{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"PostEverywhere connects Claude to multi-platform social publishing. Create drafts, customize posts, schedule or publish content, and review analytics or failed deliveries. It requires a PostEverywhere account with connected social accounts and supports bulk requests of up to 50 posts.","did":"50b78dea-3329-470a-9f1a-c0eef3301603","documentation_url":"https://developers.posteverywhere.ai/","editorial_description":{"extended_description":"The source names networks including X, Instagram, TikTok, YouTube, LinkedIn, Facebook, Threads, Pinterest, Bluesky, Telegram, and Discord. Tools manage campaigns, media, captions, account health, and webhooks, and can retry failed posts. Drafts provide a human-review stage before publication when used.","schema_version":1,"summary":"PostEverywhere connects Claude to multi-platform social publishing.\nCreate drafts, customize posts, schedule or publish content, and review analytics or failed deliveries.\nIt requires a PostEverywhere account with connected social accounts and supports bulk requests of up to 50 posts."},"homepage_url":"","icon":"","id":"50b78dea-3329-470a-9f1a-c0eef3301603","installs":0,"last_scanned":"","license":"","long_description":"The source names networks including X, Instagram, TikTok, YouTube, LinkedIn, Facebook, Threads, Pinterest, Bluesky, Telegram, and Discord. Tools manage campaigns, media, captions, account health, and webhooks, and can retry failed posts. Drafts provide a human-review stage before publication when used.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Description states posts go to major social networks; these tools send external content.","reasoning":"Publishing messages as the user is High.","risk_type":"messaging_as_user","severity":"high","title":"Publishes or schedules social posts","triggering_tools_or_skills":["create_post","bulk_create_posts","schedule_post","retry_failed_posts"]},{"evidence":"Tools create account connections and outbound webhook infrastructure.","reasoning":"Credential/integration administration is High.","risk_type":"credential_admin","severity":"high","title":"Connects social credentials and webhooks","triggering_tools_or_skills":["connect_credential_account","create_connect_link","create_webhook"]},{"evidence":"Names explicitly delete meaningful resources.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Deletes campaigns, media, posts, and webhooks","triggering_tools_or_skills":["delete_campaign","delete_media","delete_post","delete_webhook"]},{"evidence":"The remote hosted implementation is not pinned.","reasoning":"Runtime capabilities may change after review.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/50b78dea-3329-470a-9f1a-c0eef3301603.json","what_it_proves":"Candidate PR #125 record identity (name \"PostEverywhere\", publisher, type web_connector) and 35 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/50b78dea-3329-470a-9f1a-c0eef3301603: complete tool_names inventory (35 tools), remote streamable-http endpoint https://mcp.posteverywhere.ai/claude, auth_posture auth_required, directory tier community"}],"primary_reason":"PostEverywhere publishes/schedules social posts, manages webhooks and credentials, and deletes campaigns/media/posts.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:50b78dea-3329-470a-9f1a-c0eef3301603","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 35 names; bulk size up to 50 is stated in the directory description.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":35,"tools_or_skills_total":35},"name":"PostEverywhere","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=50b78dea-3329-470a-9f1a-c0eef3301603&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://posteverywhere.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"PostEverywhere Ltd","publisher_url":"https://posteverywhere.ai/","remote_url":"https://mcp.posteverywhere.ai/claude","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing messages as the user is High.","evidence":"Publishes or schedules social posts: Description states posts go to major social networks; these tools send external content.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Publishes or schedules social posts","triggering_tools":["create_post","bulk_create_posts","schedule_post","retry_failed_posts"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential/integration administration is High.","evidence":"Connects social credentials and webhooks: Tools create account connections and outbound webhook infrastructure.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Connects social credentials and webhooks","triggering_tools":["connect_credential_account","create_connect_link","create_webhook"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Deletes campaigns, media, posts, and webhooks: Names explicitly delete meaningful resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes campaigns, media, posts, and webhooks","triggering_tools":["delete_campaign","delete_media","delete_post","delete_webhook"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@posteverywhere.ai","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"bulk_create_posts","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing messages as the user is High."}},{"description":"","name":"connect_credential_account","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential/integration administration is High."}},{"description":"","name":"create_campaign"},{"description":"","name":"create_connect_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential/integration administration is High."}},{"description":"","name":"create_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing messages as the user is High."}},{"description":"","name":"create_reconnect_link"},{"description":"","name":"create_webhook","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential/integration administration is High."}},{"description":"","name":"delete_campaign","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"delete_media","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"delete_post","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"delete_webhook","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"generate_caption"},{"description":"","name":"get_account"},{"description":"","name":"get_account_health"},{"description":"","name":"get_analytics_summary"},{"description":"","name":"get_campaign"},{"description":"","name":"get_me"},{"description":"","name":"get_media"},{"description":"","name":"get_post"},{"description":"","name":"get_post_results"},{"description":"","name":"get_webhook"},{"description":"","name":"list_accounts"},{"description":"","name":"list_campaigns"},{"description":"","name":"list_media"},{"description":"","name":"list_posts"},{"description":"","name":"list_posts_advanced"},{"description":"","name":"list_webhooks"},{"description":"","name":"retry_failed_post"},{"description":"","name":"retry_failed_posts","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing messages as the user is High."}},{"description":"","name":"schedule_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing messages as the user is High."}},{"description":"","name":"test_webhook"},{"description":"","name":"update_campaign"},{"description":"","name":"update_post"},{"description":"","name":"update_webhook"},{"description":"","name":"upload_media_from_url"}],"tools_count":35,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/50b78dea-3329-470a-9f1a-c0eef3301603","uuid":"c54d7ecd-da13-5276-8e8a-4d583e3c79e3","verification_tier":"community","version":""},"query_key":"posteverywhere","schema_version":1,"status":"match"}