{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Carbon Voice brings transcribed voice conversations and memos into Claude. Retrieve or summarize threads, create memos, and send conversation or direct messages. Organize folders, attach files, and run supported AI actions through your account.","did":"705533d1-0288-4854-9b1c-f01c5e46f7aa","documentation_url":"https://getcarbon.app/mcp","editorial_description":{"extended_description":"Tools browse workspaces, users, messages, and conversations and move messages between folders. Voice memos can be shared by link; content workflows include asynchronous meetings and discussions.","schema_version":1,"summary":"Carbon Voice brings transcribed voice conversations and memos into Claude.\nRetrieve or summarize threads, create memos, and send conversation or direct messages.\nOrganize folders, attach files, and run supported AI actions through your account."},"homepage_url":"","icon":"https://getcarbon.app/","id":"705533d1-0288-4854-9b1c-f01c5e46f7aa","installs":0,"last_scanned":"","license":"","long_description":"Tools browse workspaces, users, messages, and conversations and move messages between folders. Voice memos can be shared by link; content workflows include asynchronous meetings and discussions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These explicit message-creation actions publish communications to workspace users.","reasoning":"They send external content as the authenticated user.","risk_type":"messaging_as_user","severity":"high","title":"Sends conversation, direct and voice-memo messages","triggering_tools_or_skills":["create_conversation_message","create_direct_message","create_voicememo_message"]},{"evidence":"The connector can delete a folder containing organized voice knowledge.","reasoning":"Folder deletion is a meaningful destructive action.","risk_type":"data_deletion","severity":"high","title":"Deletes folders","triggering_tools_or_skills":["delete_folder"]},{"evidence":"These tools persist workspace organization and attachment changes.","reasoning":"They materially modify shared communication state.","risk_type":"data_modification","severity":"medium","title":"Creates, moves and renames folders/messages","triggering_tools_or_skills":["create_folder","move_folder","move_message_to_folder","update_folder_name","add_attachments_to_message"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to Carbon Voice workspaces is required; conversation recipients and delete roles are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/705533d1-0288-4854-9b1c-f01c5e46f7aa.json","what_it_proves":"Candidate PR #125 record identity (name \"Carbon Voice\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/705533d1-0288-4854-9b1c-f01c5e46f7aa: complete tool_names inventory (28 tools), remote streamable-http endpoint https://mcp.carbonvoice.app/, auth_posture auth_required, directory tier community"}],"primary_reason":"Carbon Voice sends messages as the user and deletes workspace folders.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:705533d1-0288-4854-9b1c-f01c5e46f7aa","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 28 tools; voice transcripts and conversations are sensitive private data and untrusted-content exposure.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"Carbon Voice","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=705533d1-0288-4854-9b1c-f01c5e46f7aa&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://getcarbon.app/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Phonon X, Inc.","publisher_url":"https://getcarbon.app/","remote_url":"https://mcp.carbonvoice.app/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They send external content as the authenticated user.","evidence":"Sends conversation, direct and voice-memo messages: These explicit message-creation actions publish communications to workspace users.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends conversation, direct and voice-memo messages","triggering_tools":["create_conversation_message","create_direct_message","create_voicememo_message"]},{"description":"This connector can permanently remove data or resources. Review findings: Folder deletion is a meaningful destructive action.","evidence":"Deletes folders: The connector can delete a folder containing organized voice knowledge.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes folders","triggering_tools":["delete_folder"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify shared communication state.","evidence":"Creates, moves and renames folders/messages: These tools persist workspace organization and attachment changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates, moves and renames folders/messages","triggering_tools":["create_folder","move_folder","move_message_to_folder","update_folder_name","add_attachments_to_message"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://cv.chat/support","tags":["accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_attachments_to_message","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify shared communication state."}},{"description":"","name":"create_conversation_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They send external content as the authenticated user."}},{"description":"","name":"create_direct_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They send external content as the authenticated user."}},{"description":"","name":"create_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify shared communication state."}},{"description":"","name":"create_voicememo_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They send external content as the authenticated user."}},{"description":"","name":"delete_folder","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Folder deletion is a meaningful destructive action."}},{"description":"","name":"get_ai_action_responses"},{"description":"","name":"get_conversation"},{"description":"","name":"get_conversation_users"},{"description":"","name":"get_current_user"},{"description":"","name":"get_folder"},{"description":"","name":"get_folder_with_messages"},{"description":"","name":"get_message"},{"description":"","name":"get_recent_messages"},{"description":"","name":"get_root_folders"},{"description":"","name":"get_user"},{"description":"","name":"get_workspaces_basic_info"},{"description":"","name":"list_ai_actions"},{"description":"","name":"list_conversations"},{"description":"","name":"list_messages"},{"description":"","name":"move_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify shared communication state."}},{"description":"","name":"move_message_to_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify shared communication state."}},{"description":"","name":"run_ai_action"},{"description":"","name":"run_ai_action_for_shared_link"},{"description":"","name":"search_user"},{"description":"","name":"search_users"},{"description":"","name":"summarize_conversation"},{"description":"","name":"update_folder_name","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify shared communication state."}}],"tools_count":28,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/705533d1-0288-4854-9b1c-f01c5e46f7aa","uuid":"c86be9d1-85e3-543d-adc7-9d0cb4f3c96c","verification_tier":"community","version":""},"query_key":"phonon x inc carbon voice","schema_version":1,"status":"match"}