{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage branded short links with Rebrandly. Create or update destinations, organize links and inspect click analytics. A Rebrandly account and an already configured domain are needed for branded links.","did":"1c8978e9-3409-4424-9e75-3386a7b31c1a","documentation_url":"https://developers.rebrandly.com/docs/mcp-tools-reference","editorial_description":{"extended_description":"The connector works across available workspaces and domains and can delete links or manage tags, attributes, rules and attached scripts. Updating a destination changes where an existing public link sends visitors.","schema_version":1,"summary":"Manage branded short links with Rebrandly.\nCreate or update destinations, organize links and inspect click analytics.\nA Rebrandly account and an already configured domain are needed for branded links."},"homepage_url":"","icon":"","id":"1c8978e9-3409-4424-9e75-3386a7b31c1a","installs":0,"last_scanned":"","license":"","long_description":"The connector works across available workspaces and domains and can delete links or manage tags, attributes, rules and attached scripts. Updating a destination changes where an existing public link sends visitors.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares deletion of core link-management resources.","reasoning":"Workspace deletion in particular can destroy a broad collection of branded-link data.","risk_type":"data_deletion","severity":"high","title":"Deletes links, attributes and workspaces","triggering_tools_or_skills":["rebrandly_delete_attribute","rebrandly_delete_link","rebrandly_delete_workspace"]},{"evidence":"The tool changes which branded domain is assigned to a workspace.","reasoning":"Domain/workspace binding is an administrative control with external routing implications.","risk_type":"credential_admin","severity":"high","title":"Attaches domains to workspaces","triggering_tools_or_skills":["rebrandly_attach_domain_to_workspace"]},{"evidence":"These tools persist redirect, tracking and workspace configuration.","reasoning":"They materially change link behavior and account data.","risk_type":"data_modification","severity":"medium","title":"Creates and edits links, scripts, rules and workspaces","triggering_tools_or_skills":["rebrandly_create_link","rebrandly_create_link_rule","rebrandly_create_script","rebrandly_create_workspace","rebrandly_update_link","rebrandly_update_workspace"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication reaches Rebrandly links, domains, scripts, attributes, workspaces and teammates; destructive and workspace/domain administration scopes are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1c8978e9-3409-4424-9e75-3386a7b31c1a.json","what_it_proves":"Candidate PR #125 record identity (name \"Rebrandly\", publisher, type web_connector) and 40 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1c8978e9-3409-4424-9e75-3386a7b31c1a: complete tool_names inventory (40 tools), remote streamable-http endpoint https://mcp.rebrandly.com/v1/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Rebrandly deletes workspaces and links, changes domain assignment and creates redirect/script configuration.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:1c8978e9-3409-4424-9e75-3386a7b31c1a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 40 names. Verify redirect destination validation, script contents, deletion recovery and domain-attachment role checks.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":40,"tools_or_skills_total":40},"name":"Rebrandly","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1c8978e9-3409-4424-9e75-3386a7b31c1a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.rebrandly.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Rebrandly","publisher_url":"https://www.rebrandly.com/","remote_url":"https://mcp.rebrandly.com/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Workspace deletion in particular can destroy a broad collection of branded-link data.","evidence":"Deletes links, attributes and workspaces: The complete inventory explicitly declares deletion of core link-management resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes links, attributes and workspaces","triggering_tools":["rebrandly_delete_attribute","rebrandly_delete_link","rebrandly_delete_workspace"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data.","evidence":"Attaches domains to workspaces: The tool changes which branded domain is assigned to a workspace. | Creates and edits links, scripts, rules and workspaces: These tools persist redirect, tracking and workspace configuration.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["rebrandly_attach_domain_to_workspace","rebrandly_create_link","rebrandly_create_link_rule","rebrandly_create_script","rebrandly_create_workspace","rebrandly_update_link","rebrandly_update_workspace"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@rebrandly.com","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"rebrandly_attach_domain_to_workspace","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data."}},{"description":"","name":"rebrandly_attach_script_to_link"},{"description":"","name":"rebrandly_attach_tag_to_link"},{"description":"","name":"rebrandly_clarify"},{"description":"","name":"rebrandly_count_attributes"},{"description":"","name":"rebrandly_count_links"},{"description":"","name":"rebrandly_create_attribute"},{"description":"","name":"rebrandly_create_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data."}},{"description":"","name":"rebrandly_create_link_rule","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data."}},{"description":"","name":"rebrandly_create_script","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data."}},{"description":"","name":"rebrandly_create_workspace","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data."}},{"description":"","name":"rebrandly_delete_attribute","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Workspace deletion in particular can destroy a broad collection of branded-link data."}},{"description":"","name":"rebrandly_delete_link","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Workspace deletion in particular can destroy a broad collection of branded-link data."}},{"description":"","name":"rebrandly_delete_workspace","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Workspace deletion in particular can destroy a broad collection of branded-link data."}},{"description":"","name":"rebrandly_describe_metric"},{"description":"","name":"rebrandly_describe_schema"},{"description":"","name":"rebrandly_detach_script_from_link"},{"description":"","name":"rebrandly_detach_tag_from_link"},{"description":"","name":"rebrandly_get_account"},{"description":"","name":"rebrandly_get_account_plan"},{"description":"","name":"rebrandly_get_attribute"},{"description":"","name":"rebrandly_get_domain"},{"description":"","name":"rebrandly_get_link"},{"description":"","name":"rebrandly_get_plan"},{"description":"","name":"rebrandly_get_workspace"},{"description":"","name":"rebrandly_list_all_domains"},{"description":"","name":"rebrandly_list_attributes"},{"description":"","name":"rebrandly_list_domains"},{"description":"","name":"rebrandly_list_link_rules"},{"description":"","name":"rebrandly_list_links"},{"description":"","name":"rebrandly_list_metrics"},{"description":"","name":"rebrandly_list_plans"},{"description":"","name":"rebrandly_list_teammates"},{"description":"","name":"rebrandly_list_workspace_domains"},{"description":"","name":"rebrandly_list_workspaces"},{"description":"","name":"rebrandly_move_link_workspace"},{"description":"","name":"rebrandly_query_metric"},{"description":"","name":"rebrandly_search_terms"},{"description":"","name":"rebrandly_update_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data."}},{"description":"","name":"rebrandly_update_workspace","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Domain/workspace binding is an administrative control with external routing implications.; They materially change link behavior and account data."}}],"tools_count":40,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1c8978e9-3409-4424-9e75-3386a7b31c1a","uuid":"14e87600-74c4-57f9-93fd-e4279394d9c5","verification_tier":"community","version":""},"query_key":"rebrandly","schema_version":1,"status":"match"}