{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Raygun investigates application errors, deployments, sessions, and performance. Search Crash Reporting, RUM, and APM data and inspect detailed traces or trends. Manage error status and comments, deployment records, invitations, and application API keys.","did":"a448dfb6-1f64-4a98-8c7c-19165ab66ffa","documentation_url":"https://raygun.com/documentation/product-guides/raygun-mcp-server/","editorial_description":{"extended_description":"Explore error instances, affected customers, pages, and sessions, then compare error trends or performance distributions. Deployment tools provide context for investigating regressions.","schema_version":1,"summary":"Raygun investigates application errors, deployments, sessions, and performance.\nSearch Crash Reporting, RUM, and APM data and inspect detailed traces or trends.\nManage error status and comments, deployment records, invitations, and application API keys."},"homepage_url":"","icon":"https://cdn.prod.website-files.com/5e2701b416b6d176f5007781/6321348741e051a778e42e8f_256x256.png","id":"a448dfb6-1f64-4a98-8c7c-19165ab66ffa","installs":0,"last_scanned":"","license":"","long_description":"Explore error instances, affected customers, pages, and sessions, then compare error trends or performance distributions. Deployment tools provide context for investigating regressions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools rotate secrets and grant/revoke account access.","reasoning":"They are privileged security administration.","risk_type":"credential_admin","severity":"high","title":"Regenerates application API keys and manages invitations","triggering_tools_or_skills":["application_regenerate_api_key","invitation_send","invitation_revoke","invitations_manage"]},{"evidence":"The tools alter production-monitoring deployment state.","reasoning":"They affect operational observability/integration.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates/manages deployment records","triggering_tools_or_skills":["deployment_create","deployment_manage"]},{"evidence":"The tool adds collaborator-visible incident discussion.","reasoning":"It communicates as the authenticated user.","risk_type":"messaging_as_user","severity":"high","title":"Posts error-group comments","triggering_tools_or_skills":["error_group_add_comment"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes Raygun applications, deployments, sessions and invitations.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a448dfb6-1f64-4a98-8c7c-19165ab66ffa.json","what_it_proves":"Candidate PR #125 record identity (name \"Raygun\", publisher, type web_connector) and 34 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a448dfb6-1f64-4a98-8c7c-19165ab66ffa: complete tool_names inventory (34 tools), remote streamable-http endpoint https://api.raygun.com/v3/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Raygun rotates API keys, manages invitations/deployments and posts comments.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a448dfb6-1f64-4a98-8c7c-19165ab66ffa","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 34 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":34,"tools_or_skills_total":34},"name":"Raygun","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a448dfb6-1f64-4a98-8c7c-19165ab66ffa&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://raygun.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Raygun","publisher_url":"https://raygun.com/","remote_url":"https://api.raygun.com/v3/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security administration.","evidence":"Regenerates application API keys and manages invitations: These tools rotate secrets and grant/revoke account access.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Regenerates application API keys and manages invitations","triggering_tools":["application_regenerate_api_key","invitation_send","invitation_revoke","invitations_manage"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect operational observability/integration.","evidence":"Creates/manages deployment records: The tools alter production-monitoring deployment state.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates/manages deployment records","triggering_tools":["deployment_create","deployment_manage"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates as the authenticated user.","evidence":"Posts error-group comments: The tool adds collaborator-visible incident discussion.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Posts error-group comments","triggering_tools":["error_group_add_comment"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@raygun.com","tags":["code_deployment","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"apm_hotspots_search"},{"description":"","name":"apm_issue_investigate"},{"description":"","name":"apm_issues_search"},{"description":"","name":"apm_trace_investigate"},{"description":"","name":"apm_traces_search"},{"description":"","name":"application_get_details"},{"description":"","name":"application_regenerate_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security administration."}},{"description":"","name":"applications_list"},{"description":"","name":"applications_search"},{"description":"","name":"customer_investigate"},{"description":"","name":"customers_search"},{"description":"","name":"deployment_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect operational observability/integration."}},{"description":"","name":"deployment_get_latest"},{"description":"","name":"deployment_investigate"},{"description":"","name":"deployment_manage","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect operational observability/integration."}},{"description":"","name":"deployments_list"},{"description":"","name":"error_group_add_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates as the authenticated user."}},{"description":"","name":"error_group_instances_list"},{"description":"","name":"error_group_investigate"},{"description":"","name":"error_group_read_comments"},{"description":"","name":"error_group_update_status"},{"description":"","name":"error_groups_list"},{"description":"","name":"error_groups_search"},{"description":"","name":"error_instance_get"},{"description":"","name":"invitation_revoke","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security administration."}},{"description":"","name":"invitation_send","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security administration."}},{"description":"","name":"invitations_manage","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security administration."}},{"description":"","name":"metrics_error_trends_analyze"},{"description":"","name":"metrics_performance_distribution_analyze"},{"description":"","name":"metrics_website_performance_analyze"},{"description":"","name":"page_investigate"},{"description":"","name":"pages_list"},{"description":"","name":"session_investigate"},{"description":"","name":"sessions_list"}],"tools_count":34,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a448dfb6-1f64-4a98-8c7c-19165ab66ffa","uuid":"07fc3494-70e9-53c5-936e-51a0eb888a81","verification_tier":"community","version":""},"query_key":"raygun raygun","schema_version":1,"status":"match"}