{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Triage and respond to customer conversations in Front. Search messages, contacts, and accounts, then draft or send replies with thread context. Assign conversations, change status, add tags, and record internal comments.","did":"e373833b-8af7-4f28-9200-603203cc834d","documentation_url":"https://help.front.com/en/articles/4883136","editorial_description":{"extended_description":"Inspect full conversation timelines, attachments, inboxes, channels, teams, and saved drafts. Customer history and cross-channel data support summaries or operational reports.","schema_version":1,"summary":"Triage and respond to customer conversations in Front.\nSearch messages, contacts, and accounts, then draft or send replies with thread context.\nAssign conversations, change status, add tags, and record internal comments."},"homepage_url":"","icon":"","id":"e373833b-8af7-4f28-9200-603203cc834d","installs":0,"last_scanned":"","license":"","long_description":"Inspect full conversation timelines, attachments, inboxes, channels, teams, and saved drafts. Customer history and cross-channel data support summaries or operational reports.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The tool sends through Front channels such as email, SMS, WhatsApp or chat.","reasoning":"This communicates externally as the team.","risk_type":"messaging_as_user","severity":"high","title":"Omnichannel customer messages can be sent","triggering_tools_or_skills":["send_message"]},{"evidence":"An explicit destructive tool removes drafted content.","reasoning":"This deletes workspace data.","risk_type":"data_deletion","severity":"high","title":"Drafts can be deleted","triggering_tools_or_skills":["delete_draft"]},{"evidence":"These tools persist customer-operations changes.","reasoning":"They alter collaborative workflow state.","risk_type":"data_modification","severity":"medium","title":"Comments, assignments, tags and statuses can be changed","triggering_tools_or_skills":["add_comment","assign_conversation","tag_conversation","update_conversation_status"]},{"evidence":"Externally authored content is returned.","reasoning":"It can contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Customer messages and attachments enter model context","triggering_tools_or_skills":["read_conversation","read_message","get_attachment"]},{"evidence":"The connector runs at https://mcp.frontapp.com/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Front is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth follows Front team, inbox and channel permissions; exact send/delete-draft confirmation behavior is not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e373833b-8af7-4f28-9200-603203cc834d.json","what_it_proves":"Candidate PR #125 record identity (name \"Front\", publisher, type web_connector) and 23 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e373833b-8af7-4f28-9200-603203cc834d: complete tool_names inventory (23 tools), remote streamable-http endpoint https://mcp.frontapp.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Front can send real customer messages and delete drafts while modifying inbox workflows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e373833b-8af7-4f28-9200-603203cc834d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 23 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":23,"tools_or_skills_total":23},"name":"Front","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e373833b-8af7-4f28-9200-603203cc834d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://front.com/legal/privacy-notice","provisional_risk":null,"publication_recommendation":"accept","publisher":"Front","publisher_url":"https://front.com/","remote_url":"https://mcp.frontapp.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the team.","evidence":"Omnichannel customer messages can be sent: The tool sends through Front channels such as email, SMS, WhatsApp or chat.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Omnichannel customer messages can be sent","triggering_tools":["send_message"]},{"description":"This connector can permanently remove data or resources. Review findings: This deletes workspace data.","evidence":"Drafts can be deleted: An explicit destructive tool removes drafted content.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Drafts can be deleted","triggering_tools":["delete_draft"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter collaborative workflow state.","evidence":"Comments, assignments, tags and statuses can be changed: These tools persist customer-operations changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Comments, assignments, tags and statuses can be changed","triggering_tools":["add_comment","assign_conversation","tag_conversation","update_conversation_status"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.front.com/en/contact-us","tags":["accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_comment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter collaborative workflow state."}},{"description":"","name":"assign_conversation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter collaborative workflow state."}},{"description":"","name":"create_draft"},{"description":"","name":"delete_draft","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This deletes workspace data."}},{"description":"","name":"get_attachment"},{"description":"","name":"list_channels"},{"description":"","name":"list_drafts"},{"description":"","name":"list_inboxes"},{"description":"","name":"list_statuses"},{"description":"","name":"list_tags"},{"description":"","name":"list_teammates"},{"description":"","name":"list_teams"},{"description":"","name":"read_account"},{"description":"","name":"read_contact"},{"description":"","name":"read_conversation"},{"description":"","name":"read_message"},{"description":"","name":"search_accounts"},{"description":"","name":"search_contacts"},{"description":"","name":"search_conversations"},{"description":"","name":"send_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the team."}},{"description":"","name":"tag_conversation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter collaborative workflow state."}},{"description":"","name":"update_conversation_status","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter collaborative workflow state."}},{"description":"","name":"update_draft"}],"tools_count":23,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e373833b-8af7-4f28-9200-603203cc834d","uuid":"df19b59f-93ec-56de-9e42-47f284d5b60f","verification_tier":"community","version":""},"query_key":"front front","schema_version":1,"status":"match"}