{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-20","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Retrieves HollyHR people, teams, working patterns and time-off information. Create, update or cancel time-off requests through its confirmation flow. Access is limited to approved fields in the connected workspace, with sensitive payroll and personal data excluded.","did":"bf0a571d-5ba4-4e30-816c-061e9f8d79b3","documentation_url":"https://developers.hollyhr.com/ai-connectors","editorial_description":{"extended_description":"Document access returns approved metadata, not contents. Excluded information includes banking, tax details, government identifiers, home contact information, medical content and raw sensitive absence labels. Granted permissions govern all supported operations.","schema_version":1,"summary":"Retrieves HollyHR people, teams, working patterns and time-off information.\nCreate, update or cancel time-off requests through its confirmation flow.\nAccess is limited to approved fields in the connected workspace, with sensitive payroll and personal data excluded."},"homepage_url":"","icon":"https://hollyhr-mcp-review-assets.vercel.app/hollyhr-directory-icon.png","id":"bf0a571d-5ba4-4e30-816c-061e9f8d79b3","installs":0,"last_scanned":"","license":"","long_description":"Document access returns approved metadata, not contents. Excluded information includes banking, tax details, government identifiers, home contact information, medical content and raw sensitive absence labels. Granted permissions govern all supported operations.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official docs say writes include create/update/cancel time-off and require granular scopes plus host confirmation.","reasoning":"These tools persist HR workflow changes but the documented surface does not delete employee records or send external messages.","risk_type":"data_modification","severity":"medium","title":"Commits confirmed HR changes","triggering_tools_or_skills":["prepare_api_write","commit_api_write","call_api_operation"]}],"assessment_status":"provisional","auth_and_scopes":"Official docs describe OAuth/API keys with read-first scopes and explicit mcp:write plus operation scopes for writes.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/bf0a571d-5ba4-4e30-816c-061e9f8d79b3.json","what_it_proves":"Candidate PR #125 record identity (name \"HollyHR\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/bf0a571d-5ba4-4e30-816c-061e9f8d79b3: complete tool_names inventory (12 tools), remote streamable-http endpoint https://app.hollyhr.com/api/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:58:23Z","url_or_path":"https://developers.hollyhr.com/ai-connectors","what_it_proves":"Official docs define read-first OAuth scopes, governed write step-up, confirmation and time-off write boundaries."}],"primary_reason":"HollyHR can prepare and commit governed HR API writes, including time-off creation/update/cancellation.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:bf0a571d-5ba4-4e30-816c-061e9f8d79b3","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 12 names and official docs. Writes require confirmation and tenant-scoped authorization; runtime verification should confirm cancellation is a status transition rather than data deletion.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"HollyHR","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=bf0a571d-5ba4-4e30-816c-061e9f8d79b3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.hollyhr.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"HollyHR","publisher_url":"https://www.hollyhr.com/","remote_url":"https://app.hollyhr.com/api/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist HR workflow changes but the documented surface does not delete employee records or send external messages.","evidence":"Commits confirmed HR changes: Official docs say writes include create/update/cancel time-off and require granular scopes plus host confirmation.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Commits confirmed HR changes","triggering_tools":["prepare_api_write","commit_api_write","call_api_operation"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://developers.hollyhr.com/support","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"call_api_operation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist HR workflow changes but the documented surface does not delete employee records or send external messages."}},{"description":"","name":"commit_api_write","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist HR workflow changes but the documented surface does not delete employee records or send external messages."}},{"description":"","name":"get_api_operation"},{"description":"","name":"get_person"},{"description":"","name":"get_person_context"},{"description":"","name":"get_time_off"},{"description":"","name":"list_api_operations"},{"description":"","name":"list_reference"},{"description":"","name":"list_time_off"},{"description":"","name":"prepare_api_write","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools persist HR workflow changes but the documented surface does not delete employee records or send external messages."}},{"description":"","name":"search_people"},{"description":"","name":"whoami"}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/bf0a571d-5ba4-4e30-816c-061e9f8d79b3","uuid":"655bc270-7cec-5439-a006-22777ce572e4","verification_tier":"community","version":""},"query_key":"hollyhr","schema_version":1,"status":"match"}