{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Query and manage event information in Sessionboard. Review sessions, speakers and evaluations, and update contacts, sponsors or agenda drafts. Run reports and manage scheduling rules within your authorized organization.","did":"105790c4-2073-4c77-8c06-44f989217c71","documentation_url":"https://learn.sessionboard.com/","editorial_description":{"extended_description":"Data queries use Sessionboard's SbQL engine. Tools also manage exhibitors, dashboards, widgets and metadata and retrieve event or session details. Authentication uses OAuth and operations remain scoped to the connected organization.","schema_version":1,"summary":"Query and manage event information in Sessionboard.\nReview sessions, speakers and evaluations, and update contacts, sponsors or agenda drafts.\nRun reports and manage scheduling rules within your authorized organization."},"homepage_url":"","icon":"https://www.sessionboard.com/assets/videos/sessionboard-mcp-icon-256.png","id":"105790c4-2073-4c77-8c06-44f989217c71","installs":0,"last_scanned":"","license":"","long_description":"Data queries use Sessionboard's SbQL engine. Tools also manage exhibitors, dashboards, widgets and metadata and retrieve event or session details. Authentication uses OAuth and operations remain scoped to the connected organization.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory includes execute_sbql and query_data, and the listing identifies SbQL as Sessionboard's query engine for natural-language questions and reports.","reasoning":"The connector executes an account-scoped query language whose grammar and mutation restrictions are not documented.","risk_type":"query_execution","severity":"high","title":"Executes Sessionboard query language","triggering_tools_or_skills":["execute_sbql","query_data"]},{"evidence":"The listing says these manage tools create and update sessions, contacts, exhibitors, sponsors, agenda drafts and scheduling rules.","reasoning":"They persist broad changes to event and organization records.","risk_type":"data_modification","severity":"medium","title":"Manages event workspace records","triggering_tools_or_skills":["manage_agenda_draft","manage_contact","manage_draft_sessions","manage_event_dashboard","manage_event_report","manage_event_rules","manage_event_widget","manage_exhibitor","manage_metadata","manage_org_dashboard","manage_org_report","manage_org_widget","manage_personas","manage_session","manage_sponsor"]},{"evidence":"Contacts, speaker/session content, evaluations and event metadata are supplied by organizers and participants.","reasoning":"Returned event content can contain untrusted instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Event submissions and contacts contain user-controlled text","triggering_tools_or_skills":["get_contact","get_session","list_contacts","list_sessions","search"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes actions to the user's Sessionboard organization, but SbQL query limits and permissions for each manage action are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/105790c4-2073-4c77-8c06-44f989217c71.json","what_it_proves":"Candidate PR #125 record identity (name \"Sessionboard\", publisher, type web_connector) and 38 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/105790c4-2073-4c77-8c06-44f989217c71: complete tool_names inventory (38 tools), remote streamable-http endpoint https://mcp.sessionboard.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"The connector executes SbQL queries and exposes broad event-workspace mutation tools.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:105790c4-2073-4c77-8c06-44f989217c71","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 38 names. Runtime verification should determine whether SbQL is strictly read-only and whether any manage operation can delete records; until then deletion remains unknown.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"unknown","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":38,"tools_or_skills_total":38},"name":"Sessionboard","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=105790c4-2073-4c77-8c06-44f989217c71&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.sessionboard.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Sessionboard","publisher_url":"https://www.sessionboard.com/","remote_url":"https://mcp.sessionboard.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The connector executes an account-scoped query language whose grammar and mutation restrictions are not documented.","evidence":"Executes Sessionboard query language: The inventory includes execute_sbql and query_data, and the listing identifies SbQL as Sessionboard's query engine for natural-language questions and reports.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes Sessionboard query language","triggering_tools":["execute_sbql","query_data"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records.","evidence":"Manages event workspace records: The listing says these manage tools create and update sessions, contacts, exhibitors, sponsors, agenda drafts and scheduling rules.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Manages event workspace records","triggering_tools":["manage_agenda_draft","manage_contact","manage_draft_sessions","manage_event_dashboard","manage_event_report","manage_event_rules","manage_event_widget","manage_exhibitor","manage_metadata","manage_org_dashboard","manage_org_report","manage_org_widget","manage_personas","manage_session","manage_sponsor"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://learn.sessionboard.com","tags":["accesses_calendar","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"execute_sbql","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The connector executes an account-scoped query language whose grammar and mutation restrictions are not documented."}},{"description":"","name":"fetch"},{"description":"","name":"find_event"},{"description":"","name":"get_contact"},{"description":"","name":"get_event_overview"},{"description":"","name":"get_schema"},{"description":"","name":"get_session"},{"description":"","name":"get_suggestions"},{"description":"","name":"get_widget_schema"},{"description":"","name":"list_contacts"},{"description":"","name":"list_draft_sessions"},{"description":"","name":"list_event_reports"},{"description":"","name":"list_events"},{"description":"","name":"list_metadata"},{"description":"","name":"list_org_reports"},{"description":"","name":"list_sessions"},{"description":"","name":"manage_agenda_draft","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_contact","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_draft_sessions","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_event_dashboard","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_event_report","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_event_rules","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_event_widget","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_exhibitor","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_metadata","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_org_dashboard","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_org_report","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_org_widget","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_personas","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_session","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"manage_sponsor","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad changes to event and organization records."}},{"description":"","name":"query_data","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The connector executes an account-scoped query language whose grammar and mutation restrictions are not documented."}},{"description":"","name":"read_agenda_drafts"},{"description":"","name":"read_event_dashboards"},{"description":"","name":"read_event_rules"},{"description":"","name":"read_org_dashboards"},{"description":"","name":"read_personas"},{"description":"","name":"search"}],"tools_count":38,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/105790c4-2073-4c77-8c06-44f989217c71","uuid":"054688a0-681d-5421-9def-e83a52c2f5b2","verification_tier":"community","version":""},"query_key":"sessionboard sessionboard","schema_version":1,"status":"match"}