{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Access sales content, coaching and training from Flockjay. Review calls or scorecards, inspect learning progress and share materials. Assign training under the signed-in user's permissions.","did":"0d4f4694-85c7-400b-a3c9-32cfd15f16e7","documentation_url":"https://docs.google.com/document/d/1Wby4CyyCV4np42wFUieQIZ4thpSoBVjEi11XFvAcWHU","editorial_description":{"extended_description":"The connector retrieves opportunities, assignments, certificates and tasks and can update content or remove content from tasks. It supports representatives preparing for customer conversations and managers reviewing coaching or ramp progress.","schema_version":1,"summary":"Access sales content, coaching and training from Flockjay.\nReview calls or scorecards, inspect learning progress and share materials.\nAssign training under the signed-in user's permissions."},"homepage_url":"","icon":"https://fj-user-uploads.s3.us-east-2.amazonaws.com/flockjay/favicon.png","id":"0d4f4694-85c7-400b-a3c9-32cfd15f16e7","installs":0,"last_scanned":"","license":"","long_description":"The connector retrieves opportunities, assignments, certificates and tasks and can update content or remove content from tasks. It supports representatives preparing for customer conversations and managers reviewing coaching or ramp progress.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The explicit action removes content associations from user tasks.","reasoning":"It destructively changes assigned training work.","risk_type":"data_deletion","severity":"high","title":"Assigned learning content can be removed from tasks","triggering_tools_or_skills":["remove_content_from_tasks"]},{"evidence":"Tools create shared material and assign it to selected users.","reasoning":"They communicate organizational training requirements under the user's authority.","risk_type":"messaging_as_user","severity":"high","title":"Content can be assigned to users","triggering_tools_or_skills":["assign_content_to_users","create_shared_content"]},{"evidence":"The connector changes which users receive or retain assigned content.","reasoning":"Assignment administration affects user obligations and access to learning material.","risk_type":"credential_admin","severity":"high","title":"User assignments can be administered","triggering_tools_or_skills":["assign_content_to_users","remove_content_from_tasks"]},{"evidence":"Explicit create and update actions persist shared training content.","reasoning":"They modify organizational records.","risk_type":"data_modification","severity":"medium","title":"Shared learning content can change","triggering_tools_or_skills":["create_shared_content","update_content"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to Flockjay users, calls, learning content, assignments, tasks, opportunities, and evaluations; exact administrator roles are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0d4f4694-85c7-400b-a3c9-32cfd15f16e7.json","what_it_proves":"Candidate PR #125 record identity (name \"Flockjay\", publisher, type web_connector) and 22 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0d4f4694-85c7-400b-a3c9-32cfd15f16e7: complete tool_names inventory (22 tools), remote streamable-http endpoint https://api.flockjay.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Content removal and user assignment establish destructive and administrative impact.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0d4f4694-85c7-400b-a3c9-32cfd15f16e7","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 22 names. Runtime checks should verify assignment notifications, removal recovery, user roles, call-recording privacy, and content attachment handling.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":22,"tools_or_skills_total":22},"name":"Flockjay","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0d4f4694-85c7-400b-a3c9-32cfd15f16e7&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://flockjay.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Flockjay Inc.","publisher_url":"https://flockjay.com/","remote_url":"https://api.flockjay.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: It destructively changes assigned training work.","evidence":"Assigned learning content can be removed from tasks: The explicit action removes content associations from user tasks.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Assigned learning content can be removed from tasks","triggering_tools":["remove_content_from_tasks"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate organizational training requirements under the user's authority.","evidence":"Content can be assigned to users: Tools create shared material and assign it to selected users.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Content can be assigned to users","triggering_tools":["assign_content_to_users","create_shared_content"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Assignment administration affects user obligations and access to learning material.; They modify organizational records.","evidence":"User assignments can be administered: The connector changes which users receive or retain assigned content. | Shared learning content can change: Explicit create and update actions persist shared training content.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["assign_content_to_users","remove_content_from_tasks","create_shared_content","update_content"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@flockjay.com","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"assign_content_to_users","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Assignment administration affects user obligations and access to learning material.; They modify organizational records."}},{"description":"","name":"create_shared_content","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Assignment administration affects user obligations and access to learning material.; They modify organizational records."}},{"description":"","name":"list_assignment_submissions"},{"description":"","name":"list_calls"},{"description":"","name":"list_learning_content"},{"description":"","name":"list_learning_content_progress"},{"description":"","name":"list_opportunities"},{"description":"","name":"list_scorecard_evaluations"},{"description":"","name":"list_shared_content"},{"description":"","name":"list_tasks"},{"description":"","name":"list_user_certificates"},{"description":"","name":"list_users"},{"description":"","name":"remove_content_from_tasks","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Assignment administration affects user obligations and access to learning material.; They modify organizational records."}},{"description":"","name":"retrieve_calls"},{"description":"","name":"retrieve_learning_content"},{"description":"","name":"retrieve_opportunities"},{"description":"","name":"retrieve_scorecard_evaluations"},{"description":"","name":"retrieve_shared_content"},{"description":"","name":"retrieve_users"},{"description":"","name":"search_content"},{"description":"","name":"update_content","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Assignment administration affects user obligations and access to learning material.; They modify organizational records."}},{"description":"","name":"whoami"}],"tools_count":22,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0d4f4694-85c7-400b-a3c9-32cfd15f16e7","uuid":"9f9a935a-e207-5615-8b14-1283787cc3dd","verification_tier":"community","version":""},"query_key":"flockjay inc flockjay","schema_version":1,"status":"match"}