{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Revise lets you and Claude collaborate on documents. Draft, import, edit, format, and export content, including DOCX and PDF workflows. AI edits appear as revisions you can review, accept, or reject.","did":"f53fc7e1-e71a-4b93-a36d-795349f436c0","documentation_url":"https://revise.io/help/mcp-server","editorial_description":{"extended_description":"Find existing or open documents, inspect recent changes and outlines, rename files, or invite collaborators. Tools can replace document content and delete documents.","schema_version":1,"summary":"Revise lets you and Claude collaborate on documents.\nDraft, import, edit, format, and export content, including DOCX and PDF workflows.\nAI edits appear as revisions you can review, accept, or reject."},"homepage_url":"","icon":"https://revise.io/revise-512x512.png","id":"f53fc7e1-e71a-4b93-a36d-795349f436c0","installs":0,"last_scanned":"","license":"","long_description":"Find existing or open documents, inspect recent changes and outlines, rename files, or invite collaborators. Tools can replace document content and delete documents.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes delete_document for the authenticated Revise account.","reasoning":"Deleting a collaborative document can remove user and team work despite revision review for edits.","risk_type":"data_deletion","severity":"high","title":"Documents can be deleted","triggering_tools_or_skills":["delete_document"]},{"evidence":"The connector can invite another person to a document.","reasoning":"Inviting grants external or internal access to potentially confidential content and is an access-control action.","risk_type":"credential_admin","severity":"high","title":"Collaborators can be invited","triggering_tools_or_skills":["invite_collaborator"]},{"evidence":"The tools write full document content and layout and import DOCX/PDF files into live collaborative documents.","reasoning":"These operations change shared records, although Revise's red/green workflow lets users review AI edits.","risk_type":"data_modification","severity":"medium","title":"Documents can be created, imported, uploaded, edited, replaced, and reformatted","triggering_tools_or_skills":["create_document","import_document","upload_document","edit_document","replace_document_content","set_page_layout"]},{"evidence":"The connector reads documents, outlines, search results, open-document state, and recent changes.","reasoning":"Documents may contain confidential business or personal information.","risk_type":"private_data_read","severity":"medium","title":"Collaborative document content and history are exposed","triggering_tools_or_skills":["read_document","search_documents","get_recent_changes","get_document_outline"]},{"evidence":"Documents can originate from collaborators or imported DOCX/PDF content.","reasoning":"Document text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Uploaded and collaborator-authored text enters context","triggering_tools_or_skills":["read_document","import_document","upload_document"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to Revise collaborative documents, uploads, exports, and collaborators; exact workspace roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f53fc7e1-e71a-4b93-a36d-795349f436c0.json","what_it_proves":"Candidate PR #125 record identity (name \"Revise\", publisher, type web_connector) and 18 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f53fc7e1-e71a-4b93-a36d-795349f436c0: complete tool_names inventory (18 tools), remote streamable-http endpoint https://mcp.revise.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Revise can delete documents, invite collaborators, and broadly rewrite shared document content.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f53fc7e1-e71a-4b93-a36d-795349f436c0","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 18 tools; no public-share link or outbound messaging tool beyond collaborator invitation is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":18,"tools_or_skills_total":18},"name":"Revise","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f53fc7e1-e71a-4b93-a36d-795349f436c0&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://revise.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Migraine, Inc.","publisher_url":"https://revise.io/","remote_url":"https://mcp.revise.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a collaborative document can remove user and team work despite revision review for edits.","evidence":"Documents can be deleted: The inventory explicitly exposes delete_document for the authenticated Revise account.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Documents can be deleted","triggering_tools":["delete_document"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits.","evidence":"Collaborators can be invited: The connector can invite another person to a document. | Documents can be created, imported, uploaded, edited, replaced, and reformatted: The tools write full document content and layout and import DOCX/PDF files into live collaborative documents.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["invite_collaborator","create_document","import_document","upload_document","edit_document","replace_document_content","set_page_layout"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Documents may contain confidential business or personal information.","evidence":"Collaborative document content and history are exposed: The connector reads documents, outlines, search results, open-document state, and recent changes.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Collaborative document content and history are exposed","triggering_tools":["read_document","search_documents","get_recent_changes","get_document_outline"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@revise.io","tags":["deletes_data","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"create_document","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits."}},{"description":"","name":"delete_document","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a collaborative document can remove user and team work despite revision review for edits."}},{"description":"","name":"edit_document","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits."}},{"description":"","name":"export_document"},{"description":"","name":"get_document_info"},{"description":"","name":"get_document_outline","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Documents may contain confidential business or personal information."}},{"description":"","name":"get_recent_changes","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Documents may contain confidential business or personal information."}},{"description":"","name":"import_document","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits."}},{"description":"","name":"invite_collaborator","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits."}},{"description":"","name":"list_documents"},{"description":"","name":"list_open_documents"},{"description":"","name":"read_document","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Documents may contain confidential business or personal information."}},{"description":"","name":"rename_document"},{"description":"","name":"replace_document_content","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits."}},{"description":"","name":"search_documents","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Documents may contain confidential business or personal information."}},{"description":"","name":"search_within_document"},{"description":"","name":"set_page_layout","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits."}},{"description":"","name":"upload_document","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Inviting grants external or internal access to potentially confidential content and is an access-control action.; These operations change shared records, although Revise's red/green workflow lets users review AI edits."}}],"tools_count":18,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f53fc7e1-e71a-4b93-a36d-795349f436c0","uuid":"31a95175-8e85-56f5-a80f-8ac7c5143c18","verification_tier":"community","version":""},"query_key":"migraine inc revise","schema_version":1,"status":"match"}