Claude security directory

BlueConic

Medium risk

BlueConic MCP runs locally, loads your tenant's OpenAPI specification at startup, and exposes BlueConic's read-only GET endpoints as MCP tools. The same codebase also works with Cursor, VS Code, and other stdio-based MCP clients.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

Reads your private information: Exposes BlueConic read-only GET endpoints, which can include customer/profile, consent, and analytics data that may be sensitive depending on your tenant configuration.

The interactive security report will load automatically.