{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Explore Motivosity employee recognition and engagement data in Claude. Inspect surveys, rewards, budgets, organizational structure and reporting. Preview appreciation or awards and submit them with confirmation and permitted access.","did":"c27bbd7b-6939-40e1-a4a5-7e8d9e322419","documentation_url":"https://images.motivosity.com/logo/0a57255c-4179-13d6-8141-79ff4beb0002/77680109-4358-comp-806d-a4aca8009477.png","editorial_description":{"extended_description":"Available reporting includes recognition trends, eNPS, satisfaction surveys, login activity, turnover and program summaries. Employees and administrators can access only the information their Motivosity permissions allow, and giving tools include separate preview and submission steps.","schema_version":1,"summary":"Explore Motivosity employee recognition and engagement data in Claude.\nInspect surveys, rewards, budgets, organizational structure and reporting.\nPreview appreciation or awards and submit them with confirmation and permitted access."},"homepage_url":"","icon":"https://images.motivosity.com/logo/0a57255c-4179-13d6-8141-79ff4beb0002/77680109-4358-comp-806d-a4aca8009477.png","id":"c27bbd7b-6939-40e1-a4a5-7e8d9e322419","installs":0,"last_scanned":"","license":"","long_description":"Available reporting includes recognition trends, eNPS, satisfaction surveys, login activity, turnover and program summaries. Employees and administrators can access only the information their Motivosity permissions allow, and giving tools include separate preview and submission steps.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Submitting appreciation sends recognition content to another employee.","reasoning":"It communicates externally within the organization as the user.","risk_type":"messaging_as_user","severity":"high","title":"Submits employee recognition","triggering_tools_or_skills":["submitAppreciation"]},{"evidence":"The listing says confirmed awards can be submitted and the inventory exposes budgets/orders.","reasoning":"Giving an award can consume a company recognition budget or transfer redeemable value.","risk_type":"financial_transaction","severity":"high","title":"Gives employee awards","triggering_tools_or_skills":["submitAwardGive"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication respects employee/admin permissions over recognition, surveys, budgets and awards; award-value limits are unspecified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c27bbd7b-6939-40e1-a4a5-7e8d9e322419.json","what_it_proves":"Candidate PR #125 record identity (name \"Motivosity\", publisher, type web_connector) and 47 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c27bbd7b-6939-40e1-a4a5-7e8d9e322419: complete tool_names inventory (47 tools), remote streamable-http endpoint https://app.motivosity.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Motivosity submits employee appreciation and awards, potentially consuming recognition budgets and notifying recipients.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c27bbd7b-6939-40e1-a4a5-7e8d9e322419","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 47 names. Runtime verification should confirm preview/submit confirmation, recipient notification and award-budget impact.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":47,"tools_or_skills_total":47},"name":"Motivosity","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c27bbd7b-6939-40e1-a4a5-7e8d9e322419&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.motivosity.com/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Motivosity","publisher_url":"https://motivosity.com/","remote_url":"https://app.motivosity.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates externally within the organization as the user.","evidence":"Submits employee recognition: Submitting appreciation sends recognition content to another employee.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Submits employee recognition","triggering_tools":["submitAppreciation"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Giving an award can consume a company recognition budget or transfer redeemable value.","evidence":"Gives employee awards: The listing says confirmed awards can be submitted and the inventory exposes budgets/orders.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Gives employee awards","triggering_tools":["submitAwardGive"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@motivosity.com","tags":["network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"findAppreciationDetails"},{"description":"","name":"findAppreciationFlow"},{"description":"","name":"findAppreciationSummary"},{"description":"","name":"findAppreciationTrends"},{"description":"","name":"findBudgets"},{"description":"","name":"findCompanyValues"},{"description":"","name":"findDeletedUsers"},{"description":"","name":"findEnpsHeatmap"},{"description":"","name":"findEnpsTrends"},{"description":"","name":"findGivingAndReceiving"},{"description":"","name":"findHighlights"},{"description":"","name":"findInterestMap"},{"description":"","name":"findLoginDetails"},{"description":"","name":"findLoginHistory"},{"description":"","name":"findManagerAppreciation"},{"description":"","name":"findMv6"},{"description":"","name":"findOrgChart"},{"description":"","name":"findPersonalityMap"},{"description":"","name":"findProfileCompletion"},{"description":"","name":"findRecognitionAndPraise"},{"description":"","name":"findSatisfactionSemanticNotes"},{"description":"","name":"findSatisfactionSurveyResults"},{"description":"","name":"findServiceShoutoutDetails"},{"description":"","name":"findServiceShoutoutSummary"},{"description":"","name":"findStrengthsMap"},{"description":"","name":"findSurveyActivity"},{"description":"","name":"findSurveyReport"},{"description":"","name":"findTopGiversAndReceivers"},{"description":"","name":"findTurnover"},{"description":"","name":"getAppreciationGivingContext"},{"description":"","name":"getCurrentCompany"},{"description":"","name":"getCurrentUser"},{"description":"","name":"getEngagementDashboard"},{"description":"","name":"getProgramSummary"},{"description":"","name":"initAccessibleImpactAnalysis"},{"description":"","name":"listCountries"},{"description":"","name":"listCustomFields"},{"description":"","name":"listDepartments"},{"description":"","name":"listInsightDashboards"},{"description":"","name":"listInsightReports"},{"description":"","name":"listUserGroups"},{"description":"","name":"previewAppreciation"},{"description":"","name":"previewAwardGive"},{"description":"","name":"searchAvailableAwards"},{"description":"","name":"searchUsers"},{"description":"","name":"submitAppreciation","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates externally within the organization as the user."}},{"description":"","name":"submitAwardGive","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Giving an award can consume a company recognition budget or transfer redeemable value."}}],"tools_count":47,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c27bbd7b-6939-40e1-a4a5-7e8d9e322419","uuid":"062c0289-d00f-56b5-9f1d-2bfd04a65bd1","verification_tier":"community","version":""},"query_key":"motivosity motivosity","schema_version":1,"status":"match"}