{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to KANNA on-site operational information. Search records, chats, photos, documents and reports for project context. Create or update supported client, property, workforce and project records.","did":"ba9f7bdf-92bd-45e9-825d-6d8ca460fd6e","documentation_url":"https://kanna4u.zendesk.com/","editorial_description":{"extended_description":"Tools maintain blackboards, work reports, project costs or progress and financial records. They can also create or update users and send messages, while reference lookups expose categories, templates and location metadata.","schema_version":1,"summary":"Connects Claude to KANNA on-site operational information.\nSearch records, chats, photos, documents and reports for project context.\nCreate or update supported client, property, workforce and project records."},"homepage_url":"","icon":"https://www.kanna4u.com/favicon.ico","id":"ba9f7bdf-92bd-45e9-825d-6d8ca460fd6e","installs":0,"last_scanned":"","license":"","long_description":"Tools maintain blackboards, work reports, project costs or progress and financial records. They can also create or update users and send messages, while reference lookups expose categories, templates and location metadata.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory includes messages_create and chats_create; official KANNA help documents chat as a participant communication feature with media and mentions.","reasoning":"Creating a chat message communicates externally to project participants as the connected user.","risk_type":"messaging_as_user","severity":"high","title":"Creates chat messages","triggering_tools_or_skills":["messages_create","chats_create"]},{"evidence":"The stored tools create/update clients, properties, users, documents, financial records, reports, blackboards and project status/cost data.","reasoning":"These are broad meaningful writes across the KANNA workspace.","risk_type":"data_modification","severity":"medium","title":"Creates and updates construction records","triggering_tools_or_skills":["blackboards_create","clients_create","cms_documents_controller_update","financial_record_create","properties_update","users_create","work_reports_create"]},{"evidence":"candidate_tools_truncated=true for the 84 stored names.","reasoning":"Missing Directory tools prevent a complete view of deletion, permission and messaging actions and require regeneration.","risk_type":"evidence_gap","severity":"low","title":"Candidate tool inventory is truncated","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required. Official help describes company/project authorities, but MCP-specific role enforcement and scopes are not provided.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ba9f7bdf-92bd-45e9-825d-6d8ca460fd6e.json","what_it_proves":"Candidate PR #125 record identity (name \"KANNA\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ba9f7bdf-92bd-45e9-825d-6d8ca460fd6e: complete tool_names inventory (84 tools), remote streamable-http endpoint https://mcp.kanna4u.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:52:23Z","url_or_path":"https://kanna4u.zendesk.com/","what_it_proves":"Official help establishes KANNA project chat, documents, users, reports and role/authority concepts."}],"primary_reason":"KANNA can send project chat messages and broadly create/update operational records.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:ba9f7bdf-92bd-45e9-825d-6d8ca460fd6e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 84 stored tools and official product help. The candidate is truncated; full tools/list and schemas are required before final publication.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":84,"tools_or_skills_total":84},"name":"KANNA","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ba9f7bdf-92bd-45e9-825d-6d8ca460fd6e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.kanna4u.com/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Aldagram Inc.","publisher_url":"https://aldagram.com/","remote_url":"https://mcp.kanna4u.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Creating a chat message communicates externally to project participants as the connected user.","evidence":"Creates chat messages: The inventory includes messages_create and chats_create; official KANNA help documents chat as a participant communication feature with media and mentions.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Creates chat messages","triggering_tools":["messages_create","chats_create"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace.","evidence":"Creates and updates construction records: The stored tools create/update clients, properties, users, documents, financial records, reports, blackboards and project status/cost data.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates construction records","triggering_tools":["blackboards_create","clients_create","cms_documents_controller_update","financial_record_create","properties_update","users_create","work_reports_create"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://docs.google.com/forms/d/e/1FAIpQLSdRgvd_B8iKjvUfY21OIHmcKsms_wmYOUjDx8SOQm9M7JHFLA/viewform","tags":["accesses_messaging","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"blackboard_layout_patterns_find_all"},{"description":"","name":"blackboard_layouts_create"},{"description":"","name":"blackboard_layouts_find_all"},{"description":"","name":"blackboard_layouts_find_one"},{"description":"","name":"blackboards_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace."}},{"description":"","name":"blackboards_find_all"},{"description":"","name":"blackboards_find_one"},{"description":"","name":"blackboards_update"},{"description":"","name":"chats_create","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Creating a chat message communicates externally to project participants as the connected user."}},{"description":"","name":"chats_find_one"},{"description":"","name":"chats_update"},{"description":"","name":"clients_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace."}},{"description":"","name":"clients_find_all"},{"description":"","name":"clients_find_one"},{"description":"","name":"clients_update"},{"description":"","name":"cms_create"},{"description":"","name":"cms_document_categories_controller_create"},{"description":"","name":"cms_document_categories_controller_find_all"},{"description":"","name":"cms_document_categories_controller_find_one"},{"description":"","name":"cms_document_categories_controller_update"},{"description":"","name":"cms_documents_controller_find_all"},{"description":"","name":"cms_documents_controller_find_one"},{"description":"","name":"cms_documents_controller_update","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace."}},{"description":"","name":"cms_find_all"},{"description":"","name":"cms_find_one"},{"description":"","name":"cms_image_categories_controller_create"},{"description":"","name":"cms_image_categories_controller_find_all"},{"description":"","name":"cms_image_categories_controller_find_one"},{"description":"","name":"cms_image_categories_controller_update"},{"description":"","name":"cms_image_controller_find_all"},{"description":"","name":"cms_image_controller_find_one"},{"description":"","name":"cms_image_controller_update"},{"description":"","name":"cms_project_reports_controller_find_all"},{"description":"","name":"cms_project_statuses_controller_find_all"},{"description":"","name":"cms_project_templates_controller_find_all"},{"description":"","name":"cms_project_templates_controller_find_one"},{"description":"","name":"cms_update"},{"description":"","name":"cms_users_create"},{"description":"","name":"cms_users_find_all"},{"description":"","name":"cms_users_find_one"},{"description":"","name":"cms_users_update"},{"description":"","name":"cms_work_report_templates_controller_find_all"},{"description":"","name":"company_work_reports_find_all"},{"description":"","name":"custom_reports_list"},{"description":"","name":"customized_client_customized_item"},{"description":"","name":"customized_cms_customized_item"},{"description":"","name":"customized_property_customized_item"},{"description":"","name":"db_data_cities"},{"description":"","name":"db_data_industry_categories"},{"description":"","name":"db_data_industry_categories_all"},{"description":"","name":"db_data_prefectures"},{"description":"","name":"document_categories_find_all"},{"description":"","name":"documents_find_all"},{"description":"","name":"financial_record_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace."}},{"description":"","name":"financial_record_find_all"},{"description":"","name":"financial_record_update"},{"description":"","name":"image_categories_find_all"},{"description":"","name":"images_find_all"},{"description":"","name":"master_item_items"},{"description":"","name":"members_create"},{"description":"","name":"members_find_one"},{"description":"","name":"messages_create","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Creating a chat message communicates externally to project participants as the connected user."}},{"description":"","name":"ping"},{"description":"","name":"profile_find_one"},{"description":"","name":"progress_rate_update"},{"description":"","name":"project_actual_find_one"},{"description":"","name":"project_actual_update"},{"description":"","name":"project_cost_find_one"},{"description":"","name":"project_cost_update"},{"description":"","name":"project_statuses_find_all"},{"description":"","name":"project_templates_find_all"},{"description":"","name":"properties_create"},{"description":"","name":"properties_find_all"},{"description":"","name":"properties_find_one"},{"description":"","name":"properties_update","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace."}},{"description":"","name":"users_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace."}},{"description":"","name":"users_find_all"},{"description":"","name":"users_find_one"},{"description":"","name":"users_update"},{"description":"","name":"users_update_by_uuid"},{"description":"","name":"work_report_templates_find_all"},{"description":"","name":"work_reports_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are broad meaningful writes across the KANNA workspace."}},{"description":"","name":"work_reports_find_all"},{"description":"","name":"work_reports_find_one"}],"tools_count":84,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ba9f7bdf-92bd-45e9-825d-6d8ca460fd6e","uuid":"65b17b51-26d9-522b-b1cd-44018bc2e4d6","verification_tier":"community","version":""},"query_key":"kanna","schema_version":1,"status":"match"}