{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-20","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage Hostinger Mail through Claude. Discover operations, read or search messages, send email and inspect folders. Authenticated API tools can write, delete or change mail and webhook state.","did":"0a1a61f9-3412-4d06-8565-bfaf3e3dd83e","documentation_url":"https://api.mail.hostinger.com/","editorial_description":{"extended_description":"The connector provides operation documentation and discovery plus separate API interfaces for reads, writes and deletion. Available actions therefore extend beyond inbox search and can change account data or send messages.","schema_version":1,"summary":"Manage Hostinger Mail through Claude.\nDiscover operations, read or search messages, send email and inspect folders.\nAuthenticated API tools can write, delete or change mail and webhook state."},"homepage_url":"","icon":"","id":"0a1a61f9-3412-4d06-8565-bfaf3e3dd83e","installs":0,"last_scanned":"","license":"","long_description":"The connector provides operation documentation and discovery plus separate API interfaces for reads, writes and deletion. Available actions therefore extend beyond inbox search and can change account data or send messages.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The explicit generic delete gateway calls deletion operations discovered from the Hostinger Mail API.","reasoning":"It can remove messages, webhook state, or other mailbox resources depending on selected operation.","risk_type":"data_deletion","severity":"high","title":"Generic Mail API deletion is exposed","triggering_tools_or_skills":["email_call_api_delete"]},{"evidence":"The publisher description explicitly includes sending email and managing mailbox or webhook state.","reasoning":"The generic write gateway can communicate externally under the authenticated mailbox identity.","risk_type":"messaging_as_user","severity":"high","title":"Generic Mail API writes can send email","triggering_tools_or_skills":["email_call_api_write"]},{"evidence":"Operation names are discovered and described at runtime, then passed to generic read, write, or delete executors.","reasoning":"The effective action surface is broader than the six visible dispatcher tools.","risk_type":"query_execution","severity":"high","title":"Runtime-selected API operations execute","triggering_tools_or_skills":["email_call_api_read","email_call_api_write","email_call_api_delete"]},{"evidence":"The Directory description includes mailbox operations and webhook-state management under account authentication.","reasoning":"Mailbox and webhook administration affects communication identity and external integrations.","risk_type":"credential_admin","severity":"high","title":"Mailbox and webhook state can be administered","triggering_tools_or_skills":["email_call_api_write","email_call_api_delete"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a Hostinger Mail account; effective mailbox, send, delete, message, and webhook operations are runtime-discovered through generic API tools.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0a1a61f9-3412-4d06-8565-bfaf3e3dd83e.json","what_it_proves":"Candidate PR #125 record identity (name \"Hostinger Mail\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0a1a61f9-3412-4d06-8565-bfaf3e3dd83e: complete tool_names inventory (6 tools), remote streamable-http endpoint https://mcp.mail.hostinger.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Generic read/write/delete executors expose runtime-discovered email sending, deletion, and administrative operations.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:0a1a61f9-3412-4d06-8565-bfaf3e3dd83e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all six gateway names. Runtime enumeration must capture every operation, scope, recipient and webhook validation, attachment handling, confirmation gate, and deletion recovery.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"Hostinger Mail","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0a1a61f9-3412-4d06-8565-bfaf3e3dd83e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.hostinger.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Hostinger","publisher_url":"https://www.hostinger.com/","remote_url":"https://mcp.mail.hostinger.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: It can remove messages, webhook state, or other mailbox resources depending on selected operation.","evidence":"Generic Mail API deletion is exposed: The explicit generic delete gateway calls deletion operations discovered from the Hostinger Mail API.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Generic Mail API deletion is exposed","triggering_tools":["email_call_api_delete"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: The generic write gateway can communicate externally under the authenticated mailbox identity.","evidence":"Generic Mail API writes can send email: The publisher description explicitly includes sending email and managing mailbox or webhook state.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Generic Mail API writes can send email","triggering_tools":["email_call_api_write"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The effective action surface is broader than the six visible dispatcher tools.","evidence":"Runtime-selected API operations execute: Operation names are discovered and described at runtime, then passed to generic read, write, or delete executors.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Runtime-selected API operations execute","triggering_tools":["email_call_api_read","email_call_api_write","email_call_api_delete"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Mailbox and webhook administration affects communication identity and external integrations.","evidence":"Mailbox and webhook state can be administered: The Directory description includes mailbox operations and webhook-state management under account authentication.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Mailbox and webhook state can be administered","triggering_tools":["email_call_api_write","email_call_api_delete"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@hostinger.com","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"email_api_docs"},{"description":"","name":"email_call_api_delete","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Mailbox and webhook administration affects communication identity and external integrations."}},{"description":"","name":"email_call_api_read","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The effective action surface is broader than the six visible dispatcher tools."}},{"description":"","name":"email_call_api_write","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Mailbox and webhook administration affects communication identity and external integrations."}},{"description":"","name":"email_describe_operation"},{"description":"","name":"email_list_operations"}],"tools_count":6,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0a1a61f9-3412-4d06-8565-bfaf3e3dd83e","uuid":"3bc63f1f-9333-5f1e-8d74-7e3da6fc8111","verification_tier":"community","version":""},"query_key":"hostinger mail","schema_version":1,"status":"match"}