{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manages coworking or flexible-workspace operations in Cobot from Claude. Check rooms and desks, review memberships and invoices, and create or change bookings. Access is limited to spaces you manage and the permissions granted in each space.","did":"29e5c041-1f17-4ae5-ac8e-2cf9bc80489e","documentation_url":"https://dev.cobot.me/mcp","editorial_description":{"extended_description":"Inspect allocated or available resources, member check-in history, teams and visitor contacts. Bookings can be made on behalf of members, and a check-out action is also available. Invoice tools retrieve information rather than issue or collect payments.","schema_version":1,"summary":"Manages coworking or flexible-workspace operations in Cobot from Claude.\nCheck rooms and desks, review memberships and invoices, and create or change bookings.\nAccess is limited to spaces you manage and the permissions granted in each space."},"homepage_url":"","icon":"","id":"29e5c041-1f17-4ae5-ac8e-2cf9bc80489e","installs":0,"last_scanned":"","license":"","long_description":"Inspect allocated or available resources, member check-in history, teams and visitor contacts. Bookings can be made on behalf of members, and a check-out action is also available. Invoice tools retrieve information rather than issue or collect payments.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official docs confirm these tools book resources, update bookings and alter member check-in state.","reasoning":"These are persistent coworking-space operational changes.","risk_type":"data_modification","severity":"medium","title":"Creates/updates resource bookings and checks members out","triggering_tools_or_skills":["create_booking","update_booking","check_out"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.0 with PKCE limits access to spaces the user administers and permissions granted in each; exact booking-charge behavior is not described.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/29e5c041-1f17-4ae5-ac8e-2cf9bc80489e.json","what_it_proves":"Candidate PR #125 record identity (name \"Cobot Coworking Software\", publisher, type web_connector) and 22 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/29e5c041-1f17-4ae5-ac8e-2cf9bc80489e: complete tool_names inventory (22 tools), remote streamable-http endpoint https://api.cobot.me/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:30:09Z","url_or_path":"https://dev.cobot.me/mcp","what_it_proves":"Official Cobot MCP docs enumerate booking creation/update and member checkout, plus OAuth/space-admin scoping."}],"primary_reason":"Cobot can create and update bookings and change member checkout state.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:29e5c041-1f17-4ae5-ac8e-2cf9bc80489e","reviewed_at":"2026-10-10","reviewer_notes":"Because Cobot products can represent extras/add-ons/charges, runtime verification must determine whether creating a booking incurs a member charge; spending remains unknown until then.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":22,"tools_or_skills_total":22},"name":"Cobot Coworking Software","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=29e5c041-1f17-4ae5-ac8e-2cf9bc80489e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.cobot.me/en/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Cobot Coworking Software","publisher_url":"https://www.cobot.me/","remote_url":"https://api.cobot.me/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent coworking-space operational changes.","evidence":"Creates/updates resource bookings and checks members out: Official docs confirm these tools book resources, update bookings and alter member check-in state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates resource bookings and checks members out","triggering_tools":["create_booking","update_booking","check_out"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.cobot.me/en/support","tags":["accesses_calendar","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"check_out","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent coworking-space operational changes."}},{"description":"","name":"check_resource_availability"},{"description":"","name":"create_booking","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent coworking-space operational changes."}},{"description":"","name":"get_booking"},{"description":"","name":"get_contact"},{"description":"","name":"get_current_user"},{"description":"","name":"get_external_booking"},{"description":"","name":"get_invoice"},{"description":"","name":"get_membership"},{"description":"","name":"get_product"},{"description":"","name":"get_team"},{"description":"","name":"list_allocations"},{"description":"","name":"list_bookings"},{"description":"","name":"list_contacts"},{"description":"","name":"list_external_bookings"},{"description":"","name":"list_invoices"},{"description":"","name":"list_membership_check_ins"},{"description":"","name":"list_memberships"},{"description":"","name":"list_products"},{"description":"","name":"list_resources"},{"description":"","name":"list_teams"},{"description":"","name":"update_booking","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent coworking-space operational changes."}}],"tools_count":22,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/29e5c041-1f17-4ae5-ac8e-2cf9bc80489e","uuid":"eddc8be6-7024-5c98-b084-319ae8b43f77","verification_tier":"community","version":""},"query_key":"cobot coworking software","schema_version":1,"status":"match"}