{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage relationships and outreach in Levitate from Claude. Search contacts and histories, maintain notes and tags, and track action items. Draft or send emails, schedule campaigns and social posts, and review survey responses.","did":"c4751f07-5c77-494c-b972-ff8914f77cd3","documentation_url":"https://help.levitate.ai/article/589-levitate-mcp-server","editorial_description":{"extended_description":"Contact tools support profiles, company timelines and email or phone updates. Outreach tools include campaign estimates, scheduling and cancellation, templates, email drafts and sending, plus social-post drafts and scheduling. Calendar, file and Zoom-summary tools add context to relationship follow-up.","schema_version":1,"summary":"Manage relationships and outreach in Levitate from Claude.\nSearch contacts and histories, maintain notes and tags, and track action items.\nDraft or send emails, schedule campaigns and social posts, and review survey responses."},"homepage_url":"","icon":"","id":"c4751f07-5c77-494c-b972-ff8914f77cd3","installs":0,"last_scanned":"","license":"","long_description":"Contact tools support profiles, company timelines and email or phone updates. Outreach tools include campaign estimates, scheduling and cancellation, templates, email drafts and sending, plus social-post drafts and scheduling. Calendar, file and Zoom-summary tools add context to relationship follow-up.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These actions send email or publish social content.","reasoning":"They communicate externally as the user.","risk_type":"messaging_as_user","severity":"high","title":"Sends and schedules outbound communications","triggering_tools_or_skills":["email_provider_send","email_campaigns_schedule","social_posts_schedule"]},{"evidence":"Cancellation removes scheduled communications.","reasoning":"It destructively changes outbound workflow resources.","risk_type":"data_deletion","severity":"high","title":"Cancels campaigns and social posts","triggering_tools_or_skills":["email_campaigns_cancel","social_posts_cancel"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects CRM, email, calendar and social providers; provider scopes are unspecified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c4751f07-5c77-494c-b972-ff8914f77cd3.json","what_it_proves":"Candidate PR #125 record identity (name \"Levitate\", publisher, type web_connector) and 51 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c4751f07-5c77-494c-b972-ff8914f77cd3: complete tool_names inventory (51 tools), remote streamable-http endpoint https://mcp.levitate.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Levitate sends email, schedules campaigns/social posts and cancels outbound communications.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c4751f07-5c77-494c-b972-ff8914f77cd3","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 51 names; runtime verification should require recipient/audience confirmation.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":51,"tools_or_skills_total":51},"name":"Levitate","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c4751f07-5c77-494c-b972-ff8914f77cd3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.levitate.ai/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Levitate","publisher_url":"https://levitate.ai/","remote_url":"https://mcp.levitate.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally as the user.","evidence":"Sends and schedules outbound communications: These actions send email or publish social content.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends and schedules outbound communications","triggering_tools":["email_provider_send","email_campaigns_schedule","social_posts_schedule"]},{"description":"This connector can permanently remove data or resources. Review findings: It destructively changes outbound workflow resources.","evidence":"Cancels campaigns and social posts: Cancellation removes scheduled communications.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Cancels campaigns and social posts","triggering_tools":["email_campaigns_cancel","social_posts_cancel"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.levitate.ai","tags":["accesses_calendar","accesses_messaging","deletes_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"action_items_complete"},{"description":"","name":"action_items_create"},{"description":"","name":"action_items_search"},{"description":"","name":"action_items_update"},{"description":"","name":"calendar_provider_get_meeting"},{"description":"","name":"calendar_provider_search"},{"description":"","name":"companies_get_timeline"},{"description":"","name":"companies_search"},{"description":"","name":"contacts_add_email"},{"description":"","name":"contacts_add_phone"},{"description":"","name":"contacts_add_tags"},{"description":"","name":"contacts_create"},{"description":"","name":"contacts_get_profile"},{"description":"","name":"contacts_get_timeline"},{"description":"","name":"contacts_search"},{"description":"","name":"contacts_update_details"},{"description":"","name":"email_campaigns_cancel","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: It destructively changes outbound workflow resources."}},{"description":"","name":"email_campaigns_create"},{"description":"","name":"email_campaigns_estimate"},{"description":"","name":"email_campaigns_get"},{"description":"","name":"email_campaigns_schedule","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally as the user."}},{"description":"","name":"email_campaigns_search"},{"description":"","name":"email_placeholders_list"},{"description":"","name":"email_provider_create_draft"},{"description":"","name":"email_provider_get_message"},{"description":"","name":"email_provider_search"},{"description":"","name":"email_provider_send","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally as the user."}},{"description":"","name":"email_templates_get"},{"description":"","name":"email_templates_search"},{"description":"","name":"files_create_upload"},{"description":"","name":"files_get"},{"description":"","name":"notes_create"},{"description":"","name":"notes_search"},{"description":"","name":"notes_update"},{"description":"","name":"social_connections_list"},{"description":"","name":"social_posts_cancel","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: It destructively changes outbound workflow resources."}},{"description":"","name":"social_posts_create_draft"},{"description":"","name":"social_posts_get"},{"description":"","name":"social_posts_schedule","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally as the user."}},{"description":"","name":"social_posts_search"},{"description":"","name":"surveys_custom_create"},{"description":"","name":"surveys_event_registration_responses_search"},{"description":"","name":"surveys_event_registrations_search"},{"description":"","name":"surveys_question_add"},{"description":"","name":"surveys_responses_search"},{"description":"","name":"surveys_search"},{"description":"","name":"tags_search"},{"description":"","name":"users_get"},{"description":"","name":"users_get_self"},{"description":"","name":"users_search"},{"description":"","name":"zoom_summarize_meeting"}],"tools_count":51,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c4751f07-5c77-494c-b972-ff8914f77cd3","uuid":"83f00da3-7b7c-52a7-bafd-3c613075aa37","verification_tier":"community","version":""},"query_key":"levitate","schema_version":1,"status":"match"}