{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to workplace operations and visitor management in Envoy. Review visitor, employee and reservation logs, invite visitors, and reserve or assign desks. Available actions depend on your organization's products, enabled tools and account permissions.","did":"21e51aa0-3e07-4655-aca4-3283a54f7c98","documentation_url":"https://mcp.envoy.com/","editorial_description":{"extended_description":"Browse locations, floors, resources and room calendars, inspect desk capacity and assignments, and sign visitors out individually or in bulk. Authentication uses the connected Envoy account.","schema_version":1,"summary":"Connects Claude to workplace operations and visitor management in Envoy.\nReview visitor, employee and reservation logs, invite visitors, and reserve or assign desks.\nAvailable actions depend on your organization's products, enabled tools and account permissions."},"homepage_url":"","icon":"","id":"21e51aa0-3e07-4655-aca4-3283a54f7c98","installs":0,"last_scanned":"","license":"","long_description":"Browse locations, floors, resources and room calendars, inspect desk capacity and assignments, and sign visitors out individually or in bulk. Authentication uses the connected Envoy account.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete Directory inventory explicitly includes invite_visitor in Envoy's workplace visitor-management connector.","reasoning":"An invitation is external communication and can authorize a visitor's planned entry.","risk_type":"messaging_as_user","severity":"high","title":"Can issue visitor invitations","triggering_tools_or_skills":["invite_visitor"]},{"evidence":"The declared tools can sign out one visitor or bulk sign out visitors.","reasoning":"Changing active visitor status is a physical-workplace access/security-control action.","risk_type":"credential_admin","severity":"high","title":"Can sign out visitors in bulk","triggering_tools_or_skills":["bulk_sign_out_visitors","sign_out_visitor"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required and described as respecting account permissions; enabled products, granted scopes and bulk-operation authorization are not enumerated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/21e51aa0-3e07-4655-aca4-3283a54f7c98.json","what_it_proves":"Candidate PR #125 record identity (name \"Envoy\", publisher, type web_connector) and 22 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/21e51aa0-3e07-4655-aca4-3283a54f7c98: complete tool_names inventory (22 tools), remote streamable-http endpoint https://mcp.envoy.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Envoy can invite visitors and alter active visitor access state, including in bulk.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:21e51aa0-3e07-4655-aca4-3283a54f7c98","reviewed_at":"2026-10-10","reviewer_notes":"Desk assignment and reservation are Medium writes, while visitor invitation/sign-out establish High. Runtime verification should inspect confirmation and bulk scope.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":22,"tools_or_skills_total":22},"name":"Envoy","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=21e51aa0-3e07-4655-aca4-3283a54f7c98&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://envoy.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Envoy","publisher_url":"https://envoy.com/","remote_url":"https://mcp.envoy.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: An invitation is external communication and can authorize a visitor's planned entry.","evidence":"Can issue visitor invitations: The complete Directory inventory explicitly includes invite_visitor in Envoy's workplace visitor-management connector.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Can issue visitor invitations","triggering_tools":["invite_visitor"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing active visitor status is a physical-workplace access/security-control action.","evidence":"Can sign out visitors in bulk: The declared tools can sign out one visitor or bulk sign out visitors.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can sign out visitors in bulk","triggering_tools":["bulk_sign_out_visitors","sign_out_visitor"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hi@envoy.com","tags":["accesses_calendar","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"access_log"},{"description":"","name":"assign_desks"},{"description":"","name":"assignment_map"},{"description":"","name":"bulk_sign_out_visitors","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing active visitor status is a physical-workplace access/security-control action."}},{"description":"","name":"delivery_log"},{"description":"","name":"desk_capacity"},{"description":"","name":"employee_directory"},{"description":"","name":"employee_log"},{"description":"","name":"get_settings"},{"description":"","name":"invite_visitor","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: An invitation is external communication and can authorize a visitor's planned entry."}},{"description":"","name":"list_assignment_drafts"},{"description":"","name":"list_floors"},{"description":"","name":"list_flows"},{"description":"","name":"list_invites"},{"description":"","name":"list_locations"},{"description":"","name":"list_resources"},{"description":"","name":"list_settings"},{"description":"","name":"reservation_log"},{"description":"","name":"reserve_desk"},{"description":"","name":"room_calendar"},{"description":"","name":"sign_out_visitor","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing active visitor status is a physical-workplace access/security-control action."}},{"description":"","name":"visitor_log"}],"tools_count":22,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/21e51aa0-3e07-4655-aca4-3283a54f7c98","uuid":"66dfb817-200d-530e-8e92-e0487d2e096e","verification_tier":"community","version":""},"query_key":"envoy","schema_version":1,"status":"match"}