{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-25","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Ask about company documents and operating knowledge through Simply Asking. Search records and inspect answers with source references. Access is read-only and follows your account's permissions.","did":"06f323aa-fc97-4e46-9cfb-6ef8a1c2785c","documentation_url":"https://simplyasking.io/support/connect-your-ai","editorial_description":{"extended_description":"Tools also expose recent documents, activity, knowledge gaps, contradictions and insight summaries. Source citations and documents help users check the material behind an answer. The listed connector does not edit the underlying business records.","schema_version":1,"summary":"Ask about company documents and operating knowledge through Simply Asking.\nSearch records and inspect answers with source references.\nAccess is read-only and follows your account's permissions."},"homepage_url":"","icon":"https://simplyasking.io/favicon-192x192.png","id":"06f323aa-fc97-4e46-9cfb-6ef8a1c2785c","installs":0,"last_scanned":"","license":"","long_description":"Tools also expose recent documents, activity, knowledge gaps, contradictions and insight summaries. Source citations and documents help users check the material behind an answer. The listed connector does not edit the underlying business records.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The complete inventory retrieves business documents, structured table data, facts, recent activity, security posture, agents, and team membership.","reasoning":"A connected company knowledge base can contain broad confidential operational and personal information.","risk_type":"private_data_read","severity":"low","title":"Company documents, tables, facts, and members are readable","triggering_tools_or_skills":["ask_simply_asking","query_table_data","search_library_exact","list_recent_documents","list_team_members"]},{"evidence":"The connector grounds answers in user-uploaded documents and returns citations and source material.","reasoning":"Documents can contain adversarial instructions that must not override the user's task.","risk_type":"prompt_injection_exposure","severity":"low","title":"Business documents enter model context","triggering_tools_or_skills":["ask_simply_asking","search_library_exact","most_recent_document"]},{"evidence":"The remote connector is authentication-required and repeatedly enforces the connected user's visible account data.","reasoning":"A reusable authorization session is necessary for later knowledge queries.","risk_type":"persistent_credentials","severity":"low","title":"Account-scoped access persists","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication required and described as restricted to what the user's Simply Asking account can see; exact document, team, and table scopes were not retrieved.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/06f323aa-fc97-4e46-9cfb-6ef8a1c2785c.json","what_it_proves":"Candidate PR #125 record identity (name \"Simply Asking\", publisher, type web_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/06f323aa-fc97-4e46-9cfb-6ef8a1c2785c: complete tool_names inventory (17 tools), remote streamable-http endpoint https://auth.simplyasking.io/functions/v1/mcp-server, auth_posture auth_required, directory tier community"}],"primary_reason":"All 17 complete-inventory tools read, count, list, query, or summarize account data and the publisher explicitly states read-only design.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:06f323aa-fc97-4e46-9cfb-6ef8a1c2785c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 17 names. The official connection page was not retrieved informatively; runtime checks should confirm row-level access, agent metadata exposure, retention, and citation boundaries.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"Simply Asking","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=06f323aa-fc97-4e46-9cfb-6ef8a1c2785c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://simplyasking.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Simply Asking","publisher_url":"https://simplyasking.io/","remote_url":"https://auth.simplyasking.io/functions/v1/mcp-server","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: A connected company knowledge base can contain broad confidential operational and personal information.","evidence":"Company documents, tables, facts, and members are readable: The complete inventory retrieves business documents, structured table data, facts, recent activity, security posture, agents, and team membership.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Company documents, tables, facts, and members are readable","triggering_tools":["ask_simply_asking","query_table_data","search_library_exact","list_recent_documents","list_team_members"]},{"description":"This connector may rely on credentials or tokens that remain valid beyond one request. Review findings: A reusable authorization session is necessary for later knowledge queries.","evidence":"Account-scoped access persists: The remote connector is authentication-required and repeatedly enforces the connected user's visible account data.","manual_risk_type":"persistent_credentials","remediation":{"block_tool_categories":["privilege"],"steps":["Use short-lived, narrowly scoped credentials where supported.","Store secrets in an approved secret manager and rotate them regularly."]},"risk_type":"requires_persistent_credentials","severity":"low","title":"Account-scoped access persists","triggering_tools":[]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@simplyasking.io","tags":["network_access","oauth_required","reads_private_data","requires_persistent_credentials","web_connector"],"tools":[{"description":"","name":"ask_simply_asking"},{"description":"","name":"count_by_doc_type"},{"description":"","name":"get_agent_status"},{"description":"","name":"get_contradiction_health"},{"description":"","name":"get_fact_trust"},{"description":"","name":"get_facts_used_rate"},{"description":"","name":"get_gap_close_rate"},{"description":"","name":"get_insights_summary"},{"description":"","name":"get_security_posture"},{"description":"","name":"list_active_agents"},{"description":"","name":"list_recent_documents"},{"description":"","name":"list_team_members"},{"description":"","name":"most_recent_document"},{"description":"","name":"query_table_data"},{"description":"","name":"recent_activity"},{"description":"","name":"search_library_exact"},{"description":"","name":"top_knowledge_gaps"}],"tools_count":17,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/06f323aa-fc97-4e46-9cfb-6ef8a1c2785c","uuid":"ee23763c-79cb-57f6-9428-1a38827c7498","verification_tier":"community","version":""},"query_key":"simply asking simply asking","schema_version":1,"status":"match"}