{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-01","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Search, write and publish articles in your NeetoKB knowledge bases. Read draft or published content and organize articles within categories. Manage team members and issue unlisted article links across workspaces your account can access.","did":"c9a28609-15bb-4839-970e-d1307b41e806","documentation_url":"https://apidocs.neetokb.com/mcp/introduction","editorial_description":{"extended_description":"Full-text search covers published content, while article retrieval also supports drafts. Creating an article can create its category path. Unlisted links can have expiry dates, and regenerating a link revokes the previous one. Additional tools expose authors, category trees, recommendations and settings, plus member invitations, updates and deactivation.","schema_version":1,"summary":"Search, write and publish articles in your NeetoKB knowledge bases.\nRead draft or published content and organize articles within categories.\nManage team members and issue unlisted article links across workspaces your account can access."},"homepage_url":"","icon":"https://d2v7kzglnr2dnh.cloudfront.net/favicons/neetokb.ico","id":"c9a28609-15bb-4839-970e-d1307b41e806","installs":0,"last_scanned":"","license":"","long_description":"Full-text search covers published content, while article retrieval also supports drafts. Creating an article can create its category path. Unlisted links can have expiry dates, and regenerating a link revokes the previous one. Additional tools expose authors, category trees, recommendations and settings, plus member invitations, updates and deactivation.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete declared inventory explicitly exposes team-member lifecycle tools.","reasoning":"Adding or removing workspace principals is a High administrative action.","risk_type":"credential_admin","severity":"high","title":"Knowledge-base team membership can be created, changed and deleted","triggering_tools_or_skills":["CreateTeamMember","UpdateTeamMember","DeleteTeamMember"]},{"evidence":"The tool names and listing state that Claude can draft, revise and publish knowledge-base articles.","reasoning":"These actions persist content changes.","risk_type":"data_modification","severity":"medium","title":"Articles can be created and updated","triggering_tools_or_skills":["CreateArticle","UpdateArticle"]},{"evidence":"The inventory includes RegenerateUnlistedLink.","reasoning":"Rotating a secret/unlisted sharing URL changes access credentials for content.","risk_type":"credential_admin","severity":"high","title":"Unlisted access links can be regenerated","triggering_tools_or_skills":["RegenerateUnlistedLink"]},{"evidence":"The tool name is generic and the official documentation URL was inaccessible.","reasoning":"A schema or host allowlist is needed to determine whether arbitrary URLs can be retrieved.","risk_type":"evidence_gap","severity":"low","title":"Generic fetch scope is undocumented","triggering_tools_or_skills":["fetch"]},{"evidence":"The connector runs at https://connect.neetokb.com/mcp/messages without a pinned server implementation in the packet.","reasoning":"The hosted implementation and tool behavior can change independently of this snapshot, so monitoring and runtime verification remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"NeetoKB is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for a NeetoKB workspace; exact member-management and publishing scopes are not documented in accessible evidence.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c9a28609-15bb-4839-970e-d1307b41e806.json","what_it_proves":"Candidate PR #125 record identity (name \"NeetoKB\", publisher, type web_connector) and 20 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c9a28609-15bb-4839-970e-d1307b41e806: complete tool_names inventory (20 tools), remote streamable-http endpoint https://connect.neetokb.com/mcp/messages, auth_posture auth_required, directory tier community"}],"primary_reason":"NeetoKB can administer team members and rotate unlisted access links, as well as publish articles.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c9a28609-15bb-4839-970e-d1307b41e806","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 20 tools. The official documentation URL was inaccessible. High admin behavior is explicit; arbitrary_network_access remains unknown because fetch inputs are absent.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":20,"tools_or_skills_total":20},"name":"NeetoKB","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c9a28609-15bb-4839-970e-d1307b41e806&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.neeto.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Neeto LLC","publisher_url":"https://neeto.com/neetokb","remote_url":"https://connect.neetokb.com/mcp/messages","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Adding or removing workspace principals is a High administrative action.; These actions persist content changes.; Rotating a secret/unlisted sharing URL changes access credentials for content.","evidence":"Knowledge-base team membership can be created, changed and deleted: The complete declared inventory explicitly exposes team-member lifecycle tools. | Articles can be created and updated: The tool names and listing state that Claude can draft, revise and publish knowledge-base articles. | Unlisted access links can be regenerated: The inventory includes RegenerateUnlistedLink.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["CreateTeamMember","UpdateTeamMember","DeleteTeamMember","CreateArticle","UpdateArticle","RegenerateUnlistedLink"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://neetokb.com/support","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"CreateArticle","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Adding or removing workspace principals is a High administrative action.; These actions persist content changes.; Rotating a secret/unlisted sharing URL changes access credentials for content."}},{"description":"","name":"CreateTeamMember","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Adding or removing workspace principals is a High administrative action.; These actions persist content changes.; Rotating a secret/unlisted sharing URL changes access credentials for content."}},{"description":"","name":"DeleteTeamMember","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Adding or removing workspace principals is a High administrative action.; These actions persist content changes.; Rotating a secret/unlisted sharing URL changes access credentials for content."}},{"description":"","name":"GetArticle"},{"description":"","name":"GetPublicArticle"},{"description":"","name":"GetSetting"},{"description":"","name":"GetTeamMember"},{"description":"","name":"GetUnlistedLink"},{"description":"","name":"ListArticles"},{"description":"","name":"ListAuthors"},{"description":"","name":"ListCategories"},{"description":"","name":"ListRecommendations"},{"description":"","name":"ListTeamMembers"},{"description":"","name":"ListWorkspaces"},{"description":"","name":"RegenerateUnlistedLink","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Adding or removing workspace principals is a High administrative action.; These actions persist content changes.; Rotating a secret/unlisted sharing URL changes access credentials for content."}},{"description":"","name":"SearchArticles"},{"description":"","name":"UpdateArticle","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Adding or removing workspace principals is a High administrative action.; These actions persist content changes.; Rotating a secret/unlisted sharing URL changes access credentials for content."}},{"description":"","name":"UpdateTeamMember","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Adding or removing workspace principals is a High administrative action.; These actions persist content changes.; Rotating a secret/unlisted sharing URL changes access credentials for content."}},{"description":"","name":"fetch"},{"description":"","name":"search"}],"tools_count":20,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c9a28609-15bb-4839-970e-d1307b41e806","uuid":"675bf09f-dde3-548b-a12f-e92e1265f7a8","verification_tier":"community","version":""},"query_key":"neeto llc neetokb","schema_version":1,"status":"match"}