Security audit
Security checks for vulnerabilities and agentic risk
This is mostly a normal Fireflies.ai API helper, but it encourages permanent no-login meeting links that could expose sensitive recordings or transcripts.
Install only if you are comfortable giving the agent access to your Fireflies account data through the API key. Treat transcript, audio, video, and embed links as sensitive; avoid generating or sharing no-login permanent embed URLs unless the meeting owner has approved public-style sharing.
The documentation promotes permanent no-login embed URLs as preferable for sharing, but does not warn that this can make sensitive meeting data accessible to anyone with the link. In the context of meeting transcripts and recordings, omission of a privacy warning is dangerous because users may unintentionally disclose confidential business conversations or personal data.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
## API Base
GraphQL Endpoint: `https://api.fireflies.ai/graphql`
Authorization header: `Bearer $FIREFLIES_API_KEY`
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -s -X POST https://api.fireflies.ai/graphql \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $FIREFLIES_API_KEY" \
-d '{"query":"{ user { user_id name email is_admin minutes_consumed num_transcripts recent_meeting } }"}' | jq
No suspicious patterns detected.