{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage editorial content in your PubLive publication through Claude. Search, create and update posts, organize tags, manage media and run live blogs. Work within your own PubLive instance using your credentials.","did":"00b9df31-94e2-46bf-8141-d44393196535","documentation_url":"https://mcp.thepublive.com/docs","editorial_description":{"extended_description":"Tools cover editorial and published content, live-blog updates, media uploads, and component or content-type definitions. Content and related structures can also be deleted. The source excludes reader-account management, newsletter-subscriber access, and password-reset or email-verification messages; those activities remain outside this connector's described scope.","schema_version":1,"summary":"Manage editorial content in your PubLive publication through Claude.\nSearch, create and update posts, organize tags, manage media and run live blogs.\nWork within your own PubLive instance using your credentials."},"homepage_url":"","icon":"https://dashboard.thepublive.com/v2/public/favicon.ico","id":"00b9df31-94e2-46bf-8141-d44393196535","installs":0,"last_scanned":"","license":"","long_description":"Tools cover editorial and published content, live-blog updates, media uploads, and component or content-type definitions. Content and related structures can also be deleted. The source excludes reader-account management, newsletter-subscriber access, and password-reset or email-verification messages; those activities remain outside this connector's described scope.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Directory tool_names include delete_post, delete_media_asset, delete_content_type_schema and four more delete_* tools.","reasoning":"Can remove published editorial content and schemas that structure the whole publication.","risk_type":"data_deletion","severity":"high","title":"Deletes posts, categories, tags, media and content-type schemas","triggering_tools_or_skills":["delete_post","delete_category","delete_tag","delete_media_asset","delete_liveblog_update","delete_content_type_schema","delete_component_schema"]},{"evidence":"One-liner: 'search, create, edit, and publish content directly in your PubLive workspace'; description: 'run live blogs'.","reasoning":"Publishing public content under the publication's name is external content sent as the user.","risk_type":"messaging_as_user","severity":"high","title":"Creates, edits and publishes articles and live-blog updates on a public site","triggering_tools_or_skills":["create_post","update_post","add_liveblog_update","update_liveblog_update"]},{"evidence":"Directory tool_names include create_/update_ tools for categories, tags, content-type and component schemas plus upload_media_asset and register_media_asset; description: 'manage content-type schemas'.","reasoning":"Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them.","risk_type":"data_modification","severity":"medium","title":"Modifies taxonomy, schemas and media library","triggering_tools_or_skills":["create_category","update_category","create_tag","update_tag","create_content_type_schema","update_content_type_schema","create_component_schema","update_component_schema","upload_media_asset","register_media_asset","update_media_asset"]},{"evidence":"Directory remote.url is mcp.thepublive.com/mcp; no pinned source or version is available for the server.","reasoning":"Tool behaviour can change server-side after review; ratings rest on the 2026-09-22 snapshot.","risk_type":"provenance_uncertainty","severity":"low","title":"Closed hosted MCP server for Publive can change without notice","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"auth_required; description says it acts 'using your own API credentials' on the user's PubLive instance; scopes unknown.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/00b9df31-94e2-46bf-8141-d44393196535.json","what_it_proves":"Candidate PR #125 record identity (name \"Publive\", publisher, type web_connector) and 61 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/00b9df31-94e2-46bf-8141-d44393196535: complete tool_names inventory (61 tools), remote streamable-http endpoint https://mcp.thepublive.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Declared delete_post/delete_media_asset tools and post publishing can destroy or publicly publish editorial content.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:00b9df31-94e2-46bf-8141-d44393196535","reviewed_at":"2026-10-10","reviewer_notes":"Identity consistent (thepublive.com). Reviewed all 61 tool names. Pinned High by delete_* tools; no doc lookup made. fetch_post_by_url/fetch_static_file/register_media_asset may fetch URLs - arbitrary_network_access left unknown. Description's claim that it cannot touch reader accounts/newsletters is consistent with the inventory (fetch_newsletter_groups is read).","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":61,"tools_or_skills_total":61},"name":"Publive","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=00b9df31-94e2-46bf-8141-d44393196535&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mcp.thepublive.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Publive","publisher_url":"https://www.thepublive.com/","remote_url":"https://mcp.thepublive.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication.","evidence":"Deletes posts, categories, tags, media and content-type schemas: Directory tool_names include delete_post, delete_media_asset, delete_content_type_schema and four more delete_* tools.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes posts, categories, tags, media and content-type schemas","triggering_tools":["delete_post","delete_category","delete_tag","delete_media_asset","delete_liveblog_update","delete_content_type_schema","delete_component_schema"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing public content under the publication's name is external content sent as the user.","evidence":"Creates, edits and publishes articles and live-blog updates on a public site: One-liner: 'search, create, edit, and publish content directly in your PubLive workspace'; description: 'run live blogs'.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Creates, edits and publishes articles and live-blog updates on a public site","triggering_tools":["create_post","update_post","add_liveblog_update","update_liveblog_update"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them.","evidence":"Modifies taxonomy, schemas and media library: Directory tool_names include create_/update_ tools for categories, tags, content-type and component schemas plus upload_media_asset and register_media_asset; description: 'manage content-type schemas'.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Modifies taxonomy, schemas and media library","triggering_tools":["create_category","update_category","create_tag","update_tag","create_content_type_schema","update_content_type_schema","create_component_schema","update_component_schema","upload_media_asset","register_media_asset","update_media_asset"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@thepublive.com","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_liveblog_update","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing public content under the publication's name is external content sent as the user."}},{"description":"","name":"create_category","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"create_component_schema","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"create_content_type_schema","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"create_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing public content under the publication's name is external content sent as the user."}},{"description":"","name":"create_tag","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"delete_category","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication."}},{"description":"","name":"delete_component_schema","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication."}},{"description":"","name":"delete_content_type_schema","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication."}},{"description":"","name":"delete_liveblog_update","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication."}},{"description":"","name":"delete_media_asset","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication."}},{"description":"","name":"delete_post","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication."}},{"description":"","name":"delete_tag","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Can remove published editorial content and schemas that structure the whole publication."}},{"description":"","name":"fetch_ad_slots"},{"description":"","name":"fetch_author"},{"description":"","name":"fetch_authors"},{"description":"","name":"fetch_content_type_definitions"},{"description":"","name":"fetch_liveblog_with_updates"},{"description":"","name":"fetch_newsletter_groups"},{"description":"","name":"fetch_post_by_url"},{"description":"","name":"fetch_published_categories"},{"description":"","name":"fetch_published_category"},{"description":"","name":"fetch_published_post"},{"description":"","name":"fetch_published_posts"},{"description":"","name":"fetch_published_tag"},{"description":"","name":"fetch_published_tags"},{"description":"","name":"fetch_publisher_profile"},{"description":"","name":"fetch_site_footer"},{"description":"","name":"fetch_site_navigation"},{"description":"","name":"fetch_sitemap"},{"description":"","name":"fetch_sitemap_page"},{"description":"","name":"fetch_static_file"},{"description":"","name":"fetch_trending_posts"},{"description":"","name":"get_component_schema"},{"description":"","name":"get_content_type_schema"},{"description":"","name":"get_editorial_category"},{"description":"","name":"get_editorial_post"},{"description":"","name":"get_editorial_tag"},{"description":"","name":"get_liveblog_update"},{"description":"","name":"get_media_asset"},{"description":"","name":"list_component_schemas"},{"description":"","name":"list_content_type_schemas"},{"description":"","name":"list_editorial_categories"},{"description":"","name":"list_editorial_liveblog_updates"},{"description":"","name":"list_editorial_posts"},{"description":"","name":"list_editorial_tags"},{"description":"","name":"list_media_assets"},{"description":"","name":"register_media_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"resolve_url_to_content_type"},{"description":"","name":"update_category","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"update_component_schema","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"update_content_type_schema","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"update_liveblog_update","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing public content under the publication's name is external content sent as the user."}},{"description":"","name":"update_media_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"update_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing public content under the publication's name is external content sent as the user."}},{"description":"","name":"update_tag","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"upload_media_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Structural changes to the CMS taxonomy, schemas and media library affect every article that depends on them."}},{"description":"","name":"validate_author"},{"description":"","name":"validate_category"},{"description":"","name":"validate_media_asset"},{"description":"","name":"validate_post_slug"}],"tools_count":61,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/00b9df31-94e2-46bf-8141-d44393196535","uuid":"02099233-6b35-5122-b43d-d8ab1f78e619","verification_tier":"community","version":""},"query_key":"publive publive","schema_version":1,"status":"match"}