{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-28","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Brings the HeyCounsel legal community and its resources into Claude. Find lawyers, work opportunities, legal templates, discussions and peer benchmarks. Requires an active HeyCounsel membership.","did":"204d3b78-af5b-40e1-9245-627d332e6832","documentation_url":"https://go.heycounsel.com/mcp","editorial_description":{"extended_description":"Search community Slack conversations or catch up on active threads, inspect your profile, and explore opportunities relevant to your practice. HeyCounsel Pulse offers aggregated peer results on pricing, firm economics and technology, filterable by firm size, practice area and jurisdiction.","schema_version":1,"summary":"Brings the HeyCounsel legal community and its resources into Claude.\nFind lawyers, work opportunities, legal templates, discussions and peer benchmarks.\nRequires an active HeyCounsel membership."},"homepage_url":"","icon":"","id":"204d3b78-af5b-40e1-9245-627d332e6832","installs":0,"last_scanned":"","license":"","long_description":"Search community Slack conversations or catch up on active threads, inspect your profile, and explore opportunities relevant to your practice. HeyCounsel Pulse offers aggregated peer results on pricing, firm economics and technology, filterable by firm size, practice area and jurisdiction.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official docs say the connector retrieves the user's profile, member directory, community Slack archive, benchmarks, templates and opportunities and is strictly read-only.","reasoning":"The corpus is private community data but no posting, bid or profile change is possible.","risk_type":"private_data_read","severity":"low","title":"Searches members-only legal community content","triggering_tools_or_skills":["get_my_heycounsel_profile","get_pulse_results","list_opportunities","list_top_slack_threads","search_slack_conversations","search_legal_templates"]},{"evidence":"Official docs cite more than 50,000 Slack messages and 390 member-vetted templates.","reasoning":"User-authored community content can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Community Slack and templates contain member-authored text","triggering_tools_or_skills":["list_top_slack_threads","search_slack_conversations","search_legal_templates"]}],"assessment_status":"reviewed","auth_and_scopes":"OAuth limits access to an active member's authorized community data; other members' private data is excluded and the connection is revocable.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/204d3b78-af5b-40e1-9245-627d332e6832.json","what_it_proves":"Candidate PR #125 record identity (name \"HeyCounsel\", publisher, type web_connector) and 10 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/204d3b78-af5b-40e1-9245-627d332e6832: complete tool_names inventory (10 tools), remote streamable-http endpoint https://api.heycounsel.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:19:34Z","url_or_path":"https://go.heycounsel.com/mcp","what_it_proves":"Official docs describe members-only access to Slack, profiles, surveys, templates and opportunities and explicitly prohibit edits, bids, posts or acting on the user's behalf."}],"primary_reason":"HeyCounsel is officially read-only across member profiles, Slack, benchmarks, templates and opportunities.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:204d3b78-af5b-40e1-9245-627d332e6832","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 10 names against official privacy and capability statements; no write actions are currently supported.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":10,"tools_or_skills_total":10},"name":"HeyCounsel","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=204d3b78-af5b-40e1-9245-627d332e6832&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.heycounsel.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"HeyCounsel","publisher_url":"https://www.heycounsel.com/","remote_url":"https://api.heycounsel.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The corpus is private community data but no posting, bid or profile change is possible.","evidence":"Searches members-only legal community content: Official docs say the connector retrieves the user's profile, member directory, community Slack archive, benchmarks, templates and opportunities and is strictly read-only.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Searches members-only legal community content","triggering_tools":["get_my_heycounsel_profile","get_pulse_results","list_opportunities","list_top_slack_threads","search_slack_conversations","search_legal_templates"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@heycounsel.com","tags":["accesses_messaging","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"find_a_lawyer"},{"description":"","name":"get_my_heycounsel_profile"},{"description":"","name":"get_opportunity_detail"},{"description":"","name":"get_pulse_results"},{"description":"","name":"get_pulse_status"},{"description":"","name":"list_opportunities"},{"description":"","name":"list_slack_channels"},{"description":"","name":"list_top_slack_threads"},{"description":"","name":"search_slack_conversations"},{"description":"","name":"search_legal_templates"}],"tools_count":10,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/204d3b78-af5b-40e1-9245-627d332e6832","uuid":"880108e2-bec5-556a-973a-ee0ac18ca8e7","verification_tier":"community","version":""},"query_key":"heycounsel","schema_version":1,"status":"match"}