{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Productive connects agency projects, time, budgets, sales, and invoicing to Claude. Manage tasks, time entries, financial records, contacts, and documents, or query reports. Access follows your Productive permissions and covers one organization per connection.","did":"99dcbad3-0519-4a43-a411-14f2ee31133e","documentation_url":"https://help.productive.io/en/articles/14817386-mcp-server","editorial_description":{"extended_description":"Create and update projects and dependencies, operate timers and timesheets, inspect resourcing, and work with invoices, expenses, purchase orders, and payment records. Each user connects with their own login; a separate Sandbox server is available for testing.","schema_version":1,"summary":"Productive connects agency projects, time, budgets, sales, and invoicing to Claude.\nManage tasks, time entries, financial records, contacts, and documents, or query reports.\nAccess follows your Productive permissions and covers one organization per connection."},"homepage_url":"","icon":"","id":"99dcbad3-0519-4a43-a411-14f2ee31133e","installs":0,"last_scanned":"","license":"","long_description":"Create and update projects and dependencies, operate timers and timesheets, inspect resourcing, and work with invoices, expenses, purchase orders, and payment records. Each user connects with their own login; a separate Sandbox server is available for testing.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The description covers time deletion, invoices, expenses, payments, POs, comments and pages, while actions are runtime-resolved.","reasoning":"A generic dispatcher hides financial/destructive/messaging schemas.","risk_type":"generic_gateway","severity":"high","title":"Executes opaque Productive actions","triggering_tools_or_skills":["perform_action"]},{"evidence":"The listing explicitly says these financial records can be created.","reasoning":"They have consequential accounting/commercial effects.","risk_type":"financial_transaction","severity":"high","title":"Creates payments, invoices, expenses and purchase orders","triggering_tools_or_skills":["perform_action"]},{"evidence":"Explicit/generic actions include deletion across agency records.","reasoning":"They can destroy operational/financial history.","risk_type":"data_deletion","severity":"high","title":"Deletes resources, time entries and pages/comments","triggering_tools_or_skills":["delete_resource","perform_action"]},{"evidence":"The description includes comments in shared docs/workflows.","reasoning":"They communicate as the authenticated user.","risk_type":"messaging_as_user","severity":"high","title":"Creates/deletes shared comments","triggering_tools_or_skills":["perform_action"]},{"evidence":"A generic report query spans financials/time/projects/people.","reasoning":"It is flexible query execution over private data.","risk_type":"query_execution","severity":"high","title":"Queries reports dynamically","triggering_tools_or_skills":["query_report"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes one Productive organization; actions follow the user’s permissions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/99dcbad3-0519-4a43-a411-14f2ee31133e.json","what_it_proves":"Candidate PR #125 record identity (name \"Productive\", publisher, type web_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/99dcbad3-0519-4a43-a411-14f2ee31133e: complete tool_names inventory (17 tools), remote streamable-http endpoint https://mcp.productive.io/mcp, auth_posture auth_required, directory tier partner"}],"primary_reason":"Productive exposes dynamic financial, destructive, messaging and query actions.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:99dcbad3-0519-4a43-a411-14f2ee31133e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 17 wrapper tools and enumerated listing capabilities; runtime action inventory remains necessary.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"Productive","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=99dcbad3-0519-4a43-a411-14f2ee31133e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://productive.io/trust/privacy-policy/","provisional_risk":null,"publication_recommendation":"fix","publisher":"Productive","publisher_url":"https://productive.io/","remote_url":"https://mcp.productive.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: A generic dispatcher hides financial/destructive/messaging schemas.; It is flexible query execution over private data.","evidence":"Executes opaque Productive actions: The description covers time deletion, invoices, expenses, payments, POs, comments and pages, while actions are runtime-resolved. | Queries reports dynamically: A generic report query spans financials/time/projects/people.","manual_risk_type":"generic_gateway,query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["perform_action","query_report"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They have consequential accounting/commercial effects.","evidence":"Creates payments, invoices, expenses and purchase orders: The listing explicitly says these financial records can be created.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Creates payments, invoices, expenses and purchase orders","triggering_tools":["perform_action"]},{"description":"This connector can permanently remove data or resources. Review findings: They can destroy operational/financial history.","evidence":"Deletes resources, time entries and pages/comments: Explicit/generic actions include deletion across agency records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes resources, time entries and pages/comments","triggering_tools":["delete_resource","perform_action"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate as the authenticated user.","evidence":"Creates/deletes shared comments: The description includes comments in shared docs/workflows.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Creates/deletes shared comments","triggering_tools":["perform_action"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.productive.io/en/","tags":["deletes_data","network_access","oauth_required","runs_code","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"create_resource"},{"description":"","name":"delete_resource","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy operational/financial history."}},{"description":"","name":"describe_report"},{"description":"","name":"describe_resource"},{"description":"","name":"get_current_person_and_organization"},{"description":"","name":"load_resource"},{"description":"","name":"load_skills"},{"description":"","name":"perform_action","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate as the authenticated user."}},{"description":"","name":"productive_domain"},{"description":"","name":"query_report","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: A generic dispatcher hides financial/destructive/messaging schemas.; It is flexible query execution over private data."}},{"description":"","name":"query_resources"},{"description":"","name":"read_file_from_url"},{"description":"","name":"search_organization_data"},{"description":"","name":"search_project_data"},{"description":"","name":"search_records"},{"description":"","name":"search_resource"},{"description":"","name":"update_resource"}],"tools_count":17,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/99dcbad3-0519-4a43-a411-14f2ee31133e","uuid":"d654468b-2010-574a-8267-377f1c9de4c0","verification_tier":"partner","version":""},"query_key":"productive","schema_version":1,"status":"match"}