{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"HireOtto inspects Google Tag Manager configuration without changing it. Explore accounts, containers, workspaces, tags, triggers, variables, and wiring. The hosted OAuth connector cannot edit GTM resources, create versions, or publish containers.","did":"9fddd1a2-a1ce-4951-bed7-fc71caf6d0ff","documentation_url":"https://docs.hireotto.com/tag-manager/quickstart","editorial_description":{"extended_description":"Compare a workspace with the live published configuration and generate summaries or CSV exports. Public-page scans identify tracking signals and consent-related clues for a first-pass measurement review. Usage depends on the HireOtto subscription.","schema_version":1,"summary":"HireOtto inspects Google Tag Manager configuration without changing it.\nExplore accounts, containers, workspaces, tags, triggers, variables, and wiring.\nThe hosted OAuth connector cannot edit GTM resources, create versions, or publish containers."},"homepage_url":"","icon":"","id":"9fddd1a2-a1ce-4951-bed7-fc71caf6d0ff","installs":0,"last_scanned":"","license":"","long_description":"Compare a workspace with the live published configuration and generate summaries or CSV exports. Public-page scans identify tracking signals and consent-related clues for a first-pass measurement review. Usage depends on the HireOtto subscription.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The tool connects a Google Tag Manager account to HireOtto.","reasoning":"Linking privileged GTM credentials is an administrative action.","risk_type":"credential_admin","severity":"high","title":"Authenticates a persistent Tag Manager integration","triggering_tools_or_skills":["authenticate_tag_manager"]},{"evidence":"The tool inspects website HTML for tracking signals.","reasoning":"No destination allowlist is documented.","risk_type":"arbitrary_network_access","severity":"high","title":"Scans caller-selected public websites","triggering_tools_or_skills":["scan_website_tracking"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication links Google Tag Manager; the listed inspection tools are read-only.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9fddd1a2-a1ce-4951-bed7-fc71caf6d0ff.json","what_it_proves":"Candidate PR #125 record identity (name \"HireOtto - Google Tag Manager MCP\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9fddd1a2-a1ce-4951-bed7-fc71caf6d0ff: complete tool_names inventory (8 tools), remote streamable-http endpoint https://tagmanager.hireotto.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"HireOtto links privileged GTM credentials and scans arbitrary public sites.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:9fddd1a2-a1ce-4951-bed7-fc71caf6d0ff","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight tools; GTM configuration retrieval itself is read-only.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"HireOtto - Google Tag Manager MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9fddd1a2-a1ce-4951-bed7-fc71caf6d0ff&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://hireotto.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"HireOtto","publisher_url":"https://hireotto.com/tag-manager-mcp","remote_url":"https://tagmanager.hireotto.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Linking privileged GTM credentials is an administrative action.","evidence":"Authenticates a persistent Tag Manager integration: The tool connects a Google Tag Manager account to HireOtto.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Authenticates a persistent Tag Manager integration","triggering_tools":["authenticate_tag_manager"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: No destination allowlist is documented.","evidence":"Scans caller-selected public websites: The tool inspects website HTML for tracking signals.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"high","title":"Scans caller-selected public websites","triggering_tools":["scan_website_tracking"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://hireotto.com/contact","tags":["forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"authenticate_tag_manager","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Linking privileged GTM credentials is an administrative action."}},{"description":"","name":"get_billing_status"},{"description":"","name":"get_gtm_container_inventory"},{"description":"","name":"list_gtm_accounts"},{"description":"","name":"list_gtm_containers"},{"description":"","name":"list_gtm_workspaces"},{"description":"","name":"lookup_gtm_container"},{"description":"","name":"scan_website_tracking"}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9fddd1a2-a1ce-4951-bed7-fc71caf6d0ff","uuid":"b267631d-ad62-5dd8-8354-13e14c1a62c2","verification_tier":"community","version":""},"query_key":"hireotto hireotto google tag manager mcp","schema_version":1,"status":"match"}