{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"medium","description":"Compiler Explorer compiles source code and shows resulting assembly. Choose compilers and libraries, optionally execute snippets, and inspect instruction documentation. The public service requires no authentication and supports shareable session links.","did":"87d2f689-8a7e-46bd-acb3-b7a57b4b5066","documentation_url":"https://github.com/compiler-explorer/compiler-explorer/blob/main/docs/MCP.md","editorial_description":{"extended_description":"Tools list languages, compilers, and curated libraries and create or resolve godbolt.org short URLs. This supports examining compiler output and target-architecture behavior.","schema_version":1,"summary":"Compiler Explorer compiles source code and shows resulting assembly.\nChoose compilers and libraries, optionally execute snippets, and inspect instruction documentation.\nThe public service requires no authentication and supports shareable session links."},"homepage_url":"","icon":"https://raw.githubusercontent.com/compiler-explorer/infra/refs/heads/main/logo/icon/CompilerExplorer%20Logo%20Icon%20SVG.svg","id":"87d2f689-8a7e-46bd-acb3-b7a57b4b5066","installs":0,"last_scanned":"","license":"","long_description":"Tools list languages, compilers, and curated libraries and create or resolve godbolt.org short URLs. This supports examining compiler output and target-architecture behavior.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs say execute=true runs the compiled program in an ephemeral sandbox and returns stdout/stderr.","reasoning":"Arbitrary caller-supplied code execution is High even when sandboxed.","risk_type":"code_execution","severity":"high","title":"Compiles and optionally executes caller-provided source","triggering_tools_or_skills":["compile"]},{"evidence":"Official docs say this write tool stores source/language/compiler/options/library configuration and returns a public URL.","reasoning":"It creates durable server-side data, though deduplicated/idempotent.","risk_type":"data_modification","severity":"medium","title":"Persists shareable short-link configurations","triggering_tools_or_skills":["generate_short_url"]}],"assessment_status":"provisional","auth_and_scopes":"No authentication is required; compilation/execution occurs in Compiler Explorer’s public ephemeral sandbox and effects do not escape the call.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/87d2f689-8a7e-46bd-acb3-b7a57b4b5066.json","what_it_proves":"Candidate PR #125 record identity (name \"Compiler Explorer\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/87d2f689-8a7e-46bd-acb3-b7a57b4b5066: complete tool_names inventory (7 tools), remote streamable-http endpoint https://compiler-explorer.com/mcp, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://github.com/compiler-explorer/compiler-explorer/blob/main/docs/MCP.md","what_it_proves":"Official MCP reference says compile accepts source/options/libraries and can execute the compiled program in an ephemeral sandbox; it also documents persistent short-URL creation."}],"primary_reason":"Compiler Explorer can execute arbitrary caller-provided programs in its sandbox.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:87d2f689-8a7e-46bd-acb3-b7a57b4b5066","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all seven tools. Sandboxing limits infrastructure impact but does not change the code-execution classification; short links may expose embedded source to anyone with the URL.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"false","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"false","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Compiler Explorer","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=87d2f689-8a7e-46bd-acb3-b7a57b4b5066&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://compiler-explorer.com/#privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Compiler Explorer LLC","publisher_url":"https://compiler-explorer.com","remote_url":"https://compiler-explorer.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary caller-supplied code execution is High even when sandboxed.","evidence":"Compiles and optionally executes caller-provided source: Official docs say execute=true runs the compiled program in an ephemeral sandbox and returns stdout/stderr.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Compiles and optionally executes caller-provided source","triggering_tools":["compile"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It creates durable server-side data, though deduplicated/idempotent.","evidence":"Persists shareable short-link configurations: Official docs say this write tool stores source/language/compiler/options/library configuration and returns a public URL.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Persists shareable short-link configurations","triggering_tools":["generate_short_url"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://github.com/compiler-explorer/compiler-explorer","tags":["modifies_data","network_access","runs_code","web_connector"],"tools":[{"description":"","name":"list_compilers"},{"description":"","name":"list_languages"},{"description":"","name":"list_libraries"},{"description":"","name":"lookup_asm_instruction"},{"description":"","name":"generate_short_url","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It creates durable server-side data, though deduplicated/idempotent."}},{"description":"","name":"get_shortlink_info"},{"description":"","name":"compile","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary caller-supplied code execution is High even when sandboxed."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/87d2f689-8a7e-46bd-acb3-b7a57b4b5066","uuid":"957d67aa-473b-5890-9180-53de8a102aff","verification_tier":"community","version":""},"query_key":"compiler explorer","schema_version":1,"status":"match"}