Microsoft Copilot security directory

One-Time Secret (Independent Publisher)

Published by Aldo Gillone

Medium risk

One-Time Secret is a way to share sensitive information without storing them. If you use a one-time link instead, the information persists for a single viewing which means it can't be read by someone else later. This allows you to send sensitive information in a safe way knowing it's seen by one person only. Think of it like a self-destructing message.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 6 tools or capabilities.

  • Burn Secret
  • Create a Secret
  • Generate a Secret
  • Retrieve a Secret
  • Retrieve Metadata
  • Retrieve Recent Metadata

The interactive security report will load automatically.