{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage email contacts, campaigns, templates, and automation workflows in Sendly. Inspect delivery analytics, validate addresses, and send real email only after explicit confirmation. OAuth scopes restrict offered tools, and verified sending domains and plan caps apply.","did":"e2cba79c-6e59-4784-af25-93ce631ad368","documentation_url":"https://docs.sendly.now/guides/mcp","editorial_description":{"extended_description":"Campaign sends require a previewed audience and a second confirmation call; tests go only to your verified address. Sending and destructive scopes are opt-in. Manage lists, segments, suppressions, topics, domains, and webhooks; validation and list cleaning are metered. Every plan can connect within its normal daily and monthly limits.","schema_version":1,"summary":"Manage email contacts, campaigns, templates, and automation workflows in Sendly.\nInspect delivery analytics, validate addresses, and send real email only after explicit confirmation.\nOAuth scopes restrict offered tools, and verified sending domains and plan caps apply."},"homepage_url":"","icon":"https://app.sendly.now/icon-512.png","id":"e2cba79c-6e59-4784-af25-93ce631ad368","installs":0,"last_scanned":"","license":"","long_description":"Campaign sends require a previewed audience and a second confirmation call; tests go only to your verified address. Sending and destructive scopes are opt-in. Manage lists, segments, suppressions, topics, domains, and webhooks; validation and list cleaning are metered. Every plan can connect within its normal daily and monthly limits.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The description explicitly states the connector sends real email.","reasoning":"This communicates externally as the project/domain.","risk_type":"messaging_as_user","severity":"high","title":"Transactional, campaign and mailbox email can be sent","triggering_tools_or_skills":["send_campaign","send_email","send_mailbox_email","send_test_email"]},{"evidence":"Explicit destructive actions remove core messaging resources.","reasoning":"These are material deletions.","risk_type":"data_deletion","severity":"high","title":"Contacts, campaigns, lists, mailboxes, segments, webhooks and workflows can be deleted","triggering_tools_or_skills":["delete_contact","delete_campaign","delete_list","delete_mailbox","delete_segment","delete_webhook","delete_workflow"]},{"evidence":"The connector manages credentials and verified sender identity.","reasoning":"These are sensitive security actions.","risk_type":"credential_admin","severity":"high","title":"API keys and sending domains can be administered","triggering_tools_or_skills":["create_api_key","rotate_api_key","revoke_api_key","add_domain","verify_domain"]},{"evidence":"These tools change live messaging automation.","reasoning":"Misconfiguration can send at scale.","risk_type":"deployment_infrastructure","severity":"high","title":"Automated workflows and webhooks can be deployed","triggering_tools_or_skills":["create_workflow","manage_workflow","create_webhook"]},{"evidence":"External/user-authored content is returned.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Email/contact/event data enters model context","triggering_tools_or_skills":["get_email","list_contacts","list_events"]},{"evidence":"The connector runs at https://app.sendly.now/api/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Sendly is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth uses per-scope consent; send/destructive scopes are opt-in and campaigns use two-step explicit confirmation.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e2cba79c-6e59-4784-af25-93ce631ad368.json","what_it_proves":"Candidate PR #125 record identity (name \"Sendly\", publisher, type web_connector) and 80 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e2cba79c-6e59-4784-af25-93ce631ad368: complete tool_names inventory (80 tools), remote streamable-http endpoint https://app.sendly.now/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Sendly sends real email, deletes workspace resources and administers API keys/domains/automation.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e2cba79c-6e59-4784-af25-93ce631ad368","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 80 tools. Scope opt-in, caps and two-step confirmation are safeguards, not lower capability.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":80,"tools_or_skills_total":80},"name":"Sendly","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e2cba79c-6e59-4784-af25-93ce631ad368&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://sendly.now/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Devino Solutions","publisher_url":"https://devino.ca/","remote_url":"https://app.sendly.now/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the project/domain.","evidence":"Transactional, campaign and mailbox email can be sent: The description explicitly states the connector sends real email.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Transactional, campaign and mailbox email can be sent","triggering_tools":["send_campaign","send_email","send_mailbox_email","send_test_email"]},{"description":"This connector can permanently remove data or resources. Review findings: These are material deletions.","evidence":"Contacts, campaigns, lists, mailboxes, segments, webhooks and workflows can be deleted: Explicit destructive actions remove core messaging resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Contacts, campaigns, lists, mailboxes, segments, webhooks and workflows can be deleted","triggering_tools":["delete_contact","delete_campaign","delete_list","delete_mailbox","delete_segment","delete_webhook","delete_workflow"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive security actions.","evidence":"API keys and sending domains can be administered: The connector manages credentials and verified sender identity.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"API keys and sending domains can be administered","triggering_tools":["create_api_key","rotate_api_key","revoke_api_key","add_domain","verify_domain"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration can send at scale.","evidence":"Automated workflows and webhooks can be deployed: These tools change live messaging automation.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Automated workflows and webhooks can be deployed","triggering_tools":["create_workflow","manage_workflow","create_webhook"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"aladdin@devino.ca","tags":["accesses_calendar","code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_domain","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive security actions."}},{"description":"","name":"add_suppression"},{"description":"","name":"check_domain"},{"description":"","name":"clean_list"},{"description":"","name":"clone_workflow"},{"description":"","name":"compose_mailbox_email"},{"description":"","name":"create_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive security actions."}},{"description":"","name":"create_campaign"},{"description":"","name":"create_contact"},{"description":"","name":"create_list"},{"description":"","name":"create_mailbox"},{"description":"","name":"create_project"},{"description":"","name":"create_segment"},{"description":"","name":"create_template"},{"description":"","name":"create_topic"},{"description":"","name":"create_webhook","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration can send at scale."}},{"description":"","name":"create_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration can send at scale."}},{"description":"","name":"delete_campaign","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_contact","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_list","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_mailbox","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_segment","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_webhook","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"delete_workflow","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are material deletions."}},{"description":"","name":"diagnose_delivery"},{"description":"","name":"edit_workflow"},{"description":"","name":"get_campaign"},{"description":"","name":"get_campaign_stats"},{"description":"","name":"get_contact"},{"description":"","name":"get_contact_topic_preferences"},{"description":"","name":"get_email"},{"description":"","name":"get_list"},{"description":"","name":"get_mailbox"},{"description":"","name":"get_project"},{"description":"","name":"get_segment"},{"description":"","name":"get_template"},{"description":"","name":"get_usage"},{"description":"","name":"get_validation_run"},{"description":"","name":"get_workflow"},{"description":"","name":"get_workflow_status"},{"description":"","name":"list_api_keys"},{"description":"","name":"list_campaigns"},{"description":"","name":"list_contacts"},{"description":"","name":"list_emails"},{"description":"","name":"list_events"},{"description":"","name":"list_lists"},{"description":"","name":"list_mailboxes"},{"description":"","name":"list_projects"},{"description":"","name":"list_segment_contacts"},{"description":"","name":"list_segments"},{"description":"","name":"list_suppressions"},{"description":"","name":"list_templates"},{"description":"","name":"list_topics"},{"description":"","name":"list_validation_results"},{"description":"","name":"list_webhooks"},{"description":"","name":"list_workflow_executions"},{"description":"","name":"list_workflows"},{"description":"","name":"manage_campaign"},{"description":"","name":"manage_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration can send at scale."}},{"description":"","name":"record_event"},{"description":"","name":"remove_suppression"},{"description":"","name":"revoke_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive security actions."}},{"description":"","name":"rotate_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive security actions."}},{"description":"","name":"send_campaign","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the project/domain."}},{"description":"","name":"send_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the project/domain."}},{"description":"","name":"send_mailbox_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the project/domain."}},{"description":"","name":"send_test_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the project/domain."}},{"description":"","name":"set_topic_subscription"},{"description":"","name":"start_domain_setup"},{"description":"","name":"update_campaign"},{"description":"","name":"update_contact"},{"description":"","name":"update_list"},{"description":"","name":"update_segment"},{"description":"","name":"update_template"},{"description":"","name":"update_topic"},{"description":"","name":"update_webhook"},{"description":"","name":"update_workflow"},{"description":"","name":"validate_emails"},{"description":"","name":"verify_domain","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive security actions."}},{"description":"","name":"view_analytics"}],"tools_count":80,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e2cba79c-6e59-4784-af25-93ce631ad368","uuid":"3bd43c3e-2e2a-5799-8ae6-44224349b081","verification_tier":"community","version":""},"query_key":"devino solutions sendly","schema_version":1,"status":"match"}