{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-25","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage your Autorender image and video library from Claude. Upload media, browse files and folders, and edit names or metadata. Use your connected account's assets and CDN URLs in app-building workflows.","did":"c314a664-7918-4d44-a525-e071b5c80126","documentation_url":"https://www.autorender.io/docs","editorial_description":{"extended_description":"Uploads include multipart handling for large files. Folder and file management includes creation, renaming and deletion, while calls use your own Autorender API key through OAuth. Autorender provides the underlying media storage, optimization and delivery infrastructure.","schema_version":1,"summary":"Manage your Autorender image and video library from Claude.\nUpload media, browse files and folders, and edit names or metadata.\nUse your connected account's assets and CDN URLs in app-building workflows."},"homepage_url":"","icon":"https://www.autorender.io/logo.png","id":"c314a664-7918-4d44-a525-e071b5c80126","installs":0,"last_scanned":"","license":"","long_description":"Uploads include multipart handling for large files. Folder and file management includes creation, renaming and deletion, while calls use your own Autorender API key through OAuth. Autorender provides the underlying media storage, optimization and delivery infrastructure.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The actions explicitly delete storage resources.","reasoning":"This destroys meaningful user assets.","risk_type":"data_deletion","severity":"high","title":"Deletes stored files and folders","triggering_tools_or_skills":["delete_file","delete_folder"]},{"evidence":"The connector writes hosted files.","reasoning":"It modifies asset storage.","risk_type":"file_write","severity":"medium","title":"Uploads and updates files","triggering_tools_or_skills":["upload_file","multipart_upload_part","update_file"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication covers hosted file storage; folder and upload scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c314a664-7918-4d44-a525-e071b5c80126.json","what_it_proves":"Candidate PR #125 record identity (name \"Autorender\", publisher, type web_connector) and 13 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c314a664-7918-4d44-a525-e071b5c80126: complete tool_names inventory (13 tools), remote streamable-http endpoint https://api-mcp.autorender.io/sse, auth_posture auth_required, directory tier community"}],"primary_reason":"Autorender deletes files/folders and uploads/updates rendered assets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c314a664-7918-4d44-a525-e071b5c80126","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 13 names; multipart uploads and deletion require runtime path/tenant checks.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":13,"tools_or_skills_total":13},"name":"Autorender","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c314a664-7918-4d44-a525-e071b5c80126&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.autorender.io/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Autorender","publisher_url":"https://autorender.io/","remote_url":"https://api-mcp.autorender.io/sse","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: This destroys meaningful user assets.","evidence":"Deletes stored files and folders: The actions explicitly delete storage resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes stored files and folders","triggering_tools":["delete_file","delete_folder"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: It modifies asset storage.","evidence":"Uploads and updates files: The connector writes hosted files.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Uploads and updates files","triggering_tools":["upload_file","multipart_upload_part","update_file"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"engineering@autorender.io","tags":["deletes_data","filesystem_access","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"create_folder"},{"description":"","name":"delete_file","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This destroys meaningful user assets."}},{"description":"","name":"delete_folder","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: This destroys meaningful user assets."}},{"description":"","name":"get_file"},{"description":"","name":"list_files"},{"description":"","name":"list_folders"},{"description":"","name":"multipart_complete"},{"description":"","name":"multipart_start"},{"description":"","name":"multipart_upload_part","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: It modifies asset storage."}},{"description":"","name":"rename_file"},{"description":"","name":"rename_folder"},{"description":"","name":"update_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: It modifies asset storage."}},{"description":"","name":"upload_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: It modifies asset storage."}}],"tools_count":13,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c314a664-7918-4d44-a525-e071b5c80126","uuid":"30215f2a-b00d-595e-a184-ebc9611b7a31","verification_tier":"community","version":""},"query_key":"autorender autorender","schema_version":1,"status":"match"}