{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Search your private Archiveye knowledge collections from Claude. Find indexed documents with semantic or full-text search and retrieve their contents. Inspect tabular schemas and query structured datasets with read-only SQL.","did":"c26c0ab3-7efe-469c-b3f4-d0dacc91b999","documentation_url":"https://www.archiveye.ai/","editorial_description":{"extended_description":"Authenticated users can discover active collections, inspect document metadata and load full text when search previews are insufficient. Semantic queries use Archiveye's internally managed embedding service before retrieving matching segments from the user's collections.","schema_version":1,"summary":"Search your private Archiveye knowledge collections from Claude.\nFind indexed documents with semantic or full-text search and retrieve their contents.\nInspect tabular schemas and query structured datasets with read-only SQL."},"homepage_url":"","icon":"","id":"c26c0ab3-7efe-469c-b3f4-d0dacc91b999","installs":0,"last_scanned":"","license":"","long_description":"Authenticated users can discover active collections, inspect document metadata and load full text when search previews are insufficient. Semantic queries use Archiveye's internally managed embedding service before retrieving matching segments from the user's collections.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing explicitly says structured datasets can be queried with read-only SQL.","reasoning":"Arbitrary SQL-like execution over enterprise data can expose broad data and cause expensive queries even without writes.","risk_type":"query_execution","severity":"high","title":"Executes user-specified tabular SQL","triggering_tools_or_skills":["execute_tabular_query"]},{"evidence":"The connector retrieves full text and metadata from authenticated collections.","reasoning":"It exposes private document content to the model.","risk_type":"private_data_read","severity":"low","title":"Reads private indexed documents","triggering_tools_or_skills":["get_document","get_document_content","search_fulltext","search_semantic"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication limits queries/documents to the user active collections; exact SQL grammar and row/statement limits are unspecified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c26c0ab3-7efe-469c-b3f4-d0dacc91b999.json","what_it_proves":"Candidate PR #125 record identity (name \"Archiveye\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c26c0ab3-7efe-469c-b3f4-d0dacc91b999: complete tool_names inventory (7 tools), remote streamable-http endpoint https://mcp.archiveye.ai/user/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Archiveye permits authenticated read-only SQL over private tabular collections.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c26c0ab3-7efe-469c-b3f4-d0dacc91b999","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 7 names and Directory description. Even read-only SQL is an arbitrary query surface under the rubric; runtime verification should confirm SELECT-only enforcement and resource limits.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Archiveye","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c26c0ab3-7efe-469c-b3f4-d0dacc91b999&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://data.archiveye.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Pura digital S.r.l.","publisher_url":"https://www.puradigital.it/","remote_url":"https://mcp.archiveye.ai/user/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL-like execution over enterprise data can expose broad data and cause expensive queries even without writes.","evidence":"Executes user-specified tabular SQL: The listing explicitly says structured datasets can be queried with read-only SQL.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes user-specified tabular SQL","triggering_tools":["execute_tabular_query"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: It exposes private document content to the model.","evidence":"Reads private indexed documents: The connector retrieves full text and metadata from authenticated collections.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private indexed documents","triggering_tools":["get_document","get_document_content","search_fulltext","search_semantic"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@puradigital.it","tags":["network_access","oauth_required","reads_private_data","runs_code","web_connector"],"tools":[{"description":"","name":"execute_tabular_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL-like execution over enterprise data can expose broad data and cause expensive queries even without writes."}},{"description":"","name":"get_document"},{"description":"","name":"get_document_content"},{"description":"","name":"get_tabular_schema"},{"description":"","name":"list_collections"},{"description":"","name":"search_fulltext"},{"description":"","name":"search_semantic"}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c26c0ab3-7efe-469c-b3f4-d0dacc91b999","uuid":"4a6e211a-7ad2-50f5-b0d7-595a9d74d13b","verification_tier":"community","version":""},"query_key":"archiveye","schema_version":1,"status":"match"}