{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-01","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to B2B marketing automation in Inflection.io. Create and preview email assets, journeys and segments, or analyze campaign performance. Use specialist agents and your tenant's data within existing workspace permissions.","did":"2179565b-6e40-4c1c-a697-76808f50c900","documentation_url":"https://docs.inflection.io/agents/inflection-agents","editorial_description":{"extended_description":"Inspect schemas, field distributions and contact activity to work with the data actually available in your account. Tools can search, create, update or delete platform assets and retrieve aggregate reports or detailed performance breakdowns. An Inflection account is required.","schema_version":1,"summary":"Connects Claude to B2B marketing automation in Inflection.io.\nCreate and preview email assets, journeys and segments, or analyze campaign performance.\nUse specialist agents and your tenant's data within existing workspace permissions."},"homepage_url":"","icon":"https://res.cloudinary.com/apideck/image/upload/v1663909602/icons/inflection-io.jpg","id":"2179565b-6e40-4c1c-a697-76808f50c900","installs":0,"last_scanned":"","license":"","long_description":"Inspect schemas, field distributions and contact activity to work with the data actually available in your account. Tools can search, create, update or delete platform assets and retrieve aggregate reports or detailed performance breakdowns. An Inflection account is required.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete Directory inventory explicitly includes delete_platform_asset alongside create and update operations.","reasoning":"Deletion of campaign, journey or segment assets is destructive workspace modification.","risk_type":"data_deletion","severity":"high","title":"Can delete marketing-platform assets","triggering_tools_or_skills":["delete_platform_asset"]},{"evidence":"The inventory contains ask_agent and the description says it dispatches specialist agents for audiences, segments, emails, journeys and tokens.","reasoning":"The sub-agent action boundary is not represented by the flat tool inventory and needs runtime schema verification.","risk_type":"generic_gateway","severity":"low","title":"Can dispatch specialist agents","triggering_tools_or_skills":["ask_agent"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required and the description says access follows workspace permissions, but exact OAuth scopes and specialist-agent boundaries are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2179565b-6e40-4c1c-a697-76808f50c900.json","what_it_proves":"Candidate PR #125 record identity (name \"Inflection.io\", publisher, type web_connector) and 18 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2179565b-6e40-4c1c-a697-76808f50c900: complete tool_names inventory (18 tools), remote streamable-http endpoint https://mcp.inflection.io/, auth_posture auth_required, directory tier community"}],"primary_reason":"Inflection can delete persistent platform assets and invoke specialist agents with partially hidden behavior.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:2179565b-6e40-4c1c-a697-76808f50c900","reviewed_at":"2026-10-10","reviewer_notes":"Identity is coherent and delete_platform_asset establishes High without relying on agent ambiguity. Verify whether any build-agent can activate or send a campaign.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"false"},"tools_or_skills_reviewed":18,"tools_or_skills_total":18},"name":"Inflection.io","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2179565b-6e40-4c1c-a697-76808f50c900&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.inflection.io/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Inflection.io","publisher_url":"https://www.inflection.io/","remote_url":"https://mcp.inflection.io/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deletion of campaign, journey or segment assets is destructive workspace modification.","evidence":"Can delete marketing-platform assets: The complete Directory inventory explicitly includes delete_platform_asset alongside create and update operations.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Can delete marketing-platform assets","triggering_tools":["delete_platform_asset"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The sub-agent action boundary is not represented by the flat tool inventory and needs runtime schema verification.","evidence":"Can dispatch specialist agents: The inventory contains ask_agent and the description says it dispatches specialist agents for audiences, segments, emails, journeys and tokens.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"low","title":"Can dispatch specialist agents","triggering_tools":["ask_agent"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@inflection.io","tags":["deletes_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"ask_agent"},{"description":"","name":"create_platform_asset"},{"description":"","name":"data_dictionary"},{"description":"","name":"delete_platform_asset","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion of campaign, journey or segment assets is destructive workspace modification."}},{"description":"","name":"get_analytics_breakdown"},{"description":"","name":"get_analytics_report"},{"description":"","name":"get_artifacts"},{"description":"","name":"get_contact_info"},{"description":"","name":"get_knowledge"},{"description":"","name":"get_platform_asset"},{"description":"","name":"get_platform_context"},{"description":"","name":"get_schema"},{"description":"","name":"list_artifacts"},{"description":"","name":"list_platform_assets"},{"description":"","name":"modify_skill"},{"description":"","name":"preview_platform_asset"},{"description":"","name":"query_skills"},{"description":"","name":"update_platform_asset"}],"tools_count":18,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2179565b-6e40-4c1c-a697-76808f50c900","uuid":"bf372ced-7511-5b13-b945-7fe7f353b095","verification_tier":"community","version":""},"query_key":"inflection io inflection io","schema_version":1,"status":"match"}