{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"table connects Claude to relationship context in your personal CRM. Find contacts and save explicit details from conversations, notes, or meeting recaps. Manage contact imports, groups, tags, and avatars with authenticated access.","did":"6f227d00-53e1-4827-9521-4eb7591696db","documentation_url":"https://www.usetable.ai/help-center/mcp","editorial_description":{"extended_description":"Prepare and start imports, save contacts, and create or remove groups and tags.","schema_version":1,"summary":"table connects Claude to relationship context in your personal CRM.\nFind contacts and save explicit details from conversations, notes, or meeting recaps.\nManage contact imports, groups, tags, and avatars with authenticated access."},"homepage_url":"","icon":"","id":"6f227d00-53e1-4827-9521-4eb7591696db","installs":0,"last_scanned":"","license":"","long_description":"Prepare and start imports, save contacts, and create or remove groups and tags.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit delete tools remove meaningful relationship taxonomy.","reasoning":"Deleting shared contact organization data is destructive.","risk_type":"data_deletion","severity":"high","title":"Deletes contact groups and tags","triggering_tools_or_skills":["delete_group","delete_tag"]},{"evidence":"These tools persist personal contact and relationship-context records.","reasoning":"They materially modify an address-book workspace.","risk_type":"data_modification","severity":"medium","title":"Imports and saves contacts, groups, tags and avatars","triggering_tools_or_skills":["contacts_import_start_upload","contacts_save","save_group","save_tag","set_contact_avatar_from_upload"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a Table account is required; contact/group/tag scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/6f227d00-53e1-4827-9521-4eb7591696db.json","what_it_proves":"Candidate PR #125 record identity (name \"table\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/6f227d00-53e1-4827-9521-4eb7591696db: complete tool_names inventory (14 tools), remote streamable-http endpoint https://mcp.usetable.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Table can delete relationship groups/tags and broadly modify contact data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:6f227d00-53e1-4827-9521-4eb7591696db","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 14 tools. Avatar and import upload URLs should be runtime checked for expiry and authorization.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"table","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=6f227d00-53e1-4827-9521-4eb7591696db&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.usetable.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"TableAI Inc.","publisher_url":"https://www.usetable.ai/","remote_url":"https://mcp.usetable.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting shared contact organization data is destructive.","evidence":"Deletes contact groups and tags: Explicit delete tools remove meaningful relationship taxonomy.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes contact groups and tags","triggering_tools":["delete_group","delete_tag"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify an address-book workspace.","evidence":"Imports and saves contacts, groups, tags and avatars: These tools persist personal contact and relationship-context records.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Imports and saves contacts, groups, tags and avatars","triggering_tools":["contacts_import_start_upload","contacts_save","save_group","save_tag","set_contact_avatar_from_upload"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@usetable.ai","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"contacts_import_format"},{"description":"","name":"contacts_import_prepare_upload"},{"description":"","name":"contacts_import_start_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify an address-book workspace."}},{"description":"","name":"contacts_save","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify an address-book workspace."}},{"description":"","name":"delete_group","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting shared contact organization data is destructive."}},{"description":"","name":"delete_tag","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting shared contact organization data is destructive."}},{"description":"","name":"get_contact"},{"description":"","name":"list_contacts"},{"description":"","name":"list_groups"},{"description":"","name":"list_tags"},{"description":"","name":"prepare_contact_avatar_upload"},{"description":"","name":"save_group","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify an address-book workspace."}},{"description":"","name":"save_tag","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify an address-book workspace."}},{"description":"","name":"set_contact_avatar_from_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially modify an address-book workspace."}}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/6f227d00-53e1-4827-9521-4eb7591696db","uuid":"73e4f7e6-823a-5af1-a01d-a9e1639bf9b6","verification_tier":"community","version":""},"query_key":"table","schema_version":1,"status":"match"}