{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"BrightSite builds and maintains websites, blogs, and storefront content. Edit pages, media, SEO, forms, products, components, and site configuration. Content edits are staged until publication, with account roles and version history preserved.","did":"8d6fc85b-2bb6-485d-aabe-0e98cfef50a2","documentation_url":"https://onbrightsite.com/docs","editorial_description":{"extended_description":"Agencies select an account for each request. Tools also manage domains, DNS, team roles, redirects, analytics, and staging sites; versions can be restored. Connector access is included across BrightSite plans.","schema_version":1,"summary":"BrightSite builds and maintains websites, blogs, and storefront content.\nEdit pages, media, SEO, forms, products, components, and site configuration.\nContent edits are staged until publication, with account roles and version history preserved."},"homepage_url":"","icon":"","id":"8d6fc85b-2bb6-485d-aabe-0e98cfef50a2","installs":0,"last_scanned":"","license":"","long_description":"Agencies select an account for each request. Tools also manage domains, DNS, team roles, redirects, analytics, and staging sites; versions can be restored. Connector access is included across BrightSite plans.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory includes extensive explicit deletion across website and account resources.","reasoning":"These actions can destroy production content, configuration and access structures.","risk_type":"data_deletion","severity":"high","title":"Deletes site content, files, DNS, forms, roles and staging sites","triggering_tools_or_skills":["delete_page","delete_post","delete_file","delete_dns_record","delete_form","delete_org_role","discard_staging_site"]},{"evidence":"Publish tools make staged organization content externally visible.","reasoning":"They communicate publicly as the business/site owner.","risk_type":"messaging_as_user","severity":"high","title":"Publishes public site, blog, documentation and commerce content","triggering_tools_or_skills":["publish_page","publish_post","publish_doc_page","publish_form","publish_commerce_template"]},{"evidence":"These tools change production website infrastructure, code, domains and search indexing.","reasoning":"They can disrupt or materially alter live sites.","risk_type":"deployment_infrastructure","severity":"high","title":"Promotes staging, changes DNS/domain/global code and submits indexing","triggering_tools_or_skills":["promote_staging","create_dns_record","update_dns_record","promote_domain","publish_global_code","submit_all_to_indexnow"]},{"evidence":"These operations grant, revoke or change account access.","reasoning":"They are privileged authorization administration.","risk_type":"credential_admin","severity":"high","title":"Invites/removes team members and manages roles","triggering_tools_or_skills":["invite_team_member","remove_team_member","create_org_role","update_member_role","delete_org_role"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.1 uses the user’s BrightSite role per selected client account; the stored 156-tool inventory is explicitly truncated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/8d6fc85b-2bb6-485d-aabe-0e98cfef50a2.json","what_it_proves":"Candidate PR #125 record identity (name \"BrightSite\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/8d6fc85b-2bb6-485d-aabe-0e98cfef50a2: complete tool_names inventory (156 tools), remote streamable-http endpoint https://onbrightsite.com/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"BrightSite can publish/delete live sites, administer DNS/code and manage team roles.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:8d6fc85b-2bb6-485d-aabe-0e98cfef50a2","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 156 stored tools. Truncation means additional actions may exist; staging/version history are safeguards but do not reduce the High surface.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":156,"tools_or_skills_total":156},"name":"BrightSite","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=8d6fc85b-2bb6-485d-aabe-0e98cfef50a2&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://onbrightsite.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"BrightSite, Inc.","publisher_url":"https://onbrightsite.com/","remote_url":"https://onbrightsite.com/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can destroy production content, configuration and access structures.","evidence":"Deletes site content, files, DNS, forms, roles and staging sites: The inventory includes extensive explicit deletion across website and account resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes site content, files, DNS, forms, roles and staging sites","triggering_tools":["delete_page","delete_post","delete_file","delete_dns_record","delete_form","delete_org_role","discard_staging_site"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate publicly as the business/site owner.","evidence":"Publishes public site, blog, documentation and commerce content: Publish tools make staged organization content externally visible.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Publishes public site, blog, documentation and commerce content","triggering_tools":["publish_page","publish_post","publish_doc_page","publish_form","publish_commerce_template"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They can disrupt or materially alter live sites.","evidence":"Promotes staging, changes DNS/domain/global code and submits indexing: These tools change production website infrastructure, code, domains and search indexing.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Promotes staging, changes DNS/domain/global code and submits indexing","triggering_tools":["promote_staging","create_dns_record","update_dns_record","promote_domain","publish_global_code","submit_all_to_indexnow"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged authorization administration.","evidence":"Invites/removes team members and manages roles: These operations grant, revoke or change account access.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Invites/removes team members and manages roles","triggering_tools":["invite_team_member","remove_team_member","create_org_role","update_member_role","delete_org_role"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@onbrightsite.com","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_domain"},{"description":"","name":"add_products_to_collection"},{"description":"","name":"cancel_invitation"},{"description":"","name":"complete_onboarding"},{"description":"","name":"complete_upload"},{"description":"","name":"create_collection"},{"description":"","name":"create_component"},{"description":"","name":"create_dns_record","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can disrupt or materially alter live sites."}},{"description":"","name":"create_doc_page"},{"description":"","name":"create_error_page"},{"description":"","name":"create_form"},{"description":"","name":"create_layout"},{"description":"","name":"create_media_folder"},{"description":"","name":"create_org_role","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged authorization administration."}},{"description":"","name":"create_page"},{"description":"","name":"create_post"},{"description":"","name":"create_product"},{"description":"","name":"create_redirect"},{"description":"","name":"create_review"},{"description":"","name":"create_staging_site"},{"description":"","name":"delete_component"},{"description":"","name":"delete_dns_record","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production content, configuration and access structures."}},{"description":"","name":"delete_doc_page"},{"description":"","name":"delete_error_page"},{"description":"","name":"delete_file","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production content, configuration and access structures."}},{"description":"","name":"delete_form","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production content, configuration and access structures."}},{"description":"","name":"delete_layout"},{"description":"","name":"delete_media_folder"},{"description":"","name":"delete_org_role","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged authorization administration."}},{"description":"","name":"delete_page","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production content, configuration and access structures."}},{"description":"","name":"delete_post","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production content, configuration and access structures."}},{"description":"","name":"delete_redirect"},{"description":"","name":"delete_review"},{"description":"","name":"discard_staging_site","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production content, configuration and access structures."}},{"description":"","name":"duplicate"},{"description":"","name":"export_products_csv"},{"description":"","name":"get_analytics"},{"description":"","name":"get_blog_listing_design"},{"description":"","name":"get_blog_post_card_design"},{"description":"","name":"get_blog_related_posts_design"},{"description":"","name":"get_blog_settings"},{"description":"","name":"get_blog_template"},{"description":"","name":"get_builtin_content"},{"description":"","name":"get_commerce_template"},{"description":"","name":"get_component"},{"description":"","name":"get_dns_instructions"},{"description":"","name":"get_doc_page"},{"description":"","name":"get_docs_article_design"},{"description":"","name":"get_docs_index_design"},{"description":"","name":"get_docs_settings"},{"description":"","name":"get_error_page"},{"description":"","name":"get_form"},{"description":"","name":"get_global_code"},{"description":"","name":"get_google_reviews_settings"},{"description":"","name":"get_google_reviews_status"},{"description":"","name":"get_indexnow_settings"},{"description":"","name":"get_layout"},{"description":"","name":"get_page"},{"description":"","name":"get_post"},{"description":"","name":"get_product"},{"description":"","name":"get_site_identity"},{"description":"","name":"get_staging_status"},{"description":"","name":"get_tracking_settings"},{"description":"","name":"get_version"},{"description":"","name":"import_products_csv"},{"description":"","name":"invite_team_member","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged authorization administration."}},{"description":"","name":"list_accounts"},{"description":"","name":"list_collection_products"},{"description":"","name":"list_collections"},{"description":"","name":"list_commerce_templates"},{"description":"","name":"list_components"},{"description":"","name":"list_dns_records"},{"description":"","name":"list_doc_pages"},{"description":"","name":"list_domains"},{"description":"","name":"list_error_pages"},{"description":"","name":"list_form_submissions"},{"description":"","name":"list_forms"},{"description":"","name":"list_layouts"},{"description":"","name":"list_media"},{"description":"","name":"list_media_folders"},{"description":"","name":"list_org_roles"},{"description":"","name":"list_pages"},{"description":"","name":"list_pending_invitations"},{"description":"","name":"list_posts"},{"description":"","name":"list_products"},{"description":"","name":"list_redirects"},{"description":"","name":"list_reviews"},{"description":"","name":"list_staging_sites"},{"description":"","name":"list_team_members"},{"description":"","name":"list_versions"},{"description":"","name":"move_doc_page"},{"description":"","name":"move_file"},{"description":"","name":"promote_domain","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can disrupt or materially alter live sites."}},{"description":"","name":"promote_staging","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can disrupt or materially alter live sites."}},{"description":"","name":"publish_blog_listing_design"},{"description":"","name":"publish_blog_post_card_design"},{"description":"","name":"publish_blog_related_posts_design"},{"description":"","name":"publish_blog_template"},{"description":"","name":"publish_commerce_template","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate publicly as the business/site owner."}},{"description":"","name":"publish_component"},{"description":"","name":"publish_doc_page","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate publicly as the business/site owner."}},{"description":"","name":"publish_docs_article_design"},{"description":"","name":"publish_docs_index_design"},{"description":"","name":"publish_error_page"},{"description":"","name":"publish_form","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate publicly as the business/site owner."}},{"description":"","name":"publish_global_code","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can disrupt or materially alter live sites."}},{"description":"","name":"publish_layout"},{"description":"","name":"publish_page","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate publicly as the business/site owner."}},{"description":"","name":"publish_post","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate publicly as the business/site owner."}},{"description":"","name":"remove_domain"},{"description":"","name":"remove_team_member","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged authorization administration."}},{"description":"","name":"request_upload"},{"description":"","name":"resend_invitation"},{"description":"","name":"reset_commerce_template"},{"description":"","name":"restore_staging_site"},{"description":"","name":"restore_version"},{"description":"","name":"search_replace"},{"description":"","name":"set_collection_status"},{"description":"","name":"set_indexnow_enabled"},{"description":"","name":"set_product_status"},{"description":"","name":"set_review_status"},{"description":"","name":"staging_diff"},{"description":"","name":"submit_all_to_indexnow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can disrupt or materially alter live sites."}},{"description":"","name":"sync_google_reviews"},{"description":"","name":"unpublish_doc_page"},{"description":"","name":"unpublish_error_page"},{"description":"","name":"unpublish_page"},{"description":"","name":"unpublish_post"},{"description":"","name":"update_blog_listing_design"},{"description":"","name":"update_blog_post_card_design"},{"description":"","name":"update_blog_related_posts_design"},{"description":"","name":"update_blog_settings"},{"description":"","name":"update_blog_template"},{"description":"","name":"update_builtin_content"},{"description":"","name":"update_commerce_template"},{"description":"","name":"update_component"},{"description":"","name":"update_dns_record","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can disrupt or materially alter live sites."}},{"description":"","name":"update_doc_page"},{"description":"","name":"update_docs_article_design"},{"description":"","name":"update_docs_index_design"},{"description":"","name":"update_docs_settings"},{"description":"","name":"update_error_page"},{"description":"","name":"update_form"},{"description":"","name":"update_global_code"},{"description":"","name":"update_google_reviews_settings"},{"description":"","name":"update_layout"},{"description":"","name":"update_member_role","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged authorization administration."}},{"description":"","name":"update_org_role"},{"description":"","name":"update_page"},{"description":"","name":"update_post"},{"description":"","name":"update_product"},{"description":"","name":"update_redirect"},{"description":"","name":"update_review"},{"description":"","name":"update_site_identity"},{"description":"","name":"update_tracking_settings"},{"description":"","name":"update_variant"}],"tools_count":156,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/8d6fc85b-2bb6-485d-aabe-0e98cfef50a2","uuid":"81993660-43ea-50c5-9a72-c4f5442ef9f3","verification_tier":"community","version":""},"query_key":"brightsite","schema_version":1,"status":"match"}