{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Search HappyScribe transcripts, meeting recordings and interviews in Claude. Retrieve speaker-attributed quotes, transcribe media URLs and organize recordings. Edit transcript text or speaker names and investigate missing meeting recordings.","did":"0064a773-9f77-400e-9a4a-4103d9ea28a6","documentation_url":"https://help.happyscribe.com/en/articles/13927840-what-is-happyscribe-mcp","editorial_description":{"extended_description":"HappyScribe supports multilingual recordings from meetings, interviews, uploaded media and fieldwork. The connector can explore people and companies mentioned across your library, manage folders and summary templates, and link quotations back to the transcript editor. It requires access to a HappyScribe workspace.","schema_version":1,"summary":"Search HappyScribe transcripts, meeting recordings and interviews in Claude.\nRetrieve speaker-attributed quotes, transcribe media URLs and organize recordings.\nEdit transcript text or speaker names and investigate missing meeting recordings."},"homepage_url":"","icon":"","id":"0064a773-9f77-400e-9a4a-4103d9ea28a6","installs":0,"last_scanned":"","license":"","long_description":"HappyScribe supports multilingual recordings from meetings, interviews, uploaded media and fieldwork. The connector can explore people and companies mentioned across your library, manage folders and summary templates, and link quotations back to the transcript editor. It requires access to a HappyScribe workspace.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Directory tool_names include delete_transcriptions, delete_folder, delete_summary_template.","reasoning":"Deleting an organisation's meeting/interview transcripts destroys meaningful records; name-only evidence, so confidence medium.","risk_type":"data_deletion","severity":"high","title":"Deletes transcriptions, folders and summary templates","triggering_tools_or_skills":["delete_transcriptions","delete_folder","delete_summary_template"]},{"evidence":"Tool names plus description: 'Manage folders, rename speakers, and edit transcript text'.","reasoning":"Can alter verbatim records that the product markets as citable evidence.","risk_type":"data_modification","severity":"medium","title":"Edits transcript text, speakers, folders, templates and project notes","triggering_tools_or_skills":["replace_text_in_transcript","rename_speakers","reassign_speakers","rename_transcription","rename_folder","move_transcriptions","create_folder","create_summary_template","update_summary_template","set_meeting_template","update_project_notes","regenerate_summary"]},{"evidence":"Description: 'Transcribe new media from a URL (YouTube, Vimeo, direct links)'.","reasoning":"Server fetches arbitrary URLs; also likely consumes paid transcription minutes (not confirmed).","risk_type":"arbitrary_network_access","severity":"low","title":"Transcription jobs fetch media from user-supplied URLs","triggering_tools_or_skills":["create_transcription"]},{"evidence":"Description: 'every transcript, meeting recording, interview, and quote'.","reasoning":"Highly sensitive conversational data and third-party speech enter model context (prompt-injection exposure).","risk_type":"private_data_read","severity":"low","title":"Reads meeting transcripts, audio, video frames, calendar and people/company graph","triggering_tools_or_skills":["get_transcription","get_transcriptions","search_transcriptions","listen_to_audio","get_video_frames","list_calendar_events","list_people","get_person","list_companies","get_company"]},{"evidence":"Directory remote.url is www.happyscribe.com/mcp; no pinned source or version is available for the server.","reasoning":"Tool behaviour can change server-side after review; ratings rest on the 2026-09-22 snapshot.","risk_type":"provenance_uncertainty","severity":"low","title":"Closed hosted MCP server for HappyScribe can change without notice","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"auth_required remote OAuth to the user's HappyScribe workspace; scopes not documented in the packet (unknown).","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0064a773-9f77-400e-9a4a-4103d9ea28a6.json","what_it_proves":"Candidate PR #125 record identity (name \"HappyScribe\", publisher, type web_connector) and 40 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0064a773-9f77-400e-9a4a-4103d9ea28a6: complete tool_names inventory (40 tools), remote streamable-http endpoint https://www.happyscribe.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Declared delete_transcriptions and delete_folder tools can destroy an organisation's transcript records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0064a773-9f77-400e-9a4a-4103d9ea28a6","reviewed_at":"2026-10-10","reviewer_notes":"Identity consistent (Happy Scribe Limited, happyscribe.com). Reviewed all 40 tool names. Pinned High by unambiguous delete_* tools, so no doc lookup made. create_transcription may spend paid transcription credits (spends_or_moves_money unknown). verify_quotes, get_meeting_diagnostics, search_helpdesk, get_helpdesk_article treated as read-only.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":40,"tools_or_skills_total":40},"name":"HappyScribe","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0064a773-9f77-400e-9a4a-4103d9ea28a6&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.happyscribe.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Happy Scribe Limited","publisher_url":"https://www.happyscribe.com/","remote_url":"https://www.happyscribe.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting an organisation's meeting/interview transcripts destroys meaningful records; name-only evidence, so confidence medium.","evidence":"Deletes transcriptions, folders and summary templates: Directory tool_names include delete_transcriptions, delete_folder, delete_summary_template.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes transcriptions, folders and summary templates","triggering_tools":["delete_transcriptions","delete_folder","delete_summary_template"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence.","evidence":"Edits transcript text, speakers, folders, templates and project notes: Tool names plus description: 'Manage folders, rename speakers, and edit transcript text'.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Edits transcript text, speakers, folders, templates and project notes","triggering_tools":["replace_text_in_transcript","rename_speakers","reassign_speakers","rename_transcription","rename_folder","move_transcriptions","create_folder","create_summary_template","update_summary_template","set_meeting_template","update_project_notes","regenerate_summary"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Server fetches arbitrary URLs; also likely consumes paid transcription minutes (not confirmed).","evidence":"Transcription jobs fetch media from user-supplied URLs: Description: 'Transcribe new media from a URL (YouTube, Vimeo, direct links)'.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Transcription jobs fetch media from user-supplied URLs","triggering_tools":["create_transcription"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Highly sensitive conversational data and third-party speech enter model context (prompt-injection exposure).","evidence":"Reads meeting transcripts, audio, video frames, calendar and people/company graph: Description: 'every transcript, meeting recording, interview, and quote'.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads meeting transcripts, audio, video frames, calendar and people/company graph","triggering_tools":["get_transcription","get_transcriptions","search_transcriptions","listen_to_audio","get_video_frames","list_calendar_events","list_people","get_person","list_companies","get_company"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hi@happyscribe.com","tags":["accesses_calendar","deletes_data","forwards_data_to_third_party","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"create_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"create_summary_template","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"create_transcription"},{"description":"","name":"delete_folder","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting an organisation's meeting/interview transcripts destroys meaningful records; name-only evidence, so confidence medium."}},{"description":"","name":"delete_summary_template","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting an organisation's meeting/interview transcripts destroys meaningful records; name-only evidence, so confidence medium."}},{"description":"","name":"delete_transcriptions","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting an organisation's meeting/interview transcripts destroys meaningful records; name-only evidence, so confidence medium."}},{"description":"","name":"get_company"},{"description":"","name":"get_folder_hierarchy"},{"description":"","name":"get_glossary"},{"description":"","name":"get_helpdesk_article"},{"description":"","name":"get_meeting_diagnostics"},{"description":"","name":"get_person"},{"description":"","name":"get_project"},{"description":"","name":"get_summary_template"},{"description":"","name":"get_transcription"},{"description":"","name":"get_transcriptions"},{"description":"","name":"get_video_frames"},{"description":"","name":"get_workspace"},{"description":"","name":"list_calendar_events"},{"description":"","name":"list_companies"},{"description":"","name":"list_glossaries"},{"description":"","name":"list_people"},{"description":"","name":"list_projects"},{"description":"","name":"list_read_files"},{"description":"","name":"list_summary_templates"},{"description":"","name":"list_transcriptions"},{"description":"","name":"listen_to_audio"},{"description":"","name":"move_transcriptions","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"reassign_speakers","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"regenerate_summary","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"rename_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"rename_speakers","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"rename_transcription","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"replace_text_in_transcript","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"search_helpdesk"},{"description":"","name":"search_transcriptions"},{"description":"","name":"set_meeting_template","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"update_project_notes","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"update_summary_template","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Can alter verbatim records that the product markets as citable evidence."}},{"description":"","name":"verify_quotes"}],"tools_count":40,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0064a773-9f77-400e-9a4a-4103d9ea28a6","uuid":"706a6e03-1d74-5eca-b04b-c02c9964f645","verification_tier":"community","version":""},"query_key":"happy scribe limited happyscribe","schema_version":1,"status":"match"}