{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Transcript LOL connects Claude to recordings, transcripts, translations, and insights. Search your library, transcribe public media URLs, and organize recordings. Your account permissions apply, and a plan with API access is required.","did":"2ea27a36-1672-441a-8abc-f91523ca7edb","documentation_url":"https://help.transcript.lol/en/help/articles/5828072-mcp-server-integration","editorial_description":{"extended_description":"Search supports semantic or exact matching with folder, speaker, and date filters. Retrieve timestamped transcript sections or SRT, VTT, and JSON formats, reuse saved insights, or run workspace prompt templates. Tools also create folders, move or rename recordings, and assign speaker labels.","schema_version":1,"summary":"Transcript LOL connects Claude to recordings, transcripts, translations, and insights.\nSearch your library, transcribe public media URLs, and organize recordings.\nYour account permissions apply, and a plan with API access is required."},"homepage_url":"","icon":"","id":"2ea27a36-1672-441a-8abc-f91523ca7edb","installs":0,"last_scanned":"","license":"","long_description":"Search supports semantic or exact matching with folder, speaker, and date filters. Retrieve timestamped transcript sections or SRT, VTT, and JSON formats, reuse saved insights, or run workspace prompt templates. Tools also create folders, move or rename recordings, and assign speaker labels.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official billing docs price automated transcription at 60 credits per hour and AI prompt responses against allowance or purchased top-up credits; the connector exposes those operations.","reasoning":"Invoking metered tools can spend finite paid credits from the connected account.","risk_type":"financial_transaction","severity":"high","title":"Transcription and AI insights consume paid credits","triggering_tools_or_skills":["generate_insight","transcribe_url","translate_recording"]},{"evidence":"The complete inventory and official MCP page confirm these persistent workspace changes.","reasoning":"They alter folder, recording, speaker and prompt state without deleting data.","risk_type":"data_modification","severity":"medium","title":"Organizes recordings and manages saved speakers and prompts","triggering_tools_or_skills":["assign_speaker","create_folder","create_prompt","create_speaker","move_recordings_to_folder","rename_folder","rename_recording","unassign_speaker"]}],"assessment_status":"reviewed","auth_and_scopes":"OAuth grants access to the user's Transcript LOL workspaces and recordings. The connector requires a plan with API access and paid actions draw from account credit balances.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2ea27a36-1672-441a-8abc-f91523ca7edb.json","what_it_proves":"Candidate PR #125 record identity (name \"Transcript LOL\", publisher, type web_connector) and 23 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2ea27a36-1672-441a-8abc-f91523ca7edb: complete tool_names inventory (23 tools), remote streamable-http endpoint https://transcript.lol/api/mcp/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:36:54Z","url_or_path":"https://help.transcript.lol/mcp-server-integration-upygn","what_it_proves":"Official MCP documentation confirms OAuth access, transcript retrieval, folder organization, speaker management and saved insight prompts."},{"accessed_at":"2026-10-10T21:36:54Z","url_or_path":"https://help.transcript.lol/how-credits-balances-work-fqfsx","what_it_proves":"Official billing documentation states automated transcription costs 60 credits per hour and summaries/custom prompts are charged per response from allowance or purchased top-up credits."}],"primary_reason":"Transcript LOL can spend account credits on transcription/AI work and persistently reorganize recording data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:2ea27a36-1672-441a-8abc-f91523ca7edb","reviewed_at":"2026-10-10","reviewer_notes":"transcribe_url accepts a public media URL, but that constrained fetch is not treated as unrestricted arbitrary-network access.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":23,"tools_or_skills_total":23},"name":"Transcript LOL","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2ea27a36-1672-441a-8abc-f91523ca7edb&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://transcript.lol/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Omnivision","publisher_url":"https://omnivision.solutions/","remote_url":"https://transcript.lol/api/mcp/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Invoking metered tools can spend finite paid credits from the connected account.","evidence":"Transcription and AI insights consume paid credits: Official billing docs price automated transcription at 60 credits per hour and AI prompt responses against allowance or purchased top-up credits; the connector exposes those operations.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Transcription and AI insights consume paid credits","triggering_tools":["generate_insight","transcribe_url","translate_recording"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data.","evidence":"Organizes recordings and manages saved speakers and prompts: The complete inventory and official MCP page confirm these persistent workspace changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Organizes recordings and manages saved speakers and prompts","triggering_tools":["assign_speaker","create_folder","create_prompt","create_speaker","move_recordings_to_folder","rename_folder","rename_recording","unassign_speaker"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@transcript.lol","tags":["modifies_data","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"assign_speaker","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}},{"description":"","name":"create_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}},{"description":"","name":"create_prompt","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}},{"description":"","name":"create_speaker","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}},{"description":"","name":"generate_insight","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Invoking metered tools can spend finite paid credits from the connected account."}},{"description":"","name":"get_insights"},{"description":"","name":"get_recording"},{"description":"","name":"get_transcript"},{"description":"","name":"get_translation"},{"description":"","name":"list_folders"},{"description":"","name":"list_prompts"},{"description":"","name":"list_recordings"},{"description":"","name":"list_speakers"},{"description":"","name":"list_transcript_speakers"},{"description":"","name":"list_translations"},{"description":"","name":"list_workspaces"},{"description":"","name":"move_recordings_to_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}},{"description":"","name":"rename_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}},{"description":"","name":"rename_recording","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}},{"description":"","name":"search_recordings"},{"description":"","name":"transcribe_url","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Invoking metered tools can spend finite paid credits from the connected account."}},{"description":"","name":"translate_recording","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Invoking metered tools can spend finite paid credits from the connected account."}},{"description":"","name":"unassign_speaker","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter folder, recording, speaker and prompt state without deleting data."}}],"tools_count":23,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2ea27a36-1672-441a-8abc-f91523ca7edb","uuid":"9f234d64-63cd-5f97-936a-c815e9c10519","verification_tier":"community","version":""},"query_key":"omnivision transcript lol","schema_version":1,"status":"match"}