{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Connects Claude to your photo and video library through Jockey by TwelveLabs. Search for people, places and moments, or ask questions about your media. Results include source citations and media playback within the rendered response.","did":"1eba6b69-bd78-4e06-b593-7d4663d5a870","documentation_url":"https://docs.twelvelabs.io/agents/advanced/model-context-protocol","editorial_description":{"extended_description":"Tools can create knowledge stores, add media, request upload links and browse stored items. Jockey uses TwelveLabs' Marengo and Pegasus models for media understanding and its JIL format to render answers.","schema_version":1,"summary":"Connects Claude to your photo and video library through Jockey by TwelveLabs.\nSearch for people, places and moments, or ask questions about your media.\nResults include source citations and media playback within the rendered response."},"homepage_url":"","icon":"","id":"1eba6b69-bd78-4e06-b593-7d4663d5a870","installs":0,"last_scanned":"","license":"","long_description":"Tools can create knowledge stores, add media, request upload links and browse stored items. Jockey uses TwelveLabs' Marengo and Pegasus models for media understanding and its JIL format to render answers.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official docs say stores are persistent and that public URL media up to 4 GB is added and asynchronously indexed.","reasoning":"These actions persist user media and derived embeddings/ontology.","risk_type":"data_modification","severity":"medium","title":"Creates knowledge stores and ingests media","triggering_tools_or_skills":["jockey_create_knowledge_store","jockey_add_media","jockey_request_upload_link"]},{"evidence":"Official docs accept publicly accessible video and image URLs for ingestion.","reasoning":"The hosted service performs caller-directed network retrieval.","risk_type":"arbitrary_network_access","severity":"low","title":"Fetches caller-selected public media URLs","triggering_tools_or_skills":["jockey_add_media"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth limits access to the signed-in TwelveLabs account's knowledge stores; quota/usage charges and collaborator scopes are not documented on the reviewed page.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1eba6b69-bd78-4e06-b593-7d4663d5a870.json","what_it_proves":"Candidate PR #125 record identity (name \"Jockey by TwelveLabs\", publisher, type interactive_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1eba6b69-bd78-4e06-b593-7d4663d5a870: complete tool_names inventory (8 tools), remote streamable-http endpoint https://mcp.twelvelabs.io/jockey/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:19:34Z","url_or_path":"https://docs.twelvelabs.io/agents/advanced/model-context-protocol","what_it_proves":"Official docs enumerate persistent knowledge-store creation, public-URL media ingestion, search/query, OAuth and widget rendering."}],"primary_reason":"Jockey creates persistent video knowledge stores and fetches/indexes caller-selected media.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:1eba6b69-bd78-4e06-b593-7d4663d5a870","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 8 names against official docs. Verify account quotas/paid indexing, URL restrictions and whether render_response stores multi-turn session content.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Jockey by TwelveLabs","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1eba6b69-bd78-4e06-b593-7d4663d5a870&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.twelvelabs.io/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"TwelveLabs, Inc.","publisher_url":"https://www.twelvelabs.io/","remote_url":"https://mcp.twelvelabs.io/jockey/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist user media and derived embeddings/ontology.","evidence":"Creates knowledge stores and ingests media: Official docs say stores are persistent and that public URL media up to 4 GB is added and asynchronously indexed.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates knowledge stores and ingests media","triggering_tools":["jockey_create_knowledge_store","jockey_add_media","jockey_request_upload_link"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: The hosted service performs caller-directed network retrieval.","evidence":"Fetches caller-selected public media URLs: Official docs accept publicly accessible video and image URLs for ingestion.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Fetches caller-selected public media URLs","triggering_tools":["jockey_add_media"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@twelvelabs.io","tags":["forwards_data_to_third_party","interactive_connector","modifies_data","network_access","oauth_required"],"tools":[{"description":"","name":"jockey_add_media","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist user media and derived embeddings/ontology."}},{"description":"","name":"jockey_create_knowledge_store","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist user media and derived embeddings/ontology."}},{"description":"","name":"jockey_list_knowledge_store_items"},{"description":"","name":"jockey_list_knowledge_stores"},{"description":"","name":"jockey_query"},{"description":"","name":"jockey_render_response"},{"description":"","name":"jockey_request_upload_link","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist user media and derived embeddings/ontology."}},{"description":"","name":"jockey_search"}],"tools_count":8,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/1eba6b69-bd78-4e06-b593-7d4663d5a870","uuid":"95acf60e-6b81-511a-92d4-1f26b95e1299","verification_tier":"community","version":""},"query_key":"jockey by twelvelabs","schema_version":1,"status":"match"}