{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"171bda36bc30ee5accb9c5d9a6bb46cd9ad1bf46303ad4cfdd7ebff8035d048b","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"First pass rated the 14-tool directory inventory Medium and flagged the admin-granted tier as a conditional High. On comparison I keep High: crm.care's own API reference documents that the same /api/mcp endpoint with the workspace (ccr_) token used by this connector exposes 41 tools, including irreversible platform writes (publish_email, publish_segment, set_nurture_enabled, sync_to_crm, Salesforce and LinkedIn audience writes, all marked undoable:false). These are off until an admin grants each tool, which is a configuration gate rather than an absent capability. The High overall is therefore evidenced, but no visible card shows it; the only card is the Medium draft-campaign risk. Propose adding a High 'can publish emails/segments to marketing platforms and write to CRM when admin-granted' risk card.","review_key":"claudesec:e6af857a-25c4-45dc-acce-37925dfb6a9f","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://crm.care/docs/api"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Prepare B2B campaign drafts and review performance with crm.care. Audit email HTML, score briefs, or inspect nurture sequences without an account. Workspace campaign tools require an administrator-issued token; launch creates a draft, not a published campaign.","did":"e6af857a-25c4-45dc-acce-37925dfb6a9f","documentation_url":"https://crm.care/docs/api","editorial_description":{"extended_description":"Read campaign status, CRM sync context, and goal-level budget, pipeline, ROI, or pacing. Generation, review, and publishing remain in the workspace through its connected marketing platform. Mutation tools require individual administrator grants; public audits are rule-based.","schema_version":1,"summary":"Prepare B2B campaign drafts and review performance with crm.care.\nAudit email HTML, score briefs, or inspect nurture sequences without an account.\nWorkspace campaign tools require an administrator-issued token; launch creates a draft, not a published campaign."},"homepage_url":"","icon":"https://crm.care/icon.svg","id":"e6af857a-25c4-45dc-acce-37925dfb6a9f","installs":0,"last_scanned":"","license":"","long_description":"Read campaign status, CRM sync context, and goal-level budget, pipeline, ROI, or pacing. Generation, review, and publishing remain in the workspace through its connected marketing platform. Mutation tools require individual administrator grants; public audits are rule-based.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"The description explicitly says the same token unlocks 26 further calendar/email/social/assets/budget/CRM-sync tools, but only 14 names are stored.","reasoning":"Potential publishing, spend, deletion and CRM actions cannot be assessed.","risk_type":"evidence_gap","severity":"low","title":"Twenty-six granted workspace tools are missing","triggering_tools_or_skills":["launch_campaign"]},{"evidence":"The declared tool creates a reversible draft only.","reasoning":"This known action is Medium, while hidden tools remain unresolved.","risk_type":"data_modification","severity":"medium","title":"A draft campaign can be launched","triggering_tools_or_skills":["launch_campaign"]},{"evidence":"User-authored content is processed.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Campaign briefs and HTML enter model context","triggering_tools_or_skills":["preflight_email_html","audit_nurture_sequence"]},{"evidence":"The connector runs at https://crm.care/api/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"crm.care is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"A workspace API token minted by an admin unlocks individually granted write tools; 26 such tools are omitted from the packet.","blocked_missing_evidence":"The complete 40-tool inventory and schemas for email/social publishing, budget, calendar, assets and CRM sync, including per-tool grants and confirmations.","confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e6af857a-25c4-45dc-acce-37925dfb6a9f.json","what_it_proves":"Candidate PR #125 record identity (name \"crm.care\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e6af857a-25c4-45dc-acce-37925dfb6a9f: complete tool_names inventory (14 tools), remote streamable-http endpoint https://crm.care/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"crm.care omits 26 individually granted campaign/budget/social/CRM tools from its review inventory.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:e6af857a-25c4-45dc-acce-37925dfb6a9f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 14 stored tools and explicit description of missing tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"crm.care","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e6af857a-25c4-45dc-acce-37925dfb6a9f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://crm.care/privacy","provisional_risk":"high","publication_recommendation":"fix","publisher":"crm.care","publisher_url":"https://flowolf.ai/","remote_url":"https://crm.care/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"Admin-granted tools can publish emails and segments to connected marketing platforms and enable nurture sequences. These external publication operations are documented as not undoable.","evidence":"Actions: publish_email, publish_segment, set_nurture_enabled, sync_to_crm, create_salesforce_account, sync_linkedin_audience. https://crm.care/docs/api — 'Tools that publish, send, or change external systems' table; undoable:false; admin grant per tool","risk_type":"sends_messages_as_you","severity":"high","title":"Publishes marketing content when an administrator allows it"},{"description":"With the required per-tool administrator grants, the connector can synchronize CRM records, create Salesforce accounts and update LinkedIn audiences.","evidence":"Actions: publish_email, publish_segment, set_nurture_enabled, sync_to_crm, create_salesforce_account, sync_linkedin_audience. https://crm.care/docs/api — 'Tools that publish, send, or change external systems' table; undoable:false; admin grant per tool","risk_type":"modifies_data","severity":"high","title":"Writes to CRM and advertising audiences"},{"description":"Creates draft campaigns and imports campaign specifications into the workspace.","evidence":"Actions: launch_campaign, import_campaign_spec. https://crm.care/docs/api — core campaign tools create DRAFT campaigns","risk_type":"modifies_data","severity":"medium","title":"Creates draft marketing campaigns"},{"description":"Retrieves private campaign status, goals, profit-and-loss and budget or spend information.","evidence":"Actions: list_campaigns, get_campaign_status, get_goal_pnl. https://crm.care/docs/api — workspace tier reads","risk_type":"reads_private_data","severity":"medium","title":"Reads campaign and financial performance"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"system@crm.care","tags":["sends_messages_as_you","modifies_data","reads_private_data"],"tools":[{"description":"","name":"audit_nurture_sequence"},{"description":"","name":"crm_care_compare"},{"description":"","name":"crm_care_faq"},{"description":"","name":"crm_care_get_blog"},{"description":"","name":"crm_care_icp"},{"description":"","name":"crm_care_overview"},{"description":"","name":"crm_care_pricing"},{"description":"","name":"crm_care_search_blog"},{"description":"","name":"get_campaign_status"},{"description":"","name":"get_goal_pnl"},{"description":"","name":"launch_campaign","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This known action is Medium, while hidden tools remain unresolved."}},{"description":"","name":"list_campaigns"},{"description":"","name":"preflight_email_html"},{"description":"","name":"score_campaign_brief"}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e6af857a-25c4-45dc-acce-37925dfb6a9f","uuid":"c28f9b0d-11fa-512c-8db5-ce9851ef8194","verification_tier":"community","version":""},"query_key":"crm care","schema_version":1,"status":"match"}