{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Spoks helps Claude plan marketing campaigns, flows, and segments. Use products, discounts, and customer data to draft content and analyze results. Created work stays in draft for review and sending in Spoks.","did":"472fd612-eef2-4fe0-bfbd-e851f2ba6894","documentation_url":"https://help.spoks.com/en/articles/15552109-spoks-mcp","editorial_description":{"extended_description":"Tools support campaign blocks, automation steps, segment previews, media uploads, and click or revenue reporting.","schema_version":1,"summary":"Spoks helps Claude plan marketing campaigns, flows, and segments.\nUse products, discounts, and customer data to draft content and analyze results.\nCreated work stays in draft for review and sending in Spoks."},"homepage_url":"","icon":"","id":"472fd612-eef2-4fe0-bfbd-e851f2ba6894","installs":0,"last_scanned":"","license":"","long_description":"Tools support campaign blocks, automation steps, segment previews, media uploads, and click or revenue reporting.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The inventory creates and updates marketing artifacts, while the description states users must review and send from Spoks.","reasoning":"These calls persist draft marketing state but cannot reach a real audience themselves.","risk_type":"data_modification","severity":"medium","title":"Creates campaign drafts, segments and automation flows","triggering_tools_or_skills":["draft_campaign","create_segment","create_flow","add_flow_step","update_draft_campaign","update_flow","upload_media"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants Spoks access to customer/contact, product, discount, media, campaign, segment and automation data; all created content remains draft until reviewed/sent in Spoks.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/472fd612-eef2-4fe0-bfbd-e851f2ba6894.json","what_it_proves":"Candidate PR #125 record identity (name \"Spoks\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/472fd612-eef2-4fe0-bfbd-e851f2ba6894: complete tool_names inventory (28 tools), remote streamable-http endpoint https://mcp.spoks.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Spoks creates marketing drafts and flows but does not send them.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:472fd612-eef2-4fe0-bfbd-e851f2ba6894","reviewed_at":"2026-10-10","reviewer_notes":"Retain the in-product human send boundary and guard customer/contact content from prompt injection.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"Spoks","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=472fd612-eef2-4fe0-bfbd-e851f2ba6894&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://spoks.com/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Spoks","publisher_url":"https://spoks.com/","remote_url":"https://mcp.spoks.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves.","evidence":"Creates campaign drafts, segments and automation flows: The inventory creates and updates marketing artifacts, while the description states users must review and send from Spoks.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates campaign drafts, segments and automation flows","triggering_tools":["draft_campaign","create_segment","create_flow","add_flow_step","update_draft_campaign","update_flow","upload_media"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@spoks.com","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_flow_step","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves."}},{"description":"","name":"create_flow","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves."}},{"description":"","name":"create_segment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves."}},{"description":"","name":"discounts_search"},{"description":"","name":"draft_campaign","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves."}},{"description":"","name":"get_campaign"},{"description":"","name":"get_campaign_statistics"},{"description":"","name":"get_contact"},{"description":"","name":"get_flow"},{"description":"","name":"get_flow_blueprints"},{"description":"","name":"get_flows"},{"description":"","name":"get_links"},{"description":"","name":"get_segment"},{"description":"","name":"get_segments"},{"description":"","name":"get_settings"},{"description":"","name":"preview_segment"},{"description":"","name":"products_search"},{"description":"","name":"search_campaigns"},{"description":"","name":"search_contacts"},{"description":"","name":"search_forms"},{"description":"","name":"search_media"},{"description":"","name":"update_draft_campaign","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves."}},{"description":"","name":"update_draft_campaign_blocks"},{"description":"","name":"update_flow","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves."}},{"description":"","name":"update_flow_step"},{"description":"","name":"update_segment"},{"description":"","name":"upload_media","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These calls persist draft marketing state but cannot reach a real audience themselves."}},{"description":"","name":"whoami"}],"tools_count":28,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/472fd612-eef2-4fe0-bfbd-e851f2ba6894","uuid":"791be816-ce90-5d99-b039-341b1c923748","verification_tier":"community","version":""},"query_key":"spoks","schema_version":1,"status":"match"}