{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"DocStash stores and publishes documents or apps created by connected assistants. Create pages, PDFs, Word documents, spreadsheets, text, or live apps at shareable URLs. Retrieve and revise existing work across agents, with edits saved as new versions at the same address.","did":"589594ec-2821-4f58-a8df-9f48c51ce84e","documentation_url":"https://docstash.ai/get-started","editorial_description":{"extended_description":"Tools list documents and organization members, select organizations, manage sharing, read content, and capture document screenshots. The source describes support for HTML, Markdown, code, and apps built with frameworks such as React or Vue.","schema_version":1,"summary":"DocStash stores and publishes documents or apps created by connected assistants.\nCreate pages, PDFs, Word documents, spreadsheets, text, or live apps at shareable URLs.\nRetrieve and revise existing work across agents, with edits saved as new versions at the same address."},"homepage_url":"","icon":"","id":"589594ec-2821-4f58-a8df-9f48c51ce84e","installs":0,"last_scanned":"","license":"","long_description":"Tools list documents and organization members, select organizations, manage sharing, read content, and capture document screenshots. The source describes support for HTML, Markdown, code, and apps built with frameworks such as React or Vue.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Description says content is published at permanent shareable URLs, including live apps.","reasoning":"Public deployment is High.","risk_type":"deployment_infrastructure","severity":"high","title":"Publishes live apps and pages","triggering_tools_or_skills":["create_app","create_page","stash"]},{"evidence":"Tool controls access/sharing to documents.","reasoning":"Access administration is High.","risk_type":"credential_admin","severity":"high","title":"Manages document sharing","triggering_tools_or_skills":["manage_sharing"]},{"evidence":"Tool explicitly discards persisted content.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Discards documents","triggering_tools_or_skills":["discard"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/589594ec-2821-4f58-a8df-9f48c51ce84e.json","what_it_proves":"Candidate PR #125 record identity (name \"DocStash\", publisher, type interactive_connector) and 21 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/589594ec-2821-4f58-a8df-9f48c51ce84e: complete tool_names inventory (21 tools), remote streamable-http endpoint https://mcp.docstash.ai/, auth_posture auth_required, directory tier community"}],"primary_reason":"DocStash publishes shareable documents/apps, administers sharing, and discards content.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:589594ec-2821-4f58-a8df-9f48c51ce84e","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":21,"tools_or_skills_total":21},"name":"DocStash","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=589594ec-2821-4f58-a8df-9f48c51ce84e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://docstash.ai/legal","provisional_risk":null,"publication_recommendation":"accept","publisher":"DocStash","publisher_url":"https://docstash.ai/","remote_url":"https://mcp.docstash.ai/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Public deployment is High.","evidence":"Publishes live apps and pages: Description says content is published at permanent shareable URLs, including live apps.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Publishes live apps and pages","triggering_tools":["create_app","create_page","stash"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access administration is High.","evidence":"Manages document sharing: Tool controls access/sharing to documents.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Manages document sharing","triggering_tools":["manage_sharing"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Discards documents: Tool explicitly discards persisted content.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Discards documents","triggering_tools":["discard"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@docstash.ai","tags":["code_deployment","deletes_data","interactive_connector","modifies_data","network_access","oauth_required"],"tools":[{"description":"","name":"create_app","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Public deployment is High."}},{"description":"","name":"create_docx"},{"description":"","name":"create_page","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Public deployment is High."}},{"description":"","name":"create_pdf"},{"description":"","name":"create_sheet"},{"description":"","name":"create_text"},{"description":"","name":"discard","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"get_docx"},{"description":"","name":"get_organizations"},{"description":"","name":"get_page"},{"description":"","name":"get_pdf"},{"description":"","name":"get_sheet"},{"description":"","name":"get_text"},{"description":"","name":"list_documents"},{"description":"","name":"list_org_members"},{"description":"","name":"manage_document"},{"description":"","name":"manage_sharing","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Access administration is High."}},{"description":"","name":"read_document"},{"description":"","name":"screenshot_document"},{"description":"","name":"set_organization"},{"description":"","name":"stash","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Public deployment is High."}}],"tools_count":21,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/589594ec-2821-4f58-a8df-9f48c51ce84e","uuid":"eedfe695-2f35-5e76-99c5-b2b6853fe4c3","verification_tier":"community","version":""},"query_key":"docstash docstash","schema_version":1,"status":"match"}