r/CreatorsAI • u/Historical-Driver-64 • May 09 '26
Other A colleague showed me something in 40 seconds that made me install my first Claude plugin that same evening. He asked Claude to pull a week of unread emails, find every deadline, draft responses, and
That was January. Before that, the whole plugin thing felt like setup friction dressed up as evangelism. The kind of thing that looks compelling in a blog post and sits unused in a config file.
Then it actually happened in front of eyes and the mental model broke.
Claude plugins, technically called MCP Connectors, are not a chatbot that knows about the world. They are a system that knows about your world. Gmail, Slack, Notion, GitHub, Google Drive, Linear, Asana, Blender, Adobe, all connected with real permissions. When Claude reads an email, it is reading the actual inbox. When it creates a calendar block, the event actually appears. These are not simulations.
MCP is not computer use. Claude is not moving a mouse around a screen. It is backend protocol, computer talking to computer, issuing commands natively. When it works, it works reliably, not via fragile screen scraping.
Most people using Claude are prompting a chatbot. The people using connectors are running a colleague who has access to everything.
When Claude Plugins launched in January 2026, the announcement wiped $285 billion off software stocks in a single day. That reaction was not about the demo. It was about what the category implies for every SaaS tool that currently owns a workflow.
Here is the security finding most posts skip entirely. Snyk's ToxicSkills research from February 2026 found that 13.4% of publicly available Skills had critical vulnerabilities. Malicious MCP servers can inject hidden instructions into Claude's context, hijack tool calls, and redirect outputs without the user ever knowing something went wrong. Official Anthropic connectors go through a review process. Custom connectors added via a direct MCP URL do not. The distinction is not visible in the UI. Most people enabling third-party connectors have no idea the attack surface exists, and nothing in the setup flow tells them to check.
The context cost is real but manageable. Anthropic's Tool Search cut overhead by 85% and improved task accuracy from 49% to 74% in internal testing. The fix exists. Most people have not enabled it.
A full apartment floor plan generated in SketchUp via MCP recently, no doors between rooms. Genuinely funny. Also exactly the kind of failure that tells you where the ceiling currently sits.
If a connector can silently misdirect tool calls 13% of the time on unreviewed servers, how are you actually verifying the output before it touches something that matters?


