Claude security directory

Backlog

Medium risk

Backlog MCP Server connects Claude to Nulab's Backlog — a project management, issue tracking, and Git/SVN platform used by teams worldwide. Manage projects, issues, comments, wikis, and version-control activity directly from your conversations.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can likely access sensitive project data such as issues, comments, wiki content, documents, and repository activity that may include confidential business information.
  • Can change or update your information: The connector appears intended to manage and update Backlog artifacts (e.g., issues, comments, wikis, documents), which could alter workflows or records if misused.
  • Stores long-lived access tokens: Connecting to Backlog typically requires an API key/OAuth token; if stored for ongoing access, compromise could grant continued access to your Backlog workspace.

Available capabilities

This add-on exposes 7 tools or capabilities.

  • space
  • project
  • issue
  • wiki
  • git
  • document
  • notifications

The interactive security report will load automatically.