{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Frase combines SEO research, content production, and AI-search visibility tools. Audit pages, inspect competitors, create briefs or articles, and manage optimization workflows. Authenticated actions can publish content, update CMS posts, and enable automated monitoring or optimization.","did":"8a948493-5469-4014-b116-2595752f4c91","documentation_url":"https://next.frase.io/api/docs","editorial_description":{"extended_description":"Tools cover content clusters, search intent, citation visibility, site health, Search Console data, comments, templates, playbooks, and webhooks. Content can be exported, deleted, restored, or republished.","schema_version":1,"summary":"Frase combines SEO research, content production, and AI-search visibility tools.\nAudit pages, inspect competitors, create briefs or articles, and manage optimization workflows.\nAuthenticated actions can publish content, update CMS posts, and enable automated monitoring or optimization."},"homepage_url":"","icon":"https://www.frase.io/images/logos/FraseLogoLight.svg","id":"8a948493-5469-4014-b116-2595752f4c91","installs":0,"last_scanned":"","license":"","long_description":"Tools cover content clusters, search intent, citation visibility, site health, Search Console data, comments, templates, playbooks, and webhooks. Content can be exported, deleted, restored, or republished.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs confirm direct publishing to WordPress, Webflow, Wix, Sanity and FraseCMS.","reasoning":"These actions communicate publicly as the connected brand/site.","risk_type":"messaging_as_user","severity":"high","title":"Publishes content to connected CMSs/sites","triggering_tools_or_skills":["publish_content","republish_content","write_cms_post","bulk_cms_posts"]},{"evidence":"Publishing and optional autonomous optimization alter production websites/content operations.","reasoning":"They can change live user-facing pages.","risk_type":"deployment_infrastructure","severity":"high","title":"Ships and updates live web content","triggering_tools_or_skills":["publish_content","republish_content","toggle_auto_optimization","toggle_content_monitoring"]},{"evidence":"The inventory includes explicit destructive tools.","reasoning":"They can destroy durable content/configuration and automation.","risk_type":"data_deletion","severity":"high","title":"Deletes content, research, rules, webhooks and competitive analyses","triggering_tools_or_skills":["delete_content","delete_research","delete_rule","delete_webhook","delete_competitive_analysis"]},{"evidence":"These tools manage integration credentials and automated delivery/security-adjacent configuration.","reasoning":"Token rotation and webhook/site administration are privileged actions.","risk_type":"credential_admin","severity":"high","title":"Rotates delivery token and manages webhooks/sites/rules","triggering_tools_or_skills":["rotate_delivery_token","create_webhook","update_webhook","create_site","create_rule_set"]},{"evidence":"These tools broadly persist content-workflow state.","reasoning":"They materially alter the workspace even before publishing.","risk_type":"data_modification","severity":"medium","title":"Creates/updates briefs, prompts, templates and optimization state","triggering_tools_or_skills":["create_brief","update_brief","create_prompt","update_prompt","apply_optimization","apply_template"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; the connector can reach Frase content, sites, CMS connections, webhooks and publishing according to account settings.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/8a948493-5469-4014-b116-2595752f4c91.json","what_it_proves":"Candidate PR #125 record identity (name \"Frase\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/8a948493-5469-4014-b116-2595752f4c91: complete tool_names inventory (121 tools), remote streamable-http endpoint https://next.frase.io/api/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://www.frase.io/features/mcp","what_it_proves":"Official Frase MCP page confirms end-to-end content creation, direct CMS publishing and configurable autonomous changes."},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://www.frase.io/features/autonomy","what_it_proves":"Official autonomy documentation confirms live publishing behavior and guardrails."}],"primary_reason":"Frase can publish to live CMSs, delete content/configuration and rotate integration credentials.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:8a948493-5469-4014-b116-2595752f4c91","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 121 stored tools. The record is marked truncated, so additional runtime actions may exist; official docs confirm the central live-publishing capability and review-by-default safeguard.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":121,"tools_or_skills_total":121},"name":"Frase","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=8a948493-5469-4014-b116-2595752f4c91&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.frase.io/company/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Copysmith AI","publisher_url":"https://www.copysmith.ai/","remote_url":"https://next.frase.io/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: These actions communicate publicly as the connected brand/site.","evidence":"Publishes content to connected CMSs/sites: Official docs confirm direct publishing to WordPress, Webflow, Wix, Sanity and FraseCMS.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Publishes content to connected CMSs/sites","triggering_tools":["publish_content","republish_content","write_cms_post","bulk_cms_posts"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They can change live user-facing pages.","evidence":"Ships and updates live web content: Publishing and optional autonomous optimization alter production websites/content operations.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Ships and updates live web content","triggering_tools":["publish_content","republish_content","toggle_auto_optimization","toggle_content_monitoring"]},{"description":"This connector can permanently remove data or resources. Review findings: They can destroy durable content/configuration and automation.","evidence":"Deletes content, research, rules, webhooks and competitive analyses: The inventory includes explicit destructive tools.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes content, research, rules, webhooks and competitive analyses","triggering_tools":["delete_content","delete_research","delete_rule","delete_webhook","delete_competitive_analysis"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing.","evidence":"Rotates delivery token and manages webhooks/sites/rules: These tools manage integration credentials and automated delivery/security-adjacent configuration. | Creates/updates briefs, prompts, templates and optimization state: These tools broadly persist content-workflow state.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["rotate_delivery_token","create_webhook","update_webhook","create_site","create_rule_set","create_brief","update_brief","create_prompt","update_prompt","apply_optimization","apply_template"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://docs.frase.io/","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"analyze_competitors"},{"description":"","name":"analyze_serp"},{"description":"","name":"apply_ai_comment"},{"description":"","name":"apply_optimization","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"apply_template","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"assign_to_cluster"},{"description":"","name":"audit_page"},{"description":"","name":"batch_atomize"},{"description":"","name":"bulk_cms_posts","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions communicate publicly as the connected brand/site."}},{"description":"","name":"bulk_set_comment_status"},{"description":"","name":"cms_post"},{"description":"","name":"create_atomization"},{"description":"","name":"create_brief","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"create_cluster"},{"description":"","name":"create_from_opportunity"},{"description":"","name":"create_prompt","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"create_rule"},{"description":"","name":"create_rule_set","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"create_site","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"create_template"},{"description":"","name":"create_webhook","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"delete_competitive_analysis","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable content/configuration and automation."}},{"description":"","name":"delete_content","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable content/configuration and automation."}},{"description":"","name":"delete_research","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable content/configuration and automation."}},{"description":"","name":"delete_rule","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable content/configuration and automation."}},{"description":"","name":"delete_webhook","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy durable content/configuration and automation."}},{"description":"","name":"dismiss_optimization"},{"description":"","name":"evaluate_rules"},{"description":"","name":"export_atomization"},{"description":"","name":"export_audit"},{"description":"","name":"export_brief"},{"description":"","name":"export_content"},{"description":"","name":"export_research"},{"description":"","name":"extract_template"},{"description":"","name":"generate_brief_from_analysis"},{"description":"","name":"generate_content"},{"description":"","name":"get_ai_visibility"},{"description":"","name":"get_alerts"},{"description":"","name":"get_atomization"},{"description":"","name":"get_audit"},{"description":"","name":"get_auto_optimization_status"},{"description":"","name":"get_brief"},{"description":"","name":"get_brief_status"},{"description":"","name":"get_cannibalization"},{"description":"","name":"get_citation_formula"},{"description":"","name":"get_cms_import_status"},{"description":"","name":"get_competitive_analysis"},{"description":"","name":"get_competitors"},{"description":"","name":"get_content"},{"description":"","name":"get_content_gaps"},{"description":"","name":"get_content_status"},{"description":"","name":"get_content_summary"},{"description":"","name":"get_crawler_logs"},{"description":"","name":"get_delivery_token"},{"description":"","name":"get_gsc_overview"},{"description":"","name":"get_gsc_pages"},{"description":"","name":"get_gsc_queries"},{"description":"","name":"get_industry_benchmark"},{"description":"","name":"get_insights"},{"description":"","name":"get_job_status"},{"description":"","name":"get_link_graph"},{"description":"","name":"get_monitoring_status"},{"description":"","name":"get_opportunity"},{"description":"","name":"get_optimization"},{"description":"","name":"get_optimization_insights"},{"description":"","name":"get_playbook"},{"description":"","name":"get_playbook_run_status"},{"description":"","name":"get_prompt"},{"description":"","name":"get_research"},{"description":"","name":"get_rule_set"},{"description":"","name":"get_search_intent"},{"description":"","name":"get_site_health"},{"description":"","name":"get_template"},{"description":"","name":"get_webhook"},{"description":"","name":"import_cms_posts"},{"description":"","name":"list_audits"},{"description":"","name":"list_briefs"},{"description":"","name":"list_clusters"},{"description":"","name":"list_cms_connections"},{"description":"","name":"list_cms_posts"},{"description":"","name":"list_competitive_analyses"},{"description":"","name":"list_content"},{"description":"","name":"list_content_comments"},{"description":"","name":"list_guarded_content"},{"description":"","name":"list_opportunities"},{"description":"","name":"list_optimizations"},{"description":"","name":"list_performance_alerts"},{"description":"","name":"list_playbooks"},{"description":"","name":"list_prompts"},{"description":"","name":"list_research"},{"description":"","name":"list_rule_sets"},{"description":"","name":"list_sites"},{"description":"","name":"list_templates"},{"description":"","name":"list_trash"},{"description":"","name":"list_webhooks"},{"description":"","name":"provide_playbook_input"},{"description":"","name":"publish_content","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can change live user-facing pages."}},{"description":"","name":"regenerate_content"},{"description":"","name":"rehost_cms_media"},{"description":"","name":"republish_content","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can change live user-facing pages."}},{"description":"","name":"request_ai_comments"},{"description":"","name":"rescore_content"},{"description":"","name":"resolve_alert"},{"description":"","name":"restore_content"},{"description":"","name":"rotate_delivery_token","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"run_playbook"},{"description":"","name":"search_locations"},{"description":"","name":"set_comment_status"},{"description":"","name":"start_audit"},{"description":"","name":"start_competitive_analysis"},{"description":"","name":"start_optimization"},{"description":"","name":"start_research"},{"description":"","name":"suggest_clusters"},{"description":"","name":"toggle_auto_optimization","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can change live user-facing pages."}},{"description":"","name":"toggle_content_monitoring","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can change live user-facing pages."}},{"description":"","name":"update_brief","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"update_content"},{"description":"","name":"update_prompt","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"update_rule"},{"description":"","name":"update_webhook","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Token rotation and webhook/site administration are privileged actions.; They materially alter the workspace even before publishing."}},{"description":"","name":"write_cms_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions communicate publicly as the connected brand/site."}}],"tools_count":121,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/8a948493-5469-4014-b116-2595752f4c91","uuid":"11e4133c-6392-550f-b33a-3904f10059fd","verification_tier":"community","version":""},"query_key":"frase","schema_version":1,"status":"match"}