{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Promptwatch tracks your brand's visibility in AI search. Analyze citations, sentiment, competitors, content gaps, and AI-referred traffic. Manage monitoring prompts and generate content in your projects.","did":"94b14d88-5df3-4c33-ac5e-b8518706f3ef","documentation_url":"https://promptwatch.com/docs/mcp/introduction","editorial_description":{"extended_description":"Explore citation domains and pages by model, inspect individual responses, and compare brand visibility over time. Project tools manage monitors, brands, tags, and personas, while crawler and visitor reports show how content is discovered and visited.","schema_version":1,"summary":"Promptwatch tracks your brand's visibility in AI search.\nAnalyze citations, sentiment, competitors, content gaps, and AI-referred traffic.\nManage monitoring prompts and generate content in your projects."},"homepage_url":"","icon":"https://promptwatch.com/favicon.svg","id":"94b14d88-5df3-4c33-ac5e-b8518706f3ef","installs":0,"last_scanned":"","license":"","long_description":"Explore citation domains and pages by model, inspect individual responses, and compare brand visibility over time. Project tools manage monitors, brands, tags, and personas, while crawler and visitor reports show how content is discovered and visited.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools remove durable monitoring/configuration resources.","reasoning":"They can destroy visibility programs and prompt datasets.","risk_type":"data_deletion","severity":"high","title":"Deletes monitors, prompts, tags and personas","triggering_tools_or_skills":["delete_monitor","delete_prompt","delete_prompts_bulk","delete_tag","delete_persona"]},{"evidence":"These tools persist and activate AI-search monitoring/content state.","reasoning":"They materially change the workspace but no external publication tool is listed.","risk_type":"data_modification","severity":"medium","title":"Creates/updates monitoring, prompts, brands, tags, personas and content","triggering_tools_or_skills":["create_monitor","create_prompt","activate_prompts","create_brand","create_persona","create_content"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; projects/monitors/prompts/brands/personas/content follow Promptwatch workspace roles.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/94b14d88-5df3-4c33-ac5e-b8518706f3ef.json","what_it_proves":"Candidate PR #125 record identity (name \"Promptwatch\", publisher, type web_connector) and 67 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/94b14d88-5df3-4c33-ac5e-b8518706f3ef: complete tool_names inventory (67 tools), remote streamable-http endpoint https://server.promptwatch.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Promptwatch can delete core monitors, prompts, tags and personas.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:94b14d88-5df3-4c33-ac5e-b8518706f3ef","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 67 tools. create_content appears internal content generation/storage; no CMS publish/send action is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":67,"tools_or_skills_total":67},"name":"Promptwatch","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=94b14d88-5df3-4c33-ac5e-b8518706f3ef&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://promptwatch.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Promptwatch","publisher_url":"https://promptwatch.com/","remote_url":"https://server.promptwatch.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can destroy visibility programs and prompt datasets.","evidence":"Deletes monitors, prompts, tags and personas: These tools remove durable monitoring/configuration resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes monitors, prompts, tags and personas","triggering_tools":["delete_monitor","delete_prompt","delete_prompts_bulk","delete_tag","delete_persona"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change the workspace but no external publication tool is listed.","evidence":"Creates/updates monitoring, prompts, brands, tags, personas and content: These tools persist and activate AI-search monitoring/content state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates monitoring, prompts, brands, tags, personas and content","triggering_tools":["create_monitor","create_prompt","activate_prompts","create_brand","create_persona","create_content"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"team@promptwatch.com ","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"list_projects"},{"description":"","name":"create_project"},{"description":"","name":"list_models"},{"description":"","name":"list_monitors"},{"description":"","name":"get_monitor"},{"description":"","name":"create_monitor","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change the workspace but no external publication tool is listed."}},{"description":"","name":"update_monitor"},{"description":"","name":"delete_monitor","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy visibility programs and prompt datasets."}},{"description":"","name":"list_prompts"},{"description":"","name":"get_prompt"},{"description":"","name":"create_prompt","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change the workspace but no external publication tool is listed."}},{"description":"","name":"create_prompts_bulk"},{"description":"","name":"delete_prompt","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy visibility programs and prompt datasets."}},{"description":"","name":"delete_prompts_bulk","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy visibility programs and prompt datasets."}},{"description":"","name":"activate_prompts","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change the workspace but no external publication tool is listed."}},{"description":"","name":"deactivate_prompts"},{"description":"","name":"attach_tags_to_prompt"},{"description":"","name":"attach_tags_to_prompts_bulk"},{"description":"","name":"get_visibility_time_series"},{"description":"","name":"get_sentiment_time_series"},{"description":"","name":"get_citations"},{"description":"","name":"get_self_citation_frequency"},{"description":"","name":"get_citation_domains_over_time"},{"description":"","name":"get_citation_rank_analysis"},{"description":"","name":"get_citation_top_pages"},{"description":"","name":"get_citation_llm_sources"},{"description":"","name":"get_citation_domains_by_llm"},{"description":"","name":"list_responses"},{"description":"","name":"get_response"},{"description":"","name":"get_responses_summary"},{"description":"","name":"get_mentions_time_series"},{"description":"","name":"get_top_competitors"},{"description":"","name":"get_response_sentiment_distribution"},{"description":"","name":"get_response_sentiment_time_series"},{"description":"","name":"list_brands"},{"description":"","name":"create_brand","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change the workspace but no external publication tool is listed."}},{"description":"","name":"update_brand"},{"description":"","name":"get_brand_visibility_over_time"},{"description":"","name":"get_competitor_heatmap"},{"description":"","name":"get_content_gap_stats"},{"description":"","name":"list_content_gap_prompts"},{"description":"","name":"get_content_gap_latest"},{"description":"","name":"get_content_gap_recommendations"},{"description":"","name":"list_query_fanouts"},{"description":"","name":"list_tags"},{"description":"","name":"create_tags"},{"description":"","name":"rename_tag"},{"description":"","name":"delete_tag","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy visibility programs and prompt datasets."}},{"description":"","name":"list_personas"},{"description":"","name":"get_persona"},{"description":"","name":"create_persona","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change the workspace but no external publication tool is listed."}},{"description":"","name":"update_persona"},{"description":"","name":"delete_persona","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy visibility programs and prompt datasets."}},{"description":"","name":"get_crawler_trend"},{"description":"","name":"get_top_crawler_pages"},{"description":"","name":"get_visitor_total"},{"description":"","name":"get_visitor_trend"},{"description":"","name":"get_visitor_referrer_stats"},{"description":"","name":"get_visitor_top_pages"},{"description":"","name":"get_visitor_top_sources"},{"description":"","name":"get_visitor_top_locations"},{"description":"","name":"get_visitor_top_devices"},{"description":"","name":"get_visitor_top_browsers"},{"description":"","name":"get_sitemap_progress"},{"description":"","name":"list_content"},{"description":"","name":"get_content"},{"description":"","name":"create_content","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change the workspace but no external publication tool is listed."}}],"tools_count":67,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/94b14d88-5df3-4c33-ac5e-b8518706f3ef","uuid":"2b330871-c1e2-5604-8815-16ca43156cc8","verification_tier":"community","version":""},"query_key":"promptwatch promptwatch","schema_version":1,"status":"match"}