{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to Fleks workforce planning and operations. Review availability, shifts, worked hours, staffing and recruitment information. Create or update operational records, schedule or approve shifts, and send team notifications.","did":"b66e3298-9180-4916-ac5f-f3388bf9bbaa","documentation_url":"https://api.external.fleks.works/","editorial_description":{"extended_description":"Tools manage employee and client records, projects, contracts, rate cards and absence or availability requests. They can share jobs, invite employees, cancel shifts and remove job documents. Analytics supports operational review without proving regulatory compliance.","schema_version":1,"summary":"Connects Claude to Fleks workforce planning and operations.\nReview availability, shifts, worked hours, staffing and recruitment information.\nCreate or update operational records, schedule or approve shifts, and send team notifications."},"homepage_url":"","icon":"","id":"b66e3298-9180-4916-ac5f-f3388bf9bbaa","installs":0,"last_scanned":"","license":"","long_description":"Tools manage employee and client records, projects, contracts, rate cards and absence or availability requests. They can share jobs, invite employees, cancel shifts and remove job documents. Analytics supports operational review without proving regulatory compliance.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly includes deletion of job briefings and job documents.","reasoning":"These tools can destroy meaningful operational records and attachments in the workforce system.","risk_type":"data_deletion","severity":"high","title":"Deletes workforce job content","triggering_tools_or_skills":["fleks_delete_job_briefing","fleks_delete_job_document"]},{"evidence":"Named tools send an employee invitation and a notification from the connected Fleks tenant.","reasoning":"External messages sent as the organization are High-impact communications.","risk_type":"messaging_as_user","severity":"high","title":"Sends invitations and notifications","triggering_tools_or_skills":["fleks_send_employee_invitation","fleks_send_notification"]},{"evidence":"The inventory includes employee, job, shift, contract, project, client and rate-card creation/update actions.","reasoning":"These actions materially change staffing, scheduling and contractual workspace records.","risk_type":"data_modification","severity":"medium","title":"Creates and changes workforce operations","triggering_tools_or_skills":["fleks_create_employees","fleks_create_jobs","fleks_create_shifts_reschedule","fleks_schedule_shifts","fleks_update_contracts"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for a Fleks tenant. The listing says the connector can read and write operational data but does not specify role/scopes for invitations, notifications or destructive actions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b66e3298-9180-4916-ac5f-f3388bf9bbaa.json","what_it_proves":"Candidate PR #125 record identity (name \"Fleks Workforce Management\", publisher, type web_connector) and 79 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b66e3298-9180-4916-ac5f-f3388bf9bbaa: complete tool_names inventory (79 tools), remote streamable-http endpoint https://mcp.fleks.works/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Fleks includes document deletion and employee invitation/notification tools in addition to broad workforce writes.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b66e3298-9180-4916-ac5f-f3388bf9bbaa","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 79 tools. Names verify the High actions, but schemas and tenant-role enforcement are unavailable; runtime testing should confirm destructive confirmations and recipient selection boundaries.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":79,"tools_or_skills_total":79},"name":"Fleks Workforce Management","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b66e3298-9180-4916-ac5f-f3388bf9bbaa&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.fleks.works/en/blog/privacy-statement-cookiebeleid","provisional_risk":null,"publication_recommendation":"accept","publisher":"Fleks","publisher_url":"https://www.fleks.works/","remote_url":"https://mcp.fleks.works/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These tools can destroy meaningful operational records and attachments in the workforce system.","evidence":"Deletes workforce job content: The inventory explicitly includes deletion of job briefings and job documents.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes workforce job content","triggering_tools":["fleks_delete_job_briefing","fleks_delete_job_document"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External messages sent as the organization are High-impact communications.","evidence":"Sends invitations and notifications: Named tools send an employee invitation and a notification from the connected Fleks tenant.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends invitations and notifications","triggering_tools":["fleks_send_employee_invitation","fleks_send_notification"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change staffing, scheduling and contractual workspace records.","evidence":"Creates and changes workforce operations: The inventory includes employee, job, shift, contract, project, client and rate-card creation/update actions.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and changes workforce operations","triggering_tools":["fleks_create_employees","fleks_create_jobs","fleks_create_shifts_reschedule","fleks_schedule_shifts","fleks_update_contracts"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@fleks.works","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"fleks_add_employee_field_of_interest"},{"description":"","name":"fleks_apply_shifts"},{"description":"","name":"fleks_approve_shifts"},{"description":"","name":"fleks_archive_jobs"},{"description":"","name":"fleks_bulk_create_clients"},{"description":"","name":"fleks_bulk_create_projects"},{"description":"","name":"fleks_calculate_availability_request"},{"description":"","name":"fleks_cancel_shared_jobs"},{"description":"","name":"fleks_cancel_shifts"},{"description":"","name":"fleks_create_absence_request"},{"description":"","name":"fleks_create_availabilities_request_sync_external_connections"},{"description":"","name":"fleks_create_availability_request"},{"description":"","name":"fleks_create_clients"},{"description":"","name":"fleks_create_contracts"},{"description":"","name":"fleks_create_employee_contracts"},{"description":"","name":"fleks_create_employees","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change staffing, scheduling and contractual workspace records."}},{"description":"","name":"fleks_create_employees_dashboard"},{"description":"","name":"fleks_create_job_categories"},{"description":"","name":"fleks_create_jobs","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change staffing, scheduling and contractual workspace records."}},{"description":"","name":"fleks_create_projects"},{"description":"","name":"fleks_create_rate_cards"},{"description":"","name":"fleks_create_rate_cards_holidays"},{"description":"","name":"fleks_create_rate_cards_surcharges"},{"description":"","name":"fleks_create_shifts_reschedule","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change staffing, scheduling and contractual workspace records."}},{"description":"","name":"fleks_delete_job_briefing","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can destroy meaningful operational records and attachments in the workforce system."}},{"description":"","name":"fleks_delete_job_document","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can destroy meaningful operational records and attachments in the workforce system."}},{"description":"","name":"fleks_get_health"},{"description":"","name":"fleks_get_jobs_match_by_employee_uuid"},{"description":"","name":"fleks_list_administrations"},{"description":"","name":"fleks_list_availabilities_days"},{"description":"","name":"fleks_list_availabilities_statuses"},{"description":"","name":"fleks_list_availability_requests"},{"description":"","name":"fleks_list_billing_absent_days"},{"description":"","name":"fleks_list_clients"},{"description":"","name":"fleks_list_contracts"},{"description":"","name":"fleks_list_employee_contracts"},{"description":"","name":"fleks_list_employee_job_candidates"},{"description":"","name":"fleks_list_employees"},{"description":"","name":"fleks_list_employees_free_fields"},{"description":"","name":"fleks_list_employees_hour_balance"},{"description":"","name":"fleks_list_employees_job_categories"},{"description":"","name":"fleks_list_free_fields"},{"description":"","name":"fleks_list_job_categories"},{"description":"","name":"fleks_list_job_free_fields"},{"description":"","name":"fleks_list_jobs"},{"description":"","name":"fleks_list_notifications"},{"description":"","name":"fleks_list_project_free_fields"},{"description":"","name":"fleks_list_projects"},{"description":"","name":"fleks_list_rate_cards"},{"description":"","name":"fleks_list_rate_cards_holidays"},{"description":"","name":"fleks_list_rate_cards_surcharges"},{"description":"","name":"fleks_list_reviews"},{"description":"","name":"fleks_list_scheduled_employees"},{"description":"","name":"fleks_list_shift_comments"},{"description":"","name":"fleks_list_shifts"},{"description":"","name":"fleks_list_shifts_with_rate_card"},{"description":"","name":"fleks_list_tenant_connections"},{"description":"","name":"fleks_list_workflows"},{"description":"","name":"fleks_remove_employee_field_of_interest"},{"description":"","name":"fleks_schedule_shifts","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change staffing, scheduling and contractual workspace records."}},{"description":"","name":"fleks_send_employee_invitation","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External messages sent as the organization are High-impact communications."}},{"description":"","name":"fleks_send_notification","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External messages sent as the organization are High-impact communications."}},{"description":"","name":"fleks_share_jobs"},{"description":"","name":"fleks_update_absence_request"},{"description":"","name":"fleks_update_availability_request"},{"description":"","name":"fleks_update_clients"},{"description":"","name":"fleks_update_contracts","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially change staffing, scheduling and contractual workspace records."}},{"description":"","name":"fleks_update_employee_contracts"},{"description":"","name":"fleks_update_employees"},{"description":"","name":"fleks_update_employees_dashboard"},{"description":"","name":"fleks_update_job_categories"},{"description":"","name":"fleks_update_jobs"},{"description":"","name":"fleks_update_jobs_shared"},{"description":"","name":"fleks_update_projects"},{"description":"","name":"fleks_update_rate_cards"},{"description":"","name":"fleks_update_rate_cards_holidays"},{"description":"","name":"fleks_update_rate_cards_surcharges"},{"description":"","name":"fleks_update_shifts"},{"description":"","name":"fleks_update_shifts_accept_application"}],"tools_count":79,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b66e3298-9180-4916-ac5f-f3388bf9bbaa","uuid":"b34632ce-d12a-5140-816b-b4b85f71043f","verification_tier":"community","version":""},"query_key":"fleks fleks workforce management","schema_version":1,"status":"match"}