{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Joan AI manages workplace bookings, visitors, and shared resources. Reserve desks, rooms, or assets and inspect schedules or availability. Authenticated tools also manage invitations, check-ins, announcements, and visitor badges.","did":"91ecd2c0-fa17-404a-ba6a-5069b90aec17","documentation_url":"https://getjoan.com/joan-ai-agent/","editorial_description":{"extended_description":"Tools create, update, or delete reservations, assets, amenities, and invitations and retrieve building, floor, user, or department context. Badge printing is a physical output action.","schema_version":1,"summary":"Joan AI manages workplace bookings, visitors, and shared resources.\nReserve desks, rooms, or assets and inspect schedules or availability.\nAuthenticated tools also manage invitations, check-ins, announcements, and visitor badges."},"homepage_url":"","icon":"","id":"91ecd2c0-fa17-404a-ba6a-5069b90aec17","installs":0,"last_scanned":"","license":"","long_description":"Tools create, update, or delete reservations, assets, amenities, and invitations and retrieve building, floor, user, or department context. Badge printing is a physical output action.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools remove durable workplace resources/bookings.","reasoning":"They can disrupt visitors, employees and workplace operations.","risk_type":"data_deletion","severity":"high","title":"Deletes reservations, visitor invitations, announcements and workplace assets/types","triggering_tools_or_skills":["delete_desk_reservation","delete_room_reservation","delete_visitor_invitation","delete_announcement","delete_asset","delete_asset_type"]},{"evidence":"These tools communicate workplace notices/invitations as the organization.","reasoning":"They can notify employees or external visitors.","risk_type":"messaging_as_user","severity":"high","title":"Creates announcements and visitor invitations","triggering_tools_or_skills":["create_announcement","create_visitor_invitation"]},{"evidence":"These tools affect physical workplace access/device operations.","reasoning":"They cause real-world security/physical outputs.","risk_type":"deployment_infrastructure","severity":"high","title":"Checks in/out visitors and prints physical badges","triggering_tools_or_skills":["checkout_visitor","print_visitor_badge","inspect_devices"]},{"evidence":"These actions administer workplace access/resource policy structures.","reasoning":"They are privileged operational administration.","risk_type":"credential_admin","severity":"high","title":"Creates/deletes amenity and asset types and manages visitor invitations","triggering_tools_or_skills":["create_asset_type","delete_asset_type","create_visitor_invitation"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; workplace reservations, announcements, visitor, asset and device access follows Joan roles.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/91ecd2c0-fa17-404a-ba6a-5069b90aec17.json","what_it_proves":"Candidate PR #125 record identity (name \"Joan AI (Joan Workplace management Agent)\", publisher, type web_connector) and 55 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/91ecd2c0-fa17-404a-ba6a-5069b90aec17: complete tool_names inventory (55 tools), remote streamable-http endpoint https://mcp.getjoan.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Joan can delete workplace bookings/resources, send invitations/announcements and control physical visitor workflows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:91ecd2c0-fa17-404a-ba6a-5069b90aec17","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 55 tools. Desk/room check-in and badge printing have real-world effects even with existing reservations/roles.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":55,"tools_or_skills_total":55},"name":"Joan AI (Joan Workplace management Agent)","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=91ecd2c0-fa17-404a-ba6a-5069b90aec17&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://getjoan.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Joan by Visionect","publisher_url":"https://getjoan.com/","remote_url":"https://mcp.getjoan.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can disrupt visitors, employees and workplace operations.","evidence":"Deletes reservations, visitor invitations, announcements and workplace assets/types: These tools remove durable workplace resources/bookings.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes reservations, visitor invitations, announcements and workplace assets/types","triggering_tools":["delete_desk_reservation","delete_room_reservation","delete_visitor_invitation","delete_announcement","delete_asset","delete_asset_type"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They can notify employees or external visitors.","evidence":"Creates announcements and visitor invitations: These tools communicate workplace notices/invitations as the organization.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Creates announcements and visitor invitations","triggering_tools":["create_announcement","create_visitor_invitation"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They cause real-world security/physical outputs.","evidence":"Checks in/out visitors and prints physical badges: These tools affect physical workplace access/device operations.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Checks in/out visitors and prints physical badges","triggering_tools":["checkout_visitor","print_visitor_badge","inspect_devices"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged operational administration.","evidence":"Creates/deletes amenity and asset types and manages visitor invitations: These actions administer workplace access/resource policy structures.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Creates/deletes amenity and asset types and manages visitor invitations","triggering_tools":["create_asset_type","delete_asset_type","create_visitor_invitation"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@getjoan.com","tags":["accesses_calendar","code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"checkin_desk_reservation"},{"description":"","name":"checkin_room_reservation"},{"description":"","name":"checkout_desk_reservation"},{"description":"","name":"checkout_visitor","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They cause real-world security/physical outputs."}},{"description":"","name":"create_amenity"},{"description":"","name":"create_announcement","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They can notify employees or external visitors."}},{"description":"","name":"create_asset"},{"description":"","name":"create_asset_reservation"},{"description":"","name":"create_asset_type","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged operational administration."}},{"description":"","name":"create_desk_reservation"},{"description":"","name":"create_room_reservation"},{"description":"","name":"create_visitor_invitation","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged operational administration."}},{"description":"","name":"delete_amenity"},{"description":"","name":"delete_announcement","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt visitors, employees and workplace operations."}},{"description":"","name":"delete_asset","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt visitors, employees and workplace operations."}},{"description":"","name":"delete_asset_type","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged operational administration."}},{"description":"","name":"delete_desk_reservation","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt visitors, employees and workplace operations."}},{"description":"","name":"delete_room_reservation","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt visitors, employees and workplace operations."}},{"description":"","name":"delete_visitor_invitation","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can disrupt visitors, employees and workplace operations."}},{"description":"","name":"get_amenities"},{"description":"","name":"get_announcement"},{"description":"","name":"get_announcements"},{"description":"","name":"get_asset_availability"},{"description":"","name":"get_asset_reservations"},{"description":"","name":"get_asset_type"},{"description":"","name":"get_asset_types"},{"description":"","name":"get_assets"},{"description":"","name":"get_buildings"},{"description":"","name":"get_company_settings"},{"description":"","name":"get_current_time"},{"description":"","name":"get_departments"},{"description":"","name":"get_desk_reservations"},{"description":"","name":"get_desk_slots"},{"description":"","name":"get_desks"},{"description":"","name":"get_distance"},{"description":"","name":"get_floors"},{"description":"","name":"get_me"},{"description":"","name":"get_room_reservations"},{"description":"","name":"get_room_schedule"},{"description":"","name":"get_rooms"},{"description":"","name":"get_user"},{"description":"","name":"get_users"},{"description":"","name":"get_visitor_invitations"},{"description":"","name":"get_visitor_visits"},{"description":"","name":"inspect_devices","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They cause real-world security/physical outputs."}},{"description":"","name":"print_visitor_badge","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They cause real-world security/physical outputs."}},{"description":"","name":"search_users"},{"description":"","name":"update_amenity"},{"description":"","name":"update_announcement"},{"description":"","name":"update_asset"},{"description":"","name":"update_asset_type"},{"description":"","name":"update_desk"},{"description":"","name":"update_desk_reservation"},{"description":"","name":"update_room_reservation"},{"description":"","name":"update_visitor_invitation"}],"tools_count":55,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/91ecd2c0-fa17-404a-ba6a-5069b90aec17","uuid":"1bfccebf-afd4-544b-b16d-63aae191e658","verification_tier":"community","version":""},"query_key":"joan by visionect joan ai joan workplace management agent","schema_version":1,"status":"match"}