{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Brings Dopia customer records and pipeline context into Claude. Search or aggregate CRM data, create records and update existing deals. Overwrites require confirmation; the connector cannot send messages, delete records or read mailboxes and recordings.","did":"badd8294-b600-4808-bc39-30f3a6f2a5a9","documentation_url":"https://dopia.ai/help/integrations/connect-claude","editorial_description":{"extended_description":"New records deduplicate using contact identifiers such as email, phone or URLs. Finished work can be saved as structured artifacts, private until deliberately shared. Tools inspect schemas and retrieve existing artifacts without changing the table structure.","schema_version":1,"summary":"Brings Dopia customer records and pipeline context into Claude.\nSearch or aggregate CRM data, create records and update existing deals.\nOverwrites require confirmation; the connector cannot send messages, delete records or read mailboxes and recordings."},"homepage_url":"","icon":"","id":"badd8294-b600-4808-bc39-30f3a6f2a5a9","installs":0,"last_scanned":"","license":"","long_description":"New records deduplicate using contact identifiers such as email, phone or URLs. Finished work can be saved as structured artifacts, private until deliberately shared. Tools inspect schemas and retrieve existing artifacts without changing the table structure.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The Directory inventory explicitly includes create_artifact, create_record and update_record alongside CRM search/read tools.","reasoning":"Creating and changing customer CRM records is a meaningful persistent write, with no declared High action.","risk_type":"data_modification","severity":"medium","title":"Creates and updates CRM data","triggering_tools_or_skills":["create_artifact","create_record","update_record"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; the CRM/table scopes and authorization boundaries are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/badd8294-b600-4808-bc39-30f3a6f2a5a9.json","what_it_proves":"Candidate PR #125 record identity (name \"Dopia\", publisher, type web_connector) and 11 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/badd8294-b600-4808-bc39-30f3a6f2a5a9: complete tool_names inventory (11 tools), remote streamable-http endpoint https://mcp.dopia.ai/mcp?via=directory, auth_posture auth_required, directory tier community"}],"primary_reason":"Dopia can create CRM records and artifacts and update existing records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:badd8294-b600-4808-bc39-30f3a6f2a5a9","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 11 names. The official integration page could not be fetched; runtime verification is needed for create_artifact/create_record/update_record field scope and tenant isolation.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":11,"tools_or_skills_total":11},"name":"Dopia","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=badd8294-b600-4808-bc39-30f3a6f2a5a9&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://dopia.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Dopia (InflueMatch, Inc.)","publisher_url":"https://dopia.ai/","remote_url":"https://mcp.dopia.ai/mcp?via=directory","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating and changing customer CRM records is a meaningful persistent write, with no declared High action.","evidence":"Creates and updates CRM data: The Directory inventory explicitly includes create_artifact, create_record and update_record alongside CRM search/read tools.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates CRM data","triggering_tools":["create_artifact","create_record","update_record"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@dopia.ai","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"aggregate_records"},{"description":"","name":"create_artifact","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating and changing customer CRM records is a meaningful persistent write, with no declared High action."}},{"description":"","name":"create_record","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating and changing customer CRM records is a meaningful persistent write, with no declared High action."}},{"description":"","name":"get_artifact"},{"description":"","name":"get_record"},{"description":"","name":"get_table_schema"},{"description":"","name":"list_artifacts"},{"description":"","name":"search_crm"},{"description":"","name":"search_records"},{"description":"","name":"update_record","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating and changing customer CRM records is a meaningful persistent write, with no declared High action."}},{"description":"","name":"whoami"}],"tools_count":11,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/badd8294-b600-4808-bc39-30f3a6f2a5a9","uuid":"5856e5a7-a610-5a87-a9cc-497b86c1a69f","verification_tier":"community","version":""},"query_key":"dopia","schema_version":1,"status":"match"}