{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-28","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manages Mailrith email-marketing workflows from Claude. Maintain subscribers and content, check readiness and review delivery analytics. Schedule or send email after approval, within one workspace and its selected permissions.","did":"b01524b6-ae8a-4ae4-86b1-88336fcb6b3a","documentation_url":"https://mailrith.com/developers/mcp","editorial_description":{"extended_description":"Tools create and update broadcasts, templates, sequences and automations, preview journeys, and send tests. Subscriber tools manage tags and sequence membership, while broadcasts can be canceled or unscheduled. OAuth connects the authorized workspace.","schema_version":1,"summary":"Manages Mailrith email-marketing workflows from Claude.\nMaintain subscribers and content, check readiness and review delivery analytics.\nSchedule or send email after approval, within one workspace and its selected permissions."},"homepage_url":"","icon":"","id":"b01524b6-ae8a-4ae4-86b1-88336fcb6b3a","installs":0,"last_scanned":"","license":"","long_description":"Tools create and update broadcasts, templates, sequences and automations, preview journeys, and send tests. Subscriber tools manage tags and sequence membership, while broadcasts can be canceled or unscheduled. OAuth connects the authorized workspace.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools deliver email as configured sender identities.","reasoning":"They communicate to real recipients as the organization.","risk_type":"messaging_as_user","severity":"high","title":"Sends/schedules broadcasts and test emails","triggering_tools_or_skills":["broadcasts_send","broadcasts_schedule","broadcasts_send_test","automations_send_test","sequences_send_test"]},{"evidence":"The tools control persistent production email delivery workflows.","reasoning":"They can message audiences automatically.","risk_type":"deployment_infrastructure","severity":"high","title":"Activates automations/sequences and schedules broadcasts","triggering_tools_or_skills":["automations_update_status","sequences_update_status","broadcasts_schedule"]},{"evidence":"The tools broadly change marketing state.","reasoning":"They materially affect audience/campaign configuration.","risk_type":"data_modification","severity":"medium","title":"Creates/updates subscribers, tags, templates and campaigns","triggering_tools_or_skills":["subscribers_upsert","subscribers_update_status","email_templates_create","broadcasts_create"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes sender identities, broadcasts, sequences, subscribers and automations.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b01524b6-ae8a-4ae4-86b1-88336fcb6b3a.json","what_it_proves":"Candidate PR #125 record identity (name \"Mailrith\", publisher, type web_connector) and 52 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b01524b6-ae8a-4ae4-86b1-88336fcb6b3a: complete tool_names inventory (52 tools), remote streamable-http endpoint https://api.mailrith.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Mailrith sends email and controls persistent marketing automation.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b01524b6-ae8a-4ae4-86b1-88336fcb6b3a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 52 tools; confirmation is a safeguard.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":52,"tools_or_skills_total":52},"name":"Mailrith","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b01524b6-ae8a-4ae4-86b1-88336fcb6b3a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mailrith.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Mailrith","publisher_url":"https://mailrith.com/","remote_url":"https://api.mailrith.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real recipients as the organization.","evidence":"Sends/schedules broadcasts and test emails: These tools deliver email as configured sender identities.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends/schedules broadcasts and test emails","triggering_tools":["broadcasts_send","broadcasts_schedule","broadcasts_send_test","automations_send_test","sequences_send_test"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They can message audiences automatically.","evidence":"Activates automations/sequences and schedules broadcasts: The tools control persistent production email delivery workflows.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Activates automations/sequences and schedules broadcasts","triggering_tools":["automations_update_status","sequences_update_status","broadcasts_schedule"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect audience/campaign configuration.","evidence":"Creates/updates subscribers, tags, templates and campaigns: The tools broadly change marketing state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates subscribers, tags, templates and campaigns","triggering_tools":["subscribers_upsert","subscribers_update_status","email_templates_create","broadcasts_create"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://mailrith.com/contact","tags":["code_deployment","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"analytics_create_report"},{"description":"","name":"analytics_get_report"},{"description":"","name":"automations_create"},{"description":"","name":"automations_get"},{"description":"","name":"automations_list"},{"description":"","name":"automations_preflight"},{"description":"","name":"automations_preview_journey"},{"description":"","name":"automations_send_test","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real recipients as the organization."}},{"description":"","name":"automations_update"},{"description":"","name":"automations_update_status","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can message audiences automatically."}},{"description":"","name":"broadcasts_cancel"},{"description":"","name":"broadcasts_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect audience/campaign configuration."}},{"description":"","name":"broadcasts_get"},{"description":"","name":"broadcasts_get_send_progress"},{"description":"","name":"broadcasts_list"},{"description":"","name":"broadcasts_preflight"},{"description":"","name":"broadcasts_schedule","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can message audiences automatically."}},{"description":"","name":"broadcasts_send","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real recipients as the organization."}},{"description":"","name":"broadcasts_send_test","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real recipients as the organization."}},{"description":"","name":"broadcasts_unschedule"},{"description":"","name":"broadcasts_update"},{"description":"","name":"discovery_get_capabilities"},{"description":"","name":"email_templates_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect audience/campaign configuration."}},{"description":"","name":"email_templates_get"},{"description":"","name":"email_templates_list"},{"description":"","name":"email_templates_preview"},{"description":"","name":"email_templates_update"},{"description":"","name":"segments_get"},{"description":"","name":"segments_list"},{"description":"","name":"segments_preview"},{"description":"","name":"sender_identities_get"},{"description":"","name":"sender_identities_list"},{"description":"","name":"sequences_create"},{"description":"","name":"sequences_get"},{"description":"","name":"sequences_list"},{"description":"","name":"sequences_preflight"},{"description":"","name":"sequences_preview_journey"},{"description":"","name":"sequences_send_test","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to real recipients as the organization."}},{"description":"","name":"sequences_update"},{"description":"","name":"sequences_update_status","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can message audiences automatically."}},{"description":"","name":"subscribers_add_tag"},{"description":"","name":"subscribers_add_to_sequence"},{"description":"","name":"subscribers_get"},{"description":"","name":"subscribers_list"},{"description":"","name":"subscribers_remove_from_sequence"},{"description":"","name":"subscribers_remove_tag"},{"description":"","name":"subscribers_update"},{"description":"","name":"subscribers_update_status","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect audience/campaign configuration."}},{"description":"","name":"subscribers_upsert","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect audience/campaign configuration."}},{"description":"","name":"tags_get"},{"description":"","name":"tags_list"},{"description":"","name":"workspace_get"}],"tools_count":52,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b01524b6-ae8a-4ae4-86b1-88336fcb6b3a","uuid":"ae4cadbb-2c87-54f2-842c-f8fac3d65b0b","verification_tier":"community","version":""},"query_key":"mailrith","schema_version":1,"status":"match"}