{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Organizes AI-assisted marketing work on a persistent Plainpaper canvas. Link research, audiences, campaign plans, drafts, creative assets and results for review. It manages approvals but does not send emails or publish ads; execution needs separate integrations.","did":"2bee4535-22b1-4490-9e2e-7fbf42fd829e","documentation_url":"https://plainpaper.io/docs/","editorial_description":{"extended_description":"Cards preserve versions, status, comments and relationships across conversations, while stored brand guidelines inform drafts. Approval gates and required media placeholders support review before handoff. Tools manage boards, cards, phases, assets and action records, not external marketing credentials.","schema_version":1,"summary":"Organizes AI-assisted marketing work on a persistent Plainpaper canvas.\nLink research, audiences, campaign plans, drafts, creative assets and results for review.\nIt manages approvals but does not send emails or publish ads; execution needs separate integrations."},"homepage_url":"","icon":"https://plainpaper.io/apple-touch-icon.svg","id":"2bee4535-22b1-4490-9e2e-7fbf42fd829e","installs":0,"last_scanned":"","license":"","long_description":"Cards preserve versions, status, comments and relationships across conversations, while stored brand guidelines inform drafts. Approval gates and required media placeholders support review before handoff. Tools manage boards, cards, phases, assets and action records, not external marketing credentials.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly contains delete_guideline_block.","reasoning":"Deleting persistent workspace guidance is destructive.","risk_type":"data_deletion","severity":"high","title":"Deletes shared guideline blocks","triggering_tools_or_skills":["delete_guideline_block"]},{"evidence":"The inventory can add or remove a live link for workspace content.","reasoning":"Exposing creative work at a live link is external publication/sharing as the user.","risk_type":"messaging_as_user","severity":"high","title":"Adds live external links to creative work","triggering_tools_or_skills":["add_live_link","remove_live_link"]},{"evidence":"Live-link creation/removal controls outside access to the underlying deliverable.","reasoning":"Changing public/access-bearing links is an authorization action.","risk_type":"credential_admin","severity":"high","title":"Changes access through live-link controls","triggering_tools_or_skills":["add_live_link","remove_live_link"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for Plainpaper workspaces; exact approval roles, link visibility and deletion recovery are not specified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2bee4535-22b1-4490-9e2e-7fbf42fd829e.json","what_it_proves":"Candidate PR #125 record identity (name \"Plainpaper\", publisher, type web_connector) and 54 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2bee4535-22b1-4490-9e2e-7fbf42fd829e: complete tool_names inventory (54 tools), remote streamable-http endpoint https://mcp.plainpaper.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Plainpaper can delete guidance and expose or revoke creative work through live links.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:2bee4535-22b1-4490-9e2e-7fbf42fd829e","reviewed_at":"2026-10-10","reviewer_notes":"upload_asset_from_url adds arbitrary-network exposure. Verify whether live links are public and how approve_action/mark_executed affects external workflows.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":54,"tools_or_skills_total":54},"name":"Plainpaper","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2bee4535-22b1-4490-9e2e-7fbf42fd829e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://plainpaper.io/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Plainpaper","publisher_url":"https://plainpaper.io/","remote_url":"https://mcp.plainpaper.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting persistent workspace guidance is destructive.","evidence":"Deletes shared guideline blocks: The complete inventory explicitly contains delete_guideline_block.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes shared guideline blocks","triggering_tools":["delete_guideline_block"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Exposing creative work at a live link is external publication/sharing as the user.","evidence":"Adds live external links to creative work: The inventory can add or remove a live link for workspace content.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Adds live external links to creative work","triggering_tools":["add_live_link","remove_live_link"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing public/access-bearing links is an authorization action.","evidence":"Changes access through live-link controls: Live-link creation/removal controls outside access to the underlying deliverable.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Changes access through live-link controls","triggering_tools":["add_live_link","remove_live_link"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@plainpaper.io","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_live_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing public/access-bearing links is an authorization action."}},{"description":"","name":"approve_action"},{"description":"","name":"arrange_board"},{"description":"","name":"create_asset_upload"},{"description":"","name":"create_board"},{"description":"","name":"create_board_from_template"},{"description":"","name":"create_card"},{"description":"","name":"create_guideline_block"},{"description":"","name":"create_phase"},{"description":"","name":"crown_winner"},{"description":"","name":"delete_guideline_block","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting persistent workspace guidance is destructive."}},{"description":"","name":"finalize_asset_upload"},{"description":"","name":"get_action"},{"description":"","name":"get_asset"},{"description":"","name":"get_board"},{"description":"","name":"get_card"},{"description":"","name":"get_deliverable_type"},{"description":"","name":"get_guidelines"},{"description":"","name":"get_template"},{"description":"","name":"link_cards"},{"description":"","name":"link_phases"},{"description":"","name":"list_boards"},{"description":"","name":"list_card_versions"},{"description":"","name":"list_comments"},{"description":"","name":"list_deliverable_types"},{"description":"","name":"list_edges"},{"description":"","name":"list_mockups"},{"description":"","name":"list_pending_actions"},{"description":"","name":"list_phase_edges"},{"description":"","name":"list_phases"},{"description":"","name":"list_templates"},{"description":"","name":"list_workspaces"},{"description":"","name":"mark_executed"},{"description":"","name":"propose_action"},{"description":"","name":"query_cards"},{"description":"","name":"reject_action"},{"description":"","name":"remove_live_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing public/access-bearing links is an authorization action."}},{"description":"","name":"resolve_all_comments"},{"description":"","name":"resolve_comment"},{"description":"","name":"set_board_anchor_date"},{"description":"","name":"set_board_summary"},{"description":"","name":"set_card_phase"},{"description":"","name":"set_card_timing"},{"description":"","name":"set_phase_schedule"},{"description":"","name":"set_status"},{"description":"","name":"unlink_cards"},{"description":"","name":"unlink_phases"},{"description":"","name":"update_card"},{"description":"","name":"update_guideline_block"},{"description":"","name":"update_phase"},{"description":"","name":"upload_asset"},{"description":"","name":"upload_asset_from_url"},{"description":"","name":"upload_guideline_asset"},{"description":"","name":"whoami"}],"tools_count":54,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2bee4535-22b1-4490-9e2e-7fbf42fd829e","uuid":"a19f4e21-2296-559d-89ed-95abebbe075b","verification_tier":"community","version":""},"query_key":"plainpaper","schema_version":1,"status":"match"}