Claude security directory

Clarify

Published by Clarify

High risk

Connect Clarify and work with your CRM using natural language. Retrieve, create, and update records, analyze your pipeline, and generate insights—all through conversation. Query deals, companies, people, and meetings without switching apps. Find and import new leads that match your ICP directly from the conversation. Create tasks, lists, and outbound sequences automatically. Build and configure Clarify Agents from Claude to automate your entire GTM motion. Your Clarify data is retrieved in real-time, and permissions are respected. Stop clicking through interfaces. Just ask what you need.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can access CRM records such as deals, companies, people, meetings, campaigns, and agent runs, which may include sensitive business and personal data.
  • Can change or update your information: It can create and update records, lists, campaigns, custom objects, fields, comments, and agents, potentially causing incorrect CRM state or unintended automation changes.
  • Can permanently delete data: Tools like deleting fields or agents can remove schema/automation components, which may lead to irreversible data loss or broken workflows.
  • Can run commands or queries on your behalf: Query capabilities may allow powerful, broad data retrieval/filtering across the CRM, increasing risk of large-scale exposure or unintended operations if misused.
  • Sends your data to outside companies: Using the connector routes CRM data through the MCP/LLM integration path, which can transmit data to external services depending on deployment and logging settings.
  • Stores long-lived access tokens: A CRM connector typically relies on stored OAuth/API tokens to access data continuously, which increases impact if tokens are leaked or mis-scoped.

Available capabilities

This add-on exposes 26 tools or capabilities.

  • get-current-user
  • get-schema
  • get-records
  • create-records
  • update-records
  • merge-records
  • query-data
  • add-comment
  • find-leads
  • import-leads
  • get-lists
  • create-list
  • update-list
  • create-campaign
  • get-campaign
  • list-campaigns
  • update-campaign
  • create-custom-object
  • update-custom-object
  • create-or-update-fields
  • delete-fields
  • create-or-update-agent
  • delete-agent
  • get-agents

The interactive security report will load automatically.