Microsoft Copilot security directory

Waldo Desk & Parking Booking

Published by Moffi

High risk

Microsoft startup of the year 🏆: desk booking, parking reservation, flex office

Security assessment

Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Stores long-lived access tokens: This connector requires API access tokens. If those tokens leak or are stolen, whoever holds them gets the same access you have to the connected service.

Available capabilities

This add-on exposes 13 tools or capabilities.

  • Calendars.ReadWrite
  • Calendars.Read
  • Calendars.ReadWrite
  • Chat.Read
  • Chat.ReadBasic
  • ChatMessage.Send
  • Directory.Read.All
  • Place.Read.All
  • User.Read
  • User.Read.All
  • User.ReadBasic.All
  • offline_access
  • openid

The interactive security report will load automatically.