{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-23","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Work with sales records in Coevera CRM from Claude. Search, create and update accounts, contacts, leads, opportunities, tasks and appointments. Manage ownership, pipeline moves and lead qualification, including supported bulk actions.","did":"c845ac91-d62d-493b-ad3a-0df9ab491712","documentation_url":"https://help.pipelinersales.com/en/articles/15752937-coevera-ai-connectors","editorial_description":{"extended_description":"Entity metadata tools help discover record types and relationships. Additional operations include archiving leads or opportunities and checking or completing step-checklist items, alongside linking activities to the relevant CRM records.","schema_version":1,"summary":"Work with sales records in Coevera CRM from Claude.\nSearch, create and update accounts, contacts, leads, opportunities, tasks and appointments.\nManage ownership, pipeline moves and lead qualification, including supported bulk actions."},"homepage_url":"","icon":"https://www.coevera.com/favicon.svg","id":"c845ac91-d62d-493b-ad3a-0df9ab491712","installs":0,"last_scanned":"","license":"","long_description":"Entity metadata tools help discover record types and relationships. Additional operations include archiving leads or opportunities and checking or completing step-checklist items, alongside linking activities to the relevant CRM records.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The declared tool names explicitly bulk-archive core CRM records.","reasoning":"Bulk archival removes records from active workflows at scale and is a destructive business-data action.","risk_type":"data_deletion","severity":"high","title":"Leads and opportunities can be bulk archived","triggering_tools_or_skills":["bulk_archive_leads","bulk_archive_opportunities"]},{"evidence":"The complete inventory includes record creation/update, ownership transfer and bulk pipeline actions.","reasoning":"These actions persist material CRM changes.","risk_type":"data_modification","severity":"medium","title":"CRM records, ownership and pipeline state can be changed","triggering_tools_or_skills":["create_records","update_records","change_ownership","bulk_move_opportunities","bulk_qualify_leads"]},{"evidence":"The connector runs at https://mcp-server.coevera.com/mcp and no pinned server implementation was available in the review packet.","reasoning":"The hosted implementation and action semantics can change independently of this catalog snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Coevera is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for Coevera CRM; the Directory packet does not list OAuth scopes or role boundaries.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c845ac91-d62d-493b-ad3a-0df9ab491712.json","what_it_proves":"Candidate PR #125 record identity (name \"Coevera\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c845ac91-d62d-493b-ad3a-0df9ab491712: complete tool_names inventory (14 tools), remote streamable-http endpoint https://mcp-server.coevera.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Coevera can bulk-archive sales records and change ownership and pipeline state.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c845ac91-d62d-493b-ad3a-0df9ab491712","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 14 tools. The official connector help page was opened, but names alone already establish High archival capability; schemas and confirmation behavior remain unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"Coevera","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c845ac91-d62d-493b-ad3a-0df9ab491712&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.coevera.com/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Pipelinersales Inc","publisher_url":"https://www.coevera.com/","remote_url":"https://mcp-server.coevera.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Bulk archival removes records from active workflows at scale and is a destructive business-data action.","evidence":"Leads and opportunities can be bulk archived: The declared tool names explicitly bulk-archive core CRM records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Leads and opportunities can be bulk archived","triggering_tools":["bulk_archive_leads","bulk_archive_opportunities"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist material CRM changes.","evidence":"CRM records, ownership and pipeline state can be changed: The complete inventory includes record creation/update, ownership transfer and bulk pipeline actions.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"CRM records, ownership and pipeline state can be changed","triggering_tools":["create_records","update_records","change_ownership","bulk_move_opportunities","bulk_qualify_leads"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@pipelinersales.com","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"bulk_archive_leads","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Bulk archival removes records from active workflows at scale and is a destructive business-data action."}},{"description":"","name":"bulk_archive_opportunities","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Bulk archival removes records from active workflows at scale and is a destructive business-data action."}},{"description":"","name":"bulk_move_opportunities","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist material CRM changes."}},{"description":"","name":"bulk_qualify_leads","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist material CRM changes."}},{"description":"","name":"change_ownership","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist material CRM changes."}},{"description":"","name":"complete_step_checklist_item"},{"description":"","name":"create_records","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist material CRM changes."}},{"description":"","name":"get_records"},{"description":"","name":"get_step_checklist_status"},{"description":"","name":"me"},{"description":"","name":"meta_describe_entity"},{"description":"","name":"meta_list_entity_types"},{"description":"","name":"search_records"},{"description":"","name":"update_records","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist material CRM changes."}}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c845ac91-d62d-493b-ad3a-0df9ab491712","uuid":"87ddf281-449a-5950-93cc-a2ac87c7de2c","verification_tier":"community","version":""},"query_key":"coevera","schema_version":1,"status":"match"}