{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Zsper supports writing with saved brand voice and personal context. Search articles or memories, inspect the current draft, and save new drafts or learning. Use the context for articles, newsletters, and LinkedIn content.","did":"fb6b7b6a-7e96-4e49-ba9d-a80eb7954012","documentation_url":"https://zsper.com/blog/bring-your-own-key-and-mcp","editorial_description":{"extended_description":"","schema_version":1,"summary":"Zsper supports writing with saved brand voice and personal context.\nSearch articles or memories, inspect the current draft, and save new drafts or learning.\nUse the context for articles, newsletters, and LinkedIn content."},"homepage_url":"","icon":"https://zsper.com/icon.svg","id":"fb6b7b6a-7e96-4e49-ba9d-a80eb7954012","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The connector persists new style/knowledge learnings and article/newsletter/LinkedIn drafts.","reasoning":"These writes influence future generated content and store unpublished work.","risk_type":"data_modification","severity":"medium","title":"Writing learnings and drafts can be saved","triggering_tools_or_skills":["save_learning","save_draft"]},{"evidence":"The listing says Zsper learns how the user thinks and writes using memory and prior content.","reasoning":"This is private identity/voice and unpublished content.","risk_type":"private_data_read","severity":"medium","title":"Brand voice, memory, and private drafts/articles are exposed","triggering_tools_or_skills":["get_brand_voice","search_memory","list_recent_articles","current_draft"]},{"evidence":"Remote articles and persisted memory are fed back to Claude.","reasoning":"External or previously generated text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Stored research and writing memory enters context","triggering_tools_or_skills":["fetch","search","search_articles","search_memory"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to Zsper private brand voice, recent articles, memory, and drafts; exact retention is not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/fb6b7b6a-7e96-4e49-ba9d-a80eb7954012.json","what_it_proves":"Candidate PR #125 record identity (name \"Zsper\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/fb6b7b6a-7e96-4e49-ba9d-a80eb7954012: complete tool_names inventory (8 tools), remote streamable-http endpoint https://zsper.com/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Zsper reads and writes persistent author memory and private drafts without publishing them.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:fb6b7b6a-7e96-4e49-ba9d-a80eb7954012","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight tools; no send, publish, delete, or external share is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Zsper","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=fb6b7b6a-7e96-4e49-ba9d-a80eb7954012&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://zsper.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Ruchit Suthar","publisher_url":"https://ruchitsuthar.com/","remote_url":"https://zsper.com/api/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes influence future generated content and store unpublished work.","evidence":"Writing learnings and drafts can be saved: The connector persists new style/knowledge learnings and article/newsletter/LinkedIn drafts.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Writing learnings and drafts can be saved","triggering_tools":["save_learning","save_draft"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This is private identity/voice and unpublished content.","evidence":"Brand voice, memory, and private drafts/articles are exposed: The listing says Zsper learns how the user thinks and writes using memory and prior content.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Brand voice, memory, and private drafts/articles are exposed","triggering_tools":["get_brand_voice","search_memory","list_recent_articles","current_draft"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@ruchitsuthar.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"fetch"},{"description":"","name":"get_brand_voice","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is private identity/voice and unpublished content."}},{"description":"","name":"list_recent_articles","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is private identity/voice and unpublished content."}},{"description":"","name":"search"},{"description":"","name":"search_articles"},{"description":"","name":"search_memory","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is private identity/voice and unpublished content."}},{"description":"","name":"save_learning","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes influence future generated content and store unpublished work."}},{"description":"","name":"save_draft","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes influence future generated content and store unpublished work."}},{"description":"","name":"current_draft","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is private identity/voice and unpublished content."}}],"tools_count":9,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/fb6b7b6a-7e96-4e49-ba9d-a80eb7954012","uuid":"e0b1efb5-c3f7-5033-8c31-f87861a97e59","verification_tier":"community","version":""},"query_key":"ruchit suthar zsper","schema_version":1,"status":"match"}