{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-05","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Artie sets up and operates database replication pipelines. Choose source tables and destinations, manage backfills, and handle schema changes. Create, pause, update, or delete pipelines through authenticated access.","did":"efe2d43d-afe2-4f0a-a2ed-3f7ed30c79f1","documentation_url":"https://www.artie.com/docs/api/mcp","editorial_description":{"extended_description":"Sources include PostgreSQL, MySQL, MongoDB, SQL Server, DynamoDB, and Oracle. Destination options include Snowflake, BigQuery, Databricks, Redshift, and ClickHouse. Tools also manage source readers, private links, SSH tunnels, and replication credentials.","schema_version":1,"summary":"Artie sets up and operates database replication pipelines.\nChoose source tables and destinations, manage backfills, and handle schema changes.\nCreate, pause, update, or delete pipelines through authenticated access."},"homepage_url":"","icon":"https://app.artie.com/favicon-512x512.png","id":"efe2d43d-afe2-4f0a-a2ed-3f7ed30c79f1","installs":0,"last_scanned":"","license":"","long_description":"Sources include PostgreSQL, MySQL, MongoDB, SQL Server, DynamoDB, and Oracle. Destination options include Snowflake, BigQuery, Databricks, Redshift, and ClickHouse. Tools also manage source readers, private links, SSH tunnels, and replication credentials.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says Artie creates and runs continuous CDC pipelines and backfills into warehouses; the tools create/start pipelines and deploy source readers.","reasoning":"These actions operate production data infrastructure and can cause broad data movement or load.","risk_type":"deployment_infrastructure","severity":"high","title":"Replication pipelines and source readers can be deployed","triggering_tools_or_skills":["pipeline_create","pipeline_start","source_reader_deploy","pipeline_backfill_tables","connector_start_dynamo_db_export"]},{"evidence":"The inventory updates/deletes ingestion keys and encryption keys and creates SSH tunnels and private-link connections.","reasoning":"These are privileged secrets and network-access controls whose misuse can expose databases.","risk_type":"credential_admin","severity":"high","title":"Keys, encryption, tunnels, and private links can be managed","triggering_tools_or_skills":["ingestion_api_key_update","ingestion_api_key_delete","encryption_key_update","ssh_tunnel_create","private_link_connection_create"]},{"evidence":"Explicit deletion tools cover replication connectors, pipelines, source readers, SSH tunnels, private links, salts, and encryption/API keys.","reasoning":"Deletion can interrupt replication, remove access paths, or make data unreadable.","risk_type":"data_deletion","severity":"high","title":"Connectors, pipelines, readers, keys, and network links can be deleted","triggering_tools_or_skills":["connector_delete","pipeline_delete","source_reader_delete","ssh_tunnel_delete","private_link_connection_delete"]},{"evidence":"The tools inspect connected production databases, schemas, tables, and catalog entries.","reasoning":"Schema and table metadata can reveal sensitive data architecture and business entities.","risk_type":"private_data_read","severity":"medium","title":"Database schemas and catalog data are exposed","triggering_tools_or_skills":["connector_fetch_databases","connector_fetch_tables","connector_fetch_table_detail","data_catalog_search"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants infrastructure and credential control over Artie data replication; exact workspace roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/efe2d43d-afe2-4f0a-a2ed-3f7ed30c79f1.json","what_it_proves":"Candidate PR #125 record identity (name \"Artie\", publisher, type web_connector) and 48 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/efe2d43d-afe2-4f0a-a2ed-3f7ed30c79f1: complete tool_names inventory (48 tools), remote streamable-http endpoint https://mcp.artie.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Artie can deploy production replication infrastructure and administer or delete credentials and network connections.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:efe2d43d-afe2-4f0a-a2ed-3f7ed30c79f1","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 48 names; runtime verification should confirm secret redaction and tenant/role restrictions.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":48,"tools_or_skills_total":48},"name":"Artie","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=efe2d43d-afe2-4f0a-a2ed-3f7ed30c79f1&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://artie.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Artie","publisher_url":"https://www.artie.com/","remote_url":"https://mcp.artie.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions operate production data infrastructure and can cause broad data movement or load.","evidence":"Replication pipelines and source readers can be deployed: The listing says Artie creates and runs continuous CDC pipelines and backfills into warehouses; the tools create/start pipelines and deploy source readers.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Replication pipelines and source readers can be deployed","triggering_tools":["pipeline_create","pipeline_start","source_reader_deploy","pipeline_backfill_tables","connector_start_dynamo_db_export"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged secrets and network-access controls whose misuse can expose databases.","evidence":"Keys, encryption, tunnels, and private links can be managed: The inventory updates/deletes ingestion keys and encryption keys and creates SSH tunnels and private-link connections.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Keys, encryption, tunnels, and private links can be managed","triggering_tools":["ingestion_api_key_update","ingestion_api_key_delete","encryption_key_update","ssh_tunnel_create","private_link_connection_create"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion can interrupt replication, remove access paths, or make data unreadable.","evidence":"Connectors, pipelines, readers, keys, and network links can be deleted: Explicit deletion tools cover replication connectors, pipelines, source readers, SSH tunnels, private links, salts, and encryption/API keys.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Connectors, pipelines, readers, keys, and network links can be deleted","triggering_tools":["connector_delete","pipeline_delete","source_reader_delete","ssh_tunnel_delete","private_link_connection_delete"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Schema and table metadata can reveal sensitive data architecture and business entities.","evidence":"Database schemas and catalog data are exposed: The tools inspect connected production databases, schemas, tables, and catalog entries.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Database schemas and catalog data are exposed","triggering_tools":["connector_fetch_databases","connector_fetch_tables","connector_fetch_table_detail","data_catalog_search"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hi@artie.com","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"column_hashing_salt_delete"},{"description":"","name":"column_hashing_salt_list"},{"description":"","name":"column_hashing_salt_preview"},{"description":"","name":"column_hashing_salt_update"},{"description":"","name":"company_trigger_automatic_schema_changes"},{"description":"","name":"connector_create"},{"description":"","name":"connector_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can interrupt replication, remove access paths, or make data unreadable."}},{"description":"","name":"connector_detail"},{"description":"","name":"connector_drop_postgres_replication_slot"},{"description":"","name":"connector_fetch_databases","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Schema and table metadata can reveal sensitive data architecture and business entities."}},{"description":"","name":"connector_fetch_schemas"},{"description":"","name":"connector_fetch_table_detail","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Schema and table metadata can reveal sensitive data architecture and business entities."}},{"description":"","name":"connector_fetch_tables","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Schema and table metadata can reveal sensitive data architecture and business entities."}},{"description":"","name":"connector_generate_shadow_script"},{"description":"","name":"connector_list"},{"description":"","name":"connector_start_dynamo_db_export","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions operate production data infrastructure and can cause broad data movement or load."}},{"description":"","name":"data_catalog_search","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: Schema and table metadata can reveal sensitive data architecture and business entities."}},{"description":"","name":"encryption_key_delete"},{"description":"","name":"encryption_key_list"},{"description":"","name":"encryption_key_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged secrets and network-access controls whose misuse can expose databases."}},{"description":"","name":"ingestion_api_key_delete","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged secrets and network-access controls whose misuse can expose databases."}},{"description":"","name":"ingestion_api_key_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged secrets and network-access controls whose misuse can expose databases."}},{"description":"","name":"pipeline_backfill_tables","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions operate production data infrastructure and can cause broad data movement or load."}},{"description":"","name":"pipeline_cancel_backfill_tables"},{"description":"","name":"pipeline_create","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions operate production data infrastructure and can cause broad data movement or load."}},{"description":"","name":"pipeline_create_from_source"},{"description":"","name":"pipeline_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can interrupt replication, remove access paths, or make data unreadable."}},{"description":"","name":"pipeline_detail"},{"description":"","name":"pipeline_detect_schema_changes"},{"description":"","name":"pipeline_list"},{"description":"","name":"pipeline_start","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions operate production data infrastructure and can cause broad data movement or load."}},{"description":"","name":"pipeline_trigger_automatic_schema_changes"},{"description":"","name":"pipeline_update"},{"description":"","name":"pipeline_update_status"},{"description":"","name":"pipeline_usage"},{"description":"","name":"private_link_connection_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged secrets and network-access controls whose misuse can expose databases."}},{"description":"","name":"private_link_connection_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can interrupt replication, remove access paths, or make data unreadable."}},{"description":"","name":"private_link_connection_detail"},{"description":"","name":"private_link_connection_update"},{"description":"","name":"source_reader_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can interrupt replication, remove access paths, or make data unreadable."}},{"description":"","name":"source_reader_deploy","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions operate production data infrastructure and can cause broad data movement or load."}},{"description":"","name":"source_reader_detail"},{"description":"","name":"source_reader_update"},{"description":"","name":"ssh_tunnel_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are privileged secrets and network-access controls whose misuse can expose databases."}},{"description":"","name":"ssh_tunnel_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can interrupt replication, remove access paths, or make data unreadable."}},{"description":"","name":"ssh_tunnel_detail"},{"description":"","name":"ssh_tunnel_update"},{"description":"","name":"unsaved_connector_ping"}],"tools_count":48,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/efe2d43d-afe2-4f0a-a2ed-3f7ed30c79f1","uuid":"56a55943-a706-53ce-8ac5-d321655ccd67","verification_tier":"community","version":""},"query_key":"artie artie","schema_version":1,"status":"match"}