{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Great Arrow Digital combines shared memory, documents, tasks, and connected workflows. Search or save context, run agents or code, and trigger connected-service actions. OAuth scopes govern workspace access; requested chat saves transmit messages and summaries to that workspace.","did":"f83339d9-423d-44c5-ac15-65da9bf39bb4","documentation_url":"https://www.greatarrow.ai/mcp-servers","editorial_description":{"extended_description":"Tools include email sending, calendar changes, CRM updates, repository pull-request actions, and shared links. Administrative operations manage integrations, access tokens, stored credentials, budgets, and scheduled runs. Saved conversations can be reviewed, exported, or deleted.","schema_version":1,"summary":"Great Arrow Digital combines shared memory, documents, tasks, and connected workflows.\nSearch or save context, run agents or code, and trigger connected-service actions.\nOAuth scopes govern workspace access; requested chat saves transmit messages and summaries to that workspace."},"homepage_url":"","icon":"","id":"f83339d9-423d-44c5-ac15-65da9bf39bb4","installs":0,"last_scanned":"","license":"","long_description":"Tools include email sending, calendar changes, CRM updates, repository pull-request actions, and shared links. Administrative operations manage integrations, access tokens, stored credentials, budgets, and scheduled runs. Saved conversations can be reviewed, exported, or deleted.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The 249-tool inventory explicitly executes code, jobs, agents, orchestration, GitHub Actions, and connected GoHighLevel workflows.","reasoning":"These are broad execution surfaces with downstream side effects across connected systems.","risk_type":"code_execution","severity":"high","title":"Arbitrary code, jobs, agents, and orchestrations can be executed","triggering_tools_or_skills":["code_execute","job_run","agent_invoke","agent_run_stream","orchestrator_run","github_actions_dispatch","ghl_workflow_trigger"]},{"evidence":"The connector creates apps/projects and schedules jobs, dispatches CI, creates/merges PRs, and manages integrations.","reasoning":"These actions modify production development and automation infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Applications, projects, integrations, scheduled runs, and source-control changes can be deployed","triggering_tools_or_skills":["workspace_create_application","workspace_create_project","scheduled_run_create","github_pr_merge","github_pr_create","gitlab_mr_create"]},{"evidence":"Named tools store/delete secrets, create/revoke tokens, connect/purge integrations, invite users, and mint/revoke share links.","reasoning":"These are privileged credential and access-control actions.","risk_type":"credential_admin","severity":"high","title":"Secrets, tokens, integrations, invitations, and sharing can be administered","triggering_tools_or_skills":["secret_store","secret_delete","account_tokens_create","account_token_revoke","integration_connect_url","integration_disconnect","workspace_invite","share_link_mint"]},{"evidence":"The inventory updates budgets and external subscriptions and integrates billable services; account cost intelligence is central to the platform.","reasoning":"These actions can change recurring commercial commitments or spend controls; actual charging paths must be verified.","risk_type":"financial_transaction","severity":"high","title":"Budgets, subscriptions, and paid external operations can be changed","triggering_tools_or_skills":["account_budget_update","external_subscription_upsert","billing_me","canva_autofill_design"]},{"evidence":"The connector sends across multiple communication and calendar channels as the authenticated user/workspace.","reasoning":"Recipients can include customers, coworkers, support teams, and meeting attendees.","risk_type":"messaging_as_user","severity":"high","title":"Email, Slack, GHL, support, calendar, and birthday messages can be sent","triggering_tools_or_skills":["email_send","slack_post_thread_reply","ghl_conversation_send","support_ticket_reply","calendar_create_event","birthday_wish"]},{"evidence":"Explicit destructive tools span core workspace records, credentials, automation, and integration data.","reasoning":"Deletion or purge can destroy shared knowledge, stop jobs, or sever access.","risk_type":"data_deletion","severity":"high","title":"Documents, memory, schedules, secrets, todos, and integrations can be deleted or purged","triggering_tools_or_skills":["document_delete","memory_bulk_delete","scheduled_run_delete","secret_delete","scratch_delete","integration_purge","todo_archive"]},{"evidence":"The connector has generic web fetch and URL-based integration connection tools.","reasoning":"Caller-controlled destinations require SSRF, redirect, and egress restrictions.","risk_type":"arbitrary_network_access","severity":"low","title":"Arbitrary web resources can be fetched","triggering_tools_or_skills":["web_fetch","fetch","integration_connect_url"]},{"evidence":"The server can discover and enable additional tools beyond the stored 249-action inventory.","reasoning":"Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring.","risk_type":"generic_gateway","severity":"high","title":"Runtime tools can be discovered and enabled","triggering_tools_or_skills":["tools_discover","tools_enable","mcp_capabilities"]},{"evidence":"The platform federates numerous third-party and user-authored content sources into shared memory.","reasoning":"This large untrusted-content surface creates substantial prompt-injection exposure.","risk_type":"prompt_injection_exposure","severity":"low","title":"Synced mail, Slack, documents, web, tickets, and repository content enter context","triggering_tools_or_skills":["document_search","slack_search_messages","web_fetch","github_list_repos","chat_history"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants Great Arrow Digital a vast workspace/orchestration scope spanning memory, synced apps, code, cloud, source control, messaging, meetings, credentials, billing, and administration.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f83339d9-423d-44c5-ac15-65da9bf39bb4.json","what_it_proves":"Candidate PR #125 record identity (name \"Great Arrow Digital\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f83339d9-423d-44c5-ac15-65da9bf39bb4: complete tool_names inventory (249 tools), remote streamable-http endpoint https://www.greatarrow.ai/api/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"Great Arrow Digital is a broad generic agent platform with code execution, deployment, secrets, messaging, financial, deletion, and dynamically enabled tools.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f83339d9-423d-44c5-ac15-65da9bf39bb4","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 249 visible names; runtime verification must treat it as a high-privilege orchestration platform and validate every integration boundary.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":249,"tools_or_skills_total":249},"name":"Great Arrow Digital","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f83339d9-423d-44c5-ac15-65da9bf39bb4&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.greatarrow.ai/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"GreatArrow.ai","publisher_url":"https://www.greatarrow.ai/","remote_url":"https://www.greatarrow.ai/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring.","evidence":"Arbitrary code, jobs, agents, and orchestrations can be executed: The 249-tool inventory explicitly executes code, jobs, agents, orchestration, GitHub Actions, and connected GoHighLevel workflows. | Runtime tools can be discovered and enabled: The server can discover and enable additional tools beyond the stored 249-action inventory.","manual_risk_type":"code_execution,generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["code_execute","job_run","agent_invoke","agent_run_stream","orchestrator_run","github_actions_dispatch","ghl_workflow_trigger","tools_discover","tools_enable","mcp_capabilities"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions modify production development and automation infrastructure.","evidence":"Applications, projects, integrations, scheduled runs, and source-control changes can be deployed: The connector creates apps/projects and schedules jobs, dispatches CI, creates/merges PRs, and manages integrations.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Applications, projects, integrations, scheduled runs, and source-control changes can be deployed","triggering_tools":["workspace_create_application","workspace_create_project","scheduled_run_create","github_pr_merge","github_pr_create","gitlab_mr_create"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions.","evidence":"Secrets, tokens, integrations, invitations, and sharing can be administered: Named tools store/delete secrets, create/revoke tokens, connect/purge integrations, invite users, and mint/revoke share links.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Secrets, tokens, integrations, invitations, and sharing can be administered","triggering_tools":["secret_store","secret_delete","account_tokens_create","account_token_revoke","integration_connect_url","integration_disconnect","workspace_invite","share_link_mint"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can change recurring commercial commitments or spend controls; actual charging paths must be verified.","evidence":"Budgets, subscriptions, and paid external operations can be changed: The inventory updates budgets and external subscriptions and integrates billable services; account cost intelligence is central to the platform.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Budgets, subscriptions, and paid external operations can be changed","triggering_tools":["account_budget_update","external_subscription_upsert","billing_me","canva_autofill_design"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients can include customers, coworkers, support teams, and meeting attendees.","evidence":"Email, Slack, GHL, support, calendar, and birthday messages can be sent: The connector sends across multiple communication and calendar channels as the authenticated user/workspace.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Email, Slack, GHL, support, calendar, and birthday messages can be sent","triggering_tools":["email_send","slack_post_thread_reply","ghl_conversation_send","support_ticket_reply","calendar_create_event","birthday_wish"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access.","evidence":"Documents, memory, schedules, secrets, todos, and integrations can be deleted or purged: Explicit destructive tools span core workspace records, credentials, automation, and integration data.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Documents, memory, schedules, secrets, todos, and integrations can be deleted or purged","triggering_tools":["document_delete","memory_bulk_delete","scheduled_run_delete","secret_delete","scratch_delete","integration_purge","todo_archive"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Caller-controlled destinations require SSRF, redirect, and egress restrictions.","evidence":"Arbitrary web resources can be fetched: The connector has generic web fetch and URL-based integration connection tools.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Arbitrary web resources can be fetched","triggering_tools":["web_fetch","fetch","integration_connect_url"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@greatarrowdigital.com","tags":["accesses_calendar","accesses_messaging","code_deployment","deletes_data","forwards_data_to_third_party","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"accomplishment_create"},{"description":"","name":"accomplishment_list"},{"description":"","name":"accomplishment_review"},{"description":"","name":"account_budget_update","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can change recurring commercial commitments or spend controls; actual charging paths must be verified."}},{"description":"","name":"account_cost_intelligence"},{"description":"","name":"account_export"},{"description":"","name":"account_token_pause"},{"description":"","name":"account_token_revoke","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions."}},{"description":"","name":"account_tokens_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions."}},{"description":"","name":"account_tokens_list"},{"description":"","name":"agent_handoff_checkpoint"},{"description":"","name":"agent_invoke","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"agent_list"},{"description":"","name":"agent_run_stream","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"agent_thread_get"},{"description":"","name":"agent_thread_history"},{"description":"","name":"agent_thread_list"},{"description":"","name":"agent_thread_rollback"},{"description":"","name":"agents_now"},{"description":"","name":"allocate_migration_id"},{"description":"","name":"asana_list_workspaces"},{"description":"","name":"audit_log"},{"description":"","name":"billing_me","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can change recurring commercial commitments or spend controls; actual charging paths must be verified."}},{"description":"","name":"birthday_create"},{"description":"","name":"birthday_delete"},{"description":"","name":"birthday_update"},{"description":"","name":"birthday_wish","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients can include customers, coworkers, support teams, and meeting attendees."}},{"description":"","name":"board_cost_to_complete"},{"description":"","name":"board_metrics"},{"description":"","name":"board_projection"},{"description":"","name":"board_roadmap"},{"description":"","name":"business_dashboard_get"},{"description":"","name":"calendar_create_event","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients can include customers, coworkers, support teams, and meeting attendees."}},{"description":"","name":"calendar_delete_event"},{"description":"","name":"calendar_upcoming_events"},{"description":"","name":"calendar_update_event"},{"description":"","name":"canva_autofill_design","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can change recurring commercial commitments or spend controls; actual charging paths must be verified."}},{"description":"","name":"canva_create_design"},{"description":"","name":"canva_export_design"},{"description":"","name":"canva_list_brand_templates"},{"description":"","name":"canva_upload_asset"},{"description":"","name":"chat_history"},{"description":"","name":"chat_message"},{"description":"","name":"chat_session_get"},{"description":"","name":"chat_transcript_ingest"},{"description":"","name":"cloudstorage_download"},{"description":"","name":"cloudstorage_import"},{"description":"","name":"cloudstorage_list_connections"},{"description":"","name":"cloudstorage_list_files"},{"description":"","name":"cloudstorage_upload"},{"description":"","name":"code_execute","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"confluence_create_page"},{"description":"","name":"contact_create"},{"description":"","name":"contact_note"},{"description":"","name":"contact_stage"},{"description":"","name":"contacts_search"},{"description":"","name":"cost_intelligence_detail"},{"description":"","name":"custom_agent_create"},{"description":"","name":"custom_agent_update"},{"description":"","name":"dashboard_compose"},{"description":"","name":"dlq_list"},{"description":"","name":"dlq_retry"},{"description":"","name":"doc_guardian_config"},{"description":"","name":"doc_guardian_run"},{"description":"","name":"doc_guardian_status"},{"description":"","name":"document_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access."}},{"description":"","name":"document_get"},{"description":"","name":"document_reprocess"},{"description":"","name":"document_restore"},{"description":"","name":"document_search"},{"description":"","name":"document_upload"},{"description":"","name":"drive_list_folders"},{"description":"","name":"email_send","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients can include customers, coworkers, support teams, and meeting attendees."}},{"description":"","name":"engineering_guardrails_list"},{"description":"","name":"engineering_guardrails_update"},{"description":"","name":"external_subscription_upsert","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions can change recurring commercial commitments or spend controls; actual charging paths must be verified."}},{"description":"","name":"fetch"},{"description":"","name":"figma_export"},{"description":"","name":"generate_progress_report"},{"description":"","name":"generate_resume"},{"description":"","name":"ghl_appointment_create"},{"description":"","name":"ghl_appointment_list"},{"description":"","name":"ghl_calendar_list"},{"description":"","name":"ghl_contact_create"},{"description":"","name":"ghl_contact_get"},{"description":"","name":"ghl_contact_list"},{"description":"","name":"ghl_conversation_send","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients can include customers, coworkers, support teams, and meeting attendees."}},{"description":"","name":"ghl_custom_fields_list"},{"description":"","name":"ghl_form_list"},{"description":"","name":"ghl_form_submissions"},{"description":"","name":"ghl_location_get"},{"description":"","name":"ghl_note_create"},{"description":"","name":"ghl_opportunity_create"},{"description":"","name":"ghl_pipeline_list"},{"description":"","name":"ghl_tag_list"},{"description":"","name":"ghl_workflow_list"},{"description":"","name":"ghl_workflow_trigger","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"github_actions_dispatch","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"github_issue_comment"},{"description":"","name":"github_issue_create"},{"description":"","name":"github_list_repos"},{"description":"","name":"github_pr_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions modify production development and automation infrastructure."}},{"description":"","name":"github_pr_merge","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions modify production development and automation infrastructure."}},{"description":"","name":"github_pr_review"},{"description":"","name":"gitlab_issue_comment"},{"description":"","name":"gitlab_issue_create"},{"description":"","name":"gitlab_list_projects"},{"description":"","name":"gitlab_mr_comment"},{"description":"","name":"gitlab_mr_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions modify production development and automation infrastructure."}},{"description":"","name":"gitlab_read_issue"},{"description":"","name":"gitlab_read_mr"},{"description":"","name":"integration_connect_url","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions."}},{"description":"","name":"integration_diagnostics"},{"description":"","name":"integration_disconnect","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions."}},{"description":"","name":"integration_horizon"},{"description":"","name":"integration_keep"},{"description":"","name":"integration_link"},{"description":"","name":"integration_purge","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access."}},{"description":"","name":"integration_purge_cancel"},{"description":"","name":"integration_repos"},{"description":"","name":"integration_repull"},{"description":"","name":"integration_sync"},{"description":"","name":"integration_sync_logs"},{"description":"","name":"integration_sync_status"},{"description":"","name":"integration_unlink"},{"description":"","name":"integrations_list"},{"description":"","name":"jira_list_projects"},{"description":"","name":"job_run","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"job_status"},{"description":"","name":"knowledge_health"},{"description":"","name":"mcp_capabilities","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"meeting_auto_schedule"},{"description":"","name":"meeting_booking_link_create"},{"description":"","name":"meeting_booking_links"},{"description":"","name":"meeting_briefing"},{"description":"","name":"meeting_draft_propose"},{"description":"","name":"meeting_finalize"},{"description":"","name":"meeting_invite_respond"},{"description":"","name":"meeting_invites_pending"},{"description":"","name":"meeting_list"},{"description":"","name":"meeting_preferences_get"},{"description":"","name":"meeting_preferences_update"},{"description":"","name":"meeting_schedule"},{"description":"","name":"meeting_slots_query"},{"description":"","name":"meeting_template_create"},{"description":"","name":"meeting_template_list"},{"description":"","name":"memory_backfill"},{"description":"","name":"memory_bulk_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access."}},{"description":"","name":"memory_bulk_tag"},{"description":"","name":"memory_create"},{"description":"","name":"memory_delete"},{"description":"","name":"memory_feedback"},{"description":"","name":"memory_get"},{"description":"","name":"memory_graph"},{"description":"","name":"memory_graph_query"},{"description":"","name":"memory_history"},{"description":"","name":"memory_list"},{"description":"","name":"memory_revert"},{"description":"","name":"memory_search"},{"description":"","name":"memory_search_history"},{"description":"","name":"memory_tags"},{"description":"","name":"memory_think"},{"description":"","name":"memory_update"},{"description":"","name":"merge_train"},{"description":"","name":"model_update_approve"},{"description":"","name":"notification_list"},{"description":"","name":"notification_read"},{"description":"","name":"notion_create_page"},{"description":"","name":"notion_list_databases"},{"description":"","name":"orchestrator_run","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"planning_generate"},{"description":"","name":"planning_list"},{"description":"","name":"planning_push_board"},{"description":"","name":"request_user_action"},{"description":"","name":"revenue_metrics"},{"description":"","name":"routing_analytics"},{"description":"","name":"routing_preferences_set"},{"description":"","name":"scheduled_run_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions modify production development and automation infrastructure."}},{"description":"","name":"scheduled_run_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access."}},{"description":"","name":"scheduled_run_list"},{"description":"","name":"scheduled_run_update"},{"description":"","name":"scratch_create"},{"description":"","name":"scratch_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access."}},{"description":"","name":"scratch_update"},{"description":"","name":"scratchpad_list"},{"description":"","name":"search"},{"description":"","name":"secret_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access."}},{"description":"","name":"secret_list"},{"description":"","name":"secret_store","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions."}},{"description":"","name":"share_link_mint","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions."}},{"description":"","name":"share_link_revoke"},{"description":"","name":"sheets_extract"},{"description":"","name":"sheets_update_range"},{"description":"","name":"skills_list"},{"description":"","name":"slack_list_channels"},{"description":"","name":"slack_post_thread_reply","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients can include customers, coworkers, support teams, and meeting attendees."}},{"description":"","name":"slack_search_messages"},{"description":"","name":"status_report"},{"description":"","name":"suggestion_feedback"},{"description":"","name":"supabase_list_projects"},{"description":"","name":"support_ticket_create"},{"description":"","name":"support_ticket_reply","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients can include customers, coworkers, support teams, and meeting attendees."}},{"description":"","name":"task_create"},{"description":"","name":"ticket_create"},{"description":"","name":"todo_add_checklist_item"},{"description":"","name":"todo_add_label"},{"description":"","name":"todo_archive","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion or purge can destroy shared knowledge, stop jobs, or sever access."}},{"description":"","name":"todo_assign"},{"description":"","name":"todo_attach_file"},{"description":"","name":"todo_attachments_list"},{"description":"","name":"todo_comment"},{"description":"","name":"todo_create"},{"description":"","name":"todo_edit_checklist_item"},{"description":"","name":"todo_get"},{"description":"","name":"todo_list"},{"description":"","name":"todo_log"},{"description":"","name":"todo_remove_attachment"},{"description":"","name":"todo_remove_label"},{"description":"","name":"todo_suggest"},{"description":"","name":"todo_toggle_checklist_item"},{"description":"","name":"todo_transfer"},{"description":"","name":"todo_update"},{"description":"","name":"todo_watch"},{"description":"","name":"tools_discover","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"tools_enable","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: These are broad execution surfaces with downstream side effects across connected systems.; Dynamic expansion means effective privileges can change without catalogue updates and requires continuous runtime inventory monitoring."}},{"description":"","name":"usage_report"},{"description":"","name":"vercel_list_projects"},{"description":"","name":"web_fetch"},{"description":"","name":"web_search"},{"description":"","name":"work_at_risk_list"},{"description":"","name":"work_at_risk_publish"},{"description":"","name":"work_claim"},{"description":"","name":"work_heartbeat"},{"description":"","name":"work_release"},{"description":"","name":"workspace_activity"},{"description":"","name":"workspace_attach_repo"},{"description":"","name":"workspace_briefing"},{"description":"","name":"workspace_create_application","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions modify production development and automation infrastructure."}},{"description":"","name":"workspace_create_project","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions modify production development and automation infrastructure."}},{"description":"","name":"workspace_introspect"},{"description":"","name":"workspace_invite","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged credential and access-control actions."}},{"description":"","name":"workspace_list"},{"description":"","name":"workspace_members"},{"description":"","name":"workspace_search"},{"description":"","name":"workspace_settings_get"},{"description":"","name":"workspace_settings_update"},{"description":"","name":"workspace_switch"},{"description":"","name":"workspace_type_create"},{"description":"","name":"workspace_type_list"}],"tools_count":249,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f83339d9-423d-44c5-ac15-65da9bf39bb4","uuid":"8303a0ca-1979-547f-b8ea-06f6673ce222","verification_tier":"community","version":""},"query_key":"great arrow digital","schema_version":1,"status":"match"}