{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Track vessels and research maritime activity with Datalastic. Find ships, inspect current or historical positions, and explore ports or ownership. Calculate sea routes and distinguish estimated positions from tracked observations.","did":"d16a303e-c4f8-468b-a345-5b044310f34c","documentation_url":"https://docs.datalastic.com/","editorial_description":{"extended_description":"Authenticated access includes ship specifications, managers, companies, inspections, casualties, classification, engines, surveys, and sale or demolition records. Search by vessel identifiers or characteristics, find nearby vessels, and request bulk maritime reports. Position estimation covers areas outside terrestrial AIS tracking.","schema_version":1,"summary":"Track vessels and research maritime activity with Datalastic.\nFind ships, inspect current or historical positions, and explore ports or ownership.\nCalculate sea routes and distinguish estimated positions from tracked observations."},"homepage_url":"","icon":"","id":"d16a303e-c4f8-468b-a345-5b044310f34c","installs":0,"last_scanned":"","license":"","long_description":"Authenticated access includes ship specifications, managers, companies, inspections, casualties, classification, engines, surveys, and sale or demolition records. Search by vessel identifiers or characteristics, find nearby vessels, and request bulk maritime reports. Position estimation covers areas outside terrestrial AIS tracking.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The inventory contains explicit report-request actions paired with report status/list tools.","reasoning":"Creating an asynchronous report job persists server-side work/output.","risk_type":"data_modification","severity":"medium","title":"Maritime intelligence report jobs can be requested","triggering_tools_or_skills":["report_request","intel_report_request"]},{"evidence":"The remaining tools retrieve maritime tracking/intelligence data.","reasoning":"The action surface is otherwise read-only.","risk_type":"private_data_read","severity":"low","title":"Vessel, ownership and inspection intelligence is retrieved","triggering_tools_or_skills":["find_vessels","get_vessel_history","intel_ownership","intel_inspections","estimated_vessel_position"]},{"evidence":"The official docs page provided no readable details and the packet does not state whether report requests consume paid credits.","reasoning":"Potential spending remains unknown and should be documented before publication.","risk_type":"evidence_gap","severity":"low","title":"Report credit/cost behavior is undocumented","triggering_tools_or_skills":["report_request","intel_report_request"]},{"evidence":"The connector runs at https://mcp.datalastic.com/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Datalastic is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for maritime data and report requests; exact quota/billing scopes are not published.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d16a303e-c4f8-468b-a345-5b044310f34c.json","what_it_proves":"Candidate PR #125 record identity (name \"Datalastic\", publisher, type web_connector) and 26 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d16a303e-c4f8-468b-a345-5b044310f34c: complete tool_names inventory (26 tools), remote streamable-http endpoint https://mcp.datalastic.com/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"Datalastic can create report jobs; whether those jobs consume paid credits is not established.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:d16a303e-c4f8-468b-a345-5b044310f34c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 26 tools. Recommend fix to document report job persistence and billing. disconnect is treated as ending the service connection, not deleting user data.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":26,"tools_or_skills_total":26},"name":"Datalastic","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d16a303e-c4f8-468b-a345-5b044310f34c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://datalastic.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"fix","publisher":"Datalastic","publisher_url":"https://datalastic.com/","remote_url":"https://mcp.datalastic.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating an asynchronous report job persists server-side work/output.","evidence":"Maritime intelligence report jobs can be requested: The inventory contains explicit report-request actions paired with report status/list tools.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Maritime intelligence report jobs can be requested","triggering_tools":["report_request","intel_report_request"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The action surface is otherwise read-only.","evidence":"Vessel, ownership and inspection intelligence is retrieved: The remaining tools retrieve maritime tracking/intelligence data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Vessel, ownership and inspection intelligence is retrieved","triggering_tools":["find_vessels","get_vessel_history","intel_ownership","intel_inspections","estimated_vessel_position"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@datalastic.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"disconnect"},{"description":"","name":"find_ports"},{"description":"","name":"find_vessels"},{"description":"","name":"get_port"},{"description":"","name":"get_vessel"},{"description":"","name":"get_vessel_history"},{"description":"","name":"get_vessel_info"},{"description":"","name":"get_vessel_pro"},{"description":"","name":"get_vessels_bulk"},{"description":"","name":"get_vessels_in_radius"},{"description":"","name":"get_weather"},{"description":"","name":"intel_info"},{"description":"","name":"report_list"},{"description":"","name":"report_request","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating an asynchronous report job persists server-side work/output."}},{"description":"","name":"report_status"},{"description":"","name":"intel_ownership"},{"description":"","name":"intel_inspections"},{"description":"","name":"intel_casualties"},{"description":"","name":"intel_drydock"},{"description":"","name":"intel_class"},{"description":"","name":"intel_engine"},{"description":"","name":"intel_spd"},{"description":"","name":"intel_companies"},{"description":"","name":"sea_route"},{"description":"","name":"estimated_vessel_position"},{"description":"","name":"intel_report_request","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating an asynchronous report job persists server-side work/output."}}],"tools_count":26,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d16a303e-c4f8-468b-a345-5b044310f34c","uuid":"9d53ed31-a7fb-573d-b602-5ad692bbd9bb","verification_tier":"community","version":""},"query_key":"datalastic datalastic","schema_version":1,"status":"match"}