{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-04-27","analysis_method":"capability_triage","category":"Web Connector","description":"Grain records and transcribes your meetings across Google Meet, Zoom, Microsoft Teams, and Webex-generating transcripts, notes, action items, coaching scorec...","did":"grain","homepage_url":"","icon":"","id":"grain","installs":0,"last_scanned":"","license":"","long_description":"Grain records and transcribes your meetings across Google Meet, Zoom, Microsoft Teams, and Webex-generating transcripts, notes, action items, coaching scorecards, and more. The Grain MCP connector gives Claude direct access to your meeting library, transcripts, notes, and CRM deal data.","name":"Grain","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=grain&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"Grain","publisher_url":"https://www.grain.com/","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.","evidence":"Connector has 21 tools; permissions on claude.ai/directory: \"Read only\". Data flows out of the connected service into the model.","remediation":{"block_tool_categories":[],"steps":["Connect using an account that only has access to the information you actually want Claude to read - not your main admin login.","When you grant access, pick the smallest set of folders, mailboxes, or channels possible.","Check the connector's activity log every so often to make sure nothing unexpected is being read."]},"risk_type":"reads_private_data","severity":"low","title":"Reads your private information"},{"description":"This connector can post messages, emails, or chat replies on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.","evidence":"1 sends externally tool on this connector - e.g. suggest_email_draft.","remediation":{"block_tool_categories":["sends_externally"],"steps":["In the tools list below, turn off any tool tagged Block if you don't need Claude to send messages or emails on your behalf.","If you do enable sending, restrict it to a private channel or distribution list - never customer-facing or company-wide.","Read the message before it goes out: don't let Claude send anything without you confirming first."]},"risk_type":"sends_messages_as_you","severity":"medium","title":"Can send messages as you"},{"description":"Anything you share with this connector flows through one or more third-party services. Those companies see, store, and may use the data according to their own policies.","evidence":"Server runs at api.grain.com/_/mcp; queries and responses pass through the publisher's infrastructure.","remediation":{"block_tool_categories":[],"steps":["Treat anything you tell this connector as if you sent it directly to the third-party company - because you did.","Check how long that company keeps your data and how to delete it.","Avoid putting health info, customer names, or payment details into this connector unless you have a written agreement with that company."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Sends your data to outside companies"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["network_access","reads_private_data","email_messaging"],"tools":[{"description":"Returns your Grain account information.","name":"myself"},{"description":"Retrieves a filtered, paginated list of all accessible meetings with options for company, person, date, and title filters.","name":"list_meetings"},{"description":"Retrieves a filtered, paginated list of meetings you attended with the same filter options as list_meetings.","name":"list_attended_meetings"},{"description":"Fetches detailed information about a specific meeting by its UUID.","name":"fetch_meeting"},{"description":"Retrieves AI-generated summary notes for a specific meeting by its UUID.","name":"fetch_meeting_notes"},{"description":"Retrieves the full transcript of a specific meeting, optionally including timestamps.","name":"fetch_meeting_transcript"},{"description":"Searches for meeting participants by name or email to use when filtering meetings.","name":"search_persons"},{"description":"Searches for companies that participated in meetings by name or domain to use when filtering.","name":"search_companies"},{"description":"Performs semantic search across all meeting transcripts using a query string with optional filters and speaker scope.","name":"search_meetings"},{"description":"Returns all users in your Grain workspace.","name":"list_workspace_users"},{"description":"Retrieves AI-generated sales coaching insights with optional filtering for flagged coaching opportunities.","name":"list_coaching_feedback"},{"description":"Fetches a detailed coaching scorecard for a specific meeting by its UUID.","name":"fetch_meeting_coaching_feedback"},{"description":"Retrieves a paginated list of all HubSpot deals with optional filters for company, risk, owner, pipeline, and title.","name":"list_all_deals"},{"description":"Retrieves a paginated list of active open HubSpot deals with optional filters for company, risk, owner, pipeline, and title.","name":"list_open_deals"},{"description":"Fetches detailed information about a specific deal by its UUID.","name":"fetch_deal"},{"description":"","name":"search"},{"description":"","name":"fetch"},{"description":"","name":"search_recording_segments"},{"description":"","name":"citation_search"},{"description":"","name":"suggest_calendar_event"},{"description":"","name":"suggest_email_draft","risk":{"category":"sends_externally","level":"medium","recommendation":"Restrict to specific channels; require confirmation before sending. Disable if the connector is used in untrusted contexts.","why":"Sends a message or post on the user's behalf to people or channels outside the conversation. Phishing, leaking secrets, or impersonation become possible if the tool is hijacked."}}],"tools_count":21,"type":"web_connector","url":"https://claude.ai/directory/a034aa1a-a6b5-418e-9fa3-43cf80e2a611","uuid":"a9f54a6a-9105-5ed7-83b2-c51acdc6632e","version":""},"query_key":"grain","schema_version":1,"status":"match"}