{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Finds Luma events and retrieves information about your upcoming activities. Search events and inspect calendars, event details and guest records. Use the connected account's event context for discovery or hosting preparation.","did":"b29f76fb-0aba-485e-9c0b-7ab105e9e8f4","documentation_url":"https://help.luma.com/","editorial_description":{"extended_description":"Tools list calendars, events and guests and retrieve the connected user's profile.","schema_version":1,"summary":"Finds Luma events and retrieves information about your upcoming activities.\nSearch events and inspect calendars, event details and guest records.\nUse the connected account's event context for discovery or hosting preparation."},"homepage_url":"","icon":"","id":"b29f76fb-0aba-485e-9c0b-7ab105e9e8f4","installs":0,"last_scanned":"","license":"","long_description":"Tools list calendars, events and guests and retrieve the connected user's profile.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All eight tools are get/list/search operations.","reasoning":"They cannot create/join events or message guests.","risk_type":"private_data_read","severity":"low","title":"Reads private calendars, events and guest data","triggering_tools_or_skills":["get_calendar","get_event","get_guest","list_guests"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes private Luma calendars/events/guest lists.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b29f76fb-0aba-485e-9c0b-7ab105e9e8f4.json","what_it_proves":"Candidate PR #125 record identity (name \"Luma\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b29f76fb-0aba-485e-9c0b-7ab105e9e8f4: complete tool_names inventory (8 tools), remote streamable-http endpoint https://mcp.luma.com/, auth_posture auth_required, directory tier community"}],"primary_reason":"Luma is read-only event/guest retrieval.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b29f76fb-0aba-485e-9c0b-7ab105e9e8f4","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Luma","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b29f76fb-0aba-485e-9c0b-7ab105e9e8f4&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://luma.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Luma","publisher_url":"https://luma.com/","remote_url":"https://mcp.luma.com/","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They cannot create/join events or message guests.","evidence":"Reads private calendars, events and guest data: All eight tools are get/list/search operations.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private calendars, events and guest data","triggering_tools":["get_calendar","get_event","get_guest","list_guests"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@luma.com","tags":["accesses_calendar","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_calendar"},{"description":"","name":"get_event"},{"description":"","name":"get_guest"},{"description":"","name":"get_self"},{"description":"","name":"list_calendars"},{"description":"","name":"list_events"},{"description":"","name":"list_guests"},{"description":"","name":"search_events"}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b29f76fb-0aba-485e-9c0b-7ab105e9e8f4","uuid":"b051b118-99b1-57c0-8a62-8cdefc228495","verification_tier":"community","version":""},"query_key":"luma luma","schema_version":1,"status":"match"}