Claude security directory
Affinity
Published by Affinity
Medium risk
Bring your Affinity data into Claude to search contacts, companies, and deals; prep for meetings using your actual notes and interaction history; and update records as deals progress. Every email captured, every meeting logged, every relationship scored by your firm is now available directly in the conversation.
Security assessment
Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.
- Reads your private information: The connector can access sensitive CRM data such as contacts, companies, deals, notes, meeting logs, and transcripts, which may include personal data and confidential relationship intelligence.
- Can change or update your information: The connector can create and update records (e.g., notes, reminders, list entries, and field values), which could introduce incorrect CRM data or alter deal/account history if misused.
- Sends your data to outside companies: Any data pulled from Affinity is shared with the LLM service processing the conversation, which may be considered an external third party depending on your deployment and data handling agreements.
- Stores long-lived access tokens: Using the connector typically involves storing an OAuth/token credential to access Affinity over time, increasing impact if those credentials are exposed or over-permissioned.
Available capabilities
This add-on exposes 31 tools or capabilities.
- create_list_entry
- create_note
- create_reminder
- get_company_info
- get_company_list_entries
- get_current_user
- get_entities_attached_to_note
- get_entity_field_values
- get_entity_fields
- get_list_entries
- get_list_field_dropdown_options
- get_list_fields
- get_list_info
- get_lists
- get_meetings
- get_meetings_for_entity
- get_notes
- get_notes_for_entity
- get_person_info
- get_person_list_entries
- get_relationship_strengths
- get_reminders
- get_single_list_entry
- get_transcript_fragments
The interactive security report will load automatically.