{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Moda gives Claude an editable design canvas for presentations and marketing assets. Create or revise layered designs, apply brands, and share work. Export presentations to PowerPoint or Google Slides and produce PDFs or visual assets.","did":"ea86601d-514b-42e4-aefc-32c6c51baf7e","documentation_url":"https://docs.moda.app/agents/mcp-connector","editorial_description":{"extended_description":"Work on sales collateral, social graphics, print layouts, websites, and motion graphics. Tools manage canvases, files, templates, and brands, with media processing and team sharing.","schema_version":1,"summary":"Moda gives Claude an editable design canvas for presentations and marketing assets.\nCreate or revise layered designs, apply brands, and share work.\nExport presentations to PowerPoint or Google Slides and produce PDFs or visual assets."},"homepage_url":"","icon":"","id":"ea86601d-514b-42e4-aefc-32c6c51baf7e","installs":0,"last_scanned":"","license":"","long_description":"Work on sales collateral, social graphics, print layouts, websites, and motion graphics. Tools manage canvases, files, templates, and brands, with media processing and team sharing.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes canvas_delete and drive_delete for authenticated design and drive content.","reasoning":"These actions remove editable creative work or stored assets and may be irreversible or disruptive to collaborators.","risk_type":"data_deletion","severity":"high","title":"Canvases and drive resources can be deleted","triggering_tools_or_skills":["canvas_delete","drive_delete"]},{"evidence":"The tools create and edit layered canvases, modify brand definitions, upload source files, and export deliverables.","reasoning":"They write persistent creative and file-like resources in the connected Moda workspace.","risk_type":"file_write","severity":"medium","title":"Designs, brands, files, and exports can be created or changed","triggering_tools_or_skills":["canvas_create","canvas_edit","canvas_apply_markup","brand_create","brand_update","upload","export"]},{"evidence":"media_fetch_logo is a named retrieval tool in a connector that imports assets into designs.","reasoning":"Its destination inputs are not shown, so runtime validation should confirm which external hosts or URLs it may contact.","risk_type":"arbitrary_network_access","severity":"low","title":"External logos and media can be fetched","triggering_tools_or_skills":["media_fetch_logo"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to Moda team designs, brands, files, and drive resources; exact roles and scopes are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ea86601d-514b-42e4-aefc-32c6c51baf7e.json","what_it_proves":"Candidate PR #125 record identity (name \"Moda - Slides and Designs\", publisher, type interactive_connector) and 38 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ea86601d-514b-42e4-aefc-32c6c51baf7e: complete tool_names inventory (38 tools), remote streamable-http endpoint https://agents.moda.app/mcp, auth_posture auth_required, directory tier partner"}],"primary_reason":"Moda can delete and extensively modify editable designs, drive content, and branded assets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:ea86601d-514b-42e4-aefc-32c6c51baf7e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 38 tools; site_show/site_list do not establish publishing, and task_delegate semantics need runtime verification.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":38,"tools_or_skills_total":38},"name":"Moda - Slides and Designs","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ea86601d-514b-42e4-aefc-32c6c51baf7e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://moda.app/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Moda","publisher_url":"https://moda.app/","remote_url":"https://agents.moda.app/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions remove editable creative work or stored assets and may be irreversible or disruptive to collaborators.","evidence":"Canvases and drive resources can be deleted: The inventory explicitly exposes canvas_delete and drive_delete for authenticated design and drive content.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Canvases and drive resources can be deleted","triggering_tools":["canvas_delete","drive_delete"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace.","evidence":"Designs, brands, files, and exports can be created or changed: The tools create and edit layered canvases, modify brand definitions, upload source files, and export deliverables.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Designs, brands, files, and exports can be created or changed","triggering_tools":["canvas_create","canvas_edit","canvas_apply_markup","brand_create","brand_update","upload","export"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Its destination inputs are not shown, so runtime validation should confirm which external hosts or URLs it may contact.","evidence":"External logos and media can be fetched: media_fetch_logo is a named retrieval tool in a connector that imports assets into designs.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"External logos and media can be fetched","triggering_tools":["media_fetch_logo"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@moda.app","tags":["deletes_data","filesystem_access","forwards_data_to_third_party","interactive_connector","network_access","oauth_required"],"tools":[{"description":"","name":"ask_expert"},{"description":"","name":"brand_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace."}},{"description":"","name":"brand_list"},{"description":"","name":"brand_show"},{"description":"","name":"brand_update","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace."}},{"description":"","name":"canvas_apply_markup","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace."}},{"description":"","name":"canvas_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace."}},{"description":"","name":"canvas_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove editable creative work or stored assets and may be irreversible or disruptive to collaborators."}},{"description":"","name":"canvas_edit","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace."}},{"description":"","name":"canvas_edit_image"},{"description":"","name":"canvas_import_pages"},{"description":"","name":"canvas_list"},{"description":"","name":"canvas_read"},{"description":"","name":"canvas_screenshot"},{"description":"","name":"canvas_search"},{"description":"","name":"canvas_share"},{"description":"","name":"canvas_update"},{"description":"","name":"drive_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove editable creative work or stored assets and may be irreversible or disruptive to collaborators."}},{"description":"","name":"drive_organize"},{"description":"","name":"drive_tree"},{"description":"","name":"edit_apply"},{"description":"","name":"edit_read"},{"description":"","name":"export","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace."}},{"description":"","name":"file_list"},{"description":"","name":"file_read"},{"description":"","name":"file_search"},{"description":"","name":"load_skill"},{"description":"","name":"media_fetch_logo"},{"description":"","name":"media_remove_background"},{"description":"","name":"media_video_frames"},{"description":"","name":"moda_bootstrap"},{"description":"","name":"site_list"},{"description":"","name":"site_show"},{"description":"","name":"task_cancel"},{"description":"","name":"task_delegate"},{"description":"","name":"task_status"},{"description":"","name":"template_list"},{"description":"","name":"upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write persistent creative and file-like resources in the connected Moda workspace."}}],"tools_count":38,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/ea86601d-514b-42e4-aefc-32c6c51baf7e","uuid":"1532587e-b37e-5c5f-81bf-13d5ca098705","verification_tier":"partner","version":""},"query_key":"moda slides and designs","schema_version":1,"status":"match"}