{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"dc1d952533f9c943291ba2c2cd406684a1820cbc4633fa7eac29d3de551c500f","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"High confirmed, and the earlier low-confidence basis (directory description only) is now backed by the vendor's connector page for this exact remote (chui.io/claude). It documents: publishing a meeting to a public, sign-in-free web address showing title, summary and the full transcript; sending email from team@chui.io and, with Microsoft connected, from the user's own address (meeting summaries, follow-ups); deleting meetings and removing members via a two-step token flow which the vendor notes can run back-to-back under auto-approve; granting/removing company admin; signing out devices and removing sign-in methods. External publication of private transcripts and deletion are High. The stored 8-tool inventory is stale, and the visible card titles ('absent from inventory') should describe the evidenced operations instead.","review_key":"claudesec:2756cce9-edac-40d1-a34f-51c06342c39d","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://chui.io/claude","https://mcp.chui.io/.well-known/oauth-protected-resource","https://api.anthropic.com/api/directory/servers"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Searches meeting recordings and text stored in your Chui account. Retrieve summaries, transcript excerpts, participant context and temporary audio links. Requires existing recordings; this connector cannot start or stop a recording.","did":"2756cce9-edac-40d1-a34f-51c06342c39d","documentation_url":"https://chui.io/claude","editorial_description":{"extended_description":"Search results include quoted snippets and their source meetings, and transcripts can be read in windows. People lookups include meeting frequency, last contact and notes; the listed write tool updates person information. Broader account and sharing actions described by Chui are not present in this tool inventory.","schema_version":1,"summary":"Searches meeting recordings and text stored in your Chui account.\nRetrieve summaries, transcript excerpts, participant context and temporary audio links.\nRequires existing recordings; this connector cannot start or stop a recording."},"homepage_url":"","icon":"https://chui.io/icon-256.png","id":"2756cce9-edac-40d1-a34f-51c06342c39d","installs":0,"last_scanned":"","license":"","long_description":"Search results include quoted snippets and their source meetings, and transcripts can be read in windows. People lookups include meeting frequency, last contact and notes; the listed write tool updates person information. Broader account and sharing actions described by Chui are not present in this tool inventory.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The Directory description says the connector can delete a meeting, merge two people entries and remove a colleague through a two-step token flow, but none of the eight tool names declares those actions.","reasoning":"These are destructive actions, and confirmation does not reduce inherent severity.","risk_type":"data_deletion","severity":"high","title":"Description claims destructive meeting and people actions absent from inventory","triggering_tools_or_skills":[]},{"evidence":"The Directory description says the connector can share a meeting or stop sharing it, while the listed tools contain no share action.","reasoning":"Sharing meeting content exposes it externally as the user.","risk_type":"messaging_as_user","severity":"high","title":"Description claims meeting sharing controls absent from inventory","triggering_tools_or_skills":[]},{"evidence":"The Directory description says it manages devices and sign-in methods and connects/disconnects calendars; those actions are absent from the inventory.","reasoning":"Managing sign-in methods and authorized devices is powerful account administration.","risk_type":"credential_admin","severity":"high","title":"Description claims device and sign-in-method administration","triggering_tools_or_skills":[]},{"evidence":"Only eight mostly read tools plus update_person are listed, but the description claims numerous meeting, sharing, reminder, privacy, calendar, device, sign-in and deletion actions.","reasoning":"The catalog cannot support action-level review until the current tools/list surface is captured.","risk_type":"identity_discrepancy","severity":"low","title":"Declared inventory contradicts the claimed connector surface","triggering_tools_or_skills":["update_person"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for private meeting recordings; exact OAuth scopes are unknown, and the description claims device, sign-in, calendar, privacy, sharing and destructive actions absent from the eight-name inventory.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2756cce9-edac-40d1-a34f-51c06342c39d.json","what_it_proves":"Candidate PR #125 record identity (name \"Chui\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2756cce9-edac-40d1-a34f-51c06342c39d: complete tool_names inventory (8 tools), remote streamable-http endpoint https://mcp.chui.io/, auth_posture auth_required, directory tier community"}],"primary_reason":"Chui claims destructive, sharing and account-admin capabilities that are materially missing from its declared tool inventory.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:2756cce9-edac-40d1-a34f-51c06342c39d","reviewed_at":"2026-10-10","reviewer_notes":"The official documentation URL was inaccessible. Refresh the Directory inventory and obtain tool descriptions/schemas; rate High on the explicit Directory description until the contradiction is resolved.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Chui","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2756cce9-edac-40d1-a34f-51c06342c39d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://chui.io/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Generative Chaos LLC","publisher_url":"https://chui.io/","remote_url":"https://mcp.chui.io/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"Publishes meeting titles, summaries and full transcripts at public links and sends summaries or follow-ups by email, including from your own address when Microsoft is connected.","evidence":"Actions: publish meeting, email summary / follow-up. https://chui.io/claude — 'It can publish a meeting... a public web address that anybody holding it can open'; emails from team@chui.io / own address","risk_type":"sends_messages_as_you","severity":"high","title":"Publishes meeting transcripts and sends emails"},{"description":"Deletes meetings or removes members through a two-step token flow. Automatic approval can complete both steps without a separate human confirmation.","evidence":"Actions: delete meeting, remove member, merge people. https://chui.io/claude — Two-step destructive confirmation section","risk_type":"deletes_data","severity":"high","title":"Deletes meetings and removes members"},{"description":"Grants or removes company administrator access, signs out devices and removes sign-in methods.","evidence":"Actions: grant/remove admin, sign out devices, remove sign-in method. https://chui.io/claude — Team and company / Account and devices sections","risk_type":"modifies_data","severity":"high","title":"Changes administrator and sign-in access"},{"description":"Retrieves transcripts, summaries, audio links and information or notes about people.","evidence":"Actions: search_meetings, get_meeting, get_transcript, get_audio_link, list_people, get_person. https://api.anthropic.com/api/directory/servers (snapshot claude-directory-all-tiers-2026-09-22.json) — 8 tool names","risk_type":"reads_private_data","severity":"medium","title":"Reads private meeting recordings and notes"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@chui.io","tags":["sends_messages_as_you","deletes_data","modifies_data","reads_private_data"],"tools":[{"description":"","name":"get_audio_link"},{"description":"","name":"get_meeting"},{"description":"","name":"get_person"},{"description":"","name":"get_transcript"},{"description":"","name":"list_meetings"},{"description":"","name":"list_people"},{"description":"","name":"search_meetings"},{"description":"","name":"update_person"}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2756cce9-edac-40d1-a34f-51c06342c39d","uuid":"f9deac18-8961-5502-bab1-fdac89537557","verification_tier":"community","version":""},"query_key":"generative chaos llc chui","schema_version":1,"status":"match"}