{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Controls your Sonos speakers and listening groups from Claude. Play music, radio, favorites or playlists and move audio between rooms. Adjust volume, mute, playback position, shuffle and repeat, or see what's playing.","did":"b71a0736-1471-4538-a3f5-f2b474c85662","documentation_url":"https://support.sonos.com/article/control-your-sonos-system-with-ai-using-sonos-27mcp","editorial_description":{"extended_description":"Tools discover households, speakers and registered music services, group or ungroup players, and control line-in playback. Night Sound and speech enhancement settings are also available.","schema_version":1,"summary":"Controls your Sonos speakers and listening groups from Claude.\nPlay music, radio, favorites or playlists and move audio between rooms.\nAdjust volume, mute, playback position, shuffle and repeat, or see what's playing."},"homepage_url":"","icon":"https://mcp.ws.sonos.com/favicon.ico","id":"b71a0736-1471-4538-a3f5-f2b474c85662","installs":0,"last_scanned":"","license":"","long_description":"Tools discover households, speakers and registered music services, group or ungroup players, and control line-in playback. Night Sound and speech enhancement settings are also available.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The inventory contains playback, grouping, mute, volume, seek and track-selection commands for authenticated Sonos players.","reasoning":"These commands change physical-device state and the user's active listening session but do not delete data or send external content.","risk_type":"data_modification","severity":"medium","title":"Controls household audio playback and groups","triggering_tools_or_skills":["add_players_to_group","move_audio_to_players","pause","play_album","remove_players_from_group","set_group_volume","set_player_mute","skip_to_next_track"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for the user's Sonos household; household/group/player scope and confirmation behavior are not described.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b71a0736-1471-4538-a3f5-f2b474c85662.json","what_it_proves":"Candidate PR #125 record identity (name \"Sonos\", publisher, type web_connector) and 34 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b71a0736-1471-4538-a3f5-f2b474c85662: complete tool_names inventory (34 tools), remote streamable-http endpoint https://mcp.ws.sonos.com/mcp, auth_posture auth_required, directory tier partner"}],"primary_reason":"Sonos exposes a complete set of state-changing playback, volume and speaker-group controls.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:b71a0736-1471-4538-a3f5-f2b474c85662","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 33 tools. No account deletion, purchase, message, credential or infrastructure action appears; runtime verification should confirm the authenticated household boundary and whether any playback command can trigger paid services.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"false","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":34,"tools_or_skills_total":34},"name":"Sonos","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b71a0736-1471-4538-a3f5-f2b474c85662&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.sonos.com/en/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Sonos, Inc.","publisher_url":"https://www.sonos.com/","remote_url":"https://mcp.ws.sonos.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content.","evidence":"Controls household audio playback and groups: The inventory contains playback, grouping, mute, volume, seek and track-selection commands for authenticated Sonos players.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Controls household audio playback and groups","triggering_tools":["add_players_to_group","move_audio_to_players","pause","play_album","remove_players_from_group","set_group_volume","set_player_mute","skip_to_next_track"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.sonos.com/contact","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_players_to_group","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"adjust_group_volume"},{"description":"","name":"adjust_player_volume"},{"description":"","name":"get_group_volume"},{"description":"","name":"get_households_and_groups_and_players"},{"description":"","name":"get_night_sound_and_speech_enhancement"},{"description":"","name":"get_now_playing"},{"description":"","name":"get_player_volume"},{"description":"","name":"get_registered_music_services"},{"description":"","name":"get_shuffle_repeat_crossfade"},{"description":"","name":"get_sonos_favorites"},{"description":"","name":"get_sonos_playlists"},{"description":"","name":"move_audio_to_players","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"pause","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"play_album","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"play_artist"},{"description":"","name":"play_player_line_in"},{"description":"","name":"play_playlist"},{"description":"","name":"play_radio"},{"description":"","name":"play_sonos_favorite"},{"description":"","name":"play_sonos_playlist"},{"description":"","name":"play_station"},{"description":"","name":"play_track"},{"description":"","name":"remove_players_from_group","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"resume"},{"description":"","name":"seek"},{"description":"","name":"set_group_mute"},{"description":"","name":"set_group_volume","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"set_night_sound_and_speech_enhancement"},{"description":"","name":"set_player_mute","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"set_player_volume"},{"description":"","name":"set_shuffle_repeat_crossfade"},{"description":"","name":"skip_to_next_track","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These commands change physical-device state and the user's active listening session but do not delete data or send external content."}},{"description":"","name":"skip_to_previous_track"}],"tools_count":34,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b71a0736-1471-4538-a3f5-f2b474c85662","uuid":"32c188b7-89a9-5901-8a2c-59884c8d5cfd","verification_tier":"partner","version":""},"query_key":"sonos inc sonos","schema_version":1,"status":"match"}