{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Query business metrics and explore performance trends in Databox. Find dashboards, load metric data, and ask analytical questions. Create or delete data sources and datasets, ingest data, and inspect ingestion status.","did":"d56655e7-f3a6-4317-b9a8-efddf9f731ec","documentation_url":"https://developers.databox.com/docs/mcp/overview","editorial_description":{"extended_description":"Browse connected accounts, available metrics, and source or merged datasets to locate the data behind a report.","schema_version":1,"summary":"Query business metrics and explore performance trends in Databox.\nFind dashboards, load metric data, and ask analytical questions.\nCreate or delete data sources and datasets, ingest data, and inspect ingestion status."},"homepage_url":"","icon":"","id":"d56655e7-f3a6-4317-b9a8-efddf9f731ec","installs":0,"last_scanned":"","license":"","long_description":"Browse connected accounts, available metrics, and source or merged datasets to locate the data behind a report.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares both deletions.","reasoning":"These actions destructively remove analytics configuration/data.","risk_type":"data_deletion","severity":"high","title":"Data sources and datasets can be deleted","triggering_tools_or_skills":["delete_data_source","delete_dataset"]},{"evidence":"Declared tools create persistent analytics resources and upload data.","reasoning":"These materially change the Databox account.","risk_type":"data_modification","severity":"medium","title":"Data sources/datasets can be created and data ingested","triggering_tools_or_skills":["create_data_source","create_dataset","ingest_data"]},{"evidence":"The connector queries data from more than 100 user-connected sources.","reasoning":"Source content may be untrusted.","risk_type":"prompt_injection_exposure","severity":"low","title":"Connected-source data enters model context","triggering_tools_or_skills":["ask_genie","load_metric_data","search_databoards"]},{"evidence":"The connector runs at https://mcp.databox.com/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently of this review, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Databox is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects business accounts and data sources; exact account roles and ingestion quotas are not described.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d56655e7-f3a6-4317-b9a8-efddf9f731ec.json","what_it_proves":"Candidate PR #125 record identity (name \"Databox\", publisher, type interactive_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d56655e7-f3a6-4317-b9a8-efddf9f731ec: complete tool_names inventory (17 tools), remote streamable-http endpoint https://mcp.databox.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Databox can delete analytics datasets/sources and ingest persistent business data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d56655e7-f3a6-4317-b9a8-efddf9f731ec","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 17 tools. High is established by explicit deletion names; exact ingestion retention and source permissions require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"Databox","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d56655e7-f3a6-4317-b9a8-efddf9f731ec&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://databox.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Databox","publisher_url":"https://databox.com/","remote_url":"https://mcp.databox.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions destructively remove analytics configuration/data.","evidence":"Data sources and datasets can be deleted: The complete inventory explicitly declares both deletions.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Data sources and datasets can be deleted","triggering_tools":["delete_data_source","delete_dataset"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially change the Databox account.","evidence":"Data sources/datasets can be created and data ingested: Declared tools create persistent analytics resources and upload data.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Data sources/datasets can be created and data ingested","triggering_tools":["create_data_source","create_dataset","ingest_data"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"help@databox.com","tags":["deletes_data","interactive_connector","modifies_data","network_access","oauth_required"],"tools":[{"description":"","name":"ask_genie"},{"description":"","name":"create_data_source","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially change the Databox account."}},{"description":"","name":"create_dataset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially change the Databox account."}},{"description":"","name":"delete_data_source","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove analytics configuration/data."}},{"description":"","name":"delete_dataset","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove analytics configuration/data."}},{"description":"","name":"get_current_datetime"},{"description":"","name":"get_databoard_by_id"},{"description":"","name":"get_dataset_ingestions"},{"description":"","name":"get_ingestion"},{"description":"","name":"ingest_data","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These materially change the Databox account."}},{"description":"","name":"list_accounts"},{"description":"","name":"list_data_source_datasets"},{"description":"","name":"list_data_sources"},{"description":"","name":"list_merged_datasets"},{"description":"","name":"list_metrics"},{"description":"","name":"load_metric_data"},{"description":"","name":"search_databoards"}],"tools_count":17,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/d56655e7-f3a6-4317-b9a8-efddf9f731ec","uuid":"361660f3-cb9c-5200-a02e-176d4a6a5865","verification_tier":"community","version":""},"query_key":"databox databox","schema_version":1,"status":"match"}