{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"BEEM connects Claude to data workspaces, datasets, and reporting. Explore schemas or metrics and create dashboards, visualizations, datasets, or tests. Authenticated tools can deploy queries, refresh data, start ingestion, and change schedules.","did":"805c274b-23de-44c6-9d73-4a8b476bc28d","documentation_url":"https://docs.beemdata.com/docs/setup-guide","editorial_description":{"extended_description":"Inspect pipeline health, sources, flows, organization configuration, usage, and event history. Update or delete report components and manage saved SQL.","schema_version":1,"summary":"BEEM connects Claude to data workspaces, datasets, and reporting.\nExplore schemas or metrics and create dashboards, visualizations, datasets, or tests.\nAuthenticated tools can deploy queries, refresh data, start ingestion, and change schedules."},"homepage_url":"","icon":"","id":"805c274b-23de-44c6-9d73-4a8b476bc28d","installs":0,"last_scanned":"","license":"","long_description":"Inspect pipeline health, sources, flows, organization configuration, usage, and event history. Update or delete report components and manage saved SQL.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The explicit tool names accept and deploy SQL queries for datasets/tests; no read-only SQL enforcement is documented.","reasoning":"Arbitrary SQL can access or alter data and deployed dataset logic.","risk_type":"query_execution","severity":"high","title":"Previews, saves and deploys caller-authored SQL","triggering_tools_or_skills":["beem_preview_sql_query","beem_save_dataset_sql_query","beem_deploy_dataset_sql_query","beem_save_dataset_test_sql_query","beem_deploy_dataset_test_sql_query"]},{"evidence":"These actions explicitly deploy workspace data assets and tests.","reasoning":"They materially change production analytics/data-pipeline behavior.","risk_type":"deployment_infrastructure","severity":"high","title":"Deploys datasets, tests and SQL-backed data logic","triggering_tools_or_skills":["beem_create_and_deploy_dataset","beem_create_and_deploy_dataset_test","beem_deploy_and_wait","beem_deploy_dataset_sql_query"]},{"evidence":"The explicit tools remove durable analytics resources.","reasoning":"They can destroy shared reports/tests/visualizations.","risk_type":"data_deletion","severity":"high","title":"Deletes dashboard widgets, dataset tests and visualizations","triggering_tools_or_skills":["beem_delete_dashboard_widget","beem_delete_dataset_test","beem_delete_visualization"]},{"evidence":"These tools persist and change shared analytics assets and schedules.","reasoning":"They materially alter workspace state.","risk_type":"data_modification","severity":"medium","title":"Creates and updates datasets, dashboards, folders and visualizations","triggering_tools_or_skills":["beem_create_dataset","beem_create_dashboard","beem_create_data_object","beem_update_dataset","beem_update_dashboard","beem_edit_dataset_schedule"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to BEEM is required; workspace/source/dataset permissions and SQL execution roles are not documented in the setup page.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/805c274b-23de-44c6-9d73-4a8b476bc28d.json","what_it_proves":"Candidate PR #125 record identity (name \"BEEM\", publisher, type interactive_connector) and 69 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/805c274b-23de-44c6-9d73-4a8b476bc28d: complete tool_names inventory (69 tools), remote streamable-http endpoint https://mcp.beemdata.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"BEEM deploys SQL-backed data assets, runs caller-authored SQL and deletes analytics resources.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:805c274b-23de-44c6-9d73-4a8b476bc28d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 69 tools. The official setup-guide lookup did not expose per-tool schemas, SQL sandboxing or roles; publication should document query restrictions and deployment scope rather than imply analysis-only access.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":69,"tools_or_skills_total":69},"name":"BEEM","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=805c274b-23de-44c6-9d73-4a8b476bc28d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.beemdata.com/legals/app-privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"BEEM","publisher_url":"https://www.beemdata.com/","remote_url":"https://mcp.beemdata.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL can access or alter data and deployed dataset logic.","evidence":"Previews, saves and deploys caller-authored SQL: The explicit tool names accept and deploy SQL queries for datasets/tests; no read-only SQL enforcement is documented.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Previews, saves and deploys caller-authored SQL","triggering_tools":["beem_preview_sql_query","beem_save_dataset_sql_query","beem_deploy_dataset_sql_query","beem_save_dataset_test_sql_query","beem_deploy_dataset_test_sql_query"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They materially change production analytics/data-pipeline behavior.","evidence":"Deploys datasets, tests and SQL-backed data logic: These actions explicitly deploy workspace data assets and tests.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Deploys datasets, tests and SQL-backed data logic","triggering_tools":["beem_create_and_deploy_dataset","beem_create_and_deploy_dataset_test","beem_deploy_and_wait","beem_deploy_dataset_sql_query"]},{"description":"This connector can permanently remove data or resources. Review findings: They can destroy shared reports/tests/visualizations.","evidence":"Deletes dashboard widgets, dataset tests and visualizations: The explicit tools remove durable analytics resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes dashboard widgets, dataset tests and visualizations","triggering_tools":["beem_delete_dashboard_widget","beem_delete_dataset_test","beem_delete_visualization"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter workspace state.","evidence":"Creates and updates datasets, dashboards, folders and visualizations: These tools persist and change shared analytics assets and schedules.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates datasets, dashboards, folders and visualizations","triggering_tools":["beem_create_dataset","beem_create_dashboard","beem_create_data_object","beem_update_dataset","beem_update_dashboard","beem_edit_dataset_schedule"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@beemdata.com","tags":["accesses_calendar","code_deployment","deletes_data","interactive_connector","modifies_data","network_access","oauth_required","runs_code"],"tools":[{"description":"","name":"beem_await_operation"},{"description":"","name":"beem_build_dashboard"},{"description":"","name":"beem_create_and_deploy_dataset","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They materially change production analytics/data-pipeline behavior."}},{"description":"","name":"beem_create_and_deploy_dataset_test","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They materially change production analytics/data-pipeline behavior."}},{"description":"","name":"beem_create_dashboard","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter workspace state."}},{"description":"","name":"beem_create_dashboard_widget"},{"description":"","name":"beem_create_data_object","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter workspace state."}},{"description":"","name":"beem_create_dataset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter workspace state."}},{"description":"","name":"beem_create_dataset_test"},{"description":"","name":"beem_create_folder"},{"description":"","name":"beem_create_visualization"},{"description":"","name":"beem_delete_dashboard_widget","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy shared reports/tests/visualizations."}},{"description":"","name":"beem_delete_dataset_test","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy shared reports/tests/visualizations."}},{"description":"","name":"beem_delete_visualization","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy shared reports/tests/visualizations."}},{"description":"","name":"beem_deploy_and_wait","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They materially change production analytics/data-pipeline behavior."}},{"description":"","name":"beem_deploy_dataset_sql_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They materially change production analytics/data-pipeline behavior."}},{"description":"","name":"beem_deploy_dataset_test_sql_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL can access or alter data and deployed dataset logic."}},{"description":"","name":"beem_edit_dataset_schedule","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter workspace state."}},{"description":"","name":"beem_explore_schema"},{"description":"","name":"beem_get_current_user"},{"description":"","name":"beem_get_dashboard"},{"description":"","name":"beem_get_dashboard_widget"},{"description":"","name":"beem_get_data_object"},{"description":"","name":"beem_get_dataset"},{"description":"","name":"beem_get_dataset_content"},{"description":"","name":"beem_get_dataset_details"},{"description":"","name":"beem_get_dataset_sql_queries"},{"description":"","name":"beem_get_dataset_sql_query"},{"description":"","name":"beem_get_dataset_test"},{"description":"","name":"beem_get_dataset_test_sql_queries"},{"description":"","name":"beem_get_dpu_usage"},{"description":"","name":"beem_get_flow"},{"description":"","name":"beem_get_folder"},{"description":"","name":"beem_get_organization"},{"description":"","name":"beem_get_organization_source_config"},{"description":"","name":"beem_get_organization_terraform_config"},{"description":"","name":"beem_get_pipeline_health"},{"description":"","name":"beem_get_source"},{"description":"","name":"beem_get_visualization"},{"description":"","name":"beem_get_workspace"},{"description":"","name":"beem_get_workspace_overview"},{"description":"","name":"beem_list_dashboard_widgets"},{"description":"","name":"beem_list_dashboards"},{"description":"","name":"beem_list_data_objects"},{"description":"","name":"beem_list_dataset_tests"},{"description":"","name":"beem_list_datasets"},{"description":"","name":"beem_list_events_by_object"},{"description":"","name":"beem_list_events_by_user"},{"description":"","name":"beem_list_events_by_workspace"},{"description":"","name":"beem_list_flows"},{"description":"","name":"beem_list_folders"},{"description":"","name":"beem_list_sources"},{"description":"","name":"beem_list_user_organizations"},{"description":"","name":"beem_list_visualizations_by_dataset"},{"description":"","name":"beem_list_visualizations_by_workspace"},{"description":"","name":"beem_list_workspaces"},{"description":"","name":"beem_preview_sql_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL can access or alter data and deployed dataset logic."}},{"description":"","name":"beem_refresh_dataset"},{"description":"","name":"beem_rename_dataset"},{"description":"","name":"beem_save_dataset_sql_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL can access or alter data and deployed dataset logic."}},{"description":"","name":"beem_save_dataset_test_sql_query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL can access or alter data and deployed dataset logic."}},{"description":"","name":"beem_search"},{"description":"","name":"beem_start_ingestion"},{"description":"","name":"beem_update_dashboard","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter workspace state."}},{"description":"","name":"beem_update_dashboard_widget"},{"description":"","name":"beem_update_dataset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter workspace state."}},{"description":"","name":"beem_update_dataset_test"},{"description":"","name":"beem_update_folder"},{"description":"","name":"beem_update_visualization"}],"tools_count":69,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/805c274b-23de-44c6-9d73-4a8b476bc28d","uuid":"d1f53a06-ee77-593e-8d43-e2ca3faea392","verification_tier":"community","version":""},"query_key":"beem","schema_version":1,"status":"match"}