{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Develop shared working memos with Fieldwerk. Create and revise Markdown documents, organize collections and add comments or assets. Share live work with viewers, commenters or editors and return to it across sessions.","did":"1b45ab3f-307b-4872-8cc4-6e93681998ca","documentation_url":"https://fieldwerk.ai/connect/tools","editorial_description":{"extended_description":"Tools cover sections, tables, tasks, document versions, access grants and ownership. Memos can be deleted or restored, and trash can be emptied. Sharing controls determine who can access the memo's URL.","schema_version":1,"summary":"Develop shared working memos with Fieldwerk.\nCreate and revise Markdown documents, organize collections and add comments or assets.\nShare live work with viewers, commenters or editors and return to it across sessions."},"homepage_url":"","icon":"","id":"1b45ab3f-307b-4872-8cc4-6e93681998ca","installs":0,"last_scanned":"","license":"","long_description":"Tools cover sections, tables, tasks, document versions, access grants and ownership. Memos can be deleted or restored, and trash can be emptied. Sharing controls determine who can access the memo's URL.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly declares deletion and permanent trash emptying across workspace content.","reasoning":"These actions can irreversibly destroy meaningful research data.","risk_type":"data_deletion","severity":"high","title":"Deletes content, comments, fields and assets","triggering_tools_or_skills":["delete_asset","delete_comment","delete_field","delete_memo","empty_trash","remove_asset"]},{"evidence":"The connector declares publishing a collection and sharing a memo with others.","reasoning":"These actions expose content externally as the user.","risk_type":"messaging_as_user","severity":"high","title":"Publishes and shares workspace content","triggering_tools_or_skills":["publish_collection","share_memo"]},{"evidence":"The tools directly alter access control and ownership of workspace resources.","reasoning":"These are powerful administrative permission actions.","risk_type":"credential_admin","severity":"high","title":"Changes grants, revokes access and transfers ownership","triggering_tools_or_skills":["set_collection_grant","set_memo_grant","revoke_collection_access","revoke_memo_access","transfer_collection_ownership","transfer_memo_ownership"]},{"evidence":"Packet metadata marks candidate_tools_truncated=true while the Directory lists 96 tools.","reasoning":"The candidate omits part of the capability surface.","risk_type":"identity_discrepancy","severity":"low","title":"Candidate tool inventory is truncated","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication reaches Fieldwerk workspaces, memos, collections, assets, comments, sharing and ownership; grant/revoke/publish role boundaries are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1b45ab3f-307b-4872-8cc4-6e93681998ca.json","what_it_proves":"Candidate PR #125 record identity (name \"Fieldwerk\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1b45ab3f-307b-4872-8cc4-6e93681998ca: complete tool_names inventory (96 tools), remote streamable-http endpoint https://mcp.fieldwerk.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Fieldwerk deletes content, publishes and shares it, and administers access and ownership; its candidate inventory is truncated.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:1b45ab3f-307b-4872-8cc4-6e93681998ca","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 96 Directory names. Refresh candidate tools and verify URL-based asset fetch restrictions, share recipients, trash recovery and the opaque connect action.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":96,"tools_or_skills_total":96},"name":"Fieldwerk","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1b45ab3f-307b-4872-8cc4-6e93681998ca&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://fieldwerk.ai/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Fieldwerk","publisher_url":"https://fieldwerk.ai/","remote_url":"https://mcp.fieldwerk.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly destroy meaningful research data.","evidence":"Deletes content, comments, fields and assets: The inventory explicitly declares deletion and permanent trash emptying across workspace content.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes content, comments, fields and assets","triggering_tools":["delete_asset","delete_comment","delete_field","delete_memo","empty_trash","remove_asset"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: These actions expose content externally as the user.","evidence":"Publishes and shares workspace content: The connector declares publishing a collection and sharing a memo with others.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Publishes and shares workspace content","triggering_tools":["publish_collection","share_memo"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful administrative permission actions.","evidence":"Changes grants, revokes access and transfers ownership: The tools directly alter access control and ownership of workspace resources.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Changes grants, revokes access and transfers ownership","triggering_tools":["set_collection_grant","set_memo_grant","revoke_collection_access","revoke_memo_access","transfer_collection_ownership","transfer_memo_ownership"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@fieldwerk.ai","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"ack_inbox"},{"description":"","name":"add_asset_from_url"},{"description":"","name":"add_link_asset"},{"description":"","name":"add_list_item"},{"description":"","name":"add_memo_to_collection"},{"description":"","name":"add_memo_to_notebook"},{"description":"","name":"add_reaction"},{"description":"","name":"add_table_row"},{"description":"","name":"append_to_memo"},{"description":"","name":"append_to_section"},{"description":"","name":"archive_collection"},{"description":"","name":"archive_notebook"},{"description":"","name":"assign_comment"},{"description":"","name":"attach_asset"},{"description":"","name":"backfill_link_asset"},{"description":"","name":"claim_memo"},{"description":"","name":"clear_working"},{"description":"","name":"clone_collection"},{"description":"","name":"connect"},{"description":"","name":"create_collection"},{"description":"","name":"create_memo"},{"description":"","name":"create_notebook"},{"description":"","name":"delete_asset","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly destroy meaningful research data."}},{"description":"","name":"delete_comment","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly destroy meaningful research data."}},{"description":"","name":"delete_field","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly destroy meaningful research data."}},{"description":"","name":"delete_memo","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly destroy meaningful research data."}},{"description":"","name":"duplicate_memo"},{"description":"","name":"edit_comment"},{"description":"","name":"empty_trash","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly destroy meaningful research data."}},{"description":"","name":"get_asset"},{"description":"","name":"get_asset_upload_url"},{"description":"","name":"get_collection_sharing"},{"description":"","name":"get_field"},{"description":"","name":"get_memo"},{"description":"","name":"get_memo_artifact_upload_url"},{"description":"","name":"get_memo_image_upload_url"},{"description":"","name":"get_memo_image_url"},{"description":"","name":"get_memo_sharing"},{"description":"","name":"get_memo_version"},{"description":"","name":"list_assets"},{"description":"","name":"list_collection_memos"},{"description":"","name":"list_collections"},{"description":"","name":"list_comments"},{"description":"","name":"list_fields"},{"description":"","name":"list_inbox"},{"description":"","name":"list_invited_users"},{"description":"","name":"list_memo_versions"},{"description":"","name":"list_my_memos"},{"description":"","name":"list_notebooks"},{"description":"","name":"list_shared_with_me"},{"description":"","name":"list_workspace_members"},{"description":"","name":"list_workspaces"},{"description":"","name":"lock_memo"},{"description":"","name":"move_memo"},{"description":"","name":"patch_memo"},{"description":"","name":"post_comment"},{"description":"","name":"publish_collection","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions expose content externally as the user."}},{"description":"","name":"query_asset"},{"description":"","name":"read_section"},{"description":"","name":"remove_asset","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly destroy meaningful research data."}},{"description":"","name":"remove_list_item"},{"description":"","name":"remove_memo_from_collection"},{"description":"","name":"remove_memo_from_notebook"},{"description":"","name":"remove_reaction"},{"description":"","name":"rename_collection"},{"description":"","name":"rename_field"},{"description":"","name":"rename_heading"},{"description":"","name":"rename_notebook"},{"description":"","name":"replace_section"},{"description":"","name":"resolve_comment"},{"description":"","name":"restore_memo"},{"description":"","name":"restrict_collection"},{"description":"","name":"revoke_collection_access","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful administrative permission actions."}},{"description":"","name":"revoke_memo_access","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful administrative permission actions."}},{"description":"","name":"search_memos"},{"description":"","name":"set_active_workspace"},{"description":"","name":"set_collection_favorite"},{"description":"","name":"set_collection_grant","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful administrative permission actions."}},{"description":"","name":"set_collection_workspace_share"},{"description":"","name":"set_default_collection"},{"description":"","name":"set_field"},{"description":"","name":"set_memo_grant","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful administrative permission actions."}},{"description":"","name":"set_memo_link"},{"description":"","name":"set_memo_restricted"},{"description":"","name":"set_notebook_pin"},{"description":"","name":"set_working"},{"description":"","name":"share_memo","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions expose content externally as the user."}},{"description":"","name":"toggle_task"},{"description":"","name":"transfer_collection_ownership","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful administrative permission actions."}},{"description":"","name":"transfer_memo_ownership","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful administrative permission actions."}},{"description":"","name":"unarchive_collection"},{"description":"","name":"unarchive_notebook"},{"description":"","name":"unassign_comment"},{"description":"","name":"unlock_memo"},{"description":"","name":"update_memo"},{"description":"","name":"upload_memo_image_from_url"}],"tools_count":96,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1b45ab3f-307b-4872-8cc4-6e93681998ca","uuid":"2b21b4a5-3382-549a-af61-c90f6d4d9466","verification_tier":"community","version":""},"query_key":"fieldwerk","schema_version":1,"status":"match"}