaps","schema_version":1,"status":"match"}