{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-11","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"doDomain helps connect customer domains to your product. Check DNS readiness, create connection sessions, and inspect or reverify expected records. Access is capability-scoped; new sessions use monthly quota and verification is rate-limited.","did":"a7fc39a1-9ea8-48f0-9d66-2ac84f2508d1","documentation_url":"https://dodomain.io/docs/connecting-ai-assistants","editorial_description":{"extended_description":"List your team's apps and domain connections, inspect live DNS health, and retrieve records that need applying. Tools operate on your own team's state and do not expose billing or secret API keys; session creation is distinct from directly changing an external DNS account.","schema_version":1,"summary":"doDomain helps connect customer domains to your product.\nCheck DNS readiness, create connection sessions, and inspect or reverify expected records.\nAccess is capability-scoped; new sessions use monthly quota and verification is rate-limited."},"homepage_url":"","icon":"","id":"a7fc39a1-9ea8-48f0-9d66-2ac84f2508d1","installs":0,"last_scanned":"","license":"","long_description":"List your team's apps and domain connections, inspect live DNS health, and retrieve records that need applying. Tools operate on your own team's state and do not expose billing or secret API keys; session creation is distinct from directly changing an external DNS account.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The flow configures customer DNS/domain routing to an application.","reasoning":"It alters production domain infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates/verifies domain connection sessions","triggering_tools_or_skills":["create_connect_session","verify_connect_session","reverify_connection"]},{"evidence":"Domain verification establishes privileged control/association.","reasoning":"It affects application identity and routing.","risk_type":"credential_admin","severity":"high","title":"Manages verified custom-domain connections","triggering_tools_or_skills":["verify_connect_session","reverify_connection"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes the team’s domain-connect sessions/apps/connections.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a7fc39a1-9ea8-48f0-9d66-2ac84f2508d1.json","what_it_proves":"Candidate PR #125 record identity (name \"doDomain\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a7fc39a1-9ea8-48f0-9d66-2ac84f2508d1: complete tool_names inventory (7 tools), remote streamable-http endpoint https://app.dodomain.io/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"doDomain configures and verifies production DNS/domain connections.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a7fc39a1-9ea8-48f0-9d66-2ac84f2508d1","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all seven tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"doDomain","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a7fc39a1-9ea8-48f0-9d66-2ac84f2508d1&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://dodomain.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Devino Solutions","publisher_url":"https://devino.ca/","remote_url":"https://app.dodomain.io/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: It alters production domain infrastructure.","evidence":"Creates/verifies domain connection sessions: The flow configures customer DNS/domain routing to an application.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates/verifies domain connection sessions","triggering_tools":["create_connect_session","verify_connect_session","reverify_connection"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It affects application identity and routing.","evidence":"Manages verified custom-domain connections: Domain verification establishes privileged control/association.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Manages verified custom-domain connections","triggering_tools":["verify_connect_session","reverify_connection"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"aladdin@devino.ca","tags":["code_deployment","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"check_domain"},{"description":"","name":"create_connect_session","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: It alters production domain infrastructure."}},{"description":"","name":"get_connect_session"},{"description":"","name":"list_apps"},{"description":"","name":"list_connections"},{"description":"","name":"reverify_connection","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It affects application identity and routing."}},{"description":"","name":"verify_connect_session","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It affects application identity and routing."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a7fc39a1-9ea8-48f0-9d66-2ac84f2508d1","uuid":"0c9833ec-f524-558f-a3a3-2d7feff70fc8","verification_tier":"community","version":""},"query_key":"dodomain","schema_version":1,"status":"match"}