Claude security directory

Miro

Published by Miro

High risk

Connect Claude to Miro to summarize existing boards or build new ones from scratch. Run sharper workshops, sprint planning, and product strategy sessions with Claude-generated layouts, frames, sticky notes, images, docs, diagrams, tables, and more. Key use cases: • Summarize and search boards: Drop a board URL into Claude to pull out themes, decisions, and open questions from retros, planning sessions, and strategy maps. Search across every board you have access to. • Build new boards from scratch: Generate ready-to-run layouts for retros, sprint planning, and product strategy with frames, sticky notes, cards, tables, docs, and images. • Bring research onto the canvas: Have Claude research a topic — competitors, user feedback, market trends, prior art — and lay the findings out on a fresh board as diagrams, sticky notes, tables, docs, and images, ready to share with your team. • Visualize complex ideas: Turn a prompt, PR, or spec into architecture, sequence-flow, ERD, or user-journey diagrams directly on the canvas. • Act on feedback agentically: Read and resolve comments, reply in-thread, and convert scattered team discussion into a clear list of action items right on the board.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: Can read Miro board contents (including docs, comments, tables, images) that may include confidential product plans, customer data, or internal discussions.
  • Can change or update your information: Can create and update boards and their contents (layouts, docs, diagrams, tables, images, comments), potentially altering shared team workspaces.
  • Can permanently delete data: Includes tools that can delete items (e.g., code widgets), which may remove important artifacts and be difficult to recover depending on Miro settings.
  • Can send messages as you: Can reply to and resolve comments in-thread, which could communicate misleading information or prematurely close discussion under your identity.
  • Stores long-lived access tokens: Likely relies on an OAuth/token connection to access Miro; if compromised, an attacker could read and modify boards you can access.

Available capabilities

This add-on exposes 31 tools or capabilities.

  • board_list_items
  • context_explore
  • context_get
  • diagram_create
  • diagram_get_dsl
  • doc_create
  • doc_get
  • doc_update
  • image_get_data
  • image_get_upload_url
  • image_get_url
  • table_create
  • table_list_rows
  • table_sync_rows
  • board_create
  • board_search_boards
  • code_widget_create
  • code_widget_delete
  • code_widget_get
  • code_widget_list_items
  • code_widget_update
  • comment_list_comments
  • comment_reply
  • comment_resolve

The interactive security report will load automatically.