{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Organize Quire projects and nested tasks from Claude. Create or update work, set dates and assignees, and manage sublists or approvals. Read and write operations stay within the workspaces you authorize through OAuth.","did":"cd2584be-45e3-4a85-a68d-e35f33f65283","documentation_url":"https://quire.io/dev/api/#quire-mcp-server","editorial_description":{"extended_description":"The connector covers documents, chats, comments, attachments, time logs, tags, custom fields and insight views. Bulk operations can create, move, transfer, update or delete tasks; approval tools include approval and revocation. Search and activity views help review current project state.","schema_version":1,"summary":"Organize Quire projects and nested tasks from Claude.\nCreate or update work, set dates and assignees, and manage sublists or approvals.\nRead and write operations stay within the workspaces you authorize through OAuth."},"homepage_url":"","icon":"https://quire.s3.amazonaws.com/:MMM0aBDzMX_4vSYj1b96AC~fP_5/BGh/image.jpg","id":"cd2584be-45e3-4a85-a68d-e35f33f65283","installs":0,"last_scanned":"","license":"","long_description":"The connector covers documents, chats, comments, attachments, time logs, tags, custom fields and insight views. Bulk operations can create, move, transfer, update or delete tasks; approval tools include approval and revocation. Search and activity views help review current project state.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory contains explicit deletion tools across core workspace objects.","reasoning":"Removing project records and collaboration content is destructive.","risk_type":"data_deletion","severity":"high","title":"Tasks, chats, comments, documents and other project resources can be deleted","triggering_tools_or_skills":["delete_task","bulk_delete_tasks","delete_chat","delete_comment","delete_document","delete_insight","delete_status","delete_tag"]},{"evidence":"These tools add conversational content visible to collaborators.","reasoning":"Posting collaborative messages/comments acts externally as the user.","risk_type":"messaging_as_user","severity":"high","title":"Chat comments and task comments can be posted","triggering_tools_or_skills":["add_chat_comment","add_comment"]},{"evidence":"The inventory provides extensive create/update/approval actions.","reasoning":"These persist operational workspace changes.","risk_type":"data_modification","severity":"medium","title":"Projects, tasks, documents, fields and approvals can be changed","triggering_tools_or_skills":["create_task","bulk_create_tasks","update_project","update_document","approve_task","manage_project_field"]},{"evidence":"The connector runs at https://mcp.quire.app/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this catalog snapshot, requiring runtime verification and change monitoring.","risk_type":"provenance_uncertainty","severity":"low","title":"Quire is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Quire OAuth inherits the connected user's workspace access; exact scopes are not in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cd2584be-45e3-4a85-a68d-e35f33f65283.json","what_it_proves":"Candidate PR #125 record identity (name \"Quire\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cd2584be-45e3-4a85-a68d-e35f33f65283: complete tool_names inventory (96 tools), remote streamable-http endpoint https://mcp.quire.app/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Quire can delete project records and post collaborative comments as the user.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:cd2584be-45e3-4a85-a68d-e35f33f65283","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 96 tools. Names directly establish High delete and messaging capabilities.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":96,"tools_or_skills_total":96},"name":"Quire","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cd2584be-45e3-4a85-a68d-e35f33f65283&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://quire.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Quire","publisher_url":"https://quire.io/","remote_url":"https://mcp.quire.app/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive.","evidence":"Tasks, chats, comments, documents and other project resources can be deleted: The complete inventory contains explicit deletion tools across core workspace objects.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Tasks, chats, comments, documents and other project resources can be deleted","triggering_tools":["delete_task","bulk_delete_tasks","delete_chat","delete_comment","delete_document","delete_insight","delete_status","delete_tag"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Posting collaborative messages/comments acts externally as the user.","evidence":"Chat comments and task comments can be posted: These tools add conversational content visible to collaborators.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Chat comments and task comments can be posted","triggering_tools":["add_chat_comment","add_comment"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist operational workspace changes.","evidence":"Projects, tasks, documents, fields and approvals can be changed: The inventory provides extensive create/update/approval actions.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Projects, tasks, documents, fields and approvals can be changed","triggering_tools":["create_task","bulk_create_tasks","update_project","update_document","approve_task","manage_project_field"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"feedback@quire.io","tags":["accesses_messaging","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_chat_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Posting collaborative messages/comments acts externally as the user."}},{"description":"","name":"add_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Posting collaborative messages/comments acts externally as the user."}},{"description":"","name":"add_comment_attachment"},{"description":"","name":"add_task_attachment"},{"description":"","name":"add_task_timelog"},{"description":"","name":"add_task_to_sublist"},{"description":"","name":"approve_task","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist operational workspace changes."}},{"description":"","name":"bulk_approve_tasks"},{"description":"","name":"bulk_create_subtasks"},{"description":"","name":"bulk_create_tasks","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist operational workspace changes."}},{"description":"","name":"bulk_delete_tasks","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"bulk_move_tasks"},{"description":"","name":"bulk_transfer_tasks"},{"description":"","name":"bulk_update_tasks"},{"description":"","name":"complete_task"},{"description":"","name":"create_chat"},{"description":"","name":"create_document"},{"description":"","name":"create_insight"},{"description":"","name":"create_status"},{"description":"","name":"create_sublist"},{"description":"","name":"create_subtask"},{"description":"","name":"create_tag"},{"description":"","name":"create_task","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist operational workspace changes."}},{"description":"","name":"delete_chat","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"delete_comment","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"delete_document","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"delete_insight","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"delete_status","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"delete_sublist"},{"description":"","name":"delete_tag","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"delete_task","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing project records and collaboration content is destructive."}},{"description":"","name":"get_chat"},{"description":"","name":"get_comment"},{"description":"","name":"get_current_user"},{"description":"","name":"get_document"},{"description":"","name":"get_insight"},{"description":"","name":"get_organization"},{"description":"","name":"get_partner"},{"description":"","name":"get_project"},{"description":"","name":"get_rate_limit"},{"description":"","name":"get_status"},{"description":"","name":"get_sublist"},{"description":"","name":"get_tag"},{"description":"","name":"get_task"},{"description":"","name":"get_task_by_id"},{"description":"","name":"get_task_comments"},{"description":"","name":"get_task_tree"},{"description":"","name":"get_user"},{"description":"","name":"list_chat_comments"},{"description":"","name":"list_chats"},{"description":"","name":"list_documents"},{"description":"","name":"list_insights"},{"description":"","name":"list_my_tasks"},{"description":"","name":"list_organizations"},{"description":"","name":"list_partners"},{"description":"","name":"list_project_members"},{"description":"","name":"list_projects"},{"description":"","name":"list_projects_by_org"},{"description":"","name":"list_recent_projects"},{"description":"","name":"list_recent_tasks"},{"description":"","name":"list_statuses"},{"description":"","name":"list_sublists"},{"description":"","name":"list_subtasks"},{"description":"","name":"list_tags"},{"description":"","name":"list_tasks"},{"description":"","name":"manage_insight_field"},{"description":"","name":"manage_project_approval_category"},{"description":"","name":"manage_project_field","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist operational workspace changes."}},{"description":"","name":"move_task"},{"description":"","name":"remove_insight_field"},{"description":"","name":"remove_project_approval_category"},{"description":"","name":"remove_project_field"},{"description":"","name":"remove_task_from_sublist"},{"description":"","name":"remove_task_timelog"},{"description":"","name":"resolve_quire_url"},{"description":"","name":"revoke_task_approval"},{"description":"","name":"run_insight"},{"description":"","name":"search_projects"},{"description":"","name":"search_tasks"},{"description":"","name":"search_tasks_in_folder"},{"description":"","name":"search_tasks_in_organization"},{"description":"","name":"set_task_dates"},{"description":"","name":"set_task_peekaboo"},{"description":"","name":"transfer_task"},{"description":"","name":"undo_remove"},{"description":"","name":"update_chat"},{"description":"","name":"update_comment"},{"description":"","name":"update_document","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist operational workspace changes."}},{"description":"","name":"update_insight"},{"description":"","name":"update_organization"},{"description":"","name":"update_project","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist operational workspace changes."}},{"description":"","name":"update_status"},{"description":"","name":"update_sublist"},{"description":"","name":"update_tag"},{"description":"","name":"update_task"},{"description":"","name":"update_task_timelog"}],"tools_count":96,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/cd2584be-45e3-4a85-a68d-e35f33f65283","uuid":"9b006c4d-1f7f-563f-a299-1bfb86c34aaa","verification_tier":"community","version":""},"query_key":"quire","schema_version":1,"status":"match"}