{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"high","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"bdb07dca29095d0e307777526e7e951315c7c098f253d4658b1ec41c1b3e72ad","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"Low-confidence entry; resolved by Inrō's MCP help article. send_message sends text/image/video/audio/post messages to contacts, campaigns can create and send DM campaigns, and medias/stories can create, schedule, publish or delete Instagram posts, reels and stories. Sending as the brand and external publication/deletion are High, so the overall and the sends_messages_as_you card are supported. Cards mislabel: 'Executes Code' (resource wrappers are not code execution), 'code_deployment' for automation scenarios (Medium automation config, not deployment), and 'filesystem_access' for the remote Inrō media library (no local filesystem).","review_key":"claudesec:aafd44a5-5404-463c-adc7-e04fd4cb6425","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server","https://help.inro.social/en/collections/19672942-mcp-api-developer"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Inrō manages Instagram content, conversations, and automation. Schedule or publish posts, reels, and stories, and automate comments or direct messages. Maintain contacts, launch DM campaigns, and configure AI-agent knowledge and actions.","did":"aafd44a5-5404-463c-adc7-e04fd4cb6425","documentation_url":"https://help.inro.social/","editorial_description":{"extended_description":"Organize contacts with folders, tags, and custom properties, inspect execution analytics, and build conversion flows using links, bookings, surveys, or payment integrations.","schema_version":1,"summary":"Inrō manages Instagram content, conversations, and automation.\nSchedule or publish posts, reels, and stories, and automate comments or direct messages.\nMaintain contacts, launch DM campaigns, and configure AI-agent knowledge and actions."},"homepage_url":"","icon":"","id":"aafd44a5-5404-463c-adc7-e04fd4cb6425","installs":0,"last_scanned":"","license":"","long_description":"Organize contacts with folders, tags, and custom properties, inspect execution analytics, and build conversion flows using links, bookings, surveys, or payment integrations.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says the service publishes posts/reels/stories and automates comments/DMs.","reasoning":"It communicates publicly/privately as the connected brand.","risk_type":"messaging_as_user","severity":"high","title":"Sends Instagram messages and runs publishing/DM actions","triggering_tools_or_skills":["send_message","agent","campaigns","scenarios"]},{"evidence":"These tools hide runtime operations behind resource-level gateways.","reasoning":"The complete destructive/publishing surface is not enumerated.","risk_type":"generic_gateway","severity":"high","title":"Uses broad action wrappers for campaigns/scenarios/contacts/media","triggering_tools_or_skills":["agent","campaigns","scenarios","contacts"]},{"evidence":"The platform controls production social automation.","reasoning":"It can autonomously message audiences.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates/runs persistent Instagram automations","triggering_tools_or_skills":["scenarios","campaigns","agent"]},{"evidence":"The wrappers access/persist marketing assets.","reasoning":"They materially affect campaign content.","risk_type":"file_write","severity":"medium","title":"Manages campaign media files","triggering_tools_or_skills":["media_files","medias"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes Instagram accounts, contacts, campaigns, scenarios and media.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/aafd44a5-5404-463c-adc7-e04fd4cb6425.json","what_it_proves":"Candidate PR #125 record identity (name \"Inrō\", publisher, type web_connector) and 18 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/aafd44a5-5404-463c-adc7-e04fd4cb6425: complete tool_names inventory (18 tools), remote streamable-http endpoint https://api.inro.social/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"Inrō can publish/message through Instagram and exposes opaque automation gateways.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:aafd44a5-5404-463c-adc7-e04fd4cb6425","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 18 wrappers; exhaustive action schemas are required.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":18,"tools_or_skills_total":18},"name":"Inrō","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=aafd44a5-5404-463c-adc7-e04fd4cb6425&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.inro.social/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Inrō","publisher_url":"https://www.inro.social/","remote_url":"https://api.inro.social/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"Sends direct messages and broadcast campaigns as the connected brand, and publishes posts, reels or stories.","evidence":"Actions: send_message. https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server — send_message: sends text, image, video, audio, media-post messages\nActions: campaigns. https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server — campaigns: create, update, send\nActions: medias, media_files. https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server — medias/stories: create, schedule, publish, delete","risk_type":"sends_messages_as_you","severity":"high","title":"Sends Instagram messages and publishes content"},{"description":"Deletes published Instagram posts, reels or stories through the connected brand account.","evidence":"Actions: medias, media_files. https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server — medias/stories: create, schedule, publish, delete","risk_type":"deletes_data","severity":"high","title":"Deletes Instagram posts and stories"},{"description":"Retrieves customer contacts and their properties from your connected account.","evidence":"Actions: contacts, contact_properties, folders, batch_tasks. https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server — contacts: bulk-update up to 1,000","risk_type":"reads_private_data","severity":"medium","title":"Reads private customer contact data"},{"description":"Updates contact properties and folders, including bulk updates, and creates, changes or triggers automation scenarios and AI agent settings.","evidence":"Actions: contacts, contact_properties, folders, batch_tasks. https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server — contacts: bulk-update up to 1,000\nActions: scenarios, agent, conversion_links. https://help.inro.social/en/articles/14024801-connect-your-ai-agent-to-inro-with-the-mcp-server — scenarios: list, view, create, update, trigger","risk_type":"modifies_data","severity":"medium","title":"Changes contacts and automation settings"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.inro.social","tags":["sends_messages_as_you","deletes_data","reads_private_data","modifies_data"],"tools":[{"description":"","name":"agent","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: It can autonomously message audiences."}},{"description":"","name":"batch_tasks"},{"description":"","name":"campaign_folders"},{"description":"","name":"campaigns","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: It can autonomously message audiences."}},{"description":"","name":"contact_properties"},{"description":"","name":"contacts","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete destructive/publishing surface is not enumerated."}},{"description":"","name":"conversion_links"},{"description":"","name":"folders"},{"description":"","name":"get_action_types"},{"description":"","name":"get_organization_info"},{"description":"","name":"get_trigger_types"},{"description":"","name":"media_files","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially affect campaign content."}},{"description":"","name":"medias","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially affect campaign content."}},{"description":"","name":"scenario_folders"},{"description":"","name":"scenarios","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: It can autonomously message audiences."}},{"description":"","name":"search_product_knowledge"},{"description":"","name":"search_templates"},{"description":"","name":"send_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates publicly/privately as the connected brand."}}],"tools_count":18,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/aafd44a5-5404-463c-adc7-e04fd4cb6425","uuid":"afb635cc-cb45-5de8-b59e-84586751a1dc","verification_tier":"community","version":""},"query_key":"inro inro","schema_version":1,"status":"match"}