{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-19","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Rendley helps plan and draft videos from prompts and supplied media. Use footage, files, or links for clips, resized formats, captions, and new content. Open the resulting project in Rendley's editor for further changes.","did":"705e8192-cefd-4c45-8ed1-b64f7ee1f47e","documentation_url":"https://docs.rendley.com/mcp/getting-started/","editorial_description":{"extended_description":"Add files and brand colors, inspect brand kits and projects, and create video drafts.","schema_version":1,"summary":"Rendley helps plan and draft videos from prompts and supplied media.\nUse footage, files, or links for clips, resized formats, captions, and new content.\nOpen the resulting project in Rendley's editor for further changes."},"homepage_url":"","icon":"","id":"705e8192-cefd-4c45-8ed1-b64f7ee1f47e","installs":0,"last_scanned":"","license":"","long_description":"Add files and brand colors, inspect brand kits and projects, and create video drafts.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Official docs say it prepares a request and returns a Rendley project link with the brief already filled in.","reasoning":"This is durable draft project state, though it does not start the edit.","risk_type":"data_modification","severity":"medium","title":"Creates a prepared video project draft","triggering_tools_or_skills":["create_video_draft","plan_video"]},{"evidence":"Official docs say connector uploads normally remain temporary for 24 hours unless the prepared project is submitted.","reasoning":"It writes user media into hosted project storage.","risk_type":"file_write","severity":"medium","title":"Uploads media into the draft","triggering_tools_or_skills":["add_files"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to Rendley is required; this light endpoint is separate from the paid automation connector.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/705e8192-cefd-4c45-8ed1-b64f7ee1f47e.json","what_it_proves":"Candidate PR #125 record identity (name \"Rendley\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/705e8192-cefd-4c45-8ed1-b64f7ee1f47e: complete tool_names inventory (8 tools), remote streamable-http endpoint https://mcp.rendley.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:12:00Z","url_or_path":"https://docs.rendley.com/mcp/public-connector/","what_it_proves":"Official page specifically documents this /mcp Claude-directory endpoint as draft-only: it creates a prepared project, temporary uploads, spends no credits, and cannot edit/render/export until a person presses Send."}],"primary_reason":"Rendley’s directory endpoint creates draft projects and temporary file uploads but cannot render or spend credits.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:705e8192-cefd-4c45-8ed1-b64f7ee1f47e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight tools and the endpoint-specific official page; the broader automation connector is a different URL and was not attributed here.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Rendley","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=705e8192-cefd-4c45-8ed1-b64f7ee1f47e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://rendley.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Rendley","publisher_url":"https://rendley.com/","remote_url":"https://mcp.rendley.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This is durable draft project state, though it does not start the edit.","evidence":"Creates a prepared video project draft: Official docs say it prepares a request and returns a Rendley project link with the brief already filled in.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates a prepared video project draft","triggering_tools":["create_video_draft","plan_video"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: It writes user media into hosted project storage.","evidence":"Uploads media into the draft: Official docs say connector uploads normally remain temporary for 24 hours unless the prepared project is submitted.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Uploads media into the draft","triggering_tools":["add_files"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@rendley.com","tags":["filesystem_access","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_brand_colors"},{"description":"","name":"add_files","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: It writes user media into hosted project storage."}},{"description":"","name":"create_video_draft","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This is durable draft project state, though it does not start the edit."}},{"description":"","name":"get_brandkit"},{"description":"","name":"get_project"},{"description":"","name":"list_projects"},{"description":"","name":"list_workspaces"},{"description":"","name":"plan_video","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: This is durable draft project state, though it does not start the edit."}}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/705e8192-cefd-4c45-8ed1-b64f7ee1f47e","uuid":"72f48fe3-1aad-5531-ac47-4fd9da62a0ca","verification_tier":"community","version":""},"query_key":"rendley rendley","schema_version":1,"status":"match"}