{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage recruiting records and workflows in Recruit CRM. Search or update candidates, jobs, companies, contacts, and recruiting activity. Assign candidates, change hiring stages, prepare client briefs, and create follow-up tasks.","did":"d551dd24-65cc-4df4-a8a5-a40caa62b966","documentation_url":"https://help.recruitcrm.io/en/articles/14485570-recruit-crm-mcp-model-context-protocol","editorial_description":{"extended_description":"Analyze job pipelines, inspect pitch history, maintain meetings, notes, call logs, and hotlists, and discover available fields or search filters. Tools also mark records off-limits or available and pitch candidates to contacts.","schema_version":1,"summary":"Manage recruiting records and workflows in Recruit CRM.\nSearch or update candidates, jobs, companies, contacts, and recruiting activity.\nAssign candidates, change hiring stages, prepare client briefs, and create follow-up tasks."},"homepage_url":"","icon":"","id":"d551dd24-65cc-4df4-a8a5-a40caa62b966","installs":0,"last_scanned":"","license":"","long_description":"Analyze job pipelines, inspect pitch history, maintain meetings, notes, call logs, and hotlists, and discover available fields or search filters. Tools also mark records off-limits or available and pitch candidates to contacts.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly includes pitching a candidate to an external CRM contact.","reasoning":"A candidate pitch is external communication as the recruiter.","risk_type":"messaging_as_user","severity":"high","title":"Candidates can be pitched to contacts","triggering_tools_or_skills":["pitch_candidate_to_contact"]},{"evidence":"The inventory contains broad CRM writes.","reasoning":"These operations materially change recruiting records and pipeline state.","risk_type":"data_modification","severity":"medium","title":"Candidates, jobs, companies, meetings and activity records can be created or updated","triggering_tools_or_skills":["create_candidate","create_job","create_company","create_meeting","update_candidate_hiring_stage","update_job"]},{"evidence":"The connector discovers tool schemas and executes tools through a generic dispatcher, while the packet cannot show the downstream action set.","reasoning":"Additional send, delete, admin or spend actions may be reachable and are not bounded by the top-level inventory.","risk_type":"generic_gateway","severity":"high","title":"A generic schema-discovered executor can invoke hidden actions","triggering_tools_or_skills":["search_tools","get_tool_schema","execute_tool"]},{"evidence":"The connector returns applicant/customer-authored records.","reasoning":"Returned CRM text should remain untrusted.","risk_type":"prompt_injection_exposure","severity":"low","title":"Candidate notes and CRM content enter model context","triggering_tools_or_skills":["search_notes","get_candidate_details","prepare_client_brief"]},{"evidence":"The connector runs at https://agent.recruitcrm.io/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently of this review, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Recruit CRM is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects the user's Recruit CRM account; role scopes and confirmation rules for pitches/meetings are not supplied.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d551dd24-65cc-4df4-a8a5-a40caa62b966.json","what_it_proves":"Candidate PR #125 record identity (name \"Recruit CRM\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d551dd24-65cc-4df4-a8a5-a40caa62b966: complete tool_names inventory (112 tools), remote streamable-http endpoint https://agent.recruitcrm.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Recruit CRM can pitch candidates externally and exposes a hidden schema-driven action gateway.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:d551dd24-65cc-4df4-a8a5-a40caa62b966","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 112 top-level tools. Publication requires the complete downstream execute_tool action/schema inventory and confirmation behavior; High is independently established by pitch_candidate_to_contact.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":112,"tools_or_skills_total":112},"name":"Recruit CRM","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d551dd24-65cc-4df4-a8a5-a40caa62b966&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://recruitcrm.io/legal/privacy/","provisional_risk":null,"publication_recommendation":"fix","publisher":"Recruit CRM","publisher_url":"https://recruitcrm.io/","remote_url":"https://agent.recruitcrm.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: A candidate pitch is external communication as the recruiter.","evidence":"Candidates can be pitched to contacts: The complete inventory explicitly includes pitching a candidate to an external CRM contact.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Candidates can be pitched to contacts","triggering_tools":["pitch_candidate_to_contact"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations materially change recruiting records and pipeline state.","evidence":"Candidates, jobs, companies, meetings and activity records can be created or updated: The inventory contains broad CRM writes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Candidates, jobs, companies, meetings and activity records can be created or updated","triggering_tools":["create_candidate","create_job","create_company","create_meeting","update_candidate_hiring_stage","update_job"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Additional send, delete, admin or spend actions may be reachable and are not bounded by the top-level inventory.","evidence":"A generic schema-discovered executor can invoke hidden actions: The connector discovers tool schemas and executes tools through a generic dispatcher, while the packet cannot show the downstream action set.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"A generic schema-discovered executor can invoke hidden actions","triggering_tools":["search_tools","get_tool_schema","execute_tool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@recruitcrm.io","tags":["accesses_calendar","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_records_to_hotlist"},{"description":"","name":"analyze_job_pipeline"},{"description":"","name":"assign_candidate_to_job"},{"description":"","name":"count_candidates"},{"description":"","name":"count_companies"},{"description":"","name":"count_contacts"},{"description":"","name":"count_jobs"},{"description":"","name":"create_call_log"},{"description":"","name":"create_candidate","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations materially change recruiting records and pipeline state."}},{"description":"","name":"create_company","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations materially change recruiting records and pipeline state."}},{"description":"","name":"create_contact"},{"description":"","name":"create_hotlist"},{"description":"","name":"create_job","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations materially change recruiting records and pipeline state."}},{"description":"","name":"create_meeting","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations materially change recruiting records and pipeline state."}},{"description":"","name":"create_note"},{"description":"","name":"create_task"},{"description":"","name":"execute_tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Additional send, delete, admin or spend actions may be reachable and are not bounded by the top-level inventory."}},{"description":"","name":"get_advanced_search_field_details"},{"description":"","name":"get_candidate_details"},{"description":"","name":"get_candidate_job_assignment_hiring_stage_history"},{"description":"","name":"get_company_details"},{"description":"","name":"get_contact_details"},{"description":"","name":"get_current_user"},{"description":"","name":"get_custom_field_dependencies"},{"description":"","name":"get_custom_field_details"},{"description":"","name":"get_job_assigned_candidates"},{"description":"","name":"get_job_details"},{"description":"","name":"get_off_limit_status"},{"description":"","name":"get_pitch_history"},{"description":"","name":"get_pitched_records"},{"description":"","name":"get_search_columns"},{"description":"","name":"get_tool_schema","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Additional send, delete, admin or spend actions may be reachable and are not bounded by the top-level inventory."}},{"description":"","name":"list_advanced_search_fields"},{"description":"","name":"list_boolean_search_scopes"},{"description":"","name":"list_call_types"},{"description":"","name":"list_candidate_hiring_stages"},{"description":"","name":"list_candidate_hotlists"},{"description":"","name":"list_candidate_questions"},{"description":"","name":"list_candidates"},{"description":"","name":"list_companies"},{"description":"","name":"list_company_hotlists"},{"description":"","name":"list_contact_hotlists"},{"description":"","name":"list_contact_stages"},{"description":"","name":"list_contacts"},{"description":"","name":"list_currencies"},{"description":"","name":"list_custom_fields"},{"description":"","name":"list_employment_types"},{"description":"","name":"list_hiring_pipelines"},{"description":"","name":"list_industries"},{"description":"","name":"list_job_hotlists"},{"description":"","name":"list_job_statuses"},{"description":"","name":"list_jobs"},{"description":"","name":"list_languages_and_proficiencies"},{"description":"","name":"list_meeting_types"},{"description":"","name":"list_note_types"},{"description":"","name":"list_off_limit_statuses"},{"description":"","name":"list_pitch_stages"},{"description":"","name":"list_qualifications"},{"description":"","name":"list_search_call_types"},{"description":"","name":"list_search_contact_stages"},{"description":"","name":"list_search_currencies"},{"description":"","name":"list_search_employment_types"},{"description":"","name":"list_search_genders"},{"description":"","name":"list_search_hiring_pipelines"},{"description":"","name":"list_search_hotlists"},{"description":"","name":"list_search_industries"},{"description":"","name":"list_search_job_statuses"},{"description":"","name":"list_search_meeting_types"},{"description":"","name":"list_search_note_types"},{"description":"","name":"list_search_off_limit_statuses"},{"description":"","name":"list_search_qualifications"},{"description":"","name":"list_search_task_types"},{"description":"","name":"list_search_users"},{"description":"","name":"list_search_xml_jobboards"},{"description":"","name":"list_task_types"},{"description":"","name":"list_teams"},{"description":"","name":"list_users"},{"description":"","name":"list_xml_jobboards"},{"description":"","name":"mark_candidate_off_limit"},{"description":"","name":"mark_company_off_limit"},{"description":"","name":"mark_contact_off_limit"},{"description":"","name":"mark_records_available"},{"description":"","name":"pitch_candidate_to_contact","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: A candidate pitch is external communication as the recruiter."}},{"description":"","name":"prepare_client_brief"},{"description":"","name":"search_call_logs"},{"description":"","name":"search_candidate_hotlists"},{"description":"","name":"search_candidates"},{"description":"","name":"search_companies"},{"description":"","name":"search_company_hotlists"},{"description":"","name":"search_contact_hotlists"},{"description":"","name":"search_contacts"},{"description":"","name":"search_entity"},{"description":"","name":"search_hotlists"},{"description":"","name":"search_job_hotlists"},{"description":"","name":"search_jobs"},{"description":"","name":"search_meetings"},{"description":"","name":"search_notes"},{"description":"","name":"search_places"},{"description":"","name":"search_tasks"},{"description":"","name":"search_tools","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Additional send, delete, admin or spend actions may be reachable and are not bounded by the top-level inventory."}},{"description":"","name":"update_call_log"},{"description":"","name":"update_candidate"},{"description":"","name":"update_candidate_hiring_stage","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations materially change recruiting records and pipeline state."}},{"description":"","name":"update_candidate_pitch_stage"},{"description":"","name":"update_company"},{"description":"","name":"update_contact"},{"description":"","name":"update_job","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations materially change recruiting records and pipeline state."}},{"description":"","name":"update_meeting"},{"description":"","name":"update_note"},{"description":"","name":"update_task"},{"description":"","name":"validate_boolean_search"},{"description":"","name":"validate_filter_search"}],"tools_count":112,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d551dd24-65cc-4df4-a8a5-a40caa62b966","uuid":"47886326-ce68-5771-a7f2-a7db18eb9a8e","verification_tier":"community","version":""},"query_key":"recruit crm","schema_version":1,"status":"match"}