{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Birta publishes assistant-created pages, reports, and files as shareable websites. Edit content, publish new versions at the same URL, and review comments on the page. Version history and rollback support ongoing revisions after sharing.","did":"5860e2a7-e7a5-48d8-afb2-edd7dd3b3df9","documentation_url":"https://birta.dev/docs","editorial_description":{"extended_description":"Tools manage projects, files, forms, submissions, and site statistics. The source describes custom-domain support and browser access for recipients without a Claude account. Leads and requests can be reviewed from the connected project.","schema_version":1,"summary":"Birta publishes assistant-created pages, reports, and files as shareable websites.\nEdit content, publish new versions at the same URL, and review comments on the page.\nVersion history and rollback support ongoing revisions after sharing."},"homepage_url":"","icon":"https://birta.dev/icon-512.png","id":"5860e2a7-e7a5-48d8-afb2-edd7dd3b3df9","installs":0,"last_scanned":"","license":"","long_description":"Tools manage projects, files, forms, submissions, and site statistics. The source describes custom-domain support and browser access for recipients without a Claude account. Leads and requests can be reviewed from the connected project.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Description says artifacts become real websites on public URLs.","reasoning":"Deployment and rollback are High.","risk_type":"deployment_infrastructure","severity":"high","title":"Publishes website versions","triggering_tools_or_skills":["publish_version","rollback"]},{"evidence":"Tools explicitly delete site resources.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Deletes files, forms, and versions","triggering_tools_or_skills":["delete_file","delete_form","delete_version"]},{"evidence":"Tools persist file content.","reasoning":"Remote file writes are Medium.","risk_type":"file_write","severity":"medium","title":"Writes and edits site files","triggering_tools_or_skills":["write_file","edit_file","replace_lines"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability may drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5860e2a7-e7a5-48d8-afb2-edd7dd3b3df9.json","what_it_proves":"Candidate PR #125 record identity (name \"Birta\", publisher, type web_connector) and 24 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5860e2a7-e7a5-48d8-afb2-edd7dd3b3df9: complete tool_names inventory (24 tools), remote streamable-http endpoint https://birta.dev/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Birta publishes websites and deletes site files/forms/versions.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5860e2a7-e7a5-48d8-afb2-edd7dd3b3df9","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":24,"tools_or_skills_total":24},"name":"Birta","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5860e2a7-e7a5-48d8-afb2-edd7dd3b3df9&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://birta.dev/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"SP Krou Tech","publisher_url":"https://birta.dev/","remote_url":"https://birta.dev/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Deployment and rollback are High.","evidence":"Publishes website versions: Description says artifacts become real websites on public URLs.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Publishes website versions","triggering_tools":["publish_version","rollback"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Deletes files, forms, and versions: Tools explicitly delete site resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes files, forms, and versions","triggering_tools":["delete_file","delete_form","delete_version"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: Remote file writes are Medium.","evidence":"Writes and edits site files: Tools persist file content.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Writes and edits site files","triggering_tools":["write_file","edit_file","replace_lines"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"max@birta.dev","tags":["code_deployment","deletes_data","filesystem_access","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"create_form"},{"description":"","name":"create_project"},{"description":"","name":"create_version"},{"description":"","name":"delete_file","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"delete_form","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"delete_version","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"edit_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Remote file writes are Medium."}},{"description":"","name":"get_form"},{"description":"","name":"get_lead"},{"description":"","name":"list_files"},{"description":"","name":"list_forms"},{"description":"","name":"list_leads"},{"description":"","name":"list_projects"},{"description":"","name":"list_version_comments"},{"description":"","name":"list_versions"},{"description":"","name":"move_file"},{"description":"","name":"publish_version","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Deployment and rollback are High."}},{"description":"","name":"read_file"},{"description":"","name":"rename_project"},{"description":"","name":"replace_lines","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Remote file writes are Medium."}},{"description":"","name":"rollback","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Deployment and rollback are High."}},{"description":"","name":"stats"},{"description":"","name":"update_form"},{"description":"","name":"write_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: Remote file writes are Medium."}}],"tools_count":24,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/5860e2a7-e7a5-48d8-afb2-edd7dd3b3df9","uuid":"2477a6b1-712a-59ad-97a3-77e25cc99b5d","verification_tier":"community","version":""},"query_key":"birta","schema_version":1,"status":"match"}