{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"98e8b7cc229c88db11357c622508aa49feed884a97ea80a8fe31a5ddbd0448e2","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"Privy help states all tools are read-only ('Assistants can look at your data; they can't change anything in your account') across account, campaigns, contacts and consent, coupons, displays, flows, orders, products and segments, scoped to the business selected at OAuth sign-in. Contacts/orders are customer PII: Medium. The original refresh card 'Can send messages as you' (High) is contradicted by the vendor. The generic execute tool is not documented by name; vendor read-only claim is the only evidence it cannot write, so confidence is medium. First pass matched.","review_key":"claudesec:fa3bba1f-bf13-4abf-8533-908b769eb116","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://help.privy.com/docs/learn/mcp"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Privy analyzes e-commerce marketing data from your selected business. Inspect email or SMS results, flows, displays, audiences, orders, and revenue. Requires a paid Privy business; access is read-only through OAuth.","did":"fa3bba1f-bf13-4abf-8533-908b769eb116","documentation_url":"https://help.privy.com/docs/learn/mcp","editorial_description":{"extended_description":"Compare campaigns, review segment definitions, inspect contacts or consent, and understand account configuration. The connector cannot change campaigns, contacts, flows, or settings.","schema_version":1,"summary":"Privy analyzes e-commerce marketing data from your selected business.\nInspect email or SMS results, flows, displays, audiences, orders, and revenue.\nRequires a paid Privy business; access is read-only through OAuth."},"homepage_url":"","icon":"","id":"fa3bba1f-bf13-4abf-8533-908b769eb116","installs":0,"last_scanned":"","license":"","long_description":"Compare campaigns, review segment definitions, inspect contacts or consent, and understand account configuration. The connector cannot change campaigns, contacts, flows, or settings.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"The inventory provides describe/request_capability followed by a generic execute tool rather than concrete marketing operations or schemas.","reasoning":"The description covers campaigns, flows, contacts, consent, coupons, orders, products and account setup, so hidden actions could include sending, deletion, discounts, or administration.","risk_type":"evidence_gap","severity":"low","title":"Generic execute and capability-request tools hide the action set","triggering_tools_or_skills":["describe","execute","request_capability"]},{"evidence":"The listing says Claude can ask about contacts/consent, email/SMS campaigns, flows, popups/forms, coupons, orders, products and setup.","reasoning":"This includes personal customer data and private commerce/marketing records.","risk_type":"private_data_read","severity":"medium","title":"Customer, consent, campaign, order, and performance data is reachable","triggering_tools_or_skills":["search","execute"]},{"evidence":"Campaign copy, form input, and customer fields are user-generated content.","reasoning":"Marketing/customer text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Customer and marketing content enters context","triggering_tools_or_skills":["search","execute"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects a Privy marketing account, but the generic execute/request_capability protocol does not enumerate permitted actions or scopes.","blocked_missing_evidence":"Authenticated describe/request_capability output and concrete execute action/input schemas, including Privy OAuth scopes and confirmation behavior.","confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/fa3bba1f-bf13-4abf-8533-908b769eb116.json","what_it_proves":"Candidate PR #125 record identity (name \"Privy\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/fa3bba1f-bf13-4abf-8533-908b769eb116: complete tool_names inventory (8 tools), remote streamable-http endpoint https://mcp.privy.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Privy's effective permissions are hidden behind a generic capability-discovery and execute gateway.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:fa3bba1f-bf13-4abf-8533-908b769eb116","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight visible tools; runtime describe output, granted capability list, and execute schemas are required.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"unknown","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Privy","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=fa3bba1f-bf13-4abf-8533-908b769eb116&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.privy.com/privacy","provisional_risk":"high","publication_recommendation":"fix","publisher":"Privy","publisher_url":"https://www.privy.com/","remote_url":"https://mcp.privy.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"Reads contacts, consent, orders, revenue, segments and campaign or flow statistics for the business selected at sign-in.","evidence":"Actions: describe, execute, search, get_identity. https://help.privy.com/docs/learn/mcp — read access areas; read-only statement","risk_type":"reads_private_data","severity":"medium","title":"Reads customer and marketing information"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@privy.com","tags":["reads_private_data"],"tools":[{"description":"","name":"describe"},{"description":"","name":"execute","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This includes personal customer data and private commerce/marketing records."}},{"description":"","name":"get_identity"},{"description":"","name":"read_help_article"},{"description":"","name":"request_capability"},{"description":"","name":"search","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This includes personal customer data and private commerce/marketing records."}},{"description":"","name":"search_help_docs"},{"description":"","name":"submit_feedback"}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/fa3bba1f-bf13-4abf-8533-908b769eb116","uuid":"89f12c63-1731-556c-82c8-0ffd221e43ab","verification_tier":"community","version":""},"query_key":"privy","schema_version":1,"status":"match"}