{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connect Claude to melibo's customer-support workspace. Find conversations, reply to customers and manage contacts and support knowledge. Inspect engagement metrics and configure support workflows and AI-agent guidance.","did":"c2519e30-3af1-407f-8185-7d1338df7e42","documentation_url":"https://docs.melibo.de/mcp-server/funktionsubersicht","editorial_description":{"extended_description":"Conversation tools support notes, assignments and categories. You can maintain knowledge pieces and topics, build flows from templates, change flow status and export insights. The integration also exposes workspace settings, goals and agent configuration.","schema_version":1,"summary":"Connect Claude to melibo's customer-support workspace.\nFind conversations, reply to customers and manage contacts and support knowledge.\nInspect engagement metrics and configure support workflows and AI-agent guidance."},"homepage_url":"","icon":"https://gdm-catalog-fmapi-prod.imgix.net/ProductLogo/0e754dc0-32c5-4fa3-9312-4296fff8af6d.png?w=80&h=80&fit=max&dpr=3&auto=format&q=50","id":"c2519e30-3af1-407f-8185-7d1338df7e42","installs":0,"last_scanned":"","license":"","long_description":"Conversation tools support notes, assignments and categories. You can maintain knowledge pieces and topics, build flows from templates, change flow status and export insights. The integration also exposes workspace settings, goals and agent configuration.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly includes a conversation reply action.","reasoning":"It sends external content as the user.","risk_type":"messaging_as_user","severity":"high","title":"Replies to customer conversations","triggering_tools_or_skills":["melibo_reply_to_conversation"]},{"evidence":"These tools explicitly remove meaningful CRM/knowledge data.","reasoning":"The actions are destructive.","risk_type":"data_deletion","severity":"high","title":"Deletes contacts and knowledge resources","triggering_tools_or_skills":["melibo_delete_contact","melibo_delete_folder","melibo_delete_knowledge_piece"]},{"evidence":"The available action set is discovered at runtime and not enumerated in the Directory.","reasoning":"Hidden actions may include further High-impact side effects.","risk_type":"generic_gateway","severity":"high","title":"Runs dynamic actions and agentic workflows","triggering_tools_or_skills":["melibo_find_actions","melibo_run_action","melibo_run_agentic_workflow"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication covers inbox, contacts, knowledge, flows and AI-agent configuration; dynamic action scopes are unspecified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c2519e30-3af1-407f-8185-7d1338df7e42.json","what_it_proves":"Candidate PR #125 record identity (name \"melibo\", publisher, type web_connector) and 43 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c2519e30-3af1-407f-8185-7d1338df7e42: complete tool_names inventory (43 tools), remote streamable-http endpoint https://api.melibo.de/mcp/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"melibo can reply to customer conversations, delete contacts/content, and invoke dynamic actions or agentic workflows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c2519e30-3af1-407f-8185-7d1338df7e42","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 43 names. Runtime verification must enumerate melibo_run_action/find_actions and constrain agentic workflow side effects.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":43,"tools_or_skills_total":43},"name":"melibo","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c2519e30-3af1-407f-8185-7d1338df7e42&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.melibo.de/rechtliches/plattform-datenschutzerklaerung","provisional_risk":null,"publication_recommendation":"accept","publisher":"Leon Stelzer","publisher_url":"https://www.melibo.de/","remote_url":"https://api.melibo.de/mcp/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It sends external content as the user.","evidence":"Replies to customer conversations: The inventory explicitly includes a conversation reply action.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Replies to customer conversations","triggering_tools":["melibo_reply_to_conversation"]},{"description":"This connector can permanently remove data or resources. Review findings: The actions are destructive.","evidence":"Deletes contacts and knowledge resources: These tools explicitly remove meaningful CRM/knowledge data.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes contacts and knowledge resources","triggering_tools":["melibo_delete_contact","melibo_delete_folder","melibo_delete_knowledge_piece"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Hidden actions may include further High-impact side effects.","evidence":"Runs dynamic actions and agentic workflows: The available action set is discovered at runtime and not enumerated in the Directory.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Runs dynamic actions and agentic workflows","triggering_tools":["melibo_find_actions","melibo_run_action","melibo_run_agentic_workflow"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@melibo.de","tags":["accesses_messaging","deletes_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"melibo_add_conversation_note"},{"description":"","name":"melibo_assign_conversation"},{"description":"","name":"melibo_create_contact"},{"description":"","name":"melibo_create_flow_from_template"},{"description":"","name":"melibo_create_folder"},{"description":"","name":"melibo_create_knowledge_piece"},{"description":"","name":"melibo_create_topic"},{"description":"","name":"melibo_delete_contact","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: The actions are destructive."}},{"description":"","name":"melibo_delete_folder","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: The actions are destructive."}},{"description":"","name":"melibo_delete_knowledge_piece","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: The actions are destructive."}},{"description":"","name":"melibo_export_insights"},{"description":"","name":"melibo_find_actions","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Hidden actions may include further High-impact side effects."}},{"description":"","name":"melibo_find_contacts"},{"description":"","name":"melibo_find_conversations"},{"description":"","name":"melibo_find_flows"},{"description":"","name":"melibo_find_knowledge_pieces"},{"description":"","name":"melibo_find_test_sessions"},{"description":"","name":"melibo_get_ai_agent_config"},{"description":"","name":"melibo_get_conversation_summary"},{"description":"","name":"melibo_get_feedback"},{"description":"","name":"melibo_get_global_guidelines"},{"description":"","name":"melibo_get_goals"},{"description":"","name":"melibo_get_inbox_overview"},{"description":"","name":"melibo_get_metric_chart"},{"description":"","name":"melibo_get_metric_total"},{"description":"","name":"melibo_get_topic"},{"description":"","name":"melibo_get_workspace_config"},{"description":"","name":"melibo_list_flow_templates"},{"description":"","name":"melibo_list_folders"},{"description":"","name":"melibo_list_knowledge_sources"},{"description":"","name":"melibo_reply_to_conversation","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It sends external content as the user."}},{"description":"","name":"melibo_run_action","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Hidden actions may include further High-impact side effects."}},{"description":"","name":"melibo_run_agentic_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Hidden actions may include further High-impact side effects."}},{"description":"","name":"melibo_save_flow"},{"description":"","name":"melibo_set_conversation_category"},{"description":"","name":"melibo_set_flow_status"},{"description":"","name":"melibo_toggle_knowledge_piece"},{"description":"","name":"melibo_update_ai_agent_config"},{"description":"","name":"melibo_update_contact"},{"description":"","name":"melibo_update_global_guidelines"},{"description":"","name":"melibo_update_knowledge_piece"},{"description":"","name":"melibo_update_topic"},{"description":"","name":"melibo_validate_triggers"}],"tools_count":43,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c2519e30-3af1-407f-8185-7d1338df7e42","uuid":"d7aa0601-5e08-5b35-b83c-7c1ed83fd23f","verification_tier":"community","version":""},"query_key":"leon stelzer melibo","schema_version":1,"status":"match"}