{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Operate status pages and uptime monitoring in InBrief. Publish incident updates, manage maintenance windows, and configure monitors. Access is limited to approved pages and tools, with your role and plan restrictions.","did":"e64198da-f4e3-4054-b84b-e02a5c1bc371","documentation_url":"https://inbrief.sh/docs/developers/mcp","editorial_description":{"extended_description":"Review subscribers, notification templates, webhooks, branding, or postmortems. Sensitive billing, team, key, domain, credential, and page/account-deletion changes return review links only; you must open InBrief, verify your identity, and approve them there.","schema_version":1,"summary":"Operate status pages and uptime monitoring in InBrief.\nPublish incident updates, manage maintenance windows, and configure monitors.\nAccess is limited to approved pages and tools, with your role and plan restrictions."},"homepage_url":"","icon":"","id":"e64198da-f4e3-4054-b84b-e02a5c1bc371","installs":0,"last_scanned":"","license":"","long_description":"Review subscribers, notification templates, webhooks, branding, or postmortems. Sensitive billing, team, key, domain, credential, and page/account-deletion changes return review links only; you must open InBrief, verify your identity, and approve them there.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These actions communicate externally to status subscribers/integrations.","reasoning":"They act as the service owner.","risk_type":"messaging_as_user","severity":"high","title":"Incidents, postmortems, tests and notifications can be published/sent","triggering_tools_or_skills":["publish_incident","publish_postmortem","send_test_email","send_webhook_test","append_incident_update"]},{"evidence":"Explicit destructive tools remove production monitoring/status resources.","reasoning":"This can disrupt incident operations.","risk_type":"data_deletion","severity":"high","title":"Incidents, monitors, rules and webhooks can be deleted","triggering_tools_or_skills":["delete_incident","delete_monitor","delete_internal_rule","delete_webhook"]},{"evidence":"These are sensitive security/admin actions.","reasoning":"Compromise can affect notifications and access.","risk_type":"credential_admin","severity":"high","title":"API keys, heartbeat credentials, team roles and email/Slack credentials can be managed","triggering_tools_or_skills":["create_api_key","revoke_api_key","rotate_heartbeat_credential","change_team_member_role","configure_email_credentials","manage_slack_credentials"]},{"evidence":"They open review/checkout handoffs rather than silently charging.","reasoning":"They are still financially consequential user-directed flows.","risk_type":"financial_transaction","severity":"high","title":"Subscription and WhatsApp-credit purchase/change flows can be initiated","triggering_tools_or_skills":["open_subscription_checkout","open_whatsapp_credit_purchase","request_subscription_change"]},{"evidence":"These tools change live uptime/status infrastructure.","reasoning":"Misconfiguration affects public service status.","risk_type":"deployment_infrastructure","severity":"high","title":"Monitors, maintenance and webhooks can be configured","triggering_tools_or_skills":["create_monitor","schedule_maintenance","create_webhook"]},{"evidence":"External/system-authored content is returned.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Incident/webhook data enters model context","triggering_tools_or_skills":["get_incident","get_webhook_delivery"]},{"evidence":"The connector runs at https://inbrief.sh/api/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"InBrief is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth connection permissions and existing role/plan gate each status page/tool; especially sensitive account actions use a separate review-link confirmation.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e64198da-f4e3-4054-b84b-e02a5c1bc371.json","what_it_proves":"Candidate PR #125 record identity (name \"InBrief\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e64198da-f4e3-4054-b84b-e02a5c1bc371: complete tool_names inventory (138 tools), remote streamable-http endpoint https://inbrief.sh/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"InBrief publishes incidents, deletes monitors, administers credentials/team access and initiates billing flows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e64198da-f4e3-4054-b84b-e02a5c1bc371","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 138 tools; review-link confirmations are safeguards.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":138,"tools_or_skills_total":138},"name":"InBrief","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e64198da-f4e3-4054-b84b-e02a5c1bc371&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://inbrief.sh/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"InBrief","publisher_url":"https://inbrief.sh/","remote_url":"https://inbrief.sh/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the service owner.","evidence":"Incidents, postmortems, tests and notifications can be published/sent: These actions communicate externally to status subscribers/integrations.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Incidents, postmortems, tests and notifications can be published/sent","triggering_tools":["publish_incident","publish_postmortem","send_test_email","send_webhook_test","append_incident_update"]},{"description":"This connector can permanently remove data or resources. Review findings: This can disrupt incident operations.","evidence":"Incidents, monitors, rules and webhooks can be deleted: Explicit destructive tools remove production monitoring/status resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Incidents, monitors, rules and webhooks can be deleted","triggering_tools":["delete_incident","delete_monitor","delete_internal_rule","delete_webhook"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Compromise can affect notifications and access.","evidence":"API keys, heartbeat credentials, team roles and email/Slack credentials can be managed: These are sensitive security/admin actions.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"API keys, heartbeat credentials, team roles and email/Slack credentials can be managed","triggering_tools":["create_api_key","revoke_api_key","rotate_heartbeat_credential","change_team_member_role","configure_email_credentials","manage_slack_credentials"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are still financially consequential user-directed flows.","evidence":"Subscription and WhatsApp-credit purchase/change flows can be initiated: They open review/checkout handoffs rather than silently charging.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Subscription and WhatsApp-credit purchase/change flows can be initiated","triggering_tools":["open_subscription_checkout","open_whatsapp_credit_purchase","request_subscription_change"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration affects public service status.","evidence":"Monitors, maintenance and webhooks can be configured: These tools change live uptime/status infrastructure.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Monitors, maintenance and webhooks can be configured","triggering_tools":["create_monitor","schedule_maintenance","create_webhook"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@inbrief.sh","tags":["accesses_calendar","accesses_messaging","code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"add_whatsapp_receiver"},{"description":"","name":"append_incident_update","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the service owner."}},{"description":"","name":"cancel_maintenance"},{"description":"","name":"cancel_whatsapp_auto_refill"},{"description":"","name":"change_team_member_role","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Compromise can affect notifications and access."}},{"description":"","name":"complete_maintenance"},{"description":"","name":"configure_email_credentials","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Compromise can affect notifications and access."}},{"description":"","name":"configure_monitor_request"},{"description":"","name":"connect_custom_domain"},{"description":"","name":"connect_whatsapp_sender"},{"description":"","name":"create_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Compromise can affect notifications and access."}},{"description":"","name":"create_embed_installation"},{"description":"","name":"create_incident_template"},{"description":"","name":"create_internal_rule"},{"description":"","name":"create_monitor","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration affects public service status."}},{"description":"","name":"create_status_page"},{"description":"","name":"create_subscriber_endpoint"},{"description":"","name":"create_webhook","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration affects public service status."}},{"description":"","name":"delete_incident","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This can disrupt incident operations."}},{"description":"","name":"delete_incident_template"},{"description":"","name":"delete_internal_rule","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This can disrupt incident operations."}},{"description":"","name":"delete_monitor","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This can disrupt incident operations."}},{"description":"","name":"delete_webhook","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This can disrupt incident operations."}},{"description":"","name":"disable_subscriber_endpoint"},{"description":"","name":"disconnect_custom_domain"},{"description":"","name":"disconnect_whatsapp_sender"},{"description":"","name":"enable_subscriber_endpoint"},{"description":"","name":"export_subscribers"},{"description":"","name":"get_account"},{"description":"","name":"get_billing_overview"},{"description":"","name":"get_branding"},{"description":"","name":"get_console_context"},{"description":"","name":"get_custom_domain"},{"description":"","name":"get_database_health_availability"},{"description":"","name":"get_email_settings"},{"description":"","name":"get_embed_installation"},{"description":"","name":"get_incident"},{"description":"","name":"get_incident_feed"},{"description":"","name":"get_internal_snapshot"},{"description":"","name":"get_language_settings"},{"description":"","name":"get_maintenance_calendar"},{"description":"","name":"get_monitor"},{"description":"","name":"get_monitor_options"},{"description":"","name":"get_notification_template"},{"description":"","name":"get_outage_settings"},{"description":"","name":"get_outage_snippets"},{"description":"","name":"get_postmortem"},{"description":"","name":"get_public_outage"},{"description":"","name":"get_public_page"},{"description":"","name":"get_public_postmortem"},{"description":"","name":"get_slack_settings"},{"description":"","name":"get_status_badge"},{"description":"","name":"get_status_history"},{"description":"","name":"get_status_summary"},{"description":"","name":"get_subscriber_export_status"},{"description":"","name":"get_webhook_delivery"},{"description":"","name":"get_whatsapp_sender"},{"description":"","name":"get_whatsapp_subscription"},{"description":"","name":"invite_team_member"},{"description":"","name":"issue_heartbeat_credential"},{"description":"","name":"keep_subscription_selection"},{"description":"","name":"list_api_keys"},{"description":"","name":"list_embed_installations"},{"description":"","name":"list_incident_templates"},{"description":"","name":"list_incidents"},{"description":"","name":"list_internal_endpoints"},{"description":"","name":"list_internal_rules"},{"description":"","name":"list_monitors"},{"description":"","name":"list_notification_templates"},{"description":"","name":"list_public_incidents"},{"description":"","name":"list_status_pages"},{"description":"","name":"list_subscriber_endpoints"},{"description":"","name":"list_subscribers"},{"description":"","name":"list_team_members"},{"description":"","name":"list_webhook_deliveries"},{"description":"","name":"list_webhooks"},{"description":"","name":"list_whatsapp_receivers"},{"description":"","name":"list_whatsapp_sender_numbers"},{"description":"","name":"manage_slack_credentials","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Compromise can affect notifications and access."}},{"description":"","name":"mute_internal_rule"},{"description":"","name":"open_billing_settings"},{"description":"","name":"open_status_subscription"},{"description":"","name":"open_subscription_checkout","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are still financially consequential user-directed flows."}},{"description":"","name":"open_whatsapp_credit_purchase","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are still financially consequential user-directed flows."}},{"description":"","name":"pause_monitor"},{"description":"","name":"preview_badge"},{"description":"","name":"preview_outage_page"},{"description":"","name":"preview_widget"},{"description":"","name":"publish_incident","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the service owner."}},{"description":"","name":"publish_internal_incident"},{"description":"","name":"publish_postmortem","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the service owner."}},{"description":"","name":"quote_subscription"},{"description":"","name":"redeliver_webhook"},{"description":"","name":"refresh_custom_domain"},{"description":"","name":"remove_team_member"},{"description":"","name":"remove_whatsapp_receiver"},{"description":"","name":"remove_whatsapp_subscription"},{"description":"","name":"reopen_incident"},{"description":"","name":"reorder_monitors"},{"description":"","name":"replace_subscriber_endpoint_credentials"},{"description":"","name":"request_account_deletion"},{"description":"","name":"request_status_page_deletion"},{"description":"","name":"request_subscription_change","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They are still financially consequential user-directed flows."}},{"description":"","name":"request_whatsapp_subscription"},{"description":"","name":"resolve_incident"},{"description":"","name":"resume_monitor"},{"description":"","name":"resume_subscription"},{"description":"","name":"revoke_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Compromise can affect notifications and access."}},{"description":"","name":"revoke_embed_installation"},{"description":"","name":"revoke_heartbeat_credential"},{"description":"","name":"revoke_subscriber_endpoint"},{"description":"","name":"rotate_heartbeat_credential","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Compromise can affect notifications and access."}},{"description":"","name":"save_postmortem_draft"},{"description":"","name":"schedule_maintenance","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Misconfiguration affects public service status."}},{"description":"","name":"send_subscriber_endpoint_test"},{"description":"","name":"send_test_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the service owner."}},{"description":"","name":"send_webhook_test","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They act as the service owner."}},{"description":"","name":"set_whatsapp_receiver_scope"},{"description":"","name":"set_whatsapp_sender_number"},{"description":"","name":"unmute_internal_rule"},{"description":"","name":"unsubscribe_status_subscription"},{"description":"","name":"update_branding"},{"description":"","name":"update_email_settings"},{"description":"","name":"update_embed_installation"},{"description":"","name":"update_incident"},{"description":"","name":"update_incident_template"},{"description":"","name":"update_internal_rule"},{"description":"","name":"update_language_settings"},{"description":"","name":"update_maintenance"},{"description":"","name":"update_monitor"},{"description":"","name":"update_notification_template"},{"description":"","name":"update_outage_message"},{"description":"","name":"update_status_subscription_preferences"},{"description":"","name":"update_subscriber_endpoint"},{"description":"","name":"update_webhook"},{"description":"","name":"verify_subscriber_endpoint"},{"description":"","name":"verify_whatsapp_receiver"},{"description":"","name":"verify_whatsapp_subscription"}],"tools_count":138,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e64198da-f4e3-4054-b84b-e02a5c1bc371","uuid":"69a05ae2-da81-554f-baa3-357a4b7124d0","verification_tier":"community","version":""},"query_key":"inbrief","schema_version":1,"status":"match"}