{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Personyze helps Claude inspect website personalization and prepare campaigns. Review audiences, traffic, recommendation performance, targeting, and campaign results. New campaign content is created in staging and must be published before visitors see it.","did":"4ddc2bbf-6b01-445e-a25f-3f7fe5d5baa8","documentation_url":"https://personyze.com/wiki/mcp:start","editorial_description":{"extended_description":"Campaign drafts can include targeted offers, recommendation placements, and A/B-test content. Other tools manage audiences and membership, inspect actions and placeholders, check documentation, and open support tickets. It uses the same account and campaigns as the Personyze panel and WordPress plugin.","schema_version":1,"summary":"Personyze helps Claude inspect website personalization and prepare campaigns.\nReview audiences, traffic, recommendation performance, targeting, and campaign results.\nNew campaign content is created in staging and must be published before visitors see it."},"homepage_url":"","icon":"","id":"4ddc2bbf-6b01-445e-a25f-3f7fe5d5baa8","installs":0,"last_scanned":"","license":"","long_description":"Campaign drafts can include targeted offers, recommendation placements, and A/B-test content. Other tools manage audiences and membership, inspect actions and placeholders, check documentation, and open support tickets. It uses the same account and campaigns as the Personyze panel and WordPress plugin.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The declared tool explicitly deletes an audience.","reasoning":"Deleting audience definitions is High.","risk_type":"data_deletion","severity":"high","title":"Can delete audiences","triggering_tools_or_skills":["delete_audience"]},{"evidence":"The tool name explicitly submits a support ticket.","reasoning":"It sends external content as the user.","risk_type":"messaging_as_user","severity":"high","title":"Can open support tickets","triggering_tools_or_skills":["open_support_ticket"]},{"evidence":"The tool changes whether a personalization action is active.","reasoning":"Activating production-facing campaign actions is a powerful control.","risk_type":"credential_admin","severity":"high","title":"Can activate campaign actions","triggering_tools_or_skills":["set_action_active"]},{"evidence":"A generic API tool is declared without an action schema.","reasoning":"The unbounded reachable action set may include High operations.","risk_type":"generic_gateway","severity":"high","title":"Generic Personyze API hides reachable actions","triggering_tools_or_skills":["personyze_api"]}],"assessment_status":"provisional","auth_and_scopes":"Authenticated Personyze tenant access is implied; scopes are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4ddc2bbf-6b01-445e-a25f-3f7fe5d5baa8.json","what_it_proves":"Candidate PR #125 record identity (name \"Personyze\", publisher, type web_connector) and 23 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4ddc2bbf-6b01-445e-a25f-3f7fe5d5baa8: complete tool_names inventory (23 tools), remote streamable-http endpoint https://personyze.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Personyze can delete audiences, submit support messages, activate actions, and invoke a generic API gateway.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:4ddc2bbf-6b01-445e-a25f-3f7fe5d5baa8","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 23 names. personyze_api needs an operation allowlist/schema before publication.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":23,"tools_or_skills_total":23},"name":"Personyze","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4ddc2bbf-6b01-445e-a25f-3f7fe5d5baa8&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.personyze.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"fix","publisher":"Personyze","publisher_url":"https://www.personyze.com/","remote_url":"https://personyze.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting audience definitions is High.","evidence":"Can delete audiences: The declared tool explicitly deletes an audience.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Can delete audiences","triggering_tools":["delete_audience"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It sends external content as the user.","evidence":"Can open support tickets: The tool name explicitly submits a support ticket.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Can open support tickets","triggering_tools":["open_support_ticket"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Activating production-facing campaign actions is a powerful control.","evidence":"Can activate campaign actions: The tool changes whether a personalization action is active.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can activate campaign actions","triggering_tools":["set_action_active"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The unbounded reachable action set may include High operations.","evidence":"Generic Personyze API hides reachable actions: A generic API tool is declared without an action schema.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Generic Personyze API hides reachable actions","triggering_tools":["personyze_api"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@personyze.com","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_audience_member"},{"description":"","name":"create_audience"},{"description":"","name":"create_campaign_draft"},{"description":"","name":"create_placeholder"},{"description":"","name":"delete_audience","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting audience definitions is High."}},{"description":"","name":"get_action_content"},{"description":"","name":"get_campaign_performance"},{"description":"","name":"get_campaign_targeting"},{"description":"","name":"get_product_stats"},{"description":"","name":"get_traffic_analytics"},{"description":"","name":"get_visitors"},{"description":"","name":"list_actions"},{"description":"","name":"list_audience_members"},{"description":"","name":"list_audiences"},{"description":"","name":"list_campaigns"},{"description":"","name":"list_placeholders"},{"description":"","name":"open_support_ticket","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It sends external content as the user."}},{"description":"","name":"personyze_api","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The unbounded reachable action set may include High operations."}},{"description":"","name":"remove_audience_member"},{"description":"","name":"save_visitor"},{"description":"","name":"search_docs"},{"description":"","name":"set_action_active","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Activating production-facing campaign actions is a powerful control."}},{"description":"","name":"update_campaign_draft"}],"tools_count":23,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4ddc2bbf-6b01-445e-a25f-3f7fe5d5baa8","uuid":"c105cf17-51e9-5d45-9a02-80777aa6aaf9","verification_tier":"community","version":""},"query_key":"personyze personyze","schema_version":1,"status":"match"}