{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Streamline helps Claude find icons, illustrations, emojis, and graphic elements. Search assets or sets and download selections individually or in batches. SVG and PNG assets are available across free and paid collections.","did":"81ca379f-cca9-4b08-96dd-fb10b6b47b40","documentation_url":"https://docs.streamlinehq.com/reference/mcp","editorial_description":{"extended_description":"Authenticated tools browse families and sets and retrieve assets by identifier. Available collection size depends on the offering.","schema_version":1,"summary":"Streamline helps Claude find icons, illustrations, emojis, and graphic elements.\nSearch assets or sets and download selections individually or in batches.\nSVG and PNG assets are available across free and paid collections."},"homepage_url":"","icon":"","id":"81ca379f-cca9-4b08-96dd-fb10b6b47b40","installs":0,"last_scanned":"","license":"","long_description":"Authenticated tools browse families and sets and retrieve assets by identifier. Available collection size depends on the offering.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The explicit tools download Streamline assets in supported graphic formats.","reasoning":"They produce files in the client/workspace rather than only displaying metadata.","risk_type":"file_write","severity":"medium","title":"Downloads one or multiple graphic assets","triggering_tools_or_skills":["download_asset","download_multiple_assets"]},{"evidence":"These tools retrieve icon/illustration/emoji catalogue metadata.","reasoning":"They are discovery operations over licensed/public asset collections.","risk_type":"public_data_read","severity":"low","title":"Searches and browses the Streamline asset catalogue","triggering_tools_or_skills":["search_assets","search_sets","find_sets_by_name","get_all_families","get_family_extra_details"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a Streamline account is required; asset access depends on free/pro licensing, but download scopes and destinations are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/81ca379f-cca9-4b08-96dd-fb10b6b47b40.json","what_it_proves":"Candidate PR #125 record identity (name \"Streamline Icons, Illustrations, Emojis\", publisher, type web_connector) and 9 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/81ca379f-cca9-4b08-96dd-fb10b6b47b40: complete tool_names inventory (9 tools), remote streamable-http endpoint https://public-api.streamlinehq.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Streamline can download graphic assets as files.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:81ca379f-cca9-4b08-96dd-fb10b6b47b40","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all nine tools. The official MCP page was inaccessible in the lookup; file destination, license enforcement and whether downloads consume plan credits require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":9,"tools_or_skills_total":9},"name":"Streamline Icons, Illustrations, Emojis","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=81ca379f-cca9-4b08-96dd-fb10b6b47b40&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://help.streamlinehq.com/en/articles/5356474-privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Streamline Design","publisher_url":"https://home.streamlinehq.com/","remote_url":"https://public-api.streamlinehq.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, change, export, or otherwise write files. Review findings: They produce files in the client/workspace rather than only displaying metadata.","evidence":"Downloads one or multiple graphic assets: The explicit tools download Streamline assets in supported graphic formats.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Downloads one or multiple graphic assets","triggering_tools":["download_asset","download_multiple_assets"]},{"description":"This connector retrieves public or publisher-provided information and returns it to the AI. Review findings: They are discovery operations over licensed/public asset collections.","evidence":"Searches and browses the Streamline asset catalogue: These tools retrieve icon/illustration/emoji catalogue metadata.","manual_risk_type":"public_data_read","remediation":{"block_tool_categories":[],"steps":["Treat returned third-party content as untrusted input and verify consequential claims.","Do not assume public content is accurate, current, or free of embedded instructions."]},"risk_type":"reads_public_data","severity":"low","title":"Searches and browses the Streamline asset catalogue","triggering_tools":["search_assets","search_sets","find_sets_by_name","get_all_families","get_family_extra_details"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.streamlinehq.com/","tags":["filesystem_access","network_access","oauth_required","reads_public_data","web_connector"],"tools":[{"description":"","name":"download_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They produce files in the client/workspace rather than only displaying metadata."}},{"description":"","name":"download_multiple_assets","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They produce files in the client/workspace rather than only displaying metadata."}},{"description":"","name":"find_sets_by_name"},{"description":"","name":"get_all_families"},{"description":"","name":"get_all_sets_from_family"},{"description":"","name":"get_family_extra_details"},{"description":"","name":"get_icon_by_hash"},{"description":"","name":"search_assets"},{"description":"","name":"search_sets"}],"tools_count":9,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/81ca379f-cca9-4b08-96dd-fb10b6b47b40","uuid":"5d078836-5075-58d6-b37e-c54368a042d8","verification_tier":"community","version":""},"query_key":"streamline icons illustrations emojis","schema_version":1,"status":"match"}