Claude security directory

AppFolio Realm-X

Published by AppFolio, Inc.

High risk

Use Claude to get real work done in AppFolio. Go deep with data analysis and create reports and presentations, build and trigger complex workflows to run in AppFolio, and drive actions across leasing, maintenance, accounting, and communications. Your AppFolio user permissions securely govern all activity. Through this connector Claude gets more than just API access – it can talk agent-to-agent with Realm-X and handle multi-step processes from prompt to completion. Extend your AppFolio experience to Claude and get work done wherever you work best.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can access potentially sensitive AppFolio data (e.g., tenant, owner, accounting, maintenance, and communications details) according to your AppFolio permissions.
  • Can change or update your information: With Read + Write access and workflow capabilities, it may create or update records in AppFolio (e.g., work orders, leases, accounting entries, notes) under your user role.
  • Can send messages as you: Because it can drive actions across communications, it may send messages/notifications on your behalf via AppFolio channels if enabled by your permissions and workflows.
  • Can run commands or queries on your behalf: The agent-to-agent, multi-step workflow execution implies it can trigger complex operations (effectively command execution within AppFolio/Realm-X), which can amplify impact if prompted incorrectly or compromised.
  • Stores long-lived access tokens: Using the connector typically involves stored authorization to AppFolio/Realm-X so Claude can act across sessions, creating exposure if tokens are mishandled.
  • Sends your data to outside companies: Data may be relayed to AppFolio/Realm-X services as part of connector operation; this is a standard third-party processing risk dependent on their handling policies.

Available capabilities

This add-on exposes 1 tools or capabilities.

  • chat

The interactive security report will load automatically.