{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Prepare researched outbound email sequences with SimpleSend. Use your lead lists and campaign brief to gather company facts for Claude-written drafts. Review saved drafts and export them for sending elsewhere; contact discovery stays in the web app.","did":"cd4ed05f-95e6-4111-a7ac-28f640384db2","documentation_url":"https://simplesend.tech/docs/claude","editorial_description":{"extended_description":"Define campaign-specific research targets and receive dossiers with sources and dates. The connector supports creating lists from supplied contacts, planning sequences and saving drafts in your account. It is designed around existing lists, not finding or enriching new contacts through Claude.","schema_version":1,"summary":"Prepare researched outbound email sequences with SimpleSend.\nUse your lead lists and campaign brief to gather company facts for Claude-written drafts.\nReview saved drafts and export them for sending elsewhere; contact discovery stays in the web app."},"homepage_url":"","icon":"","id":"cd4ed05f-95e6-4111-a7ac-28f640384db2","installs":0,"last_scanned":"","license":"","long_description":"Define campaign-specific research targets and receive dossiers with sources and dates. The connector supports creating lists from supplied contacts, planning sequences and saving drafts in your account. It is designed around existing lists, not finding or enriching new contacts through Claude.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The declared names and listing state that campaigns/lists/drafts are persisted in the user's account.","reasoning":"These actions create meaningful outreach data but no send-email action is declared.","risk_type":"data_modification","severity":"medium","title":"Campaigns, lead lists and outreach drafts can be created and saved","triggering_tools_or_skills":["create_campaign","create_lead_list","save_drafts","start_drafting"]},{"evidence":"The listing says users define arbitrary company research targets such as websites, launches and hiring.","reasoning":"Research may retrieve untrusted web content into model context, but it does not itself send or modify external systems.","risk_type":"arbitrary_network_access","severity":"low","title":"Company research fetches third-party web information","triggering_tools_or_skills":["plan_research","research_company"]},{"evidence":"The connector runs at https://simplesend.tech/api/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this catalog snapshot, requiring runtime verification and change monitoring.","risk_type":"provenance_uncertainty","severity":"low","title":"SimpleSend is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for SimpleSend campaigns, lead lists and drafts; exact scopes are not published.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cd4ed05f-95e6-4111-a7ac-28f640384db2.json","what_it_proves":"Candidate PR #125 record identity (name \"SimpleSend\", publisher, type web_connector) and 16 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cd4ed05f-95e6-4111-a7ac-28f640384db2: complete tool_names inventory (16 tools), remote streamable-http endpoint https://simplesend.tech/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"SimpleSend creates campaign and draft artifacts but does not send them in the declared inventory.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:cd4ed05f-95e6-4111-a7ac-28f640384db2","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 16 tools. export_campaign may generate an export artifact, still Medium; no messaging-as-user action is present.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":16,"tools_or_skills_total":16},"name":"SimpleSend","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cd4ed05f-95e6-4111-a7ac-28f640384db2&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://simplesend.tech/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"SimpleSend","publisher_url":"https://simplesend.tech/","remote_url":"https://simplesend.tech/api/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions create meaningful outreach data but no send-email action is declared.","evidence":"Campaigns, lead lists and outreach drafts can be created and saved: The declared names and listing state that campaigns/lists/drafts are persisted in the user's account.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Campaigns, lead lists and outreach drafts can be created and saved","triggering_tools":["create_campaign","create_lead_list","save_drafts","start_drafting"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Research may retrieve untrusted web content into model context, but it does not itself send or modify external systems.","evidence":"Company research fetches third-party web information: The listing says users define arbitrary company research targets such as websites, launches and hiring.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Company research fetches third-party web information","triggering_tools":["plan_research","research_company"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"\thttps://simplesend.tech/support","tags":["forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"create_campaign","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions create meaningful outreach data but no send-email action is declared."}},{"description":"","name":"create_lead_list","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions create meaningful outreach data but no send-email action is declared."}},{"description":"","name":"export_campaign"},{"description":"","name":"get_account"},{"description":"","name":"get_campaign"},{"description":"","name":"get_drafting_context"},{"description":"","name":"get_drafts"},{"description":"","name":"get_lead_list"},{"description":"","name":"list_brief_templates"},{"description":"","name":"list_campaigns"},{"description":"","name":"list_contacts"},{"description":"","name":"list_lead_lists"},{"description":"","name":"plan_research"},{"description":"","name":"research_company"},{"description":"","name":"save_drafts","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions create meaningful outreach data but no send-email action is declared."}},{"description":"","name":"start_drafting","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions create meaningful outreach data but no send-email action is declared."}}],"tools_count":16,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/cd4ed05f-95e6-4111-a7ac-28f640384db2","uuid":"db59adf7-e364-54db-b48a-249699d5868e","verification_tier":"community","version":""},"query_key":"simplesend simplesend","schema_version":1,"status":"match"}