{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-01","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Slite connects Claude to company knowledge and documentation. Search documents and connected workplace sources, research questions, and create or maintain notes, collections, and comments. OAuth access follows your existing Slite permissions.","did":"4be0b2ae-3b4d-4d9a-982d-987a2e06754f","documentation_url":"https://slite.com/help/lmeen-YwXupV23/Slite-MCP","editorial_description":{"extended_description":"Slite Agent supports multi-step research with follow-up context and cited findings that can become drafts for human review. Other tools edit document blocks, move or archive notes, manage review states, upload files, and maintain comment threads. No API key or local server setup is required.","schema_version":1,"summary":"Slite connects Claude to company knowledge and documentation.\nSearch documents and connected workplace sources, research questions, and create or maintain notes, collections, and comments.\nOAuth access follows your existing Slite permissions."},"homepage_url":"","icon":"","id":"4be0b2ae-3b4d-4d9a-982d-987a2e06754f","installs":0,"last_scanned":"","license":"","long_description":"Slite Agent supports multi-step research with follow-up context and cited findings that can become drafts for human review. Other tools edit document blocks, move or archive notes, manage review states, upload files, and maintain comment threads. No API key or local server setup is required.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly archives whole notes and removes selected blocks from documents.","reasoning":"These actions remove shared company knowledge/content, even when note archive may be restorable.","risk_type":"data_deletion","severity":"high","title":"Archives notes and removes document blocks","triggering_tools_or_skills":["archive-note","remove-blocks"]},{"evidence":"The connector posts collaborative comments visible to workspace participants.","reasoning":"It communicates internally under the user's identity.","risk_type":"messaging_as_user","severity":"high","title":"Creates and replies to comment threads","triggering_tools_or_skills":["create-comment-thread","reply-to-comment-thread"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth applies existing Slite permissions to private documents, connected sources, users/groups, collections, files and comments.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4be0b2ae-3b4d-4d9a-982d-987a2e06754f.json","what_it_proves":"Candidate PR #125 record identity (name \"Slite\", publisher, type web_connector) and 41 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4be0b2ae-3b4d-4d9a-982d-987a2e06754f: complete tool_names inventory (41 tools), remote streamable-http endpoint https://api.slite.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Slite can remove shared documentation and post comments to teammates.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:4be0b2ae-3b4d-4d9a-982d-987a2e06754f","reviewed_at":"2026-10-10","reviewer_notes":"slite-agent performs multi-step research but the write tools remain separately enumerated; all connected knowledge is untrusted input.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":41,"tools_or_skills_total":41},"name":"Slite","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4be0b2ae-3b4d-4d9a-982d-987a2e06754f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://slite.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Slite","publisher_url":"https://slite.com/","remote_url":"https://api.slite.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions remove shared company knowledge/content, even when note archive may be restorable.","evidence":"Archives notes and removes document blocks: The complete inventory explicitly archives whole notes and removes selected blocks from documents.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Archives notes and removes document blocks","triggering_tools":["archive-note","remove-blocks"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates internally under the user's identity.","evidence":"Creates and replies to comment threads: The connector posts collaborative comments visible to workspace participants.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Creates and replies to comment threads","triggering_tools":["create-comment-thread","reply-to-comment-thread"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@slite.com","tags":["accesses_messaging","deletes_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"append-blocks"},{"description":"","name":"archive-note","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove shared company knowledge/content, even when note archive may be restorable."}},{"description":"","name":"ask-slite"},{"description":"","name":"create-channel"},{"description":"","name":"create-collection"},{"description":"","name":"create-comment-thread","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates internally under the user's identity."}},{"description":"","name":"create-note"},{"description":"","name":"edit-document"},{"description":"","name":"get-comment-thread-on-note"},{"description":"","name":"get-note"},{"description":"","name":"get-note-children"},{"description":"","name":"get-user"},{"description":"","name":"get-user-group"},{"description":"","name":"list-channels"},{"description":"","name":"list-comment-threads"},{"description":"","name":"list-empty-notes-for-knowledge-management"},{"description":"","name":"list-inactive-notes-for-knowledge-management"},{"description":"","name":"list-notes-for-knowledge-management"},{"description":"","name":"list-public-notes-for-knowledge-management"},{"description":"","name":"list-recently-edited-notes"},{"description":"","name":"list-recently-visited-notes"},{"description":"","name":"modify-block"},{"description":"","name":"modify-range"},{"description":"","name":"move-note"},{"description":"","name":"read-thread"},{"description":"","name":"remove-blocks","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove shared company knowledge/content, even when note archive may be restorable."}},{"description":"","name":"reply-to-comment-thread","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates internally under the user's identity."}},{"description":"","name":"resolve-comment-thread"},{"description":"","name":"restore-note"},{"description":"","name":"search-notes"},{"description":"","name":"search-user-groups"},{"description":"","name":"search-users"},{"description":"","name":"set-note-review-state"},{"description":"","name":"slite-agent"},{"description":"","name":"unresolve-comment-thread"},{"description":"","name":"update-channel"},{"description":"","name":"update-collection"},{"description":"","name":"update-note"},{"description":"","name":"update-table"},{"description":"","name":"upload-file"},{"description":"","name":"verify-note"}],"tools_count":41,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4be0b2ae-3b4d-4d9a-982d-987a2e06754f","uuid":"8a8ff9d7-a5ea-54fa-82e8-9e4b0c0aafda","verification_tier":"community","version":""},"query_key":"slite","schema_version":1,"status":"match"}