{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-08","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"SeedLegals connects company equity information and legal documents to Claude. Inspect ownership, dilution, share classes, outstanding actions, or signing status. Create or update documents, send signature reminders, and share agreements with your team.","did":"f66d872a-e045-4551-8566-970bb52cb4cc","documentation_url":"https://seedlegals.com/resources/mcp-server/","editorial_description":{"extended_description":"Use your SeedLegals account to find documents, ask questions about their content, and review SEIS/EIS breakdowns. Examples include board minutes and employment agreements.","schema_version":1,"summary":"SeedLegals connects company equity information and legal documents to Claude.\nInspect ownership, dilution, share classes, outstanding actions, or signing status.\nCreate or update documents, send signature reminders, and share agreements with your team."},"homepage_url":"","icon":"https://seedlegals.com/wp-content/uploads/2019/12/favicon.ico","id":"f66d872a-e045-4551-8566-970bb52cb4cc","installs":0,"last_scanned":"","license":"","long_description":"Use your SeedLegals account to find documents, ask questions about their content, and review SEIS/EIS breakdowns. Examples include board minutes and employment agreements.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector explicitly sends reminders to people who still need to sign legal documents.","reasoning":"This communicates externally as the company/user in a legal-signature workflow.","risk_type":"messaging_as_user","severity":"high","title":"Signature reminders can be sent","triggering_tools_or_skills":["send_signature_reminder"]},{"evidence":"The listing says users can share documents with their team through share_document.","reasoning":"Sharing grants access to potentially confidential legal and equity records and is an access-control action.","risk_type":"credential_admin","severity":"high","title":"Legal documents can be shared with team members","triggering_tools_or_skills":["share_document"]},{"evidence":"Named tools create and edit board minutes and other SeedLegals documents.","reasoning":"These writes alter formal company legal records, even if final signature remains separate.","risk_type":"data_modification","severity":"medium","title":"Company legal documents can be created or updated","triggering_tools_or_skills":["create_document","update_document"]},{"evidence":"The listing covers ownership, dilution, share classes, SEIS/EIS, agreements, metadata, and outstanding signatures.","reasoning":"This is highly confidential company ownership and legal information.","risk_type":"private_data_read","severity":"medium","title":"Cap tables and legal agreements are exposed","triggering_tools_or_skills":["get_cap_table","query_document","list_documents","get_outstanding_actions"]},{"evidence":"Legal documents and workflow metadata may contain third-party or collaborator-authored content.","reasoning":"Document text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Agreement and collaborator text enters context","triggering_tools_or_skills":["query_document","get_document_metadata"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants SeedLegals access to a company's cap table, legal/equity documents, workflow actions, and recipients; exact roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f66d872a-e045-4551-8566-970bb52cb4cc.json","what_it_proves":"Candidate PR #125 record identity (name \"SeedLegals\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f66d872a-e045-4551-8566-970bb52cb4cc: complete tool_names inventory (12 tools), remote streamable-http endpoint https://api.seedlegals.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"SeedLegals can send signature reminders, grant document access, and modify sensitive company legal records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f66d872a-e045-4551-8566-970bb52cb4cc","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 12 tools; submit_feedback only forwards product feedback and is not a user-to-user workflow.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"SeedLegals","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f66d872a-e045-4551-8566-970bb52cb4cc&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://seedlegals.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Seedlegals","publisher_url":"https://seedlegals.com/","remote_url":"https://api.seedlegals.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the company/user in a legal-signature workflow.","evidence":"Signature reminders can be sent: The connector explicitly sends reminders to people who still need to sign legal documents.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Signature reminders can be sent","triggering_tools":["send_signature_reminder"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Sharing grants access to potentially confidential legal and equity records and is an access-control action.; These writes alter formal company legal records, even if final signature remains separate.","evidence":"Legal documents can be shared with team members: The listing says users can share documents with their team through share_document. | Company legal documents can be created or updated: Named tools create and edit board minutes and other SeedLegals documents.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["share_document","create_document","update_document"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This is highly confidential company ownership and legal information.","evidence":"Cap tables and legal agreements are exposed: The listing covers ownership, dilution, share classes, SEIS/EIS, agreements, metadata, and outstanding signatures.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Cap tables and legal agreements are exposed","triggering_tools":["get_cap_table","query_document","list_documents","get_outstanding_actions"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@seedlegals.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"create_document","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Sharing grants access to potentially confidential legal and equity records and is an access-control action.; These writes alter formal company legal records, even if final signature remains separate."}},{"description":"","name":"get_cap_table","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is highly confidential company ownership and legal information."}},{"description":"","name":"get_document_metadata"},{"description":"","name":"get_outstanding_actions","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is highly confidential company ownership and legal information."}},{"description":"","name":"list_documents","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is highly confidential company ownership and legal information."}},{"description":"","name":"list_user_companies"},{"description":"","name":"query_document","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is highly confidential company ownership and legal information."}},{"description":"","name":"recommend_document"},{"description":"","name":"send_signature_reminder","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates externally as the company/user in a legal-signature workflow."}},{"description":"","name":"share_document","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Sharing grants access to potentially confidential legal and equity records and is an access-control action.; These writes alter formal company legal records, even if final signature remains separate."}},{"description":"","name":"submit_feedback"},{"description":"","name":"update_document","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Sharing grants access to potentially confidential legal and equity records and is an access-control action.; These writes alter formal company legal records, even if final signature remains separate."}}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f66d872a-e045-4551-8566-970bb52cb4cc","uuid":"fe432c22-693d-5792-90ba-48fde0ab82bb","verification_tier":"community","version":""},"query_key":"seedlegals seedlegals","schema_version":1,"status":"match"}