{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Runs translation and localization workflows through Ollang. Upload media or documents and order subtitles, captions, dubbing or translation. Track work, request revisions or human review, and manage reusable language guidance.","did":"bbbfd2f3-b5ff-4809-8482-54c7343b90d4","documentation_url":"https://api-docs.ollang.com/","editorial_description":{"extended_description":"Tools inspect supported languages, credit balance and consumption, export content, manage translation memory and run quality checks. Orders, revisions or review requests can be canceled or deleted where supported. Subtitle embedding and translator assignment are also available.","schema_version":1,"summary":"Runs translation and localization workflows through Ollang.\nUpload media or documents and order subtitles, captions, dubbing or translation.\nTrack work, request revisions or human review, and manage reusable language guidance."},"homepage_url":"","icon":"","id":"bbbfd2f3-b5ff-4809-8482-54c7343b90d4","installs":0,"last_scanned":"","license":"","long_description":"Tools inspect supported languages, credit balance and consumption, export content, manage translation memory and run quality checks. Orders, revisions or review requests can be canceled or deleted where supported. Subtitle embedding and translator assignment are also available.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes order creation/cancellation/rerun and credit-wallet inspection.","reasoning":"Creating or rerunning a professional localization order can commit paid credits or money.","risk_type":"financial_transaction","severity":"high","title":"Creates and cancels localization orders","triggering_tools_or_skills":["createOrder","cancelOrder","rerunOrder","getCreditWallet"]},{"evidence":"These tools communicate and route work to external human translators/reviewers.","reasoning":"They initiate external human work as the authenticated customer.","risk_type":"messaging_as_user","severity":"high","title":"Requests human review and assigns translators","triggering_tools_or_skills":["requestHumanReview","assignTranslatorToFolderOrders","unassignTranslatorFromFolderOrders"]},{"evidence":"The inventory explicitly deletes saved instructions, memories and revisions.","reasoning":"These are destructive actions on meaningful workflow resources.","risk_type":"data_deletion","severity":"high","title":"Deletes localization resources","triggering_tools_or_skills":["deleteCustomInstruction","deleteMemory","deleteRevision"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; wallet, order, localization project, translator and upload scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/bbbfd2f3-b5ff-4809-8482-54c7343b90d4.json","what_it_proves":"Candidate PR #125 record identity (name \"Ollang\", publisher, type web_connector) and 49 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/bbbfd2f3-b5ff-4809-8482-54c7343b90d4: complete tool_names inventory (49 tools), remote streamable-http endpoint https://mcp.ollang.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Ollang can create/cancel paid localization orders, request human review, delete content resources and assign translators.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:bbbfd2f3-b5ff-4809-8482-54c7343b90d4","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 49 names. Runtime verification should confirm pricing/confirmation for create_order/requestHumanReview and whether requestSubtitleEmbedding publishes or only creates a job.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":49,"tools_or_skills_total":49},"name":"Ollang","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=bbbfd2f3-b5ff-4809-8482-54c7343b90d4&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://ollang.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Ollang","publisher_url":"https://ollang.com/","remote_url":"https://mcp.ollang.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating or rerunning a professional localization order can commit paid credits or money.","evidence":"Creates and cancels localization orders: The inventory explicitly exposes order creation/cancellation/rerun and credit-wallet inspection.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Creates and cancels localization orders","triggering_tools":["createOrder","cancelOrder","rerunOrder","getCreditWallet"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They initiate external human work as the authenticated customer.","evidence":"Requests human review and assigns translators: These tools communicate and route work to external human translators/reviewers.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Requests human review and assigns translators","triggering_tools":["requestHumanReview","assignTranslatorToFolderOrders","unassignTranslatorFromFolderOrders"]},{"description":"This connector can permanently remove data or resources. Review findings: These are destructive actions on meaningful workflow resources.","evidence":"Deletes localization resources: The inventory explicitly deletes saved instructions, memories and revisions.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes localization resources","triggering_tools":["deleteCustomInstruction","deleteMemory","deleteRevision"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@ollang.com","tags":["deletes_data","network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"appendUploadChunk"},{"description":"","name":"assignTranslatorToFolderOrders","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They initiate external human work as the authenticated customer."}},{"description":"","name":"beginChunkedUpload"},{"description":"","name":"bulkExportFoldersXlsx"},{"description":"","name":"cancelChunkedUpload"},{"description":"","name":"cancelHumanReview"},{"description":"","name":"cancelOrder","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating or rerunning a professional localization order can commit paid credits or money."}},{"description":"","name":"createCustomInstruction"},{"description":"","name":"createMemory"},{"description":"","name":"createOrder","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating or rerunning a professional localization order can commit paid credits or money."}},{"description":"","name":"createRevision"},{"description":"","name":"deleteCustomInstruction","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive actions on meaningful workflow resources."}},{"description":"","name":"deleteMemory","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive actions on meaningful workflow resources."}},{"description":"","name":"deleteRevision","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive actions on meaningful workflow resources."}},{"description":"","name":"downloadAndReadDITA"},{"description":"","name":"downloadAndReadJSON"},{"description":"","name":"downloadAndReadSubtitle"},{"description":"","name":"exportContent"},{"description":"","name":"exportOrderXlsx"},{"description":"","name":"finalizeChunkedUpload"},{"description":"","name":"getAllCustomInstructions"},{"description":"","name":"getAllFolders"},{"description":"","name":"getAllProjects"},{"description":"","name":"getConsumption"},{"description":"","name":"getCreditWallet","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating or rerunning a professional localization order can commit paid credits or money."}},{"description":"","name":"getCustomInstructionSuggestions"},{"description":"","name":"getFolderOrderLanguagePairs"},{"description":"","name":"getMemories"},{"description":"","name":"getMemoryById"},{"description":"","name":"getMemoryImportJob"},{"description":"","name":"getOllangOrders"},{"description":"","name":"getOrderById"},{"description":"","name":"getOrderReviewInfo"},{"description":"","name":"getOrderRevisions"},{"description":"","name":"getProjectById"},{"description":"","name":"getSupportedLanguages"},{"description":"","name":"healthCheck"},{"description":"","name":"importContent"},{"description":"","name":"importMemoryItems"},{"description":"","name":"requestHumanReview","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They initiate external human work as the authenticated customer."}},{"description":"","name":"requestSubtitleEmbedding"},{"description":"","name":"rerunOrder","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating or rerunning a professional localization order can commit paid credits or money."}},{"description":"","name":"runQcEvaluation"},{"description":"","name":"unassignTranslatorFromFolderOrders","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They initiate external human work as the authenticated customer."}},{"description":"","name":"updateCustomInstruction"},{"description":"","name":"updateMemory"},{"description":"","name":"uploadFile"},{"description":"","name":"uploadVttFile"},{"description":"","name":"validateLanguageTag"}],"tools_count":49,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/bbbfd2f3-b5ff-4809-8482-54c7343b90d4","uuid":"807119a9-8799-5959-ac4b-44c63470dd2d","verification_tier":"community","version":""},"query_key":"ollang","schema_version":1,"status":"match"}