{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Inbin turns incoming email into structured data for an assistant. Extract fields against a schema, search or aggregate events, and record decisions. Returned fields include trust labels, with sender-authentication results and channel-derived provenance attached to events.","did":"4f93921d-173f-4bed-ab5f-63701b99ff66","documentation_url":"https://inbin.dev/docs","editorial_description":{"extended_description":"The source describes checking extracted values against the original message. Tools can wait for confirmation emails, retry extraction, backfill messages, and share or revoke individual events and views across applications. Sharing by ID avoids resending the full event content.","schema_version":1,"summary":"Inbin turns incoming email into structured data for an assistant.\nExtract fields against a schema, search or aggregate events, and record decisions.\nReturned fields include trust labels, with sender-authentication results and channel-derived provenance attached to events."},"homepage_url":"","icon":"https://inbin.dev/logo-512.png","id":"4f93921d-173f-4bed-ab5f-63701b99ff66","installs":0,"last_scanned":"","license":"","long_description":"The source describes checking extracted values against the original message. Tools can wait for confirmation emails, retry extraction, backfill messages, and share or revoke individual events and views across applications. Sharing by ID avoids resending the full event content.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Names explicitly share account content externally.","reasoning":"Sharing sends content/access as the user.","risk_type":"messaging_as_user","severity":"high","title":"Can share events and views","triggering_tools_or_skills":["share_event","share_view"]},{"evidence":"Tools explicitly revoke shared resources/access.","reasoning":"Revocation of meaningful access is High.","risk_type":"data_deletion","severity":"high","title":"Can revoke shares and views","triggering_tools_or_skills":["revoke_event_share","revoke_view"]},{"evidence":"These tools trigger operational event/email processing.","reasoning":"Re-running delivery and backfills materially changes production processing.","risk_type":"deployment_infrastructure","severity":"high","title":"Can redeliver events and retry extraction","triggering_tools_or_skills":["redeliver_event","retry_extraction","backfill_email"]},{"evidence":"Declared tools persist decision/assertion data.","reasoning":"These are meaningful state changes.","risk_type":"data_modification","severity":"medium","title":"Can record decisions and assertions","triggering_tools_or_skills":["record_decision","write_assertion"]}],"assessment_status":"provisional","auth_and_scopes":"Authenticated Inbin application access is implied; share recipients/scopes are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4f93921d-173f-4bed-ab5f-63701b99ff66.json","what_it_proves":"Candidate PR #125 record identity (name \"Inbin\", publisher, type web_connector) and 24 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4f93921d-173f-4bed-ab5f-63701b99ff66: complete tool_names inventory (24 tools), remote streamable-http endpoint https://api.inbin.dev/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Inbin can share/revoke resources and trigger event-processing operations.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:4f93921d-173f-4bed-ab5f-63701b99ff66","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 24 names; exact recipient and redelivery safeguards require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":24,"tools_or_skills_total":24},"name":"Inbin","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4f93921d-173f-4bed-ab5f-63701b99ff66&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://inbin.dev/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Inbin","publisher_url":"https://inbin.dev/","remote_url":"https://api.inbin.dev/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Sharing sends content/access as the user.","evidence":"Can share events and views: Names explicitly share account content externally.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Can share events and views","triggering_tools":["share_event","share_view"]},{"description":"This connector can permanently remove data or resources. Review findings: Revocation of meaningful access is High.","evidence":"Can revoke shares and views: Tools explicitly revoke shared resources/access.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Can revoke shares and views","triggering_tools":["revoke_event_share","revoke_view"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Re-running delivery and backfills materially changes production processing.","evidence":"Can redeliver events and retry extraction: These tools trigger operational event/email processing.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Can redeliver events and retry extraction","triggering_tools":["redeliver_event","retry_extraction","backfill_email"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are meaningful state changes.","evidence":"Can record decisions and assertions: Declared tools persist decision/assertion data.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Can record decisions and assertions","triggering_tools":["record_decision","write_assertion"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@inbin.dev","tags":["accesses_calendar","code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"await_confirmation"},{"description":"","name":"backfill_email","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Re-running delivery and backfills materially changes production processing."}},{"description":"","name":"check_decisions"},{"description":"","name":"describe_schema"},{"description":"","name":"get_application"},{"description":"","name":"get_event"},{"description":"","name":"list_apps"},{"description":"","name":"list_events"},{"description":"","name":"list_inboxes"},{"description":"","name":"list_views"},{"description":"","name":"operative_view"},{"description":"","name":"query_events"},{"description":"","name":"record_decision","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are meaningful state changes."}},{"description":"","name":"redeliver_event","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Re-running delivery and backfills materially changes production processing."}},{"description":"","name":"resolve_event"},{"description":"","name":"resolve_view"},{"description":"","name":"retry_extraction","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Re-running delivery and backfills materially changes production processing."}},{"description":"","name":"revoke_event_share","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Revocation of meaningful access is High."}},{"description":"","name":"revoke_view","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Revocation of meaningful access is High."}},{"description":"","name":"search_events"},{"description":"","name":"share_event","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Sharing sends content/access as the user."}},{"description":"","name":"share_view","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Sharing sends content/access as the user."}},{"description":"","name":"switch_app"},{"description":"","name":"write_assertion","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are meaningful state changes."}}],"tools_count":24,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4f93921d-173f-4bed-ab5f-63701b99ff66","uuid":"6149ba37-4365-5169-ad4f-c091e66d0f38","verification_tier":"community","version":""},"query_key":"inbin","schema_version":1,"status":"match"}