{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-20","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Use connected workplace tools through AI for Work. The listed connector supports contact lookup, Google Calendar scheduling and Jira issue or sprint work. Find information and execute supported workflows using your connected enterprise account.","did":"10dd4a47-a819-4a6f-a461-b2988a7458fc","documentation_url":"https://docs.kore.ai/ai-for-work/assistant-configurations#mcp-server","editorial_description":{"extended_description":"Calendar tools can find availability, create or update events and cancel them. Jira tools search projects and issues, create issues or sprints, add comments and assign issues to sprints. The broader platform's enterprise-search and agent claims exceed the concrete inventory shown here.","schema_version":1,"summary":"Use connected workplace tools through AI for Work.\nThe listed connector supports contact lookup, Google Calendar scheduling and Jira issue or sprint work.\nFind information and execute supported workflows using your connected enterprise account."},"homepage_url":"","icon":"","id":"10dd4a47-a819-4a6f-a461-b2988a7458fc","installs":0,"last_scanned":"","license":"","long_description":"Calendar tools can find availability, create or update events and cancel them. Jira tools search projects and issues, create issues or sprints, add comments and assign issues to sprints. The broader platform's enterprise-search and agent claims exceed the concrete inventory shown here.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The declared tool name explicitly cancels Google Calendar events.","reasoning":"Cancellation destroys or revokes meaningful scheduled-event state.","risk_type":"data_deletion","severity":"high","title":"Cancels calendar events","triggering_tools_or_skills":["google_calendar_cancel_events"]},{"evidence":"The declared tool posts a comment to a Jira issue.","reasoning":"A Jira comment communicates externally to issue participants as the authenticated user.","risk_type":"messaging_as_user","severity":"high","title":"Adds comments to Jira issues","triggering_tools_or_skills":["jira_software_cloud_add_comment"]},{"evidence":"The inventory exposes issue retrieval through Jira Query Language rather than a fixed keyword lookup.","reasoning":"JQL is an expressive remote query language whose input and result scope are not documented here.","risk_type":"query_execution","severity":"high","title":"Executes caller-supplied JQL","triggering_tools_or_skills":["jira_software_cloud_find_issue_via_jql"]},{"evidence":"The named tools create events, issues and sprints and update existing schedules and sprint membership.","reasoning":"These actions persist shared-workspace changes.","risk_type":"data_modification","severity":"medium","title":"Creates and updates calendar and Jira records","triggering_tools_or_skills":["google_calendar_create_detailed_event","google_calendar_update_event","jira_software_cloud_add_issues_to_sprint","jira_software_cloud_create_issue","jira_software_cloud_create_sprint"]},{"evidence":"Event descriptions, issue bodies and comments are authored by organization users.","reasoning":"Returned work content can carry adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Calendar and Jira content is user-controlled","triggering_tools_or_skills":["google_calendar_find_events","jira_software_cloud_find_issue_by_key","jira_software_cloud_find_issue_via_jql"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required across connected Google Calendar and Jira accounts; exact OAuth scopes and project/calendar restrictions are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/10dd4a47-a819-4a6f-a461-b2988a7458fc.json","what_it_proves":"Candidate PR #125 record identity (name \"Ai for Work\", publisher, type web_connector) and 20 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/10dd4a47-a819-4a6f-a461-b2988a7458fc: complete tool_names inventory (20 tools), remote streamable-http endpoint https://work.kore.ai/api/mcp/545459cf-9576-4e78-a812-0efe6bb3b033, auth_posture auth_required, directory tier community"}],"primary_reason":"Declared tools cancel events, post Jira comments and execute JQL, in addition to creating and updating shared records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:10dd4a47-a819-4a6f-a461-b2988a7458fc","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 20 names. The supplied Kore.ai page was not needed to establish High because the action names are unambiguous; runtime verification should establish cross-service OAuth scopes.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":20,"tools_or_skills_total":20},"name":"Ai for Work","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=10dd4a47-a819-4a6f-a461-b2988a7458fc&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.kore.ai/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Kore.ai","publisher_url":"https://kore.ai/","remote_url":"https://work.kore.ai/api/mcp/545459cf-9576-4e78-a812-0efe6bb3b033","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Cancellation destroys or revokes meaningful scheduled-event state.","evidence":"Cancels calendar events: The declared tool name explicitly cancels Google Calendar events.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Cancels calendar events","triggering_tools":["google_calendar_cancel_events"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: A Jira comment communicates externally to issue participants as the authenticated user.","evidence":"Adds comments to Jira issues: The declared tool posts a comment to a Jira issue.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Adds comments to Jira issues","triggering_tools":["jira_software_cloud_add_comment"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: JQL is an expressive remote query language whose input and result scope are not documented here.","evidence":"Executes caller-supplied JQL: The inventory exposes issue retrieval through Jira Query Language rather than a fixed keyword lookup.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes caller-supplied JQL","triggering_tools":["jira_software_cloud_find_issue_via_jql"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist shared-workspace changes.","evidence":"Creates and updates calendar and Jira records: The named tools create events, issues and sprints and update existing schedules and sprint membership.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates calendar and Jira records","triggering_tools":["google_calendar_create_detailed_event","google_calendar_update_event","jira_software_cloud_add_issues_to_sprint","jira_software_cloud_create_issue","jira_software_cloud_create_sprint"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@kore.com","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"contacts_find_contact"},{"description":"","name":"google_calendar_available_slots"},{"description":"","name":"google_calendar_cancel_events","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Cancellation destroys or revokes meaningful scheduled-event state."}},{"description":"","name":"google_calendar_create_detailed_event","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist shared-workspace changes."}},{"description":"","name":"google_calendar_find_busy_periods_in_calendar"},{"description":"","name":"google_calendar_find_events"},{"description":"","name":"google_calendar_update_event","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist shared-workspace changes."}},{"description":"","name":"jira_software_cloud_add_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: A Jira comment communicates externally to issue participants as the authenticated user."}},{"description":"","name":"jira_software_cloud_add_issues_to_sprint","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist shared-workspace changes."}},{"description":"","name":"jira_software_cloud_create_issue","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist shared-workspace changes."}},{"description":"","name":"jira_software_cloud_create_sprint","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist shared-workspace changes."}},{"description":"","name":"jira_software_cloud_find_issue_by_key"},{"description":"","name":"jira_software_cloud_find_issue_via_jql","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: JQL is an expressive remote query language whose input and result scope are not documented here."}},{"description":"","name":"jira_software_cloud_find_project"},{"description":"","name":"jira_software_cloud_find_user"},{"description":"","name":"jira_software_cloud_get_create_issue_fields"},{"description":"","name":"jira_software_cloud_list_issue_types"},{"description":"","name":"jira_software_cloud_resolve_board_id"},{"description":"","name":"jira_software_cloud_resolve_field_options"},{"description":"","name":"jira_software_cloud_resolve_sprint_id"}],"tools_count":20,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/10dd4a47-a819-4a6f-a461-b2988a7458fc","uuid":"e4c65d1a-83bf-5309-8823-50752c8f27f6","verification_tier":"community","version":""},"query_key":"kore ai ai for work","schema_version":1,"status":"match"}