{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Search MAI notes, meetings and tasks in Claude. Retrieve transcripts or focus information and add notes or update tasks. The connector uses your account and requires MAI Premium.","did":"09dcbd98-b634-4e7d-8039-8f2246f7ba7c","documentation_url":"https://maicontext.com/mcp-server/docs","editorial_description":{"extended_description":"Keyword and semantic search support finding past decisions and preparing for meetings. Entries can be assigned to projects and task completion can be changed. No deletion tool is listed, but existing task and focus state can be updated. Sign-in uses your MAI email and a one-time code.","schema_version":1,"summary":"Search MAI notes, meetings and tasks in Claude.\nRetrieve transcripts or focus information and add notes or update tasks.\nThe connector uses your account and requires MAI Premium."},"homepage_url":"","icon":"","id":"09dcbd98-b634-4e7d-8039-8f2246f7ba7c","installs":0,"last_scanned":"","license":"","long_description":"Keyword and semantic search support finding past decisions and preparing for meetings. Entries can be assigned to projects and task completion can be changed. No deletion tool is listed, but existing task and focus state can be updated. Sign-in uses your MAI email and a one-time code.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The complete inventory declares additive note writes, task creation and updates, project assignment, and current-focus changes.","reasoning":"These actions persistently alter the user's personal knowledge and task system.","risk_type":"data_modification","severity":"medium","title":"Notes, tasks, projects, and focus state can change","triggering_tools_or_skills":["append_to_entry","assign_entry_to_project","create_task","create_text_entry","generate_actions_for_entry","set_current_focus","toggle_task","update_task"]},{"evidence":"The connector returns voice notes, meeting transcripts, tasks, themes, projects, and daily focus material.","reasoning":"Personal working-memory content can be highly sensitive.","risk_type":"private_data_read","severity":"low","title":"Meetings and personal notes are readable","triggering_tools_or_skills":["get_entry","get_meeting_transcript","search_entries","get_focus_brief","get_user_themes"]},{"evidence":"Tools retrieve free-form text captured from users and meeting participants.","reasoning":"Stored text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Captured notes and transcripts enter context","triggering_tools_or_skills":["get_meeting_transcript","get_entry","search_entries"]}],"assessment_status":"provisional","auth_and_scopes":"Email one-time-code authentication to the user's MAI Premium account; all tools are account-scoped, with exact token lifetime undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/09dcbd98-b634-4e7d-8039-8f2246f7ba7c.json","what_it_proves":"Candidate PR #125 record identity (name \"MAI Second Brain\", publisher, type web_connector) and 18 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/09dcbd98-b634-4e7d-8039-8f2246f7ba7c: complete tool_names inventory (18 tools), remote streamable-http endpoint https://maicontext.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Eight explicit tools add or update persistent memory and task state, while no delete or sending action is exposed.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:09dcbd98-b634-4e7d-8039-8f2246f7ba7c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 18 names. Official docs lookup was uninformative; runtime checks should confirm additive-only guarantees, update boundaries, one-time-code session lifetime, and generated-action confirmation.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":18,"tools_or_skills_total":18},"name":"MAI Second Brain","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=09dcbd98-b634-4e7d-8039-8f2246f7ba7c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://maicontext.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Inteli Seko LTD","publisher_url":"https://maicontext.com/","remote_url":"https://maicontext.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system.","evidence":"Notes, tasks, projects, and focus state can change: The complete inventory declares additive note writes, task creation and updates, project assignment, and current-focus changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Notes, tasks, projects, and focus state can change","triggering_tools":["append_to_entry","assign_entry_to_project","create_task","create_text_entry","generate_actions_for_entry","set_current_focus","toggle_task","update_task"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Personal working-memory content can be highly sensitive.","evidence":"Meetings and personal notes are readable: The connector returns voice notes, meeting transcripts, tasks, themes, projects, and daily focus material.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Meetings and personal notes are readable","triggering_tools":["get_entry","get_meeting_transcript","search_entries","get_focus_brief","get_user_themes"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"ivo@maicontext.com","tags":["accesses_calendar","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"append_to_entry","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}},{"description":"","name":"assign_entry_to_project","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}},{"description":"","name":"create_task","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}},{"description":"","name":"create_text_entry","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}},{"description":"","name":"generate_actions_for_entry","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}},{"description":"","name":"get_current_focus"},{"description":"","name":"get_entry"},{"description":"","name":"get_focus_brief"},{"description":"","name":"get_meeting_transcript"},{"description":"","name":"get_user_themes"},{"description":"","name":"list_meetings"},{"description":"","name":"list_projects"},{"description":"","name":"list_recent_entries"},{"description":"","name":"list_tasks"},{"description":"","name":"search_entries"},{"description":"","name":"set_current_focus","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}},{"description":"","name":"toggle_task","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}},{"description":"","name":"update_task","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persistently alter the user's personal knowledge and task system."}}],"tools_count":18,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/09dcbd98-b634-4e7d-8039-8f2246f7ba7c","uuid":"da1812c5-9417-53a9-8df8-192c3dc7c73c","verification_tier":"community","version":""},"query_key":"inteli seko ltd mai second brain","schema_version":1,"status":"match"}