{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Peepz brings group membership and personal profile context into Claude. Look up people, groups, interests, lists, and upcoming group-related information. The connector also manages profile cards, invitations, member roles, connections, and lists.","did":"52af9a7f-ebcb-42c9-b178-f02ca2e386a3","documentation_url":"https://peepz.ai/claude","editorial_description":{"extended_description":"Members use profile cards to control what they share with different groups or people. Tools can create and update groups, remove members, manage photos, accept connections, and mark notifications as read.","schema_version":1,"summary":"Peepz brings group membership and personal profile context into Claude.\nLook up people, groups, interests, lists, and upcoming group-related information.\nThe connector also manages profile cards, invitations, member roles, connections, and lists."},"homepage_url":"","icon":"","id":"52af9a7f-ebcb-42c9-b178-f02ca2e386a3","installs":0,"last_scanned":"","license":"","long_description":"Members use profile cards to control what they share with different groups or people. Tools can create and update groups, remove members, manage photos, accept connections, and mark notifications as read.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Tools explicitly send invitations to other people.","reasoning":"External invitations are High messaging.","risk_type":"messaging_as_user","severity":"high","title":"Sends group and connection invitations","triggering_tools_or_skills":["peepz_groups_invite_members","peepz_connections_send_unclaimed_invite"]},{"evidence":"This tool changes group authorization/roles.","reasoning":"Access-role administration is High.","risk_type":"credential_admin","severity":"high","title":"Changes group member roles","triggering_tools_or_skills":["peepz_groups_set_member_role"]},{"evidence":"Declared tools remove people/relationships and delete lists.","reasoning":"Deletion/revocation of meaningful data/access is High.","risk_type":"data_deletion","severity":"high","title":"Removes members, connections, and lists","triggering_tools_or_skills":["peepz_groups_remove_member","peepz_connections_remove","peepz_lists_delete"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capabilities can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/52af9a7f-ebcb-42c9-b178-f02ca2e386a3.json","what_it_proves":"Candidate PR #125 record identity (name \"Peepz\", publisher, type web_connector) and 37 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/52af9a7f-ebcb-42c9-b178-f02ca2e386a3: complete tool_names inventory (37 tools), remote streamable-http endpoint https://api.peepz.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Peepz can invite people, remove members/connections, and administer group roles.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:52af9a7f-ebcb-42c9-b178-f02ca2e386a3","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were not available.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":37,"tools_or_skills_total":37},"name":"Peepz","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=52af9a7f-ebcb-42c9-b178-f02ca2e386a3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://peepz.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Peepz","publisher_url":"https://peepz.ai","remote_url":"https://api.peepz.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External invitations are High messaging.","evidence":"Sends group and connection invitations: Tools explicitly send invitations to other people.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends group and connection invitations","triggering_tools":["peepz_groups_invite_members","peepz_connections_send_unclaimed_invite"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access-role administration is High.","evidence":"Changes group member roles: This tool changes group authorization/roles.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Changes group member roles","triggering_tools":["peepz_groups_set_member_role"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion/revocation of meaningful data/access is High.","evidence":"Removes members, connections, and lists: Declared tools remove people/relationships and delete lists.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Removes members, connections, and lists","triggering_tools":["peepz_groups_remove_member","peepz_connections_remove","peepz_lists_delete"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@peepz.ai","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"peepz_profile_get_me"},{"description":"","name":"peepz_cards_list_mine"},{"description":"","name":"peepz_family_list_links"},{"description":"","name":"peepz_groups_list_mine"},{"description":"","name":"peepz_groups_get"},{"description":"","name":"peepz_groups_list_members"},{"description":"","name":"peepz_peers_list"},{"description":"","name":"peepz_peers_get"},{"description":"","name":"peepz_users_get_photo"},{"description":"","name":"peepz_notifications_list"},{"description":"","name":"peepz_pending_actions_list"},{"description":"","name":"peepz_connections_list_my_invites"},{"description":"","name":"peepz_lists_list_mine"},{"description":"","name":"peepz_lists_get"},{"description":"","name":"peepz_profile_update_me"},{"description":"","name":"peepz_cards_create"},{"description":"","name":"peepz_cards_update"},{"description":"","name":"peepz_groups_create"},{"description":"","name":"peepz_groups_update"},{"description":"","name":"peepz_groups_remove_member","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion/revocation of meaningful data/access is High."}},{"description":"","name":"peepz_groups_set_member_role","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access-role administration is High."}},{"description":"","name":"peepz_groups_invite_members","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External invitations are High messaging."}},{"description":"","name":"peepz_groups_create_invite_code"},{"description":"","name":"peepz_notifications_mark_read"},{"description":"","name":"peepz_users_set_photo"},{"description":"","name":"peepz_connections_accept"},{"description":"","name":"peepz_connections_remove","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion/revocation of meaningful data/access is High."}},{"description":"","name":"peepz_connections_update_card"},{"description":"","name":"peepz_connections_create_unclaimed"},{"description":"","name":"peepz_connections_update_unclaimed"},{"description":"","name":"peepz_connections_send_unclaimed_invite","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External invitations are High messaging."}},{"description":"","name":"peepz_lists_create"},{"description":"","name":"peepz_lists_update"},{"description":"","name":"peepz_lists_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion/revocation of meaningful data/access is High."}},{"description":"","name":"peepz_lists_add_member"},{"description":"","name":"peepz_lists_update_member"},{"description":"","name":"peepz_lists_remove_member"}],"tools_count":37,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/52af9a7f-ebcb-42c9-b178-f02ca2e386a3","uuid":"11e74179-a4dd-5933-b1f9-123ae426d63c","verification_tier":"community","version":""},"query_key":"peepz peepz","schema_version":1,"status":"match"}