Microsoft Copilot security directory

Tumblr (Independent Publisher)

Published by Troy Taylor

High risk

Tumblr is a microblogging and social networking website. The service allows users to post multimedia and other content to a short-form blog.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 30 tools or capabilities.

  • Block a blog
  • Block a list of posts
  • Check if followed by blog
  • Create or reblog a post (Neue Post Format)
  • Delete a post
  • Edit a post (Neue Post Format)
  • Fetch a post (Neue Post Format)
  • Follow a blog
  • Get a blog's followers
  • Get blog's activity feed
  • Get blog's blocks
  • Get blog's following
  • Get blog's likes
  • Get blog info
  • Get blogs following
  • Get draft posts
  • Get notes for a post
  • Get posts with tag
  • Get queued posts
  • Get submission posts
  • Get user dashboard
  • Get user information
  • Get user likes
  • Get user limits

The interactive security report will load automatically.