{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Build a searchable Markdown knowledge base with Hjarni notes. Create or revise notes, organize folders and tags, and share context with teams. Set folder instructions for how connected assistants write and format content.","did":"dbf2d0cc-cbf9-4985-bb8a-062ba925131b","documentation_url":"https://hjarni.com/docs","editorial_description":{"extended_description":"Manage attachments and links, inspect note history, restore or revert notes, and invite team members. Search across saved knowledge and maintain folder-level instructions or permissions.","schema_version":1,"summary":"Build a searchable Markdown knowledge base with Hjarni notes.\nCreate or revise notes, organize folders and tags, and share context with teams.\nSet folder instructions for how connected assistants write and format content."},"homepage_url":"","icon":"https://hjarni.com/icon.png","id":"dbf2d0cc-cbf9-4985-bb8a-062ba925131b","installs":0,"last_scanned":"","license":"","long_description":"Manage attachments and links, inspect note history, restore or revert notes, and invite team members. Search across saved knowledge and maintain folder-level instructions or permissions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit tools delete knowledge-base notes and attachments.","reasoning":"These remove user data.","risk_type":"data_deletion","severity":"high","title":"Notes and file attachments can be removed","triggering_tools_or_skills":["notes-delete","files-remove"]},{"evidence":"The tool invites other users to a team.","reasoning":"This is external communication and access granting as the account.","risk_type":"messaging_as_user","severity":"high","title":"Team invitations can be sent","triggering_tools_or_skills":["teams-invite"]},{"evidence":"Declared tools create teams and manage access permissions.","reasoning":"These are sensitive administrative actions.","risk_type":"credential_admin","severity":"high","title":"Teams and container permissions can be administered","triggering_tools_or_skills":["teams-create","teams-invite","containers-permissions"]},{"evidence":"The inventory exposes persistent note/file writes.","reasoning":"These modify the knowledge base.","risk_type":"file_write","severity":"medium","title":"Notes and attachments can be created or changed","triggering_tools_or_skills":["notes-create","notes-update","files-attach","files-create_upload_url"]},{"evidence":"The tool name explicitly supports URL-based attachment ingestion.","reasoning":"Runtime controls should prevent internal-network or credentialed fetches.","risk_type":"arbitrary_network_access","severity":"low","title":"An attachment can be fetched from a user-provided URL","triggering_tools_or_skills":["files-attach_from_url"]},{"evidence":"Human-authored collaborative knowledge is returned.","reasoning":"It should remain untrusted.","risk_type":"prompt_injection_exposure","severity":"low","title":"Shared notes and attached content enter model context","triggering_tools_or_skills":["notes-get","search","files-get_download_url"]},{"evidence":"The connector runs at https://hjarni.com/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Hjarni notes is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes notes, containers and teams to the signed-in Hjarni account; exact team-admin roles are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/dbf2d0cc-cbf9-4985-bb8a-062ba925131b.json","what_it_proves":"Candidate PR #125 record identity (name \"Hjarni notes\", publisher, type web_connector) and 34 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/dbf2d0cc-cbf9-4985-bb8a-062ba925131b: complete tool_names inventory (34 tools), remote streamable-http endpoint https://hjarni.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Hjarni can delete notes/files, invite users and administer team/container permissions.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:dbf2d0cc-cbf9-4985-bb8a-062ba925131b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 34 tools. URL-fetch restrictions require runtime verification.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":34,"tools_or_skills_total":34},"name":"Hjarni notes","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=dbf2d0cc-cbf9-4985-bb8a-062ba925131b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://hjarni.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Hjarni","publisher_url":"https://hjarni.com/","remote_url":"https://hjarni.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These remove user data.","evidence":"Notes and file attachments can be removed: Explicit tools delete knowledge-base notes and attachments.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Notes and file attachments can be removed","triggering_tools":["notes-delete","files-remove"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This is external communication and access granting as the account.","evidence":"Team invitations can be sent: The tool invites other users to a team.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Team invitations can be sent","triggering_tools":["teams-invite"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive administrative actions.","evidence":"Teams and container permissions can be administered: Declared tools create teams and manage access permissions.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Teams and container permissions can be administered","triggering_tools":["teams-create","teams-invite","containers-permissions"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: These modify the knowledge base.","evidence":"Notes and attachments can be created or changed: The inventory exposes persistent note/file writes.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Notes and attachments can be created or changed","triggering_tools":["notes-create","notes-update","files-attach","files-create_upload_url"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Runtime controls should prevent internal-network or credentialed fetches.","evidence":"An attachment can be fetched from a user-provided URL: The tool name explicitly supports URL-based attachment ingestion.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"An attachment can be fetched from a user-provided URL","triggering_tools":["files-attach_from_url"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"evert@hjarni.com","tags":["deletes_data","filesystem_access","forwards_data_to_third_party","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"containers-create"},{"description":"","name":"containers-get"},{"description":"","name":"containers-list"},{"description":"","name":"containers-permissions","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive administrative actions."}},{"description":"","name":"containers-update"},{"description":"","name":"dashboard-get"},{"description":"","name":"feedback-submit"},{"description":"","name":"files-attach","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These modify the knowledge base."}},{"description":"","name":"files-attach_from_url"},{"description":"","name":"files-check_upload"},{"description":"","name":"files-create_upload_url","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These modify the knowledge base."}},{"description":"","name":"files-get_download_url"},{"description":"","name":"files-remove","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These remove user data."}},{"description":"","name":"instructions-get"},{"description":"","name":"instructions-update"},{"description":"","name":"links-manage"},{"description":"","name":"me"},{"description":"","name":"notes-create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These modify the knowledge base."}},{"description":"","name":"notes-delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These remove user data."}},{"description":"","name":"notes-get"},{"description":"","name":"notes-history"},{"description":"","name":"notes-list"},{"description":"","name":"notes-restore"},{"description":"","name":"notes-revert"},{"description":"","name":"notes-update","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: These modify the knowledge base."}},{"description":"","name":"nudges-dismiss"},{"description":"","name":"search"},{"description":"","name":"tags-create"},{"description":"","name":"tags-list"},{"description":"","name":"tags-manage"},{"description":"","name":"teams-create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive administrative actions."}},{"description":"","name":"teams-get"},{"description":"","name":"teams-invite","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are sensitive administrative actions."}},{"description":"","name":"teams-list"}],"tools_count":34,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/dbf2d0cc-cbf9-4985-bb8a-062ba925131b","uuid":"a798b4d0-e325-5b92-b037-c6ed915b2062","verification_tier":"community","version":""},"query_key":"hjarni hjarni notes","schema_version":1,"status":"match"}