{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-19","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Bruin connects Claude to your Bruin Cloud data pipelines. Inspect runs, logs, asset health, validation errors, and warehouse costs, then trigger runs or manage backfills. Access is limited to the team selected during OAuth and your role's permissions.","did":"497fdf3a-0e9c-460c-91f2-ed3a071cfa80","documentation_url":"https://getbruin.com/docs/bruin/cloud/mcp-setup.html","editorial_description":{"extended_description":"Operational actions include rerunning individual assets with dependencies, marking run status, adding notes, pausing pipelines, and creating or deleting warehouse connections. Connection lookups expose names, types, and timestamps rather than secret values. State-changing tools are marked as destructive in the connector.","schema_version":1,"summary":"Bruin connects Claude to your Bruin Cloud data pipelines.\nInspect runs, logs, asset health, validation errors, and warehouse costs, then trigger runs or manage backfills.\nAccess is limited to the team selected during OAuth and your role's permissions."},"homepage_url":"","icon":"https://cloud.getbruin.com/bruin-logo-2025.png","id":"497fdf3a-0e9c-460c-91f2-ed3a071cfa80","installs":0,"last_scanned":"","license":"","long_description":"Operational actions include rerunning individual assets with dependencies, marking run status, adding notes, pausing pipelines, and creating or deleting warehouse connections. Connection lookups expose names, types, and timestamps rather than secret values. State-changing tools are marked as destructive in the connector.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector explicitly operates production data pipelines and backfills across warehouses.","reasoning":"These actions execute and change scheduled data infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Triggers, reruns, backfills and toggles data pipelines","triggering_tools_or_skills":["pipeline-trigger-tool","pipeline-rerun-tool","asset-rerun-tool","backfill-trigger-tool","pipeline-toggle-tool"]},{"evidence":"The complete surface includes explicit deletion across operational records and data connections.","reasoning":"Deletion can erase audit/run context or disable warehouse integration.","risk_type":"data_deletion","severity":"high","title":"Deletes runs, backfills, health entries and warehouse connections","triggering_tools_or_skills":["run-delete-tool","backfill-delete-tool","asset-health-manual-entry-delete-tool","connection-delete-tool"]},{"evidence":"The tools administer connections to BigQuery, Snowflake, Databricks, Redshift, Postgres and other warehouses.","reasoning":"Connection management is security-sensitive infrastructure/credential administration even though secrets are not returned.","risk_type":"credential_admin","severity":"high","title":"Creates and removes warehouse connections","triggering_tools_or_skills":["connection-create-tool","connection-delete-tool"]},{"evidence":"Triggered pipeline/asset runs execute organization-authored data transformation code.","reasoning":"The connector initiates remote code/query execution in the data platform.","risk_type":"code_execution","severity":"high","title":"Executes pipeline assets and backfills","triggering_tools_or_skills":["pipeline-trigger-tool","asset-rerun-tool","backfill-trigger-tool"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes Bruin Cloud access to one team and role across pipelines, warehouses, runs, backfills and connections; secret credential values are never returned.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/497fdf3a-0e9c-460c-91f2-ed3a071cfa80.json","what_it_proves":"Candidate PR #125 record identity (name \"Bruin\", publisher, type web_connector) and 31 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/497fdf3a-0e9c-460c-91f2-ed3a071cfa80: complete tool_names inventory (31 tools), remote streamable-http endpoint https://cloud.getbruin.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Bruin executes and reconfigures production data pipelines, deletes run/connection state and manages warehouse connections.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:497fdf3a-0e9c-460c-91f2-ed3a071cfa80","reviewed_at":"2026-10-10","reviewer_notes":"Require interval/dependency/cost preview for runs and privileged confirmation for connection changes/deletions.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":31,"tools_or_skills_total":31},"name":"Bruin","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=497fdf3a-0e9c-460c-91f2-ed3a071cfa80&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://getbruin.com/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Bruin","publisher_url":"https://getbruin.com/","remote_url":"https://cloud.getbruin.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions execute and change scheduled data infrastructure.","evidence":"Triggers, reruns, backfills and toggles data pipelines: The connector explicitly operates production data pipelines and backfills across warehouses.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Triggers, reruns, backfills and toggles data pipelines","triggering_tools":["pipeline-trigger-tool","pipeline-rerun-tool","asset-rerun-tool","backfill-trigger-tool","pipeline-toggle-tool"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion can erase audit/run context or disable warehouse integration.","evidence":"Deletes runs, backfills, health entries and warehouse connections: The complete surface includes explicit deletion across operational records and data connections.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes runs, backfills, health entries and warehouse connections","triggering_tools":["run-delete-tool","backfill-delete-tool","asset-health-manual-entry-delete-tool","connection-delete-tool"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Connection management is security-sensitive infrastructure/credential administration even though secrets are not returned.","evidence":"Creates and removes warehouse connections: The tools administer connections to BigQuery, Snowflake, Databricks, Redshift, Postgres and other warehouses.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Creates and removes warehouse connections","triggering_tools":["connection-create-tool","connection-delete-tool"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The connector initiates remote code/query execution in the data platform.","evidence":"Executes pipeline assets and backfills: Triggered pipeline/asset runs execute organization-authored data transformation code.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes pipeline assets and backfills","triggering_tools":["pipeline-trigger-tool","asset-rerun-tool","backfill-trigger-tool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@getbruin.com","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"asset-health-manual-entry-create-tool"},{"description":"","name":"asset-health-manual-entry-delete-tool","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can erase audit/run context or disable warehouse integration."}},{"description":"","name":"asset-health-tool"},{"description":"","name":"asset-instance-list-tool"},{"description":"","name":"asset-instance-logs-tool"},{"description":"","name":"asset-list-tool"},{"description":"","name":"asset-rerun-tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The connector initiates remote code/query execution in the data platform."}},{"description":"","name":"asset-runs-tool"},{"description":"","name":"backfill-delete-tool","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can erase audit/run context or disable warehouse integration."}},{"description":"","name":"backfill-list-tool"},{"description":"","name":"backfill-mark-tool"},{"description":"","name":"backfill-skip-assets-tool"},{"description":"","name":"backfill-trigger-tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The connector initiates remote code/query execution in the data platform."}},{"description":"","name":"connection-create-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Connection management is security-sensitive infrastructure/credential administration even though secrets are not returned."}},{"description":"","name":"connection-delete-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Connection management is security-sensitive infrastructure/credential administration even though secrets are not returned."}},{"description":"","name":"connection-list-tool"},{"description":"","name":"connection-types-tool"},{"description":"","name":"cost-explorer-schema-tool"},{"description":"","name":"cost-explorer-tool"},{"description":"","name":"mark-asset-run-tool"},{"description":"","name":"mark-external-dependency-tool"},{"description":"","name":"mark-pipeline-run-tool"},{"description":"","name":"pipeline-list-tool"},{"description":"","name":"pipeline-rerun-tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions execute and change scheduled data infrastructure."}},{"description":"","name":"pipeline-run-list-tool"},{"description":"","name":"pipeline-toggle-tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions execute and change scheduled data infrastructure."}},{"description":"","name":"pipeline-trigger-tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The connector initiates remote code/query execution in the data platform."}},{"description":"","name":"run-delete-tool","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can erase audit/run context or disable warehouse integration."}},{"description":"","name":"run-note-tool"},{"description":"","name":"run-tags-tool"},{"description":"","name":"validation-error-list-tool"}],"tools_count":31,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/497fdf3a-0e9c-460c-91f2-ed3a071cfa80","uuid":"d4d53a5f-d794-5ff1-b9bb-8e07d8318c65","verification_tier":"community","version":""},"query_key":"bruin bruin","schema_version":1,"status":"match"}