{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Dock connects Claude to sales workspaces and enablement content. Find assets or templates, create or duplicate workspaces, and manage workspace contacts. Organize asset tags, archive content, and consult enablement agents through authenticated access.","did":"90a2eee8-6ac4-48ac-bb7d-9dd926b89d44","documentation_url":"https://help.dock.us/en/","editorial_description":{"extended_description":"Workspaces support deal, onboarding, and renewal collaboration. Tools also add page templates, create playbooks, search help content, and restore archived workspaces.","schema_version":1,"summary":"Dock connects Claude to sales workspaces and enablement content.\nFind assets or templates, create or duplicate workspaces, and manage workspace contacts.\nOrganize asset tags, archive content, and consult enablement agents through authenticated access."},"homepage_url":"","icon":"","id":"90a2eee8-6ac4-48ac-bb7d-9dd926b89d44","installs":0,"last_scanned":"","license":"","long_description":"Workspaces support deal, onboarding, and renewal collaboration. Tools also add page templates, create playbooks, search help content, and restore archived workspaces.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Archiving removes durable revenue-enablement resources from active use.","reasoning":"It can disrupt customer onboarding/deal/renewal work even if unarchive exists.","risk_type":"data_deletion","severity":"high","title":"Archives customer workspaces and assets","triggering_tools_or_skills":["dock-archive-workspaces","dock-archive-assets"]},{"evidence":"This tool changes who is associated with/customer-facing workspace access or communication.","reasoning":"Contact/access semantics are not documented, so it is privileged administration.","risk_type":"credential_admin","severity":"high","title":"Changes workspace contacts","triggering_tools_or_skills":["dock-edit-workspace-contacts"]},{"evidence":"The agent may propose actions requiring dock-confirm-action, but its full action catalogue is not enumerated.","reasoning":"Runtime behavior can change beyond fixed tool names.","risk_type":"generic_gateway","severity":"low","title":"Resolves an AI agent action","triggering_tools_or_skills":["dock-ask-agent","dock-resolve-agent"]},{"evidence":"These tools persist shared customer enablement resources.","reasoning":"They materially alter the workspace.","risk_type":"data_modification","severity":"medium","title":"Creates/duplicates workspaces and playbooks","triggering_tools_or_skills":["dock-create-workspace","dock-duplicate-workspace","dock-create-playbook"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; workspace/content/archive/contact actions follow Dock permissions, with confirm_action used for guarded writes.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/90a2eee8-6ac4-48ac-bb7d-9dd926b89d44.json","what_it_proves":"Candidate PR #125 record identity (name \"Dock\", publisher, type web_connector) and 21 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/90a2eee8-6ac4-48ac-bb7d-9dd926b89d44: complete tool_names inventory (21 tools), remote streamable-http endpoint https://api.dock.us/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Dock can archive shared customer workspaces/assets and edit workspace contacts.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:90a2eee8-6ac4-48ac-bb7d-9dd926b89d44","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 21 tools. confirm_action is a safeguard; agent-resolved actions should be runtime-captured for completeness.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":21,"tools_or_skills_total":21},"name":"Dock","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=90a2eee8-6ac4-48ac-bb7d-9dd926b89d44&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.dock.us/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Dock","publisher_url":"https://www.dock.us/","remote_url":"https://api.dock.us/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: It can disrupt customer onboarding/deal/renewal work even if unarchive exists.","evidence":"Archives customer workspaces and assets: Archiving removes durable revenue-enablement resources from active use.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Archives customer workspaces and assets","triggering_tools":["dock-archive-workspaces","dock-archive-assets"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Contact/access semantics are not documented, so it is privileged administration.; They materially alter the workspace.","evidence":"Changes workspace contacts: This tool changes who is associated with/customer-facing workspace access or communication. | Creates/duplicates workspaces and playbooks: These tools persist shared customer enablement resources.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["dock-edit-workspace-contacts","dock-create-workspace","dock-duplicate-workspace","dock-create-playbook"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Runtime behavior can change beyond fixed tool names.","evidence":"Resolves an AI agent action: The agent may propose actions requiring dock-confirm-action, but its full action catalogue is not enumerated.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"low","title":"Resolves an AI agent action","triggering_tools":["dock-ask-agent","dock-resolve-agent"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@dock.us","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"dock-add-asset-tags"},{"description":"","name":"dock-add-page-template-to-workspaces"},{"description":"","name":"dock-agent-search"},{"description":"","name":"dock-archive-assets","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: It can disrupt customer onboarding/deal/renewal work even if unarchive exists."}},{"description":"","name":"dock-archive-workspaces","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: It can disrupt customer onboarding/deal/renewal work even if unarchive exists."}},{"description":"","name":"dock-ask-agent"},{"description":"","name":"dock-change-asset-tags"},{"description":"","name":"dock-confirm-action"},{"description":"","name":"dock-create-playbook","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Contact/access semantics are not documented, so it is privileged administration.; They materially alter the workspace."}},{"description":"","name":"dock-create-workspace","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Contact/access semantics are not documented, so it is privileged administration.; They materially alter the workspace."}},{"description":"","name":"dock-duplicate-workspace","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Contact/access semantics are not documented, so it is privileged administration.; They materially alter the workspace."}},{"description":"","name":"dock-edit-workspace-contacts","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Contact/access semantics are not documented, so it is privileged administration.; They materially alter the workspace."}},{"description":"","name":"dock-get-self"},{"description":"","name":"dock-remove-asset-tags"},{"description":"","name":"dock-resolve-agent"},{"description":"","name":"dock-search-accounts"},{"description":"","name":"dock-search-assets"},{"description":"","name":"dock-search-help-center"},{"description":"","name":"dock-search-templates"},{"description":"","name":"dock-search-workspaces"},{"description":"","name":"dock-unarchive-workspaces"}],"tools_count":21,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/90a2eee8-6ac4-48ac-bb7d-9dd926b89d44","uuid":"50166cf8-3837-54f1-8b5c-88c906d46645","verification_tier":"community","version":""},"query_key":"dock","schema_version":1,"status":"match"}