{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Savee connects AI assistants to saved visual references and its public library. Browse saves, boards, and your feed, or search for new inspiration. Optional write permission lets you create or edit boards and save items.","did":"ba7360a9-8061-4360-995d-b081c136e1e2","documentation_url":"https://docs.savee.com/mcp","editorial_description":{"extended_description":"An active subscription with API access is required. Writes need separate consent; older read-only connections must reconnect to add it. Removing an item from a board leaves it saved in your account. The connector cannot delete saves or boards, upload images, or edit team boards. Results include source links, dimensions, and dominant colors; search and writes have separate usage limits.","schema_version":1,"summary":"Savee connects AI assistants to saved visual references and its public library.\nBrowse saves, boards, and your feed, or search for new inspiration.\nOptional write permission lets you create or edit boards and save items."},"homepage_url":"","icon":"","id":"ba7360a9-8061-4360-995d-b081c136e1e2","installs":0,"last_scanned":"","license":"","long_description":"An active subscription with API access is required. Writes need separate consent; older read-only connections must reconnect to add it. Removing an item from a board leaves it saved in your account. The connector cannot delete saves or boards, upload images, or edit team boards. Results include source links, dimensions, and dominant colors; search and writes have separate usage limits.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The stored Directory tools read the user's saves, boards/feed and public search; official docs confirm private saves and collaborator boards are accessible.","reasoning":"This exposes private inspiration collections without a stored write tool.","risk_type":"private_data_read","severity":"low","title":"Reads private saves and boards","triggering_tools_or_skills":["get_current_user","list_board_saves","list_boards","list_feed","list_saves","search"]},{"evidence":"Official docs list four optional write-scope tools that create/update boards, save items and remove a save from a board, but these tools are absent from the Directory packet.","reasoning":"The documented live connector can modify persistent account content, so risk must reflect the union rather than the stale six-tool candidate.","risk_type":"data_modification","severity":"medium","title":"Official server can write boards and saves","triggering_tools_or_skills":["mcp.savee.com connector","create_board","update_board","save_items","remove_save_from_board"]},{"evidence":"The packet lists 6 tools while official docs say 12 tools are available, including 4 conditional write actions.","reasoning":"This schema drift understates the action surface and requires candidate regeneration.","risk_type":"identity_discrepancy","severity":"low","title":"Directory inventory omits documented tools","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Browser authorization is required. Official docs say write tools appear only when the user grants optional write scopes.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ba7360a9-8061-4360-995d-b081c136e1e2.json","what_it_proves":"Candidate PR #125 record identity (name \"mcp.savee.com\", publisher, type web_connector) and 6 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ba7360a9-8061-4360-995d-b081c136e1e2: complete tool_names inventory (6 tools), remote streamable-http endpoint https://mcp.savee.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:52:23Z","url_or_path":"https://docs.savee.com/mcp","what_it_proves":"Official docs enumerate 8 read tools plus 4 optional write tools and state full deletion is unavailable."}],"primary_reason":"Savee is Medium because official docs expose optional board/save write tools missing from the candidate inventory.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:ba7360a9-8061-4360-995d-b081c136e1e2","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 6 stored tools and the official 12-tool documentation. No full board/save deletion exists, but the record must be refreshed to show write-scope actions and consent behavior.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":6,"tools_or_skills_total":6},"name":"mcp.savee.com","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ba7360a9-8061-4360-995d-b081c136e1e2&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://savee.com/privacy/","provisional_risk":null,"publication_recommendation":"fix","publisher":"Savee","publisher_url":"https://savee.com/","remote_url":"https://mcp.savee.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This exposes private inspiration collections without a stored write tool.","evidence":"Reads private saves and boards: The stored Directory tools read the user's saves, boards/feed and public search; official docs confirm private saves and collaborator boards are accessible.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private saves and boards","triggering_tools":["get_current_user","list_board_saves","list_boards","list_feed","list_saves","search"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The documented live connector can modify persistent account content, so risk must reflect the union rather than the stale six-tool candidate.","evidence":"Official server can write boards and saves: Official docs list four optional write-scope tools that create/update boards, save items and remove a save from a board, but these tools are absent from the Directory packet.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Official server can write boards and saves","triggering_tools":["mcp.savee.com connector","create_board","update_board","save_items","remove_save_from_board"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hey@savee.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_current_user"},{"description":"","name":"list_board_saves"},{"description":"","name":"list_boards"},{"description":"","name":"list_feed"},{"description":"","name":"list_saves"},{"description":"","name":"search"},{"description":"","name":"mcp.savee.com connector","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The documented live connector can modify persistent account content, so risk must reflect the union rather than the stale six-tool candidate."}},{"description":"","name":"create_board","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The documented live connector can modify persistent account content, so risk must reflect the union rather than the stale six-tool candidate."}},{"description":"","name":"update_board","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The documented live connector can modify persistent account content, so risk must reflect the union rather than the stale six-tool candidate."}},{"description":"","name":"save_items","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The documented live connector can modify persistent account content, so risk must reflect the union rather than the stale six-tool candidate."}},{"description":"","name":"remove_save_from_board","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The documented live connector can modify persistent account content, so risk must reflect the union rather than the stale six-tool candidate."}}],"tools_count":11,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ba7360a9-8061-4360-995d-b081c136e1e2","uuid":"66639f92-6e20-5830-a569-edfb570b20d7","verification_tier":"community","version":""},"query_key":"mcp savee com","schema_version":1,"status":"match"}