{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Connects Claude to data discovery, security and governance work in BigID. Explore the data catalog, scan workflows, access controls and privacy assessments. Available actions can include remediation that changes access or removes sensitive data.","did":"228ea101-cf3a-43dc-bb30-ef70da804e28","documentation_url":"https://developer.bigid.com/","editorial_description":{"extended_description":"The connector uses generic object read/write and tool-discovery interfaces to reach capabilities in your BigID environment. The source describes labeling, risk assessment, violation detection and remediation; exact operations depend on the connected tools and environment.","schema_version":1,"summary":"Connects Claude to data discovery, security and governance work in BigID.\nExplore the data catalog, scan workflows, access controls and privacy assessments.\nAvailable actions can include remediation that changes access or removes sensitive data."},"homepage_url":"","icon":"","id":"228ea101-cf3a-43dc-bb30-ef70da804e28","installs":0,"last_scanned":"","license":"","long_description":"The connector uses generic object read/write and tool-discovery interfaces to reach capabilities in your BigID environment. The source describes labeling, risk assessment, violation detection and remediation; exact operations depend on the connected tools and environment.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official BigID MCP documentation includes a data_deletion write group that can delete queued objects, strip sensitive values and run deletion, explicitly warning that deletion is permanent.","reasoning":"Permanent deletion or cleaning of enterprise data is destructive.","risk_type":"data_deletion","severity":"high","title":"Current BigID MCP actions permanently delete or clean data","triggering_tools_or_skills":["write_objects","list_tools"]},{"evidence":"Official docs expose system_administration, data_access_intelligence, policy_management and data_source_connectivity write groups for users, roles, access, policies and connected sources.","reasoning":"Changing users, roles, access controls and security policies is broad administrative authority.","risk_type":"credential_admin","severity":"high","title":"Current actions include system, access and policy administration","triggering_tools_or_skills":["write_objects","list_tools"]},{"evidence":"The Directory lists five generic gateways, while current official docs enumerate 19 capability groups and three support tools, most marked WRITE.","reasoning":"Dynamic discovery and generic object writing prevent action-level review and reach High documented capabilities.","risk_type":"generic_gateway","severity":"high","title":"Five generic tools hide a much larger mutable action set","triggering_tools_or_skills":["get_objects","write_objects","list_servers","list_tools","get_tpa_ids"]},{"evidence":"Directory names do not match the official current capability-group inventory, which includes catalog, remediation, data_deletion, system_administration and other groups.","reasoning":"The catalog must represent the current server surface rather than five legacy gateways.","risk_type":"identity_discrepancy","severity":"low","title":"Directory inventory is materially stale relative to official MCP docs","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required to a BigID environment; the five Directory gateway tools do not expose action-level scopes. Current official docs describe broad read/write groups including system administration and permanent deletion.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/228ea101-cf3a-43dc-bb30-ef70da804e28.json","what_it_proves":"Candidate PR #125 record identity (name \"BigID\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/228ea101-cf3a-43dc-bb30-ef70da804e28: complete tool_names inventory (5 tools), remote streamable-http endpoint https://bigid-mcp.bigid.cloud, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:24:12Z","url_or_path":"https://developer.bigid.com/","what_it_proves":"BigID's official developer portal links to its current Cloud MCP documentation and describes programmatic scanning, catalog, security and privacy management."},{"accessed_at":"2026-10-10T21:24:12Z","url_or_path":"https://github.com/bigexchange/bigid-plugin-official","what_it_proves":"The official portal-linked BigID plugin documentation enumerates 19 MCP capability groups plus support tools, including permanent data deletion, source/scan/policy changes and system administration."}],"primary_reason":"BigID reaches permanent deletion and broad security/system administration through a dynamic action surface omitted by the Directory inventory.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:228ea101-cf3a-43dc-bb30-ef70da804e28","reviewed_at":"2026-10-10","reviewer_notes":"Refresh the inventory and expose action-level descriptions/scopes before publication. The official documentation is linked by developer.bigid.com; the generic Directory tools still require runtime tools/list capture to map the exact listed endpoint version.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"false"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"BigID","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=228ea101-cf3a-43dc-bb30-ef70da804e28&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://bigid.com/solutions/privacy-compliance/","provisional_risk":null,"publication_recommendation":"fix","publisher":"BigID","publisher_url":"https://bigid.com/","remote_url":"https://bigid-mcp.bigid.cloud","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Permanent deletion or cleaning of enterprise data is destructive.","evidence":"Current BigID MCP actions permanently delete or clean data: Official BigID MCP documentation includes a data_deletion write group that can delete queued objects, strip sensitive values and run deletion, explicitly warning that deletion is permanent.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Current BigID MCP actions permanently delete or clean data","triggering_tools":["write_objects","list_tools"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing users, roles, access controls and security policies is broad administrative authority.","evidence":"Current actions include system, access and policy administration: Official docs expose system_administration, data_access_intelligence, policy_management and data_source_connectivity write groups for users, roles, access, policies and connected sources.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Current actions include system, access and policy administration","triggering_tools":["write_objects","list_tools"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Dynamic discovery and generic object writing prevent action-level review and reach High documented capabilities.","evidence":"Five generic tools hide a much larger mutable action set: The Directory lists five generic gateways, while current official docs enumerate 19 capability groups and three support tools, most marked WRITE.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Five generic tools hide a much larger mutable action set","triggering_tools":["get_objects","write_objects","list_servers","list_tools","get_tpa_ids"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"mcp@bigid.com","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"get_objects","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Dynamic discovery and generic object writing prevent action-level review and reach High documented capabilities."}},{"description":"","name":"write_objects","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Dynamic discovery and generic object writing prevent action-level review and reach High documented capabilities."}},{"description":"","name":"list_servers","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Dynamic discovery and generic object writing prevent action-level review and reach High documented capabilities."}},{"description":"","name":"list_tools","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Dynamic discovery and generic object writing prevent action-level review and reach High documented capabilities."}},{"description":"","name":"get_tpa_ids","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Dynamic discovery and generic object writing prevent action-level review and reach High documented capabilities."}}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/228ea101-cf3a-43dc-bb30-ef70da804e28","uuid":"f1355fcb-b832-573d-83d2-8b60e2a67df0","verification_tier":"community","version":""},"query_key":"bigid bigid","schema_version":1,"status":"match"}