{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Deskfirst builds branded customer portals for sharing project or sales content. Organize files, invite people, generate share links, and maintain mutual action plans. Inspect visitor engagement across customers, files, and team members.","did":"eefe2921-4b16-4ee5-9277-8ecf47377d54","documentation_url":"https://help.deskfirst.com/","editorial_description":{"extended_description":"Create portals from templates or content libraries, set branding, and add tasks, owners, due dates, attachments, or comments. Reporting shows file opens and engagement duration.","schema_version":1,"summary":"Deskfirst builds branded customer portals for sharing project or sales content.\nOrganize files, invite people, generate share links, and maintain mutual action plans.\nInspect visitor engagement across customers, files, and team members."},"homepage_url":"","icon":"https://cdn.prod.website-files.com/621b508d926613ae0f436a30/69ff32d69c689979248e1920_Icon.svg","id":"eefe2921-4b16-4ee5-9277-8ecf47377d54","installs":0,"last_scanned":"","license":"","long_description":"Create portals from templates or content libraries, set branding, and add tasks, owners, due dates, attachments, or comments. Reporting shows file opens and engagement duration.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly invites users, changes team sharing, and creates or updates integrations for customer portals.","reasoning":"These actions grant external access or alter privileged connectivity and therefore require administrative authorization.","risk_type":"credential_admin","severity":"high","title":"Users can be invited and team sharing changed","triggering_tools_or_skills":["invite_user","update_team_sharing","create_integration","update_integration"]},{"evidence":"The listing says users can generate a share link or invite people directly to branded customer portals.","reasoning":"These actions distribute access and communicate as the authenticated team to external recipients.","risk_type":"messaging_as_user","severity":"high","title":"Share links and customer invitations can be issued","triggering_tools_or_skills":["generate_share_link","invite_user"]},{"evidence":"The 65 tools create and update portal structure, project maps, tasks, notes, shortcuts, attachments, backgrounds, and branding.","reasoning":"They make persistent changes to shared client-facing workspaces.","risk_type":"data_modification","severity":"medium","title":"Customer portals, maps, tasks, folders, notes, and branding can be changed","triggering_tools_or_skills":["create_desktop","create_folder","create_map","create_map_task","create_sticky_note","set_desktop_logo","update_map_task"]},{"evidence":"The connector can retrieve brand logos and Unsplash assets and set a custom background for a portal.","reasoning":"Runtime schemas should confirm whether custom backgrounds accept arbitrary external URLs and enforce safe destinations.","risk_type":"arbitrary_network_access","severity":"low","title":"External logo and Unsplash searches are available","triggering_tools_or_skills":["search_brand_logos","search_unsplash_backgrounds","set_custom_background"]},{"evidence":"The connector retrieves files, task comments, desktop comments, and other customer-portal content.","reasoning":"Client-authored content is untrusted and can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Client files and comments enter model context","triggering_tools_or_skills":["list_files","get_file_comments","get_desktop_comments","get_map_task_comments"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to Deskfirst team desktops, clients, files, integrations, maps, and sharing configuration; exact roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/eefe2921-4b16-4ee5-9277-8ecf47377d54.json","what_it_proves":"Candidate PR #125 record identity (name \"Deskfirst\", publisher, type web_connector) and 65 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/eefe2921-4b16-4ee5-9277-8ecf47377d54: complete tool_names inventory (65 tools), remote streamable-http endpoint https://mcp.deskfirst.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Deskfirst can invite users, grant portal access, configure integrations, and modify client-facing workspaces.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:eefe2921-4b16-4ee5-9277-8ecf47377d54","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 65 names; no explicit file or portal deletion tool is declared.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":65,"tools_or_skills_total":65},"name":"Deskfirst","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=eefe2921-4b16-4ee5-9277-8ecf47377d54&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.deskfirst.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Deskfirst, Inc.","publisher_url":"https://deskfirst.com/","remote_url":"https://mcp.deskfirst.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces.","evidence":"Users can be invited and team sharing changed: The inventory explicitly invites users, changes team sharing, and creates or updates integrations for customer portals. | Customer portals, maps, tasks, folders, notes, and branding can be changed: The 65 tools create and update portal structure, project maps, tasks, notes, shortcuts, attachments, backgrounds, and branding.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["invite_user","update_team_sharing","create_integration","update_integration","create_desktop","create_folder","create_map","create_map_task","create_sticky_note","set_desktop_logo","update_map_task"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: These actions distribute access and communicate as the authenticated team to external recipients.","evidence":"Share links and customer invitations can be issued: The listing says users can generate a share link or invite people directly to branded customer portals.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Share links and customer invitations can be issued","triggering_tools":["generate_share_link","invite_user"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Runtime schemas should confirm whether custom backgrounds accept arbitrary external URLs and enforce safe destinations.","evidence":"External logo and Unsplash searches are available: The connector can retrieve brand logos and Unsplash assets and set a custom background for a portal.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"External logo and Unsplash searches are available","triggering_tools":["search_brand_logos","search_unsplash_backgrounds","set_custom_background"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.deskfirst.com","tags":["forwards_data_to_third_party","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_comment"},{"description":"","name":"add_dock_button"},{"description":"","name":"add_file_tag"},{"description":"","name":"add_map_task_attachment"},{"description":"","name":"add_map_task_comment"},{"description":"","name":"clone_desktop"},{"description":"","name":"create_content_library"},{"description":"","name":"create_desktop","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"create_desktop_template"},{"description":"","name":"create_folder","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"create_integration","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"create_map","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"create_map_section"},{"description":"","name":"create_map_task","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"create_shortcut"},{"description":"","name":"create_sticky_note","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"generate_share_link","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions distribute access and communicate as the authenticated team to external recipients."}},{"description":"","name":"get_activities"},{"description":"","name":"get_desktop"},{"description":"","name":"get_desktop_comments"},{"description":"","name":"get_download_url"},{"description":"","name":"get_file_comments"},{"description":"","name":"get_file_details"},{"description":"","name":"get_file_stats"},{"description":"","name":"get_map"},{"description":"","name":"get_map_task"},{"description":"","name":"get_map_task_comments"},{"description":"","name":"get_shared_users"},{"description":"","name":"get_sticky_notes"},{"description":"","name":"get_team_clients"},{"description":"","name":"get_team_desktop_analytics"},{"description":"","name":"get_team_member_analytics"},{"description":"","name":"get_team_overview"},{"description":"","name":"get_user_stats"},{"description":"","name":"invite_user","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions distribute access and communicate as the authenticated team to external recipients."}},{"description":"","name":"list_desktops"},{"description":"","name":"list_files"},{"description":"","name":"list_map_tasks"},{"description":"","name":"list_map_templates"},{"description":"","name":"list_maps"},{"description":"","name":"list_share_links"},{"description":"","name":"pin_sticky_note"},{"description":"","name":"pin_window"},{"description":"","name":"remove_dock_button"},{"description":"","name":"rename_desktop"},{"description":"","name":"reorder_map_sections"},{"description":"","name":"reorder_map_tasks"},{"description":"","name":"search_brand_logos"},{"description":"","name":"search_files"},{"description":"","name":"search_unsplash_backgrounds"},{"description":"","name":"set_background"},{"description":"","name":"set_color_background"},{"description":"","name":"set_custom_background"},{"description":"","name":"set_desktop_logo","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"set_unsplash_background"},{"description":"","name":"star_file"},{"description":"","name":"toggle_dark_mode"},{"description":"","name":"update_integration","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"update_map"},{"description":"","name":"update_map_section"},{"description":"","name":"update_map_task","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}},{"description":"","name":"update_map_task_comment"},{"description":"","name":"update_shortcut"},{"description":"","name":"update_sticky_note"},{"description":"","name":"update_team_sharing","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions grant external access or alter privileged connectivity and therefore require administrative authorization.; They make persistent changes to shared client-facing workspaces."}}],"tools_count":65,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/eefe2921-4b16-4ee5-9277-8ecf47377d54","uuid":"c0e950cb-b0bb-55e3-8b00-89ec4601d6ef","verification_tier":"community","version":""},"query_key":"deskfirst inc deskfirst","schema_version":1,"status":"match"}