Claude security directory

Spark

Medium risk

Give Claude access to Spark on macOS so it can both answer questions about your workspace and act on it. Search and browse emails, list folders, read full threads with bodies and attachments, look up contacts, check calendar events, find mutual availability with teammates, and review meeting transcripts. With write access, Claude can also compose drafts (new, reply, forward, with attachments, or from saved templates) and share them with teammates, post team chat comments on shared threads, triage messages (archive, pin, snooze, move, label, mark as done, share with team, assign and delegate), reclassify smart categories, and manage contacts (block/accept, category, important/primary, auto-summary). Tools are discovered dynamically from the running Spark Desktop app. Each account and shared inbox has its own access level - read-only or triage - configurable in Spark Desktop > Settings > AI Agents.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can access sensitive workspace data including email threads (bodies and attachments), contacts, calendar events, availability, and meeting transcripts.
  • Can change or update your information: With write/triage access enabled per account/inbox, the connector can draft and send/forward emails, add comments, and perform mailbox triage actions such as moving, labeling, snoozing, pinning, archiving, and updating contact settings.
  • Can send messages as you: When granted triage/write permissions, the connector can compose and send new emails, replies, and forwards (potentially with attachments) and post team-chat style comments that appear to originate from you.
  • Stores long-lived access tokens: Access is mediated via the Spark Desktop app’s AI Agents settings; if the app maintains ongoing authorization per account/shared inbox, the connector effectively relies on persistent credentials until permissions are changed or revoked.

Available capabilities

This add-on exposes 18 tools or capabilities.

  • accounts
  • folders
  • emails
  • search
  • thread
  • attachment
  • events
  • availability
  • contacts
  • team
  • meetings
  • meeting
  • templates
  • template
  • draft
  • comment
  • action
  • contact-action

The interactive security report will load automatically.