{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"high","description":"Search and synthesize meetings, calls and recordings saved in Wave. Retrieve speaker-labeled transcripts and compare decisions or themes across sessions. Update action items and organize sessions, without editing transcripts or deleting recordings.","did":"c99b48b8-91a5-4454-87a9-638a52d36a9c","documentation_url":"https://api.wave.co/mcp","editorial_description":{"extended_description":"Meaning-based search covers titles, summaries and transcripts. Folder tools support creation, membership changes and organization; session-sharing tools manage access to selected recordings. The connection is limited to the single Wave account you authorize and can be disconnected in settings.","schema_version":1,"summary":"Search and synthesize meetings, calls and recordings saved in Wave.\nRetrieve speaker-labeled transcripts and compare decisions or themes across sessions.\nUpdate action items and organize sessions, without editing transcripts or deleting recordings."},"homepage_url":"","icon":"","id":"c99b48b8-91a5-4454-87a9-638a52d36a9c","installs":0,"last_scanned":"","license":"","long_description":"Meaning-based search covers titles, summaries and transcripts. Folder tools support creation, membership changes and organization; session-sharing tools manage access to selected recordings. The connection is limited to the single Wave account you authorize and can be disconnected in settings.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs state share_session emails 1–10 recipients an invite and optional message, or creates a share link.","reasoning":"Emailing invitations and granting external access acts as the user and is High impact.","risk_type":"messaging_as_user","severity":"high","title":"Current Wave MCP can email session invitations","triggering_tools_or_skills":["share_session"]},{"evidence":"Current docs describe granting read access, cancelling pending invites, revoking a person, or resetting all access/share links.","reasoning":"Changing other people's access to recordings is a powerful authorization action.","risk_type":"credential_admin","severity":"high","title":"Session access can be granted or revoked","triggering_tools_or_skills":["share_session","unshare_session"]},{"evidence":"Official docs list delete_folder as irreversible, while preserving the sessions themselves.","reasoning":"Deleting an organizational resource is destructive even though recordings remain.","risk_type":"data_deletion","severity":"high","title":"Current Wave MCP can delete folders","triggering_tools_or_skills":["delete_folder"]},{"evidence":"Official docs list 18 tools; the Directory packet lists 12 and omits the six named current actions.","reasoning":"The catalog must rate the union and refresh its inventory so the High share/access/deletion surface is visible.","risk_type":"identity_discrepancy","severity":"low","title":"Directory inventory is missing six current tools","triggering_tools_or_skills":["list_shared_sessions","list_session_access","update_folder","delete_folder","share_session","unshare_session"]},{"evidence":"The connector runs at https://mcp.wave.co/ without a pinned server implementation in the packet.","reasoning":"The hosted implementation and tool behavior can change independently of this snapshot, so monitoring and runtime verification remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Wave AI Note Taker is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Wave documents OAuth 2.0 with PKCE, user-scoped mcp:read/mcp:write permissions, and read-only shared sessions.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c99b48b8-91a5-4454-87a9-638a52d36a9c.json","what_it_proves":"Candidate PR #125 record identity (name \"Wave AI Note Taker\", publisher, type interactive_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c99b48b8-91a5-4454-87a9-638a52d36a9c: complete tool_names inventory (12 tools), remote streamable-http endpoint https://mcp.wave.co/, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:04:12Z","url_or_path":"https://api.wave.co/mcp","what_it_proves":"Wave's current official reference lists 18 tools, including share_session, unshare_session and delete_folder, while the Directory packet contains only 12."}],"primary_reason":"Wave's current official tool set can email shares, change recording access and delete folders, but those actions are absent from the catalog inventory.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:c99b48b8-91a5-4454-87a9-638a52d36a9c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 12 Directory names and the official 18-tool reference. fetch is Wave-session retrieval, not arbitrary URL access. The stale inventory requires a fix.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"Wave AI Note Taker","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c99b48b8-91a5-4454-87a9-638a52d36a9c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://wave.co/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Mohrer Associates","publisher_url":"https://wave.co/","remote_url":"https://mcp.wave.co/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Emailing invitations and granting external access acts as the user and is High impact.","evidence":"Current Wave MCP can email session invitations: Official docs state share_session emails 1–10 recipients an invite and optional message, or creates a share link.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Current Wave MCP can email session invitations","triggering_tools":["share_session"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing other people's access to recordings is a powerful authorization action.","evidence":"Session access can be granted or revoked: Current docs describe granting read access, cancelling pending invites, revoking a person, or resetting all access/share links.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Session access can be granted or revoked","triggering_tools":["share_session","unshare_session"]},{"description":"This connector can permanently remove data or resources. Review findings: Deleting an organizational resource is destructive even though recordings remain.","evidence":"Current Wave MCP can delete folders: Official docs list delete_folder as irreversible, while preserving the sessions themselves.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Current Wave MCP can delete folders","triggering_tools":["delete_folder"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@wave.co","tags":["deletes_data","interactive_connector","modifies_data","network_access","oauth_required","sends_messages_as_you"],"tools":[{"description":"","name":"add_session_to_folder"},{"description":"","name":"create_folder"},{"description":"","name":"fetch"},{"description":"","name":"get_action_items"},{"description":"","name":"get_session"},{"description":"","name":"get_transcript"},{"description":"","name":"list_folders"},{"description":"","name":"list_sessions"},{"description":"","name":"remove_session_from_folder"},{"description":"","name":"search"},{"description":"","name":"search_sessions"},{"description":"","name":"update_action_items"},{"description":"","name":"share_session","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing other people's access to recordings is a powerful authorization action."}},{"description":"","name":"unshare_session","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing other people's access to recordings is a powerful authorization action."}},{"description":"","name":"delete_folder","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting an organizational resource is destructive even though recordings remain."}},{"description":"","name":"list_shared_sessions"},{"description":"","name":"list_session_access"},{"description":"","name":"update_folder"}],"tools_count":18,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/c99b48b8-91a5-4454-87a9-638a52d36a9c","uuid":"2b6345ff-7e75-55a3-b54b-a946f91ea60a","verification_tier":"community","version":""},"query_key":"mohrer associates wave ai note taker","schema_version":1,"status":"match"}