Claude security directory

Celayix

Medium risk

Connects your LLM to the hosted Celayix MCP server. Authenticate once with a Celayix MCP token (generated via the Celayix Token API) and ask the LLM natural questions like "show shifts for next week" or "who are our active customers?". Sessions are generated automatically — no per-tool login required.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can access employee, customer, scheduling, site, and time-off data that may include personal and operationally sensitive information.
  • Stores long-lived access tokens: Authentication uses a Celayix MCP token and automatically generated sessions, implying reliance on a reusable credential that could grant ongoing access if exposed.

Available capabilities

This add-on exposes 8 tools or capabilities.

  • read_employees
  • read_shifts
  • read_customers
  • read_sites
  • read_services
  • read_shift_log
  • read_time_off_requests
  • read_qualifications

The interactive security report will load automatically.