{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Crisphive provides scheduling tools for field operations and agents. Match jobs to availability, skills, locations, technicians, and vehicles. Create or confirm jobs and preview or commit schedule moves and emergency rescheduling.","did":"a5f57a4b-1d01-4c53-bd31-2c73b8d0966e","documentation_url":"https://docs.crisphive.com/mcp","editorial_description":{"extended_description":"Manage customers, job types, service areas, skills, and technician assignments. Booking windows, crew candidates, quotes, and change timelines provide context before changing schedules.","schema_version":1,"summary":"Crisphive provides scheduling tools for field operations and agents.\nMatch jobs to availability, skills, locations, technicians, and vehicles.\nCreate or confirm jobs and preview or commit schedule moves and emergency rescheduling."},"homepage_url":"","icon":"https://cdn.crisphive.com/public-global/assets/brand/crisphive-logo-400.png","id":"a5f57a4b-1d01-4c53-bd31-2c73b8d0966e","installs":0,"last_scanned":"","license":"","long_description":"Manage customers, job types, service areas, skills, and technician assignments. Booking windows, crew candidates, quotes, and change timelines provide context before changing schedules.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit tools remove durable workforce/customer/asset records.","reasoning":"They can disrupt field operations.","risk_type":"data_deletion","severity":"high","title":"Deletes customers, technicians, vehicles, skills and service configuration","triggering_tools_or_skills":["deleteCustomer","deleteTechnician","deleteVehicle","deleteSkill","deleteServiceArea"]},{"evidence":"These tools change live dispatch/scheduling operations.","reasoning":"They control real workforce deployment.","risk_type":"deployment_infrastructure","severity":"high","title":"Commits job bookings, moves and emergency reschedules","triggering_tools_or_skills":["confirmJobRequest","commitJobRequestMove","commitEmergencyReschedule"]},{"evidence":"The tools broadly change operational state.","reasoning":"They materially affect dispatch/workforce records.","risk_type":"data_modification","severity":"medium","title":"Creates/updates jobs, customers, technicians and assignments","triggering_tools_or_skills":["createJobRequest","createTechnician","updateJobPriority","replaceTechnicianSkills"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes field-service scheduling and workforce records.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a5f57a4b-1d01-4c53-bd31-2c73b8d0966e.json","what_it_proves":"Candidate PR #125 record identity (name \"Crisphive\", publisher, type web_connector) and 53 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a5f57a4b-1d01-4c53-bd31-2c73b8d0966e: complete tool_names inventory (53 tools), remote streamable-http endpoint https://api.crisphive.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Crisphive deletes operational records and commits live field-service schedules.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a5f57a4b-1d01-4c53-bd31-2c73b8d0966e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 53 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":53,"tools_or_skills_total":53},"name":"Crisphive","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a5f57a4b-1d01-4c53-bd31-2c73b8d0966e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://crisphive.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Crisphive","publisher_url":"https://crisphive.com/","remote_url":"https://api.crisphive.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can disrupt field operations.","evidence":"Deletes customers, technicians, vehicles, skills and service configuration: Explicit tools remove durable workforce/customer/asset records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes customers, technicians, vehicles, skills and service configuration","triggering_tools":["deleteCustomer","deleteTechnician","deleteVehicle","deleteSkill","deleteServiceArea"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They control real workforce deployment.","evidence":"Commits job bookings, moves and emergency reschedules: These tools change live dispatch/scheduling operations.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Commits job bookings, moves and emergency reschedules","triggering_tools":["confirmJobRequest","commitJobRequestMove","commitEmergencyReschedule"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect dispatch/workforce records.","evidence":"Creates/updates jobs, customers, technicians and assignments: The tools broadly change operational state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates jobs, customers, technicians and assignments","triggering_tools":["createJobRequest","createTechnician","updateJobPriority","replaceTechnicianSkills"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://crisphive.com/support","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"commitEmergencyReschedule","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They control real workforce deployment."}},{"description":"","name":"commitJobRequestMove","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They control real workforce deployment."}},{"description":"","name":"confirmJobRequest","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They control real workforce deployment."}},{"description":"","name":"createCustomer"},{"description":"","name":"createJobRequest","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect dispatch/workforce records."}},{"description":"","name":"createJobType"},{"description":"","name":"createServiceArea"},{"description":"","name":"createSkill"},{"description":"","name":"createSkillCategory"},{"description":"","name":"createTechnician","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect dispatch/workforce records."}},{"description":"","name":"createVehicle"},{"description":"","name":"deleteCustomer","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt field operations."}},{"description":"","name":"deleteJobType"},{"description":"","name":"deleteServiceArea","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt field operations."}},{"description":"","name":"deleteSkill","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt field operations."}},{"description":"","name":"deleteSkillCategory"},{"description":"","name":"deleteTechnician","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt field operations."}},{"description":"","name":"deleteVehicle","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt field operations."}},{"description":"","name":"getCustomer"},{"description":"","name":"getJobRequest"},{"description":"","name":"getJobRequestTimeline"},{"description":"","name":"getJobType"},{"description":"","name":"getServiceArea"},{"description":"","name":"getTechnician"},{"description":"","name":"getTechnicianSchedule"},{"description":"","name":"getVehicle"},{"description":"","name":"listCrewCandidates"},{"description":"","name":"listCustomers"},{"description":"","name":"listEmergencyCandidates"},{"description":"","name":"listJobRequestBookingWindows"},{"description":"","name":"listJobRequestChanges"},{"description":"","name":"listJobRequests"},{"description":"","name":"listJobTypes"},{"description":"","name":"listMatchingSlots"},{"description":"","name":"listNearbyTechnicians"},{"description":"","name":"listServiceAreas"},{"description":"","name":"listSkillCategories"},{"description":"","name":"listSkills"},{"description":"","name":"listSkillsByCategory"},{"description":"","name":"listTechnicianSkills"},{"description":"","name":"listTechnicians"},{"description":"","name":"listVehicles"},{"description":"","name":"previewEmergencyReschedule"},{"description":"","name":"previewJobRequestMove"},{"description":"","name":"quoteJobRequest"},{"description":"","name":"replaceTechnicianBuddies"},{"description":"","name":"replaceTechnicianLeads"},{"description":"","name":"replaceTechnicianServiceAreas"},{"description":"","name":"replaceTechnicianSkills","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect dispatch/workforce records."}},{"description":"","name":"replaceTechnicianVehicles"},{"description":"","name":"updateCustomer"},{"description":"","name":"updateJobPriority","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect dispatch/workforce records."}},{"description":"","name":"updateTechnician"}],"tools_count":53,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a5f57a4b-1d01-4c53-bd31-2c73b8d0966e","uuid":"3e808c46-8bbe-5b7b-83eb-0b333bd9b538","verification_tier":"community","version":""},"query_key":"crisphive crisphive","schema_version":1,"status":"match"}