{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Memories.ai makes your indexed video library searchable by scenes, speech, or captions. Upload videos, retrieve transcripts, analyze videos or images, and transcribe audio. Connect your Memories.ai account to work with its library.","did":"e7c198a1-464e-4b40-9691-34f03762705e","documentation_url":"https://github.com/OpenInterX-Products/memories-ai-plugin","editorial_description":{"extended_description":"Search public social videos, retrieve individual-video metadata, or search exact transcript text. Library tools list indexed videos and delete them; new uploads must finish indexing before search.","schema_version":1,"summary":"Memories.ai makes your indexed video library searchable by scenes, speech, or captions.\nUpload videos, retrieve transcripts, analyze videos or images, and transcribe audio.\nConnect your Memories.ai account to work with its library."},"homepage_url":"","icon":"","id":"e7c198a1-464e-4b40-9691-34f03762705e","installs":0,"last_scanned":"","license":"","long_description":"Search public social videos, retrieve individual-video metadata, or search exact transcript text. Library tools list indexed videos and delete them; new uploads must finish indexing before search.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes delete_videos, while the listing says users can manage their private video library and delete videos.","reasoning":"Deleting indexed videos removes user-owned library data and may destroy indexing work, so confirmation and recovery behavior require runtime verification.","risk_type":"data_deletion","severity":"high","title":"Indexed videos can be deleted","triggering_tools_or_skills":["delete_videos"]},{"evidence":"The named tools upload a local file, ingest a public video URL, and submit audio for transcription into the Memories.ai service.","reasoning":"These actions persist or process user-selected media in a third-party account but do not themselves publish it to other people.","risk_type":"data_modification","severity":"medium","title":"Videos and audio can be uploaded or indexed","triggering_tools_or_skills":["upload_video_from_file","upload_video_from_url","transcribe_audio"]},{"evidence":"The listing documents analysis and scraping by video or image URL and indexing of any public video URL.","reasoning":"User-controlled URLs cause the remote service to fetch external resources, so destination controls and private-address blocking should be tested.","risk_type":"arbitrary_network_access","severity":"low","title":"User-provided media URLs are fetched","triggering_tools_or_skills":["upload_video_from_url","analyze_video","analyze_image","scrape_social_video"]},{"evidence":"Search, scraping, transcript, and caption tools return public social-video and user-library content to Claude.","reasoning":"Video transcripts and captions are untrusted content that can contain instructions intended to influence the model.","risk_type":"prompt_injection_exposure","severity":"low","title":"External transcripts and captions enter context","triggering_tools_or_skills":["search_web_videos","scrape_social_video","get_audio_transcription","get_video_caption"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth connects the user's Memories.ai account and private indexed-video library; exact OAuth scopes are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e7c198a1-464e-4b40-9691-34f03762705e.json","what_it_proves":"Candidate PR #125 record identity (name \"Memories.ai\", publisher, type web_connector) and 16 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e7c198a1-464e-4b40-9691-34f03762705e: complete tool_names inventory (16 tools), remote streamable-http endpoint https://mcp.memories.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Memories.ai can delete private indexed videos and ingest user-selected media and URLs.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e7c198a1-464e-4b40-9691-34f03762705e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 16 named tools; input schemas, delete recovery, OAuth scopes, and URL-fetch restrictions are not present in the packet.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":16,"tools_or_skills_total":16},"name":"Memories.ai","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e7c198a1-464e-4b40-9691-34f03762705e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://memories.ai/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Memories.ai","publisher_url":"https://memories.ai/","remote_url":"https://mcp.memories.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting indexed videos removes user-owned library data and may destroy indexing work, so confirmation and recovery behavior require runtime verification.","evidence":"Indexed videos can be deleted: The inventory explicitly exposes delete_videos, while the listing says users can manage their private video library and delete videos.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Indexed videos can be deleted","triggering_tools":["delete_videos"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist or process user-selected media in a third-party account but do not themselves publish it to other people.","evidence":"Videos and audio can be uploaded or indexed: The named tools upload a local file, ingest a public video URL, and submit audio for transcription into the Memories.ai service.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Videos and audio can be uploaded or indexed","triggering_tools":["upload_video_from_file","upload_video_from_url","transcribe_audio"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: User-controlled URLs cause the remote service to fetch external resources, so destination controls and private-address blocking should be tested.","evidence":"User-provided media URLs are fetched: The listing documents analysis and scraping by video or image URL and indexing of any public video URL.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"User-provided media URLs are fetched","triggering_tools":["upload_video_from_url","analyze_video","analyze_image","scrape_social_video"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@memories.ai","tags":["deletes_data","forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"analyze_image"},{"description":"","name":"analyze_video"},{"description":"","name":"delete_videos","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting indexed videos removes user-owned library data and may destroy indexing work, so confirmation and recovery behavior require runtime verification."}},{"description":"","name":"get_audio_transcription"},{"description":"","name":"get_video_caption"},{"description":"","name":"get_video_metadata"},{"description":"","name":"list_unique_ids"},{"description":"","name":"list_videos"},{"description":"","name":"scrape_social_video"},{"description":"","name":"search_audio_transcripts"},{"description":"","name":"search_public_videos"},{"description":"","name":"search_videos"},{"description":"","name":"search_web_videos"},{"description":"","name":"transcribe_audio","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist or process user-selected media in a third-party account but do not themselves publish it to other people."}},{"description":"","name":"upload_video_from_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist or process user-selected media in a third-party account but do not themselves publish it to other people."}},{"description":"","name":"upload_video_from_url","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions persist or process user-selected media in a third-party account but do not themselves publish it to other people."}}],"tools_count":16,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e7c198a1-464e-4b40-9691-34f03762705e","uuid":"15477db6-2c7d-5032-8645-6ffcf91b2445","verification_tier":"community","version":""},"query_key":"memories ai","schema_version":1,"status":"match"}