{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Design and simulate optical systems with 3DOptix. Build layouts from components, run ray tracing, and inspect irradiance, diffraction, PSF, or MTF results. Requires a 3DOptix account; continued use after the trial needs a subscription.","did":"e247b6a2-e118-4ca4-a8c6-05415a3cca6c","documentation_url":"https://www.3doptix.com/academy/","editorial_description":{"extended_description":"Place optics, sources, detectors, and optomechanics, import Zemax or STEP/CAD designs, and calculate optical parameters or material indices. Render analysis images, configure polarized or spectral analyses, and manage saved setups or sharing.","schema_version":1,"summary":"Design and simulate optical systems with 3DOptix.\nBuild layouts from components, run ray tracing, and inspect irradiance, diffraction, PSF, or MTF results.\nRequires a 3DOptix account; continued use after the trial needs a subscription."},"homepage_url":"","icon":"","id":"e247b6a2-e118-4ca4-a8c6-05415a3cca6c","installs":0,"last_scanned":"","license":"","long_description":"Place optics, sources, detectors, and optomechanics, import Zemax or STEP/CAD designs, and calculate optical parameters or material indices. Render analysis images, configure polarized or spectral analyses, and manage saved setups or sharing.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit destructive tools remove design resources.","reasoning":"This can erase engineering work.","risk_type":"data_deletion","severity":"high","title":"Analyses and optical parts can be deleted","triggering_tools_or_skills":["3doptix_analysis_delete","3doptix_part_delete"]},{"evidence":"The connector explicitly mints/returns an API credential.","reasoning":"Credential creation/exposure is a sensitive security action.","risk_type":"credential_admin","severity":"high","title":"OAuth can be exchanged for an API key","triggering_tools_or_skills":["3doptix_client_exchange_oauth_for_api_key"]},{"evidence":"The description states simulations/analyses consume account resources and continued use requires a subscription.","reasoning":"Running them consumes a metered paid entitlement.","risk_type":"financial_transaction","severity":"high","title":"GPU simulations and analyses consume subscription/account credits","triggering_tools_or_skills":["3doptix_simulation_run","3doptix_analysis_run"]},{"evidence":"These tools persist engineering files/designs.","reasoning":"They change account data.","risk_type":"file_write","severity":"medium","title":"CAD/Zemax files and optical setups can be uploaded/created","triggering_tools_or_skills":["3doptix_cad_upload_and_process","3doptix_setup_create_from_file","3doptix_setup_create"]},{"evidence":"User/vendor-authored data is returned.","reasoning":"It should remain untrusted.","risk_type":"prompt_injection_exposure","severity":"low","title":"Imported CAD/design metadata enters model context","triggering_tools_or_skills":["3doptix_setup_get","3doptix_parts_get_detailed"]},{"evidence":"The connector runs at https://mcp.3doptix.com/ without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"3DOptix optical design and simulations is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth connects a 3DOptix subscription; the connector can exchange OAuth for an API key and simulations consume account resources.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e247b6a2-e118-4ca4-a8c6-05415a3cca6c.json","what_it_proves":"Candidate PR #125 record identity (name \"3DOptix optical design and simulations\", publisher, type web_connector) and 70 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e247b6a2-e118-4ca4-a8c6-05415a3cca6c: complete tool_names inventory (70 tools), remote streamable-http endpoint https://mcp.3doptix.com/, auth_posture auth_required, directory tier community"}],"primary_reason":"3DOptix deletes designs, mints API keys and consumes paid simulation resources.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e247b6a2-e118-4ca4-a8c6-05415a3cca6c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 70 tools. Exact credit pricing/confirmation should be runtime-verified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":70,"tools_or_skills_total":70},"name":"3DOptix optical design and simulations","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e247b6a2-e118-4ca4-a8c6-05415a3cca6c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.3doptix.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"3DOptix","publisher_url":"https://www.3doptix.com/","remote_url":"https://mcp.3doptix.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: This can erase engineering work.","evidence":"Analyses and optical parts can be deleted: Explicit destructive tools remove design resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Analyses and optical parts can be deleted","triggering_tools":["3doptix_analysis_delete","3doptix_part_delete"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential creation/exposure is a sensitive security action.","evidence":"OAuth can be exchanged for an API key: The connector explicitly mints/returns an API credential.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"OAuth can be exchanged for an API key","triggering_tools":["3doptix_client_exchange_oauth_for_api_key"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Running them consumes a metered paid entitlement.","evidence":"GPU simulations and analyses consume subscription/account credits: The description states simulations/analyses consume account resources and continued use requires a subscription.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"GPU simulations and analyses consume subscription/account credits","triggering_tools":["3doptix_simulation_run","3doptix_analysis_run"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They change account data.","evidence":"CAD/Zemax files and optical setups can be uploaded/created: These tools persist engineering files/designs.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"CAD/Zemax files and optical setups can be uploaded/created","triggering_tools":["3doptix_cad_upload_and_process","3doptix_setup_create_from_file","3doptix_setup_create"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@3doptix.com","tags":["deletes_data","filesystem_access","modifies_data","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"3doptix_analysis_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This can erase engineering work."}},{"description":"","name":"3doptix_analysis_render"},{"description":"","name":"3doptix_analysis_run","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Running them consumes a metered paid entitlement."}},{"description":"","name":"3doptix_analysis_update"},{"description":"","name":"3doptix_aperture_configure"},{"description":"","name":"3doptix_aperture_create"},{"description":"","name":"3doptix_api_healthcheck"},{"description":"","name":"3doptix_build_beam_expander_lenses"},{"description":"","name":"3doptix_cad_upload_and_process","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They change account data."}},{"description":"","name":"3doptix_calculate_multiplet_min_thickness"},{"description":"","name":"3doptix_calculate_refractive_index"},{"description":"","name":"3doptix_client_exchange_oauth_for_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential creation/exposure is a sensitive security action."}},{"description":"","name":"3doptix_client_login_url"},{"description":"","name":"3doptix_client_status"},{"description":"","name":"3doptix_cs_pose_get"},{"description":"","name":"3doptix_detector_configure"},{"description":"","name":"3doptix_detector_create"},{"description":"","name":"3doptix_find_ball_lens_diameter_for_target_efl"},{"description":"","name":"3doptix_find_material_by_refrctv_idx"},{"description":"","name":"3doptix_find_spherical_radii_for_target_efl"},{"description":"","name":"3doptix_get_tool_guide"},{"description":"","name":"3doptix_get_upload_status"},{"description":"","name":"3doptix_grating_create"},{"description":"","name":"3doptix_lens_create"},{"description":"","name":"3doptix_lens_maker_calc_first_radius"},{"description":"","name":"3doptix_light_source_configure"},{"description":"","name":"3doptix_light_source_create"},{"description":"","name":"3doptix_material_search_by_name"},{"description":"","name":"3doptix_mirror_create"},{"description":"","name":"3doptix_multiplet_create"},{"description":"","name":"3doptix_optics_get"},{"description":"","name":"3doptix_optics_update"},{"description":"","name":"3doptix_optomechanics_catalog_overview"},{"description":"","name":"3doptix_optomechanics_get"},{"description":"","name":"3doptix_part_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This can erase engineering work."}},{"description":"","name":"3doptix_part_update_cs"},{"description":"","name":"3doptix_parts_configure"},{"description":"","name":"3doptix_parts_get"},{"description":"","name":"3doptix_parts_get_detailed"},{"description":"","name":"3doptix_parts_list"},{"description":"","name":"3doptix_request_file_upload"},{"description":"","name":"3doptix_search_all_types"},{"description":"","name":"3doptix_search_aperture"},{"description":"","name":"3doptix_search_beam_splitter"},{"description":"","name":"3doptix_search_filter"},{"description":"","name":"3doptix_search_grating"},{"description":"","name":"3doptix_search_lens"},{"description":"","name":"3doptix_search_mirror"},{"description":"","name":"3doptix_search_optomechanics"},{"description":"","name":"3doptix_search_prism"},{"description":"","name":"3doptix_search_window"},{"description":"","name":"3doptix_setup_add_optics"},{"description":"","name":"3doptix_setup_add_optomechanics"},{"description":"","name":"3doptix_setup_change_shareability"},{"description":"","name":"3doptix_setup_convert_seq_zmx"},{"description":"","name":"3doptix_setup_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They change account data."}},{"description":"","name":"3doptix_setup_create_from_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They change account data."}},{"description":"","name":"3doptix_setup_create_from_template"},{"description":"","name":"3doptix_setup_get"},{"description":"","name":"3doptix_setup_get_widget_url"},{"description":"","name":"3doptix_setup_list"},{"description":"","name":"3doptix_setup_list_starter_templates"},{"description":"","name":"3doptix_simulation_analyze"},{"description":"","name":"3doptix_simulation_queue_clear"},{"description":"","name":"3doptix_simulation_run","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Running them consumes a metered paid entitlement."}},{"description":"","name":"3doptix_spherical_lens_maker_calculate_efl"},{"description":"","name":"3doptix_spherical_lens_maker_second_radius"},{"description":"","name":"3doptix_spherical_lens_maker_thickness_for_efl"},{"description":"","name":"3doptix_surface_get"},{"description":"","name":"3doptix_surface_scattering_update"}],"tools_count":70,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e247b6a2-e118-4ca4-a8c6-05415a3cca6c","uuid":"cee30023-d51a-5f56-ba4a-837b867235dc","verification_tier":"community","version":""},"query_key":"3doptix optical design and simulations","schema_version":1,"status":"match"}