{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Responsive connects approved company content and response projects to Claude. Search knowledge, generate draft answers, and create or inspect assigned projects. Save project answers, mark reviews, manage comments, and create intakes.","did":"9ebe93d7-5ebe-48d9-b12b-f8e6a93e6419","documentation_url":"https://developer.responsive.io/docs/responsive-api/6ced7e2abad31-connecting-to-responsive-mcp","editorial_description":{"extended_description":"Retrieve questions, sections, unanswered or unreviewed work, collections, tags, and required fields. Answer Agent and file-upload tools support preparing responses within the authenticated Responsive workflow.","schema_version":1,"summary":"Responsive connects approved company content and response projects to Claude.\nSearch knowledge, generate draft answers, and create or inspect assigned projects.\nSave project answers, mark reviews, manage comments, and create intakes."},"homepage_url":"","icon":"","id":"9ebe93d7-5ebe-48d9-b12b-f8e6a93e6419","installs":0,"last_scanned":"","license":"","long_description":"Retrieve questions, sections, unanswered or unreviewed work, collections, tags, and required fields. Answer Agent and file-upload tools support preparing responses within the authenticated Responsive workflow.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools create collaborator-visible comments.","reasoning":"They communicate as the connected user.","risk_type":"messaging_as_user","severity":"high","title":"Posts/replies to project comments","triggering_tools_or_skills":["add_project_comment","reply_project_comment"]},{"evidence":"The tools persist files and response content in projects.","reasoning":"They materially change shared proposal content.","risk_type":"file_write","severity":"medium","title":"Uploads files and saves project answers","triggering_tools_or_skills":["upload_file","save_project_answer"]},{"evidence":"These tools create durable workflow records.","reasoning":"They alter shared response-management state.","risk_type":"data_modification","severity":"medium","title":"Creates projects, intakes and content Q&A","triggering_tools_or_skills":["create_project","create_intake","create_content_qa"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication uses Responsive project/content permissions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9ebe93d7-5ebe-48d9-b12b-f8e6a93e6419.json","what_it_proves":"Candidate PR #125 record identity (name \"Responsive\", publisher, type interactive_connector) and 29 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9ebe93d7-5ebe-48d9-b12b-f8e6a93e6419: complete tool_names inventory (29 tools), remote streamable-http endpoint https://app.rfpio.com/oa/v1/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Responsive can communicate through project comments and persist shared proposal content.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:9ebe93d7-5ebe-48d9-b12b-f8e6a93e6419","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 29 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":29,"tools_or_skills_total":29},"name":"Responsive","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9ebe93d7-5ebe-48d9-b12b-f8e6a93e6419&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.responsive.io/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"RFPIO Inc. (d/b/a Responsive)","publisher_url":"https://www.responsive.io/","remote_url":"https://app.rfpio.com/oa/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate as the connected user.","evidence":"Posts/replies to project comments: These tools create collaborator-visible comments.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Posts/replies to project comments","triggering_tools":["add_project_comment","reply_project_comment"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They materially change shared proposal content.","evidence":"Uploads files and saves project answers: The tools persist files and response content in projects.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Uploads files and saves project answers","triggering_tools":["upload_file","save_project_answer"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter shared response-management state.","evidence":"Creates projects, intakes and content Q&A: These tools create durable workflow records.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates projects, intakes and content Q&A","triggering_tools":["create_project","create_intake","create_content_qa"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.responsive.io","tags":["filesystem_access","interactive_connector","modifies_data","network_access","oauth_required","sends_messages_as_you"],"tools":[{"description":"","name":"add_project_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate as the connected user."}},{"description":"","name":"answer_agent"},{"description":"","name":"create_content_qa","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter shared response-management state."}},{"description":"","name":"create_intake","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter shared response-management state."}},{"description":"","name":"create_project","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They alter shared response-management state."}},{"description":"","name":"generate_draft_response"},{"description":"","name":"get_business_units"},{"description":"","name":"get_company_users"},{"description":"","name":"get_content_collections"},{"description":"","name":"get_content_qa"},{"description":"","name":"get_content_tags"},{"description":"","name":"get_entity_required_fields"},{"description":"","name":"get_my_profile"},{"description":"","name":"get_my_project_list"},{"description":"","name":"get_my_unanswered_questions"},{"description":"","name":"get_my_unreviewed_project_questions"},{"description":"","name":"get_open_project_comments"},{"description":"","name":"get_project_details"},{"description":"","name":"get_project_filter"},{"description":"","name":"get_project_question"},{"description":"","name":"get_project_sections"},{"description":"","name":"get_search_filters"},{"description":"","name":"increment_used_count"},{"description":"","name":"mark_question_reviewed"},{"description":"","name":"reply_project_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate as the connected user."}},{"description":"","name":"save_project_answer","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially change shared proposal content."}},{"description":"","name":"search"},{"description":"","name":"update_comment_status"},{"description":"","name":"upload_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially change shared proposal content."}}],"tools_count":29,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/9ebe93d7-5ebe-48d9-b12b-f8e6a93e6419","uuid":"1952d78b-2f81-544e-8e67-d1144861dd87","verification_tier":"community","version":""},"query_key":"responsive","schema_version":1,"status":"match"}