{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Hamla prepares marketing campaigns and analyzes customer or performance data. Manage campaign drafts, segments, contacts, reports, plans, and decks across supported channels. Campaigns cannot launch, resume, or schedule here; a person must approve them in Hamla's dashboard.","did":"adf2ea57-8086-4f56-b7f9-f5893d4eb90b","documentation_url":"https://docs.hamla.io/","editorial_description":{"extended_description":"Contact imports and consent grants default to preview and require confirmation before writing. Consent grants also require the business to attest permission to contact the list. OAuth access follows your existing Hamla permissions.","schema_version":1,"summary":"Hamla prepares marketing campaigns and analyzes customer or performance data.\nManage campaign drafts, segments, contacts, reports, plans, and decks across supported channels.\nCampaigns cannot launch, resume, or schedule here; a person must approve them in Hamla's dashboard."},"homepage_url":"","icon":"","id":"adf2ea57-8086-4f56-b7f9-f5893d4eb90b","installs":0,"last_scanned":"","license":"","long_description":"Contact imports and consent grants default to preview and require confirmation before writing. Consent grants also require the business to attest permission to contact the list. OAuth access follows your existing Hamla permissions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says campaigns deliver email, SMS, WhatsApp, push, onsite and social messages.","reasoning":"They communicate to real audiences as the business.","risk_type":"messaging_as_user","severity":"high","title":"Creates/controls multi-channel marketing campaigns","triggering_tools_or_skills":["createCampaign","controlCampaign","editCampaign"]},{"evidence":"The tools operate production marketing automation.","reasoning":"They can affect broad audiences.","risk_type":"deployment_infrastructure","severity":"high","title":"Controls campaigns, segments and contact synchronization","triggering_tools_or_skills":["controlCampaign","resyncContacts"]},{"evidence":"Explicit tools remove durable targeting/design state.","reasoning":"They can disrupt campaigns.","risk_type":"data_deletion","severity":"high","title":"Deletes audience segments and archives templates","triggering_tools_or_skills":["deleteSegment","archiveDesignTemplate"]},{"evidence":"Consent changes affect legal/communication permissions.","reasoning":"They are privileged audience administration.","risk_type":"credential_admin","severity":"high","title":"Grants consent and manages connections","triggering_tools_or_skills":["grantConsent","listConnections"]},{"evidence":"The tools execute flexible live marketing queries.","reasoning":"Generic query execution is High.","risk_type":"query_execution","severity":"high","title":"Runs analytics/attribution/business/campaign queries","triggering_tools_or_skills":["queryAnalytics","queryAttribution","queryBusiness","queryCampaigns"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes business campaigns, contacts, integrations and designs.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/adf2ea57-8086-4f56-b7f9-f5893d4eb90b.json","what_it_proves":"Candidate PR #125 record identity (name \"Hamla\", publisher, type web_connector) and 34 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/adf2ea57-8086-4f56-b7f9-f5893d4eb90b: complete tool_names inventory (34 tools), remote streamable-http endpoint https://app.hamla.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Hamla controls multi-channel campaigns, deletes segments and changes consent.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:adf2ea57-8086-4f56-b7f9-f5893d4eb90b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 34 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":34,"tools_or_skills_total":34},"name":"Hamla","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=adf2ea57-8086-4f56-b7f9-f5893d4eb90b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.hamla.io/en/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Hamla","publisher_url":"https://hamla.io/","remote_url":"https://app.hamla.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real audiences as the business.","evidence":"Creates/controls multi-channel marketing campaigns: The listing says campaigns deliver email, SMS, WhatsApp, push, onsite and social messages.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Creates/controls multi-channel marketing campaigns","triggering_tools":["createCampaign","controlCampaign","editCampaign"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They can affect broad audiences.","evidence":"Controls campaigns, segments and contact synchronization: The tools operate production marketing automation.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Controls campaigns, segments and contact synchronization","triggering_tools":["controlCampaign","resyncContacts"]},{"description":"This connector can permanently remove data or resources. Review findings: They can disrupt campaigns.","evidence":"Deletes audience segments and archives templates: Explicit tools remove durable targeting/design state.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes audience segments and archives templates","triggering_tools":["deleteSegment","archiveDesignTemplate"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged audience administration.","evidence":"Grants consent and manages connections: Consent changes affect legal/communication permissions.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Grants consent and manages connections","triggering_tools":["grantConsent","listConnections"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Generic query execution is High.","evidence":"Runs analytics/attribution/business/campaign queries: The tools execute flexible live marketing queries.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Runs analytics/attribution/business/campaign queries","triggering_tools":["queryAnalytics","queryAttribution","queryBusiness","queryCampaigns"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@hamla.io","tags":["accesses_calendar","code_deployment","deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"addSlide"},{"description":"","name":"archiveDesignTemplate","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt campaigns."}},{"description":"","name":"campaignCalendar"},{"description":"","name":"checkAlerts"},{"description":"","name":"controlCampaign","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can affect broad audiences."}},{"description":"","name":"createCampaign","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real audiences as the business."}},{"description":"","name":"createSegment"},{"description":"","name":"deleteSegment","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt campaigns."}},{"description":"","name":"describeContact"},{"description":"","name":"editCampaign","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real audiences as the business."}},{"description":"","name":"editDesignTemplate"},{"description":"","name":"editSegment"},{"description":"","name":"exportDeck"},{"description":"","name":"exportReport"},{"description":"","name":"getDesignTemplate"},{"description":"","name":"grantConsent","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged audience administration."}},{"description":"","name":"importContacts"},{"description":"","name":"listAvailableTools"},{"description":"","name":"listBusinesses"},{"description":"","name":"listConnections","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged audience administration."}},{"description":"","name":"listDesignTemplates"},{"description":"","name":"queryAnalytics","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Generic query execution is High."}},{"description":"","name":"queryAttribution","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Generic query execution is High."}},{"description":"","name":"queryBusiness","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Generic query execution is High."}},{"description":"","name":"queryCampaigns","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Generic query execution is High."}},{"description":"","name":"queryConnection"},{"description":"","name":"queryContacts"},{"description":"","name":"resyncContacts","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can affect broad audiences."}},{"description":"","name":"saveDesignTemplate"},{"description":"","name":"savePlan"},{"description":"","name":"saveReport"},{"description":"","name":"startDeck"},{"description":"","name":"updateContact"},{"description":"","name":"writeBrandVoice"}],"tools_count":34,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/adf2ea57-8086-4f56-b7f9-f5893d4eb90b","uuid":"8b98742a-1843-5d1b-aa1c-557fb24a52be","verification_tier":"community","version":""},"query_key":"hamla hamla","schema_version":1,"status":"match"}