Claude security directory

Metal

Published by Metal

High risk

Use Metal to search your firm’s companies, deals, documents, people, activities, lists, and workflows. Find relevant firm history, inspect source documents, review deal context, map contacts, and run approved workflows while respecting each user’s Metal permissions.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can search and retrieve firm-internal companies, deals, documents, people, activities, and workflow run details, which may include confidential business and personal data.
  • Can run commands or queries on your behalf: The connector can execute approved workflows (run_workflow), which may trigger automated actions and processing in Metal with potentially broad operational impact depending on workflow permissions.
  • Stores long-lived access tokens: Using the connector typically requires storing an access token/session to continuously access Metal data and run workflows, creating exposure if credentials are mishandled.

Available capabilities

This add-on exposes 24 tools or capabilities.

  • list_companies
  • search_companies
  • list_company_tags
  • get_company
  • get_document
  • search_documents
  • search_people
  • search_users
  • get_user
  • list_teams
  • get_team
  • list_workflows
  • get_workflow
  • list_workflow_runs
  • get_workflow_run
  • run_workflow
  • search_deals
  • get_deal
  • get_person
  • list_lists
  • get_list
  • get_list_entries
  • get_activities
  • get_activity

The interactive security report will load automatically.