{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to videos and transcripts in your NeetoRecord workspace. Search spoken content, read chapters, capture frames and inspect viewing analytics. Organize recordings, generate sharing links and create recording requests.","did":"1de08802-53e9-4d63-acb4-d639cee7f2f1","documentation_url":"https://apidocs.neetorecord.com/mcp/introduction","editorial_description":{"extended_description":"The hosted connector can trigger transcripts, chapters and MP4 generation, retrieve download or embed links, move recordings into folders, and update or delete recordings. It also reads details, transcripts, chapters and frames from publicly shared videos outside your workspace.","schema_version":1,"summary":"Connects Claude to videos and transcripts in your NeetoRecord workspace.\nSearch spoken content, read chapters, capture frames and inspect viewing analytics.\nOrganize recordings, generate sharing links and create recording requests."},"homepage_url":"","icon":"","id":"1de08802-53e9-4d63-acb4-d639cee7f2f1","installs":0,"last_scanned":"","license":"","long_description":"The hosted connector can trigger transcripts, chapters and MP4 generation, retrieve download or embed links, move recordings into folders, and update or delete recordings. It also reads details, transcripts, chapters and frames from publicly shared videos outside your workspace.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly declares recording deletion.","reasoning":"This can permanently destroy video and transcript content.","risk_type":"data_deletion","severity":"high","title":"Deletes stored recordings","triggering_tools_or_skills":["DeleteRecording"]},{"evidence":"These tools persist organization and content changes or launch processing jobs.","reasoning":"They materially alter account data and processing state.","risk_type":"data_modification","severity":"medium","title":"Creates CTAs, folders and recording requests","triggering_tools_or_skills":["CreateCta","CreateFolder","CreateRecordingRequest","MoveRecordingToFolder","UpdateRecording","TriggerChapterGeneration","TriggerMp4Generation","TriggerTranscriptGeneration"]},{"evidence":"The inventory includes fetch without a documented resource scheme or host restriction.","reasoning":"It may direct the service to retrieve a caller-chosen URL.","risk_type":"arbitrary_network_access","severity":"low","title":"Generic fetch reads caller-selected resources","triggering_tools_or_skills":["fetch"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication reaches NeetoRecord workspaces, recordings, transcripts, CTAs, analytics and generation jobs; deletion and public-link permissions are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1de08802-53e9-4d63-acb4-d639cee7f2f1.json","what_it_proves":"Candidate PR #125 record identity (name \"NeetoRecord\", publisher, type web_connector) and 36 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1de08802-53e9-4d63-acb4-d639cee7f2f1: complete tool_names inventory (36 tools), remote streamable-http endpoint https://connect.neetorecord.com/mcp/messages, auth_posture auth_required, directory tier community"}],"primary_reason":"NeetoRecord deletes recordings and broadly modifies recording, folder and generated-media state.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:1de08802-53e9-4d63-acb4-d639cee7f2f1","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 36 names. Verify deletion recovery, public share-link revocation, fetch URL restrictions and whether generation consumes paid minutes.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":36,"tools_or_skills_total":36},"name":"NeetoRecord","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1de08802-53e9-4d63-acb4-d639cee7f2f1&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.neeto.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Neeto LLC","publisher_url":"https://neeto.com/neetorecord","remote_url":"https://connect.neetorecord.com/mcp/messages","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: This can permanently destroy video and transcript content.","evidence":"Deletes stored recordings: The inventory explicitly declares recording deletion.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes stored recordings","triggering_tools":["DeleteRecording"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state.","evidence":"Creates CTAs, folders and recording requests: These tools persist organization and content changes or launch processing jobs.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates CTAs, folders and recording requests","triggering_tools":["CreateCta","CreateFolder","CreateRecordingRequest","MoveRecordingToFolder","UpdateRecording","TriggerChapterGeneration","TriggerMp4Generation","TriggerTranscriptGeneration"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: It may direct the service to retrieve a caller-chosen URL.","evidence":"Generic fetch reads caller-selected resources: The inventory includes fetch without a documented resource scheme or host restriction.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Generic fetch reads caller-selected resources","triggering_tools":["fetch"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@neetorecord.com","tags":["deletes_data","forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"CreateCta","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"CreateFolder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"CreateRecordingRequest","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"DeleteRecording","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This can permanently destroy video and transcript content."}},{"description":"","name":"GetChapterStatus"},{"description":"","name":"GetChapters"},{"description":"","name":"GetDownloadUrl"},{"description":"","name":"GetEmbedCode"},{"description":"","name":"GetOrganizationAnalytics"},{"description":"","name":"GetPublicChapters"},{"description":"","name":"GetPublicDownloadUrl"},{"description":"","name":"GetPublicEmbedCode"},{"description":"","name":"GetPublicRecordingDetails"},{"description":"","name":"GetPublicScreenshot"},{"description":"","name":"GetPublicShareLink"},{"description":"","name":"GetPublicTranscript"},{"description":"","name":"GetRecording"},{"description":"","name":"GetRecordingAnalytics"},{"description":"","name":"GetScreenshot"},{"description":"","name":"GetShareLink"},{"description":"","name":"GetTranscript"},{"description":"","name":"GetTranscriptStatus"},{"description":"","name":"ListCtas"},{"description":"","name":"ListFolders"},{"description":"","name":"ListRecordings"},{"description":"","name":"ListTags"},{"description":"","name":"ListWorkspaces"},{"description":"","name":"MoveRecordingToFolder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"SearchRecordingsByTitle"},{"description":"","name":"SearchRecordingsByTranscript"},{"description":"","name":"TriggerChapterGeneration","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"TriggerMp4Generation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"TriggerTranscriptGeneration","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"UpdateRecording","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter account data and processing state."}},{"description":"","name":"fetch"},{"description":"","name":"search"}],"tools_count":36,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1de08802-53e9-4d63-acb4-d639cee7f2f1","uuid":"43a526d1-759a-5006-a33c-bbaca64b3c2d","verification_tier":"community","version":""},"query_key":"neeto llc neetorecord","schema_version":1,"status":"match"}