{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-02","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Operate CloudBees Unify development and release workflows from Claude. Inspect runs, manage feature flags and targeting, and review security findings or policies. Sign in with your CloudBees account and scope the available tools to the task.","did":"cd12e050-6c36-4d6a-8865-95e7d2743c41","documentation_url":"https://docs.cloudbees.com/docs/cloudbees-unify/latest/unify-ai/explanation/understanding-the-mcp-server","editorial_description":{"extended_description":"Tools can trigger, stop or rerun automation, approve or reject manual gates and update workflow definitions. List flag environments, configure flag behavior and targeting, and manage policies, roles, teams and services, including supported deletion actions. Logs and resource searches provide troubleshooting context.","schema_version":1,"summary":"Operate CloudBees Unify development and release workflows from Claude.\nInspect runs, manage feature flags and targeting, and review security findings or policies.\nSign in with your CloudBees account and scope the available tools to the task."},"homepage_url":"","icon":"https://www.google.com/s2/favicons?domain=cloudbees.com&sz=128","id":"cd12e050-6c36-4d6a-8865-95e7d2743c41","installs":0,"last_scanned":"","license":"","long_description":"Tools can trigger, stop or rerun automation, approve or reject manual gates and update workflow definitions. List flag environments, configure flag behavior and targeting, and manage policies, roles, teams and services, including supported deletion actions. Logs and resource searches provide troubleshooting context.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory exposes direct CI/CD orchestration and approval actions.","reasoning":"Triggering and approving release workflows materially changes production infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Automations/releases can be triggered, stopped or rerun","triggering_tools_or_skills":["automation_trigger_by_branch","automation_rerun","automation_stop","automation_approve_manual_gate"]},{"evidence":"The declared tools create/delete roles and change principals/memberships.","reasoning":"Security authorization and invitations are High administrative actions.","risk_type":"credential_admin","severity":"high","title":"RBAC roles, authorizations and team memberships can be administered","triggering_tools_or_skills":["rbac_authorization_create","rbac_role_create","rbac_role_delete","teams_members_add","teams_members_remove","teams_invite_create"]},{"evidence":"Many tools explicitly delete production DevSecOps resources/configuration.","reasoning":"These destructive operations can disrupt delivery and controls.","risk_type":"data_deletion","severity":"high","title":"Flags, policies, services, teams and security configuration can be deleted","triggering_tools_or_skills":["flags_delete","policies_delete","services_delete","teams_delete","security_sla_configuration_remove"]},{"evidence":"The connector runs at https://mcp.cloudbees.io/v1/mcp?toolset=all without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this catalog snapshot, requiring runtime verification and change monitoring.","risk_type":"provenance_uncertainty","severity":"low","title":"CloudBees Unify MCP Server is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication uses the CloudBees web sign-in and tools can be scoped per request; exact RBAC grants vary by user.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cd12e050-6c36-4d6a-8865-95e7d2743c41.json","what_it_proves":"Candidate PR #125 record identity (name \"CloudBees Unify MCP Server\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cd12e050-6c36-4d6a-8865-95e7d2743c41: complete tool_names inventory (110 tools), remote streamable-http endpoint https://mcp.cloudbees.io/v1/mcp?toolset=all, auth_posture auth_required, directory tier community"}],"primary_reason":"CloudBees Unify can run delivery automations and administer/delete security and organizational resources.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:cd12e050-6c36-4d6a-8865-95e7d2743c41","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 110 tools. High capability is explicit; per-request tool scoping reduces exposure but does not change inherent risk.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":110,"tools_or_skills_total":110},"name":"CloudBees Unify MCP Server","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cd12e050-6c36-4d6a-8865-95e7d2743c41&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.cloudbees.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"CloudBees","publisher_url":"http://cloudbees.com/","remote_url":"https://mcp.cloudbees.io/v1/mcp?toolset=all","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Triggering and approving release workflows materially changes production infrastructure.","evidence":"Automations/releases can be triggered, stopped or rerun: The inventory exposes direct CI/CD orchestration and approval actions.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Automations/releases can be triggered, stopped or rerun","triggering_tools":["automation_trigger_by_branch","automation_rerun","automation_stop","automation_approve_manual_gate"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Security authorization and invitations are High administrative actions.","evidence":"RBAC roles, authorizations and team memberships can be administered: The declared tools create/delete roles and change principals/memberships.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"RBAC roles, authorizations and team memberships can be administered","triggering_tools":["rbac_authorization_create","rbac_role_create","rbac_role_delete","teams_members_add","teams_members_remove","teams_invite_create"]},{"description":"This connector can permanently remove data or resources. Review findings: These destructive operations can disrupt delivery and controls.","evidence":"Flags, policies, services, teams and security configuration can be deleted: Many tools explicitly delete production DevSecOps resources/configuration.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Flags, policies, services, teams and security configuration can be deleted","triggering_tools":["flags_delete","policies_delete","services_delete","teams_delete","security_sla_configuration_remove"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.cloudbees.com/","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"actions_list"},{"description":"","name":"automation_approve_manual_gate","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Triggering and approving release workflows materially changes production infrastructure."}},{"description":"","name":"automation_jobs_list"},{"description":"","name":"automation_pending_tasks_list"},{"description":"","name":"automation_reject_manual_gate"},{"description":"","name":"automation_rerun","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Triggering and approving release workflows materially changes production infrastructure."}},{"description":"","name":"automation_stop","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Triggering and approving release workflows materially changes production infrastructure."}},{"description":"","name":"automation_trigger_by_branch","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Triggering and approving release workflows materially changes production infrastructure."}},{"description":"","name":"branches_list"},{"description":"","name":"controllers_data_get"},{"description":"","name":"controllers_list"},{"description":"","name":"endpoint_add"},{"description":"","name":"endpoint_list"},{"description":"","name":"extensions_list"},{"description":"","name":"flag_approval_requests_list"},{"description":"","name":"flag_configuration_conditions_set"},{"description":"","name":"flag_configuration_get"},{"description":"","name":"flag_custom_properties_add"},{"description":"","name":"flag_custom_properties_delete"},{"description":"","name":"flag_custom_properties_flag_usage_per_environment"},{"description":"","name":"flag_custom_properties_list"},{"description":"","name":"flag_custom_properties_target_group_usage"},{"description":"","name":"flag_serve_to_target_group"},{"description":"","name":"flag_target_groups_add"},{"description":"","name":"flag_target_groups_delete"},{"description":"","name":"flag_target_groups_flag_usage_per_environment"},{"description":"","name":"flag_target_groups_list"},{"description":"","name":"flag_target_groups_list_with_flags_usage"},{"description":"","name":"flag_target_groups_target_group_usage"},{"description":"","name":"flags_add"},{"description":"","name":"flags_applications_list"},{"description":"","name":"flags_configuration_state_update"},{"description":"","name":"flags_configurations_list"},{"description":"","name":"flags_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive operations can disrupt delivery and controls."}},{"description":"","name":"flags_environments_list"},{"description":"","name":"flags_flag_usage_per_environment"},{"description":"","name":"flags_list"},{"description":"","name":"flags_sdk_key_get"},{"description":"","name":"flags_update_defaultValue"},{"description":"","name":"list_toolsets"},{"description":"","name":"logs_list"},{"description":"","name":"organizations_create"},{"description":"","name":"organizations_get"},{"description":"","name":"organizations_list"},{"description":"","name":"organizations_list_suborganizations"},{"description":"","name":"organizations_search"},{"description":"","name":"organizations_suborg_report"},{"description":"","name":"policies_create"},{"description":"","name":"policies_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive operations can disrupt delivery and controls."}},{"description":"","name":"policies_discover"},{"description":"","name":"policies_get"},{"description":"","name":"policies_get_schema"},{"description":"","name":"policies_list"},{"description":"","name":"policies_run_evaluations_list"},{"description":"","name":"policies_update"},{"description":"","name":"properties_add"},{"description":"","name":"properties_get"},{"description":"","name":"properties_list"},{"description":"","name":"property_delete"},{"description":"","name":"rbac_authorization_check_bulk"},{"description":"","name":"rbac_authorization_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Security authorization and invitations are High administrative actions."}},{"description":"","name":"rbac_authorizations_list"},{"description":"","name":"rbac_permissions_list"},{"description":"","name":"rbac_role_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Security authorization and invitations are High administrative actions."}},{"description":"","name":"rbac_role_delete","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Security authorization and invitations are High administrative actions."}},{"description":"","name":"rbac_roles_list"},{"description":"","name":"report_drilldown_get"},{"description":"","name":"repositories_list"},{"description":"","name":"resources_get"},{"description":"","name":"resources_list"},{"description":"","name":"runs_list"},{"description":"","name":"scm_branches_list"},{"description":"","name":"search_resources"},{"description":"","name":"search_runs"},{"description":"","name":"security_configuration_get"},{"description":"","name":"security_configuration_hierarchy_get"},{"description":"","name":"security_configuration_set"},{"description":"","name":"security_filter_tools_list"},{"description":"","name":"security_filters_list"},{"description":"","name":"security_findings_summary_get"},{"description":"","name":"security_implicit_scans_set"},{"description":"","name":"security_issues_all_get"},{"description":"","name":"security_issues_open_get"},{"description":"","name":"security_plugin_config_get"},{"description":"","name":"security_sla_configuration_get"},{"description":"","name":"security_sla_configuration_remove","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive operations can disrupt delivery and controls."}},{"description":"","name":"security_sla_configuration_set"},{"description":"","name":"security_tenant_sla_configuration_remove"},{"description":"","name":"services_add"},{"description":"","name":"services_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive operations can disrupt delivery and controls."}},{"description":"","name":"services_list"},{"description":"","name":"teams_create"},{"description":"","name":"teams_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These destructive operations can disrupt delivery and controls."}},{"description":"","name":"teams_get"},{"description":"","name":"teams_get_by_id"},{"description":"","name":"teams_invite_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Security authorization and invitations are High administrative actions."}},{"description":"","name":"teams_invite_delete"},{"description":"","name":"teams_invites_list"},{"description":"","name":"teams_members_add","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Security authorization and invitations are High administrative actions."}},{"description":"","name":"teams_members_remove","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Security authorization and invitations are High administrative actions."}},{"description":"","name":"teams_memberships_list"},{"description":"","name":"user_whoami"},{"description":"","name":"users_get"},{"description":"","name":"users_get_by_id"},{"description":"","name":"users_list"},{"description":"","name":"workflow_get_content"},{"description":"","name":"workflow_list"},{"description":"","name":"workflow_schema_get"},{"description":"","name":"workflow_update_content"},{"description":"","name":"workflow_validate"}],"tools_count":110,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/cd12e050-6c36-4d6a-8865-95e7d2743c41","uuid":"87bdcd47-c60b-5948-8720-a7f9a6fbffea","verification_tier":"community","version":""},"query_key":"cloudbees cloudbees unify mcp server","schema_version":1,"status":"match"}