{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-08","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"3Min API creates hosted REST endpoints and dispatches jobs to your own workers. Define validation, deploy endpoints, test record operations, and inspect logs or usage. Actions are scoped to your account; worker jobs execute on your server.","did":"f46c3f39-4fbf-46f6-a81c-90a44b0f86e2","documentation_url":"https://3minapi.com/docs/mcp","editorial_description":{"extended_description":"Use sandbox or production environments, webhooks or polling, and scoped partner access. The dashboard handles endpoint deletion, worker registration, credentials, billing, and plan changes; those actions are not performed through the connector.","schema_version":1,"summary":"3Min API creates hosted REST endpoints and dispatches jobs to your own workers.\nDefine validation, deploy endpoints, test record operations, and inspect logs or usage.\nActions are scoped to your account; worker jobs execute on your server."},"homepage_url":"","icon":"","id":"f46c3f39-4fbf-46f6-a81c-90a44b0f86e2","installs":0,"last_scanned":"","license":"","long_description":"Use sandbox or production environments, webhooks or polling, and scoped partner access. The dashboard handles endpoint deletion, worker registration, credentials, billing, and plan changes; those actions are not performed through the connector.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says a plain-language description creates a live REST endpoint with CRUD, sandbox/production environments, and optional webhooks.","reasoning":"This provisions public backend infrastructure that accepts and stores production data.","risk_type":"deployment_infrastructure","severity":"high","title":"REST API endpoints can be generated and made live","triggering_tools_or_skills":["task_create","endpoints","wordpress_plugin"]},{"evidence":"The inventory exposes a generic api_call and task system for generated endpoints without enumerating the reachable CRUD paths or side effects.","reasoning":"Executing arbitrary generated endpoint operations is a generic application action surface and needs runtime schema and tenant isolation testing.","risk_type":"code_execution","severity":"high","title":"Generic API calls and build tasks execute server-defined operations","triggering_tools_or_skills":["api_call","task_create","task_cancel"]},{"evidence":"The connector exposes collaborators/workers and the listing says records reach the user's system by webhook.","reasoning":"Endpoint access and delivery configuration are privileged controls, though the exact write tools are not separately named.","risk_type":"credential_admin","severity":"high","title":"Collaborators and webhook delivery are part of endpoint operation","triggering_tools_or_skills":["collaborators","worker_list","endpoints"]},{"evidence":"Every generated endpoint has full CRUD records, searchable call logs, and usage statistics.","reasoning":"Endpoints may collect inquiries, orders, signups, and arbitrary payloads containing personal or business data.","risk_type":"private_data_read","severity":"medium","title":"Endpoint records and call logs are readable","triggering_tools_or_skills":["logs","stats","api_call"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to 3Min API endpoints, tasks, logs, collaborators, and subscription data; exact roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f46c3f39-4fbf-46f6-a81c-90a44b0f86e2.json","what_it_proves":"Candidate PR #125 record identity (name \"3Min API\", publisher, type web_connector) and 13 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f46c3f39-4fbf-46f6-a81c-90a44b0f86e2: complete tool_names inventory (13 tools), remote streamable-http endpoint https://3minapi.com/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"3Min API deploys live CRUD endpoints and exposes a generic API-call execution surface over collected data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f46c3f39-4fbf-46f6-a81c-90a44b0f86e2","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 13 visible tools; exact endpoint schemas, webhook destinations, collaborator writes, and delete semantics require runtime verification.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":13,"tools_or_skills_total":13},"name":"3Min API","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f46c3f39-4fbf-46f6-a81c-90a44b0f86e2&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://3minapi.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Maverick Works","publisher_url":"https://3minapi.com/","remote_url":"https://3minapi.com/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: This provisions public backend infrastructure that accepts and stores production data.","evidence":"REST API endpoints can be generated and made live: The listing says a plain-language description creates a live REST endpoint with CRUD, sandbox/production environments, and optional webhooks.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"REST API endpoints can be generated and made live","triggering_tools":["task_create","endpoints","wordpress_plugin"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing arbitrary generated endpoint operations is a generic application action surface and needs runtime schema and tenant isolation testing.","evidence":"Generic API calls and build tasks execute server-defined operations: The inventory exposes a generic api_call and task system for generated endpoints without enumerating the reachable CRUD paths or side effects.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Generic API calls and build tasks execute server-defined operations","triggering_tools":["api_call","task_create","task_cancel"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Endpoint access and delivery configuration are privileged controls, though the exact write tools are not separately named.","evidence":"Collaborators and webhook delivery are part of endpoint operation: The connector exposes collaborators/workers and the listing says records reach the user's system by webhook.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Collaborators and webhook delivery are part of endpoint operation","triggering_tools":["collaborators","worker_list","endpoints"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Endpoints may collect inquiries, orders, signups, and arbitrary payloads containing personal or business data.","evidence":"Endpoint records and call logs are readable: Every generated endpoint has full CRUD records, searchable call logs, and usage statistics.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Endpoint records and call logs are readable","triggering_tools":["logs","stats","api_call"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@3minapi.com","tags":["code_deployment","modifies_data","network_access","oauth_required","reads_private_data","runs_code","web_connector"],"tools":[{"description":"","name":"api_call","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing arbitrary generated endpoint operations is a generic application action surface and needs runtime schema and tenant isolation testing."}},{"description":"","name":"collaborators","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Endpoint access and delivery configuration are privileged controls, though the exact write tools are not separately named."}},{"description":"","name":"endpoints","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Endpoint access and delivery configuration are privileged controls, though the exact write tools are not separately named."}},{"description":"","name":"help"},{"description":"","name":"logs","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Endpoints may collect inquiries, orders, signups, and arbitrary payloads containing personal or business data."}},{"description":"","name":"stats","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Endpoints may collect inquiries, orders, signups, and arbitrary payloads containing personal or business data."}},{"description":"","name":"subscription"},{"description":"","name":"task_cancel","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing arbitrary generated endpoint operations is a generic application action surface and needs runtime schema and tenant isolation testing."}},{"description":"","name":"task_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing arbitrary generated endpoint operations is a generic application action surface and needs runtime schema and tenant isolation testing."}},{"description":"","name":"task_get"},{"description":"","name":"task_list"},{"description":"","name":"wordpress_plugin","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: This provisions public backend infrastructure that accepts and stores production data."}},{"description":"","name":"worker_list","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Endpoint access and delivery configuration are privileged controls, though the exact write tools are not separately named."}}],"tools_count":13,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f46c3f39-4fbf-46f6-a81c-90a44b0f86e2","uuid":"bfb4999a-e1b1-5fe8-861b-c37e4b95c5ea","verification_tier":"community","version":""},"query_key":"3min api","schema_version":1,"status":"match"}