{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-01","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Swoogo connects Claude to event, registration, session, and sponsor data. Retrieve information and create or update supported event records. Tools also submit registrations and manage attendance and invitation lists.","did":"30ac17b0-2314-4701-8ebf-360b48c69903","documentation_url":"https://developer.swoogo.com/mcp/introduction","editorial_description":{"extended_description":"Tools work with contacts, discount codes, registrant types, sessions, sponsors, event bundles, packages, and registration forms. They can add registrants to sessions, retrieve attendance statistics, and create email records. Authentication is required to access Swoogo data.","schema_version":1,"summary":"Swoogo connects Claude to event, registration, session, and sponsor data.\nRetrieve information and create or update supported event records.\nTools also submit registrations and manage attendance and invitation lists."},"homepage_url":"","icon":"","id":"30ac17b0-2314-4701-8ebf-360b48c69903","installs":0,"last_scanned":"","license":"","long_description":"Tools work with contacts, discount codes, registrant types, sessions, sponsors, event bundles, packages, and registration forms. They can add registrants to sessions, retrieve attendance statistics, and create email records. Authentication is required to access Swoogo data.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official current documentation explicitly categorizes swoogo_emails_create as sending transactional emails.","reasoning":"This sends external communication as the connected event account.","risk_type":"messaging_as_user","severity":"high","title":"Current connector can send transactional email","triggering_tools_or_skills":["swoogo_emails_create"]},{"evidence":"The current official table lists 44 tools and multiple material writes absent from the candidate's non-truncated 28-tool snapshot.","reasoning":"The catalog omits a current High-risk messaging action and several persistent modifications.","risk_type":"identity_discrepancy","severity":"high","title":"Stored inventory has 28 tools while official docs list 44","triggering_tools_or_skills":["swoogo_events_update","swoogo_registrants_save","swoogo_emails_create","swoogo_attendance_create","swoogo_attendance_update","swoogo_submit_registration","swoogo_invitation-lists_create","swoogo_invitation-lists_update"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for a Swoogo event account; exact scopes and role gates are not documented on the reviewed page. The stored tool inventory is stale relative to current official docs.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/30ac17b0-2314-4701-8ebf-360b48c69903.json","what_it_proves":"Candidate PR #125 record identity (name \"Swoogo\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/30ac17b0-2314-4701-8ebf-360b48c69903: complete tool_names inventory (28 tools), remote streamable-http endpoint https://mcp.swoogo.com/, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:36:54Z","url_or_path":"https://developer.swoogo.com/mcp/introduction","what_it_proves":"Official current MCP documentation lists 44 tools, including swoogo_emails_create for transactional email and additional event, attendance, registration and invitation-list writes, versus 28 stored tools."}],"primary_reason":"Swoogo's live documented surface includes transactional email and 16 tools missing from the stored inventory.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:30ac17b0-2314-4701-8ebf-360b48c69903","reviewed_at":"2026-10-10","reviewer_notes":"Refresh to the full official 44-tool inventory and re-review invitation, registration and attendance side effects. No direct charge/refund action is documented.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"Swoogo","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=30ac17b0-2314-4701-8ebf-360b48c69903&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://swoogo.events/legal/privacy/","provisional_risk":null,"publication_recommendation":"fix","publisher":"Swoogo","publisher_url":"https://swoogo.events/","remote_url":"https://mcp.swoogo.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This sends external communication as the connected event account.","evidence":"Current connector can send transactional email: Official current documentation explicitly categorizes swoogo_emails_create as sending transactional emails.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Current connector can send transactional email","triggering_tools":["swoogo_emails_create"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@swoogo.com","tags":["accesses_calendar","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"swoogo_add_registrant_to_session"},{"description":"","name":"swoogo_create_contact"},{"description":"","name":"swoogo_create_discount_code"},{"description":"","name":"swoogo_create_registrant"},{"description":"","name":"swoogo_create_registrant_type"},{"description":"","name":"swoogo_create_session"},{"description":"","name":"swoogo_create_sponsor"},{"description":"","name":"swoogo_find_event"},{"description":"","name":"swoogo_get_contacts"},{"description":"","name":"swoogo_get_discount_codes"},{"description":"","name":"swoogo_get_event_bundle"},{"description":"","name":"swoogo_get_events"},{"description":"","name":"swoogo_get_line_item_audits"},{"description":"","name":"swoogo_get_line_items"},{"description":"","name":"swoogo_get_packages"},{"description":"","name":"swoogo_get_registrants"},{"description":"","name":"swoogo_get_registration_form"},{"description":"","name":"swoogo_get_session_attendance"},{"description":"","name":"swoogo_get_sessions"},{"description":"","name":"swoogo_get_speakers"},{"description":"","name":"swoogo_get_sponsors"},{"description":"","name":"swoogo_get_transactions"},{"description":"","name":"swoogo_registration_form"},{"description":"","name":"swoogo_session_attendance_stats"},{"description":"","name":"swoogo_update_discount_code"},{"description":"","name":"swoogo_update_session"},{"description":"","name":"swoogo_update_speaker"},{"description":"","name":"swoogo_update_sponsor"},{"description":"","name":"swoogo_emails_create","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This sends external communication as the connected event account."}},{"description":"","name":"swoogo_events_update"},{"description":"","name":"swoogo_registrants_save"},{"description":"","name":"swoogo_attendance_create"},{"description":"","name":"swoogo_attendance_update"},{"description":"","name":"swoogo_submit_registration"},{"description":"","name":"swoogo_invitation-lists_create"},{"description":"","name":"swoogo_invitation-lists_update"}],"tools_count":36,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/30ac17b0-2314-4701-8ebf-360b48c69903","uuid":"b74baed5-286a-575f-b314-958dc1823ea7","verification_tier":"community","version":""},"query_key":"swoogo","schema_version":1,"status":"match"}