{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Qualyteam connects Claude to quality documents, nonconformities, risks, and opportunities. Inspect records and dashboards or manage nonconformity causes, corrective actions, and workflow stages. An active account is required; permissions apply and changes require confirmation.","did":"8698cf36-5750-4cb8-b825-aa041bb395bc","documentation_url":"https://suporte.qualyteam.com.br/","editorial_description":{"extended_description":"Document tools inspect published revisions, controlled copies, required reading, and pending tasks. Risk and opportunity tools track evaluation or implementation context, while nonconformity tools can create, update, delete, approve, or close records and actions.","schema_version":1,"summary":"Qualyteam connects Claude to quality documents, nonconformities, risks, and opportunities.\nInspect records and dashboards or manage nonconformity causes, corrective actions, and workflow stages.\nAn active account is required; permissions apply and changes require confirmation."},"homepage_url":"","icon":"","id":"8698cf36-5750-4cb8-b825-aa041bb395bc","installs":0,"last_scanned":"","license":"","long_description":"Document tools inspect published revisions, controlled copies, required reading, and pending tasks. Risk and opportunity tools track evaluation or implementation context, while nonconformity tools can create, update, delete, approve, or close records and actions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These explicit tools remove durable quality-management records.","reasoning":"They can destroy compliance/audit evidence and workflow history.","risk_type":"data_deletion","severity":"high","title":"Deletes nonconformity occurrences, reports, actions and cause analyses","triggering_tools_or_skills":["nonconformities_delete_occurrence","nonconformities_delete_report","nonconformities_delete_corrective_action","nonconformities_delete_immediate_action","nonconformities_delete_five_whys","nonconformities_delete_ishikawa_cause","nonconformities_delete_report_correction"]},{"evidence":"These tools persist quality incidents/analyses/actions and change approval/closure state.","reasoning":"They materially alter regulated or audited quality processes.","risk_type":"data_modification","severity":"medium","title":"Creates and advances nonconformity workflows","triggering_tools_or_skills":["nonconformities_create_occurrence","nonconformities_create_report","nonconformities_create_corrective_action","nonconformities_approve_planning","nonconformities_close_occurrence","nonconformities_update_report_details"]},{"evidence":"The connector exposes internal documents, permissions, risk and quality records.","reasoning":"These are sensitive organizational/compliance data.","risk_type":"private_data_read","severity":"low","title":"Reads documents, risks, opportunities and compliance workflows","triggering_tools_or_skills":["documents_get_internal_document_content","documents_get_internal_document_permissions","risks_get_risk_report","opportunities_get_opportunity","nonconformities_get_occurrence_details"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to Qualyteam is required; every tool operates within the connected user’s existing quality-management permissions and write actions request confirmation.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/8698cf36-5750-4cb8-b825-aa041bb395bc.json","what_it_proves":"Candidate PR #125 record identity (name \"Qualyteam-MCP\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/8698cf36-5750-4cb8-b825-aa041bb395bc: complete tool_names inventory (201 tools), remote streamable-http endpoint https://qtmcp.qualyteam.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Qualyteam can delete compliance-quality records and broadly progress/close nonconformity workflows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:8698cf36-5750-4cb8-b825-aa041bb395bc","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 201 tools. Confirmation safeguards writes but does not reduce capability. No external message/payment/account-admin tool is explicitly declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":201,"tools_or_skills_total":201},"name":"Qualyteam-MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=8698cf36-5750-4cb8-b825-aa041bb395bc&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://qualyteam.com/pb/politica-de-privacidade/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Qualyteam","publisher_url":"https://qualyteam.com/","remote_url":"https://qtmcp.qualyteam.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history.","evidence":"Deletes nonconformity occurrences, reports, actions and cause analyses: These explicit tools remove durable quality-management records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes nonconformity occurrences, reports, actions and cause analyses","triggering_tools":["nonconformities_delete_occurrence","nonconformities_delete_report","nonconformities_delete_corrective_action","nonconformities_delete_immediate_action","nonconformities_delete_five_whys","nonconformities_delete_ishikawa_cause","nonconformities_delete_report_correction"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter regulated or audited quality processes.","evidence":"Creates and advances nonconformity workflows: These tools persist quality incidents/analyses/actions and change approval/closure state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and advances nonconformity workflows","triggering_tools":["nonconformities_create_occurrence","nonconformities_create_report","nonconformities_create_corrective_action","nonconformities_approve_planning","nonconformities_close_occurrence","nonconformities_update_report_details"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: These are sensitive organizational/compliance data.","evidence":"Reads documents, risks, opportunities and compliance workflows: The connector exposes internal documents, permissions, risk and quality records.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads documents, risks, opportunities and compliance workflows","triggering_tools":["documents_get_internal_document_content","documents_get_internal_document_permissions","risks_get_risk_report","opportunities_get_opportunity","nonconformities_get_occurrence_details"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"suporte@qualyteam.com.br","tags":["deletes_data","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"documents_dashboard_documents_by_category"},{"description":"","name":"documents_dashboard_documents_by_organizational_unit"},{"description":"","name":"documents_dashboard_documents_by_period"},{"description":"","name":"documents_dashboard_documents_by_process"},{"description":"","name":"documents_dashboard_documents_by_status"},{"description":"","name":"documents_dashboard_documents_by_type"},{"description":"","name":"documents_dashboard_elaboration_tasks_by_stage"},{"description":"","name":"documents_dashboard_expiration_tasks_by_status"},{"description":"","name":"documents_dashboard_request_tasks_by_type"},{"description":"","name":"documents_get_category_details"},{"description":"","name":"documents_get_company_status"},{"description":"","name":"documents_get_external_document"},{"description":"","name":"documents_get_external_document_details"},{"description":"","name":"documents_get_external_document_expiration"},{"description":"","name":"documents_get_internal_document_content"},{"description":"","name":"documents_get_internal_document_details"},{"description":"","name":"documents_get_internal_document_permissions"},{"description":"","name":"documents_get_internal_document_revision_details"},{"description":"","name":"documents_get_open_update_controlled_copy_task"},{"description":"","name":"documents_get_revision_expiration"},{"description":"","name":"documents_get_update_controlled_copy_task"},{"description":"","name":"documents_list_active_users"},{"description":"","name":"documents_list_associated_documents"},{"description":"","name":"documents_list_categories"},{"description":"","name":"documents_list_category_stages"},{"description":"","name":"documents_list_control_items"},{"description":"","name":"documents_list_deactivation_requests"},{"description":"","name":"documents_list_distribution_points"},{"description":"","name":"documents_list_documents_to_associate"},{"description":"","name":"documents_list_elaboration_tasks"},{"description":"","name":"documents_list_expiration_tasks"},{"description":"","name":"documents_list_external_documents"},{"description":"","name":"documents_list_internal_document_stages"},{"description":"","name":"documents_list_internal_documents"},{"description":"","name":"documents_list_organizational_units"},{"description":"","name":"documents_list_processes"},{"description":"","name":"documents_list_reactivation_requests"},{"description":"","name":"documents_list_request_tasks"},{"description":"","name":"documents_list_required_reading"},{"description":"","name":"documents_list_revision_controlled_copies"},{"description":"","name":"documents_list_stages"},{"description":"","name":"documents_list_users"},{"description":"","name":"documents_search_internal_documents_smart"},{"description":"","name":"nonconformities_advance_causes_to_planning"},{"description":"","name":"nonconformities_advance_implementation"},{"description":"","name":"nonconformities_advance_planning"},{"description":"","name":"nonconformities_approve_planning","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter regulated or audited quality processes."}},{"description":"","name":"nonconformities_close_occurrence","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter regulated or audited quality processes."}},{"description":"","name":"nonconformities_close_occurrence_and_register_report"},{"description":"","name":"nonconformities_close_report"},{"description":"","name":"nonconformities_create_corrective_action","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter regulated or audited quality processes."}},{"description":"","name":"nonconformities_create_five_whys"},{"description":"","name":"nonconformities_create_immediate_action"},{"description":"","name":"nonconformities_create_ishikawa_cause"},{"description":"","name":"nonconformities_create_occurrence","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter regulated or audited quality processes."}},{"description":"","name":"nonconformities_create_report","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter regulated or audited quality processes."}},{"description":"","name":"nonconformities_create_report_correction"},{"description":"","name":"nonconformities_dashboard_actions_by_status"},{"description":"","name":"nonconformities_dashboard_occurrence_tasks_by_type"},{"description":"","name":"nonconformities_dashboard_occurrences_by_organizational_unit"},{"description":"","name":"nonconformities_dashboard_occurrences_by_origin"},{"description":"","name":"nonconformities_dashboard_occurrences_by_period"},{"description":"","name":"nonconformities_dashboard_occurrences_by_process"},{"description":"","name":"nonconformities_dashboard_occurrences_closed_by_period"},{"description":"","name":"nonconformities_dashboard_process_graph"},{"description":"","name":"nonconformities_dashboard_report_tasks_by_step"},{"description":"","name":"nonconformities_dashboard_reports_by_organizational_unit"},{"description":"","name":"nonconformities_dashboard_reports_by_origin"},{"description":"","name":"nonconformities_dashboard_reports_by_period"},{"description":"","name":"nonconformities_dashboard_reports_by_process"},{"description":"","name":"nonconformities_dashboard_reports_effectiveness_by_period"},{"description":"","name":"nonconformities_dashboard_type_graph"},{"description":"","name":"nonconformities_delete_corrective_action","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history."}},{"description":"","name":"nonconformities_delete_five_whys","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history."}},{"description":"","name":"nonconformities_delete_immediate_action","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history."}},{"description":"","name":"nonconformities_delete_ishikawa_cause","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history."}},{"description":"","name":"nonconformities_delete_occurrence","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history."}},{"description":"","name":"nonconformities_delete_report","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history."}},{"description":"","name":"nonconformities_delete_report_correction","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy compliance/audit evidence and workflow history."}},{"description":"","name":"nonconformities_disapprove_planning"},{"description":"","name":"nonconformities_get_cause_analysis"},{"description":"","name":"nonconformities_get_company_configuration"},{"description":"","name":"nonconformities_get_company_status"},{"description":"","name":"nonconformities_get_management_approval"},{"description":"","name":"nonconformities_get_management_details"},{"description":"","name":"nonconformities_get_management_effectiveness"},{"description":"","name":"nonconformities_get_management_implementation"},{"description":"","name":"nonconformities_get_management_planning"},{"description":"","name":"nonconformities_get_occurrence_corrections_header"},{"description":"","name":"nonconformities_get_occurrence_details"},{"description":"","name":"nonconformities_get_occurrence_preview"},{"description":"","name":"nonconformities_get_origin_details"},{"description":"","name":"nonconformities_get_report_header"},{"description":"","name":"nonconformities_get_report_preview"},{"description":"","name":"nonconformities_get_report_summary"},{"description":"","name":"nonconformities_get_tasks_counter"},{"description":"","name":"nonconformities_implement_corrective_action"},{"description":"","name":"nonconformities_list_active_users"},{"description":"","name":"nonconformities_list_approval_corrective_actions"},{"description":"","name":"nonconformities_list_approval_tasks"},{"description":"","name":"nonconformities_list_cause_and_planning_tasks"},{"description":"","name":"nonconformities_list_correction_tasks"},{"description":"","name":"nonconformities_list_corrections"},{"description":"","name":"nonconformities_list_effectiveness_tasks"},{"description":"","name":"nonconformities_list_five_whys"},{"description":"","name":"nonconformities_list_implementation_tasks"},{"description":"","name":"nonconformities_list_ishikawa_categories"},{"description":"","name":"nonconformities_list_management_corrections"},{"description":"","name":"nonconformities_list_management_steps"},{"description":"","name":"nonconformities_list_occurrence_corrections"},{"description":"","name":"nonconformities_list_occurrence_tasks"},{"description":"","name":"nonconformities_list_occurrences"},{"description":"","name":"nonconformities_list_origins"},{"description":"","name":"nonconformities_list_report_corrections"},{"description":"","name":"nonconformities_list_report_corrective_actions"},{"description":"","name":"nonconformities_list_reports"},{"description":"","name":"nonconformities_list_root_causes"},{"description":"","name":"nonconformities_list_similar"},{"description":"","name":"nonconformities_list_suggested"},{"description":"","name":"nonconformities_list_to_associate"},{"description":"","name":"nonconformities_mark_ishikawa_root_cause"},{"description":"","name":"nonconformities_postpone_effectiveness"},{"description":"","name":"nonconformities_update_cause_analysis_type"},{"description":"","name":"nonconformities_update_cause_attachments"},{"description":"","name":"nonconformities_update_corrective_action"},{"description":"","name":"nonconformities_update_five_whys"},{"description":"","name":"nonconformities_update_immediate_action"},{"description":"","name":"nonconformities_update_ishikawa_cause"},{"description":"","name":"nonconformities_update_occurrence"},{"description":"","name":"nonconformities_update_occurrence_responsible"},{"description":"","name":"nonconformities_update_report_correction"},{"description":"","name":"nonconformities_update_report_description"},{"description":"","name":"nonconformities_update_report_details","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter regulated or audited quality processes."}},{"description":"","name":"nonconformities_update_root_causes"},{"description":"","name":"nonconformities_update_similar_associations"},{"description":"","name":"opportunities_dashboard_heatmap"},{"description":"","name":"opportunities_dashboard_opportunities_by_origin"},{"description":"","name":"opportunities_dashboard_opportunities_by_process"},{"description":"","name":"opportunities_dashboard_opportunities_by_status"},{"description":"","name":"opportunities_dashboard_opportunity_by_effectiveness_evaluation"},{"description":"","name":"opportunities_dashboard_tasks_by_step"},{"description":"","name":"opportunities_get_company_configuration"},{"description":"","name":"opportunities_get_company_configuration_status"},{"description":"","name":"opportunities_get_management_details"},{"description":"","name":"opportunities_get_management_effectiveness"},{"description":"","name":"opportunities_get_management_implementation"},{"description":"","name":"opportunities_get_management_planning"},{"description":"","name":"opportunities_get_opportunity"},{"description":"","name":"opportunities_get_opportunity_analysis_and_evaluation_details"},{"description":"","name":"opportunities_get_opportunity_details_header"},{"description":"","name":"opportunities_get_opportunity_details_information"},{"description":"","name":"opportunities_get_opportunity_effectiveness_details"},{"description":"","name":"opportunities_get_opportunity_status"},{"description":"","name":"opportunities_get_opportunity_validation_details"},{"description":"","name":"opportunities_get_suggested_code"},{"description":"","name":"opportunities_list_company_treatments"},{"description":"","name":"opportunities_list_effectiveness_tasks"},{"description":"","name":"opportunities_list_implementation_tasks"},{"description":"","name":"opportunities_list_management_implementation_actions"},{"description":"","name":"opportunities_list_management_planning_actions"},{"description":"","name":"opportunities_list_opportunities"},{"description":"","name":"opportunities_list_opportunity_types"},{"description":"","name":"opportunities_list_planning_and_implementation_details"},{"description":"","name":"opportunities_list_planning_tasks"},{"description":"","name":"opportunities_list_validation_tasks"},{"description":"","name":"risks_dashboard_heatmap_by_organizational_unit"},{"description":"","name":"risks_dashboard_processes_by_risks_identification"},{"description":"","name":"risks_dashboard_risks_by_effectiveness_evaluation"},{"description":"","name":"risks_dashboard_risks_by_organizational_unit"},{"description":"","name":"risks_dashboard_risks_by_origin"},{"description":"","name":"risks_dashboard_risks_by_process"},{"description":"","name":"risks_dashboard_risks_by_reevaluation"},{"description":"","name":"risks_dashboard_risks_by_treatment"},{"description":"","name":"risks_get_company_status"},{"description":"","name":"risks_get_current_risk_appetite_impacts"},{"description":"","name":"risks_get_current_risk_appetite_probabilities"},{"description":"","name":"risks_get_current_risk_appetite_treatments"},{"description":"","name":"risks_get_management_analysis_and_evaluation"},{"description":"","name":"risks_get_management_effectiveness"},{"description":"","name":"risks_get_management_identification"},{"description":"","name":"risks_get_organizational_unit_configuration"},{"description":"","name":"risks_get_organizational_unit_deletion_eligibility"},{"description":"","name":"risks_get_process_deletion_eligibility"},{"description":"","name":"risks_get_risk_report"},{"description":"","name":"risks_get_risk_report_history"},{"description":"","name":"risks_get_tasks_counter"},{"description":"","name":"risks_list_configuration_process_responsibles"},{"description":"","name":"risks_list_management_implementation"},{"description":"","name":"risks_list_management_planning"},{"description":"","name":"risks_list_my_configuration_processes"},{"description":"","name":"risks_list_my_overdue_identification_processes"},{"description":"","name":"risks_list_my_tasks_by_organizational_unit"},{"description":"","name":"risks_list_organizational_unit_configuration_process_details"},{"description":"","name":"risks_list_organizational_unit_configuration_processes"},{"description":"","name":"risks_list_organizational_units_configured"},{"description":"","name":"risks_list_organizational_units_configured_details"},{"description":"","name":"risks_list_organizational_units_not_configured"},{"description":"","name":"risks_list_organizational_units_responsible_me"},{"description":"","name":"risks_list_re_evaluation_tasks"},{"description":"","name":"risks_list_risk_types"},{"description":"","name":"risks_list_risks"}],"tools_count":201,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/8698cf36-5750-4cb8-b825-aa041bb395bc","uuid":"e0fd90cb-d96d-5eac-83ae-e0df99da542d","verification_tier":"community","version":""},"query_key":"qualyteam qualyteam mcp","schema_version":1,"status":"match"}