Microsoft Copilot security directory

Courier (Independent Publisher)

Published by Troy Taylor

High risk

Courier is a service and web studio for development teams to manage all product-triggered communications (email, chat, in-app, SMS, push, etc.) in one place. Courier is built for developers who want to deliver an exceptional notification experience.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can send messages as you: This connector can post messages, emails, or notifications on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 36 tools or capabilities.

  • Add subscriber(s) to a list
  • Add users to a bulk job
  • Archive a message
  • Create a brand
  • Create a bulk job
  • Create a profile
  • Create or update an audience
  • Delete a list
  • Delete a profile
  • Delete an audience
  • Get a brand
  • Get a bulk job
  • Get a bulk job's users
  • Get a list
  • Get a message
  • Get a message's content
  • Get a message's history
  • Get a profile
  • Get all audit events
  • Get all recipient lists
  • Get an audience
  • Get an audit event
  • Get list's subscriptions
  • List all audiences

The interactive security report will load automatically.