{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Stores shared AI memory and conversation context through MemoryPlugin. Save or search memories, recall synced chats and find uploaded files. An account is required, with memories available across tools connected to that account.","did":"bb62b41f-7e32-466d-b1c0-3161034e26a3","documentation_url":"https://help.memoryplugin.com/integrations/remote-mcp-server","editorial_description":{"extended_description":"Buckets organize work, personal and project context. Tools create buckets, update or move memories, retrieve full conversations or summaries, and export conversations. Chat-history search covers material synced into MemoryPlugin, not every chat on your device.","schema_version":1,"summary":"Stores shared AI memory and conversation context through MemoryPlugin.\nSave or search memories, recall synced chats and find uploaded files.\nAn account is required, with memories available across tools connected to that account."},"homepage_url":"","icon":"","id":"bb62b41f-7e32-466d-b1c0-3161034e26a3","installs":0,"last_scanned":"","license":"","long_description":"Buckets organize work, personal and project context. Tools create buckets, update or move memories, retrieve full conversations or summaries, and export conversations. Chat-history search covers material synced into MemoryPlugin, not every chat on your device.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official docs and declared tools establish persistent bucket/memory creation and update/move operations.","reasoning":"These tools modify user-owned knowledge data without a declared destructive action.","risk_type":"data_modification","severity":"medium","title":"Writes persistent memory records","triggering_tools_or_skills":["create_bucket","store_memory","update_or_move_memories"]},{"evidence":"Official documentation describes access to saved conversations and uploaded file search.","reasoning":"The connector can expose private conversational and file-derived content to the model.","risk_type":"private_data_read","severity":"low","title":"Reads chat history and uploaded-file content","triggering_tools_or_skills":["recall_chat_history","get_full_conversation","search_uploaded_files"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.0 with PKCE is documented; access covers the user's MemoryPlugin memories, buckets, chat history and uploaded-file search.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/bb62b41f-7e32-466d-b1c0-3161034e26a3.json","what_it_proves":"Candidate PR #125 record identity (name \"MemoryPlugin\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/bb62b41f-7e32-466d-b1c0-3161034e26a3: complete tool_names inventory (14 tools), remote streamable-http endpoint https://www.memoryplugin.com/api/mcp/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:56:14Z","url_or_path":"https://help.memoryplugin.com/integrations/remote-mcp-server","what_it_proves":"Official docs confirm OAuth, persistent memories/buckets, chat-history retrieval and uploaded-file search."}],"primary_reason":"MemoryPlugin stores memories, creates buckets and updates or moves persistent memory entries.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:bb62b41f-7e32-466d-b1c0-3161034e26a3","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 14 names and official remote-MCP documentation. No delete/send/deploy capability is declared; runtime verification should confirm export_conversation only returns data to Claude.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"MemoryPlugin","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=bb62b41f-7e32-466d-b1c0-3161034e26a3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.memoryplugin.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"MemoryPlugin","publisher_url":"https://www.memoryplugin.com/","remote_url":"https://www.memoryplugin.com/api/mcp/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools modify user-owned knowledge data without a declared destructive action.","evidence":"Writes persistent memory records: Official docs and declared tools establish persistent bucket/memory creation and update/move operations.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Writes persistent memory records","triggering_tools":["create_bucket","store_memory","update_or_move_memories"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The connector can expose private conversational and file-derived content to the model.","evidence":"Reads chat history and uploaded-file content: Official documentation describes access to saved conversations and uploaded file search.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads chat history and uploaded-file content","triggering_tools":["recall_chat_history","get_full_conversation","search_uploaded_files"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@memoryplugin.com","tags":["accesses_messaging","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"chat_history_overview"},{"description":"","name":"create_bucket","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools modify user-owned knowledge data without a declared destructive action."}},{"description":"","name":"export_conversation"},{"description":"","name":"get_conversation_summary"},{"description":"","name":"get_full_conversation"},{"description":"","name":"get_memories_and_buckets"},{"description":"","name":"list_bucket_categories"},{"description":"","name":"list_buckets"},{"description":"","name":"list_category_memories"},{"description":"","name":"recall_chat_history"},{"description":"","name":"search_memories"},{"description":"","name":"search_uploaded_files"},{"description":"","name":"store_memory","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools modify user-owned knowledge data without a declared destructive action."}},{"description":"","name":"update_or_move_memories","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These tools modify user-owned knowledge data without a declared destructive action."}}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/bb62b41f-7e32-466d-b1c0-3161034e26a3","uuid":"e4d2b5d4-99de-566e-947d-2cec1489fc04","verification_tier":"community","version":""},"query_key":"memoryplugin memoryplugin","schema_version":1,"status":"match"}