{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to SendSeven customer conversations and messaging channels. Read, assign or organize conversations and send replies or campaigns. Work across connected channels such as WhatsApp, email, Instagram, Telegram and SMS.","did":"b7640f5d-cb10-49f0-83c9-aafe22942e99","documentation_url":"https://docs.sendseven.com/","editorial_description":{"extended_description":"Tools manage contacts, tags, attachments and webhooks, retrieve campaign analytics and query the knowledge base. They can send team-chat messages or conversation transcripts and close, reopen or snooze conversations.","schema_version":1,"summary":"Connects Claude to SendSeven customer conversations and messaging channels.\nRead, assign or organize conversations and send replies or campaigns.\nWork across connected channels such as WhatsApp, email, Instagram, Telegram and SMS."},"homepage_url":"","icon":"","id":"b7640f5d-cb10-49f0-83c9-aafe22942e99","installs":0,"last_scanned":"","license":"","long_description":"Tools manage contacts, tags, attachments and webhooks, retrieve campaign analytics and query the knowledge base. They can send team-chat messages or conversation transcripts and close, reopen or snooze conversations.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly names campaign, email, contact, reply, team-chat and WhatsApp sending tools.","reasoning":"These actions send external communications as the connected organization across multiple channels.","risk_type":"messaging_as_user","severity":"high","title":"Sends campaigns and multichannel messages","triggering_tools_or_skills":["create_and_send_campaign","send_email","send_message_to_contact","send_reply","send_team_chat_channel_message","send_team_chat_direct_message","send_whatsapp_template"]},{"evidence":"The declared delete_webhook tool removes a webhook from the user's SendSeven configuration.","reasoning":"Deleting an integration endpoint is destructive configuration change with potentially material automation impact.","risk_type":"data_deletion","severity":"high","title":"Deletes messaging webhooks","triggering_tools_or_skills":["delete_webhook"]},{"evidence":"Named tools create/update contacts, assign and close conversations, apply tags and create webhooks.","reasoning":"These operations change meaningful customer-service and integration records.","risk_type":"data_modification","severity":"medium","title":"Changes contacts and conversation state","triggering_tools_or_skills":["assign_conversation","close_conversation","create_contact","create_webhook","tag_contact","update_contact"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for a SendSeven account; the packet does not document channel-specific scopes, recipient restrictions or campaign approval gates.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b7640f5d-cb10-49f0-83c9-aafe22942e99.json","what_it_proves":"Candidate PR #125 record identity (name \"mcp.sendseven.com\", publisher, type web_connector) and 42 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b7640f5d-cb10-49f0-83c9-aafe22942e99: complete tool_names inventory (42 tools), remote streamable-http endpoint https://mcp.sendseven.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"SendSeven can send campaigns and direct messages through many channels and delete webhook configuration.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b7640f5d-cb10-49f0-83c9-aafe22942e99","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 42 tools. Runtime verification should confirm recipient previews, campaign confirmation, attachment handling and authorization per channel.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":42,"tools_or_skills_total":42},"name":"mcp.sendseven.com","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b7640f5d-cb10-49f0-83c9-aafe22942e99&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://sendseven.com/en/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"SendSeven GmbH","publisher_url":"https://sendseven.com/","remote_url":"https://mcp.sendseven.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels.","evidence":"Sends campaigns and multichannel messages: The inventory explicitly names campaign, email, contact, reply, team-chat and WhatsApp sending tools.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends campaigns and multichannel messages","triggering_tools":["create_and_send_campaign","send_email","send_message_to_contact","send_reply","send_team_chat_channel_message","send_team_chat_direct_message","send_whatsapp_template"]},{"description":"This connector can permanently remove data or resources. Review findings: Deleting an integration endpoint is destructive configuration change with potentially material automation impact.","evidence":"Deletes messaging webhooks: The declared delete_webhook tool removes a webhook from the user's SendSeven configuration.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes messaging webhooks","triggering_tools":["delete_webhook"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations change meaningful customer-service and integration records.","evidence":"Changes contacts and conversation state: Named tools create/update contacts, assign and close conversations, apply tags and create webhooks.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes contacts and conversation state","triggering_tools":["assign_conversation","close_conversation","create_contact","create_webhook","tag_contact","update_contact"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@sendseven.com","tags":["accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_internal_note"},{"description":"","name":"assign_conversation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations change meaningful customer-service and integration records."}},{"description":"","name":"close_conversation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations change meaningful customer-service and integration records."}},{"description":"","name":"create_and_send_campaign","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels."}},{"description":"","name":"create_contact","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations change meaningful customer-service and integration records."}},{"description":"","name":"create_tag"},{"description":"","name":"create_webhook","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations change meaningful customer-service and integration records."}},{"description":"","name":"delete_webhook","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting an integration endpoint is destructive configuration change with potentially material automation impact."}},{"description":"","name":"email_conversation_transcript"},{"description":"","name":"get_campaign_status"},{"description":"","name":"get_conversation"},{"description":"","name":"get_email_campaign_analytics"},{"description":"","name":"get_whatsapp_template"},{"description":"","name":"list_campaigns"},{"description":"","name":"list_channels"},{"description":"","name":"list_contact_lists"},{"description":"","name":"list_conversations"},{"description":"","name":"list_email_campaigns"},{"description":"","name":"list_email_mailboxes"},{"description":"","name":"list_knowledge_base_folders"},{"description":"","name":"list_tags"},{"description":"","name":"list_team_chat_channels"},{"description":"","name":"list_team_members"},{"description":"","name":"list_verified_email_domains"},{"description":"","name":"list_webhooks"},{"description":"","name":"list_whatsapp_templates"},{"description":"","name":"query_knowledge_base"},{"description":"","name":"reopen_conversation"},{"description":"","name":"search_contacts"},{"description":"","name":"send_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels."}},{"description":"","name":"send_message_to_contact","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels."}},{"description":"","name":"send_reply","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels."}},{"description":"","name":"send_team_chat_channel_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels."}},{"description":"","name":"send_team_chat_direct_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels."}},{"description":"","name":"send_whatsapp_template","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions send external communications as the connected organization across multiple channels."}},{"description":"","name":"snooze_conversation"},{"description":"","name":"tag_contact","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations change meaningful customer-service and integration records."}},{"description":"","name":"tag_conversation"},{"description":"","name":"untag_contact"},{"description":"","name":"untag_conversation"},{"description":"","name":"update_contact","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations change meaningful customer-service and integration records."}},{"description":"","name":"upload_attachment"}],"tools_count":42,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b7640f5d-cb10-49f0-83c9-aafe22942e99","uuid":"fa6fe2ee-e28e-5f00-94c8-57992374b270","verification_tier":"community","version":""},"query_key":"mcp sendseven com","schema_version":1,"status":"match"}