{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Create hosted or embedded forms and mail workflows with mailnix. Read submissions, send replies and connect email providers. Test in the sandbox before enabling live destinations.","did":"0eca1179-637e-4326-aadb-26f8a364aa10","documentation_url":"https://mailnix.ch/docs","editorial_description":{"extended_description":"The connector manages form publishing, sender identities, domains, routing rules, templates, suppression lists, virtual inboxes and webhooks. Providers described include AWS SES, Postmark, Resend, SendGrid, Mailgun and SMTP. Administrative and deletion tools can change live mail configuration as well as form content.","schema_version":1,"summary":"Create hosted or embedded forms and mail workflows with mailnix.\nRead submissions, send replies and connect email providers.\nTest in the sandbox before enabling live destinations."},"homepage_url":"","icon":"https://www.dropbox.com/scl/fi/8t41xejlgcdktyr43ok4f/mailnix-128x128.png?rlkey=zm4dhk5vmj5bmf51w9nz7ivjo&st=0iqc99qm&dl=1","id":"0eca1179-637e-4326-aadb-26f8a364aa10","installs":0,"last_scanned":"","license":"","long_description":"The connector manages form publishing, sender identities, domains, routing rules, templates, suppression lists, virtual inboxes and webhooks. Providers described include AWS SES, Postmark, Resend, SendGrid, Mailgun and SMTP. Administrative and deletion tools can change live mail configuration as well as form content.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly deletes or revokes numerous production email resources.","reasoning":"These actions can disrupt delivery or remove access and message state.","risk_type":"data_deletion","severity":"high","title":"Routing, templates, domains, identities, inboxes, keys, and webhooks can be deleted","triggering_tools_or_skills":["email_routing_rule_delete","email_template_delete","sending_domain_delete","sender_identity_delete","virtual_inbox_delete","publishable_key_revoke","webhook_endpoint_delete"]},{"evidence":"Explicit tools send email replies and publish forms.","reasoning":"They communicate externally under account-controlled identities.","risk_type":"messaging_as_user","severity":"high","title":"Email and form replies can be sent or published","triggering_tools_or_skills":["email_send_test","form_publish","form_reply_send"]},{"evidence":"The connector administers reusable credentials and sending identity infrastructure.","reasoning":"Credential changes can grant or compromise email authority.","risk_type":"credential_admin","severity":"high","title":"Keys, providers, sender identities, domains, and webhook secrets can be managed","triggering_tools_or_skills":["publishable_key_create","publishable_key_rotate","email_provider_connect","sender_identity_add","sending_domain_add","webhook_endpoint_rotate_secret"]},{"evidence":"Tools promote destinations and change production mail routing.","reasoning":"They alter live communication infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Live routing and destinations can be promoted","triggering_tools_or_skills":["destination_promote_to_live","email_inbound_route_create","email_routing_rule_create"]},{"evidence":"Creating a webhook configures callbacks to a supplied endpoint.","reasoning":"URL validation is required to prevent arbitrary or internal targeting.","risk_type":"arbitrary_network_access","severity":"low","title":"Webhook endpoints target external URLs","triggering_tools_or_skills":["webhook_endpoint_create"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to mailnix account, domains, providers, destinations, routing, forms, sender identities, keys, inboxes, suppression lists, templates, schedules, and webhooks.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0eca1179-637e-4326-aadb-26f8a364aa10.json","what_it_proves":"Candidate PR #125 record identity (name \"mailnix\", publisher, type web_connector) and 78 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0eca1179-637e-4326-aadb-26f8a364aa10: complete tool_names inventory (78 tools), remote streamable-http endpoint https://mcp.mailnix.ch/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Broad delete, send, credential, and live routing operations establish high impact.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0eca1179-637e-4326-aadb-26f8a364aa10","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 78 names. Runtime checks should verify confirmation, recipient limits, secret redaction, domain ownership, webhook URLs, live promotion, scheduled sends, suppression imports, and deletion recovery.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":78,"tools_or_skills_total":78},"name":"mailnix","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0eca1179-637e-4326-aadb-26f8a364aa10&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mailnix.ch/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"LIMERION GmbH","publisher_url":"https://mailnix.ch/","remote_url":"https://mcp.mailnix.ch/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state.","evidence":"Routing, templates, domains, identities, inboxes, keys, and webhooks can be deleted: The inventory explicitly deletes or revokes numerous production email resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Routing, templates, domains, identities, inboxes, keys, and webhooks can be deleted","triggering_tools":["email_routing_rule_delete","email_template_delete","sending_domain_delete","sender_identity_delete","virtual_inbox_delete","publishable_key_revoke","webhook_endpoint_delete"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally under account-controlled identities.","evidence":"Email and form replies can be sent or published: Explicit tools send email replies and publish forms.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Email and form replies can be sent or published","triggering_tools":["email_send_test","form_publish","form_reply_send"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential changes can grant or compromise email authority.","evidence":"Keys, providers, sender identities, domains, and webhook secrets can be managed: The connector administers reusable credentials and sending identity infrastructure.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Keys, providers, sender identities, domains, and webhook secrets can be managed","triggering_tools":["publishable_key_create","publishable_key_rotate","email_provider_connect","sender_identity_add","sending_domain_add","webhook_endpoint_rotate_secret"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live communication infrastructure.","evidence":"Live routing and destinations can be promoted: Tools promote destinations and change production mail routing.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Live routing and destinations can be promoted","triggering_tools":["destination_promote_to_live","email_inbound_route_create","email_routing_rule_create"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: URL validation is required to prevent arbitrary or internal targeting.","evidence":"Webhook endpoints target external URLs: Creating a webhook configures callbacks to a supplied endpoint.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Webhook endpoints target external URLs","triggering_tools":["webhook_endpoint_create"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://mailnix.ch/contact","tags":["accesses_messaging","code_deployment","deletes_data","forwards_data_to_third_party","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"account_claim"},{"description":"","name":"account_status"},{"description":"","name":"destination_promote_to_live","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live communication infrastructure."}},{"description":"","name":"destination_set_mode"},{"description":"","name":"email_destination_set_shadow"},{"description":"","name":"email_destinations_list"},{"description":"","name":"email_domain_verify_records"},{"description":"","name":"email_domain_verify_status"},{"description":"","name":"email_failover_policy_set"},{"description":"","name":"email_html_snippet_generate"},{"description":"","name":"email_inbound_messages_list"},{"description":"","name":"email_inbound_route_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live communication infrastructure."}},{"description":"","name":"email_inbound_routes_list"},{"description":"","name":"email_provider_connect","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential changes can grant or compromise email authority."}},{"description":"","name":"email_provider_list_presets"},{"description":"","name":"email_routing_rule_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter live communication infrastructure."}},{"description":"","name":"email_routing_rule_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state."}},{"description":"","name":"email_routing_rule_update"},{"description":"","name":"email_routing_rules_list"},{"description":"","name":"email_sandbox_inbox_messages_list"},{"description":"","name":"email_scheduled_cancel"},{"description":"","name":"email_scheduled_list"},{"description":"","name":"email_send_test","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally under account-controlled identities."}},{"description":"","name":"email_suppression_add"},{"description":"","name":"email_suppression_bulk_import"},{"description":"","name":"email_suppression_get"},{"description":"","name":"email_suppression_list"},{"description":"","name":"email_suppression_remove"},{"description":"","name":"email_template_create"},{"description":"","name":"email_template_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state."}},{"description":"","name":"email_template_list"},{"description":"","name":"email_template_render_preview"},{"description":"","name":"email_template_versions_list"},{"description":"","name":"email_trace_lookup"},{"description":"","name":"email_trace_search"},{"description":"","name":"email_unsubscribe_mode_set"},{"description":"","name":"form_archive"},{"description":"","name":"form_create"},{"description":"","name":"form_embed_snippet_generate"},{"description":"","name":"form_get"},{"description":"","name":"form_list"},{"description":"","name":"form_pause"},{"description":"","name":"form_publish","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally under account-controlled identities."}},{"description":"","name":"form_reply_draft_create"},{"description":"","name":"form_reply_send","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate externally under account-controlled identities."}},{"description":"","name":"form_submission_get"},{"description":"","name":"form_submission_list"},{"description":"","name":"form_submission_set_status"},{"description":"","name":"form_submission_wait"},{"description":"","name":"form_update"},{"description":"","name":"publishable_key_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential changes can grant or compromise email authority."}},{"description":"","name":"publishable_key_list"},{"description":"","name":"publishable_key_revoke","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state."}},{"description":"","name":"publishable_key_rotate","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential changes can grant or compromise email authority."}},{"description":"","name":"sender_identity_add","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential changes can grant or compromise email authority."}},{"description":"","name":"sender_identity_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state."}},{"description":"","name":"sender_identity_list"},{"description":"","name":"sender_identity_list_for_domain"},{"description":"","name":"sender_identity_set_destination"},{"description":"","name":"sender_identity_set_display_name"},{"description":"","name":"sending_domain_add","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential changes can grant or compromise email authority."}},{"description":"","name":"sending_domain_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state."}},{"description":"","name":"sending_domain_list"},{"description":"","name":"sending_domain_recheck"},{"description":"","name":"virtual_inbox_create"},{"description":"","name":"virtual_inbox_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state."}},{"description":"","name":"virtual_inbox_get"},{"description":"","name":"virtual_inbox_list"},{"description":"","name":"virtual_inbox_message_get"},{"description":"","name":"virtual_inbox_message_wait"},{"description":"","name":"virtual_inbox_messages_clear"},{"description":"","name":"virtual_inbox_messages_list"},{"description":"","name":"virtual_inbox_update"},{"description":"","name":"webhook_attempts_list"},{"description":"","name":"webhook_endpoint_create"},{"description":"","name":"webhook_endpoint_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can disrupt delivery or remove access and message state."}},{"description":"","name":"webhook_endpoint_list"},{"description":"","name":"webhook_endpoint_rotate_secret","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential changes can grant or compromise email authority."}}],"tools_count":78,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0eca1179-637e-4326-aadb-26f8a364aa10","uuid":"b2cb560f-f5b1-5d46-893f-b704c549a257","verification_tier":"community","version":""},"query_key":"limerion gmbh mailnix","schema_version":1,"status":"match"}