{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"DecisionRules authors and evaluates business decision logic. Create or version tables and scripts, solve rules, and manage tests or dependencies. Authenticated tools also publish status changes, lock versions, and organize or delete rule folders.","did":"7bae643e-729d-4ca4-a7d2-dae9683b3eff","documentation_url":"https://docs.decisionrules.io/doc","editorial_description":{"extended_description":"Rules may be evaluated while draft or published. Tools identify duplicate rows, generate AI-assisted rules, manage tags, import or export structures, and overwrite folder trees. Testing supports validation before publishing rather than guaranteeing correctness.","schema_version":1,"summary":"DecisionRules authors and evaluates business decision logic.\nCreate or version tables and scripts, solve rules, and manage tests or dependencies.\nAuthenticated tools also publish status changes, lock versions, and organize or delete rule folders."},"homepage_url":"","icon":"https://worthy-deer-b71b61c421.media.strapiapp.com/logo_dr_hexagon_9450d15423.png","id":"7bae643e-729d-4ca4-a7d2-dae9683b3eff","installs":0,"last_scanned":"","license":"","long_description":"Rules may be evaluated while draft or published. Tools identify duplicate rows, generate AI-assisted rules, manage tags, import or export structures, and overwrite folder trees. Testing supports validation before publishing rather than guaranteeing correctness.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly removes multiple durable decision-automation resources.","reasoning":"These actions can destroy production decision logic and validation assets.","risk_type":"data_deletion","severity":"high","title":"Deletes folders, rules, rule versions, tests and suites","triggering_tools_or_skills":["delete_folder_tree","delete_folder_tree_by_path","delete_latest_rule","delete_rule_by_path","delete_rule_version","delete_test_suites","delete_tests"]},{"evidence":"These actions persist or replace shared rule and test definitions.","reasoning":"They materially change decision-system behavior/configuration.","risk_type":"data_modification","severity":"medium","title":"Creates, overwrites, imports, locks and updates decision rules/tests","triggering_tools_or_skills":["create_rule","create_rule_version","overwrite_folder_tree","import_rule_flow","set_latest_rule_lock","update_latest_rule","update_test_suite"]},{"evidence":"The tools create/download or ingest portable workflow artifacts.","reasoning":"They write meaningful files and remote definitions.","risk_type":"file_write","severity":"medium","title":"Imports and exports rule/folder artifacts","triggering_tools_or_skills":["export_folder","export_rule_flow_version","import_folder","import_rule_flow"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a DecisionRules space is required; folder/rule/test deletion, lock, overwrite and import privileges are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/7bae643e-729d-4ca4-a7d2-dae9683b3eff.json","what_it_proves":"Candidate PR #125 record identity (name \"DecisionRules\", publisher, type web_connector) and 60 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/7bae643e-729d-4ca4-a7d2-dae9683b3eff: complete tool_names inventory (60 tools), remote streamable-http endpoint https://api.decisionrules.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"DecisionRules can delete and overwrite core rule, folder and test assets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:7bae643e-729d-4ca4-a7d2-dae9683b3eff","reviewed_at":"2026-10-10","reviewer_notes":"Manually reviewed all 60 tools. solve_rule executes a bounded configured decision rule, not arbitrary caller code/SQL; no external message or financial action is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":60,"tools_or_skills_total":60},"name":"DecisionRules","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=7bae643e-729d-4ca4-a7d2-dae9683b3eff&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://docs.decisionrules.io/doc/terms-and-conditions/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"DecisionRules","publisher_url":"https://www.decisionrules.io/","remote_url":"https://api.decisionrules.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets.","evidence":"Deletes folders, rules, rule versions, tests and suites: The inventory explicitly removes multiple durable decision-automation resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes folders, rules, rule versions, tests and suites","triggering_tools":["delete_folder_tree","delete_folder_tree_by_path","delete_latest_rule","delete_rule_by_path","delete_rule_version","delete_test_suites","delete_tests"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change decision-system behavior/configuration.","evidence":"Creates, overwrites, imports, locks and updates decision rules/tests: These actions persist or replace shared rule and test definitions.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates, overwrites, imports, locks and updates decision rules/tests","triggering_tools":["create_rule","create_rule_version","overwrite_folder_tree","import_rule_flow","set_latest_rule_lock","update_latest_rule","update_test_suite"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They write meaningful files and remote definitions.","evidence":"Imports and exports rule/folder artifacts: The tools create/download or ingest portable workflow artifacts.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Imports and exports rule/folder artifacts","triggering_tools":["export_folder","export_rule_flow_version","import_folder","import_rule_flow"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.decisionrules.io/support/tickets/new","tags":["deletes_data","filesystem_access","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_tags_to_item"},{"description":"","name":"add_tags_to_item_version"},{"description":"","name":"create_folder"},{"description":"","name":"create_folder_by_path"},{"description":"","name":"create_rule","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change decision-system behavior/configuration."}},{"description":"","name":"create_rule_version","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change decision-system behavior/configuration."}},{"description":"","name":"create_space"},{"description":"","name":"create_test"},{"description":"","name":"create_test_suites"},{"description":"","name":"delete_folder_tree","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets."}},{"description":"","name":"delete_folder_tree_by_path","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets."}},{"description":"","name":"delete_latest_rule","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets."}},{"description":"","name":"delete_rule_by_path","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets."}},{"description":"","name":"delete_rule_version","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets."}},{"description":"","name":"delete_test_suites","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets."}},{"description":"","name":"delete_tests","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy production decision logic and validation assets."}},{"description":"","name":"export_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write meaningful files and remote definitions."}},{"description":"","name":"export_latest_rule_flow"},{"description":"","name":"export_root_folder"},{"description":"","name":"export_rule_flow_version","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write meaningful files and remote definitions."}},{"description":"","name":"find_folder_node"},{"description":"","name":"find_latest_rule_duplicates"},{"description":"","name":"find_rule_node"},{"description":"","name":"find_rule_version_duplicates"},{"description":"","name":"generate_aia_resource"},{"description":"","name":"get_folder_tree"},{"description":"","name":"get_folder_tree_by_path"},{"description":"","name":"get_latest_rule"},{"description":"","name":"get_latest_rule_dependencies"},{"description":"","name":"get_rule_by_path"},{"description":"","name":"get_rule_version"},{"description":"","name":"get_rule_version_dependencies"},{"description":"","name":"get_space_owner_statistics"},{"description":"","name":"import_folder","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write meaningful files and remote definitions."}},{"description":"","name":"import_folder_by_path"},{"description":"","name":"import_rule_flow","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They write meaningful files and remote definitions."}},{"description":"","name":"list_items_by_tags"},{"description":"","name":"list_space_items"},{"description":"","name":"list_test_suites"},{"description":"","name":"list_test_suites_for_rule"},{"description":"","name":"move_folder_nodes"},{"description":"","name":"move_rule_nodes"},{"description":"","name":"move_test_suites"},{"description":"","name":"move_tests"},{"description":"","name":"overwrite_folder_tree","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change decision-system behavior/configuration."}},{"description":"","name":"overwrite_folder_tree_by_path"},{"description":"","name":"remove_tags_from_item"},{"description":"","name":"remove_tags_from_item_version"},{"description":"","name":"rename_folder"},{"description":"","name":"rename_folder_by_path"},{"description":"","name":"set_latest_rule_lock","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change decision-system behavior/configuration."}},{"description":"","name":"set_rule_lock_by_path"},{"description":"","name":"set_rule_version_lock"},{"description":"","name":"solve_rule"},{"description":"","name":"update_latest_rule","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change decision-system behavior/configuration."}},{"description":"","name":"update_rule_by_path"},{"description":"","name":"update_rule_version"},{"description":"","name":"update_rule_version_status"},{"description":"","name":"update_test"},{"description":"","name":"update_test_suite","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change decision-system behavior/configuration."}}],"tools_count":60,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/7bae643e-729d-4ca4-a7d2-dae9683b3eff","uuid":"2bb91bf8-7343-5f9a-a548-8497cc1d1f23","verification_tier":"community","version":""},"query_key":"decisionrules decisionrules","schema_version":1,"status":"match"}