{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-08","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"MultiLocale manages localized product copy in your organization. Search phrase keys, compare locales, audit missing or duplicate translations, and export dictionaries. Apply approved changes to projects, phrases, sharing, and locales through the authenticated account.","did":"56fa4660-270e-4edb-99e3-a162b79f3d51","documentation_url":"https://www.multilocale.com/integrations/mcp-server/","editorial_description":{"extended_description":"Tools create projects and phrases, add locales, update or delete phrases, and list team members. Inline views provide a project overview or details for an exact phrase key.","schema_version":1,"summary":"MultiLocale manages localized product copy in your organization.\nSearch phrase keys, compare locales, audit missing or duplicate translations, and export dictionaries.\nApply approved changes to projects, phrases, sharing, and locales through the authenticated account."},"homepage_url":"","icon":"","id":"56fa4660-270e-4edb-99e3-a162b79f3d51","installs":0,"last_scanned":"","license":"","long_description":"Tools create projects and phrases, add locales, update or delete phrases, and list team members. Inline views provide a project overview or details for an exact phrase key.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Tool explicitly deletes phrase data.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Deletes translation phrases","triggering_tools_or_skills":["delete_phrase"]},{"evidence":"Tool explicitly shares a phrase externally.","reasoning":"External sharing is High.","risk_type":"messaging_as_user","severity":"high","title":"Shares phrase content","triggering_tools_or_skills":["share_phrase"]},{"evidence":"Tools persist localization changes.","reasoning":"Meaningful changes are Medium.","risk_type":"data_modification","severity":"medium","title":"Creates and edits locales/projects/phrases","triggering_tools_or_skills":["add_locale","add_project","add_phrase","update_phrase"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability may drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/56fa4660-270e-4edb-99e3-a162b79f3d51.json","what_it_proves":"Candidate PR #125 record identity (name \"MultiLocale\", publisher, type web_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/56fa4660-270e-4edb-99e3-a162b79f3d51: complete tool_names inventory (17 tools), remote streamable-http endpoint https://mcp.multilocale.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"MultiLocale deletes phrases and shares localization data while editing project content.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:56fa4660-270e-4edb-99e3-a162b79f3d51","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"MultiLocale","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=56fa4660-270e-4edb-99e3-a162b79f3d51&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.multilocale.com/en/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Waiterio LLC","publisher_url":"https://www.multilocale.com/","remote_url":"https://mcp.multilocale.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Deletes translation phrases: Tool explicitly deletes phrase data.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes translation phrases","triggering_tools":["delete_phrase"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External sharing is High.","evidence":"Shares phrase content: Tool explicitly shares a phrase externally.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Shares phrase content","triggering_tools":["share_phrase"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful changes are Medium.","evidence":"Creates and edits locales/projects/phrases: Tools persist localization changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and edits locales/projects/phrases","triggering_tools":["add_locale","add_project","add_phrase","update_phrase"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.multilocale.com/en/contact/","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_locale","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful changes are Medium."}},{"description":"","name":"add_phrase","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful changes are Medium."}},{"description":"","name":"add_project","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful changes are Medium."}},{"description":"","name":"delete_phrase","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"export_locale_dictionary"},{"description":"","name":"find_duplicate_phrase_values"},{"description":"","name":"find_missing_translations"},{"description":"","name":"get_phrase"},{"description":"","name":"get_project"},{"description":"","name":"list_phrases"},{"description":"","name":"list_projects"},{"description":"","name":"list_team_members"},{"description":"","name":"search_phrases"},{"description":"","name":"share_phrase","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External sharing is High."}},{"description":"","name":"show_project_overview"},{"description":"","name":"update_phrase","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful changes are Medium."}},{"description":"","name":"update_project"}],"tools_count":17,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/56fa4660-270e-4edb-99e3-a162b79f3d51","uuid":"653b3822-9fac-599b-a4a3-cac8ed901573","verification_tier":"community","version":""},"query_key":"multilocale","schema_version":1,"status":"match"}