{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Build and publish hosted web apps with Fine Structure. Create pages, data schemas and authentication, and configure integrations or domains. Manage records, access policies, versions and deployment through your account.","did":"12574e4f-86ac-4cfd-9c29-4afe74a0f7b4","documentation_url":"https://finestructure.ai/api/mcp/docs","editorial_description":{"extended_description":"Tools support secrets, app members, A/B tests, runtime-error inspection, saved-version comparisons and file restoration. They can publish applications and delete data records. The source's rollback capability refers to saved versions, not an assurance every external effect is reversible.","schema_version":1,"summary":"Build and publish hosted web apps with Fine Structure.\nCreate pages, data schemas and authentication, and configure integrations or domains.\nManage records, access policies, versions and deployment through your account."},"homepage_url":"","icon":"https://finestructure.ai/apple-touch-icon.png","id":"12574e4f-86ac-4cfd-9c29-4afe74a0f7b4","installs":0,"last_scanned":"","license":"","long_description":"Tools support secrets, app members, A/B tests, runtime-error inspection, saved-version comparisons and file restoration. They can publish applications and delete data records. The source's rollback capability refers to saved versions, not an assurance every external effect is reversible.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory publishes apps and changes integrations, routes and domains; the listing says apps include a managed database, auth, backend and hosting on a live URL.","reasoning":"These actions materially change production applications and infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Builds, configures and publishes full-stack applications","triggering_tools_or_skills":["apply_change_set","configure_domain_redirects","configure_integration","publish_app","set_primary_domain","set_route_policy","update_app"]},{"evidence":"The connector reads, patches and writes app files and publishes the full-stack result, including backend code.","reasoning":"Arbitrary application code supplied through file changes can execute after publication.","risk_type":"code_execution","severity":"high","title":"Writes and deploys executable application source","triggering_tools_or_skills":["add_file_change","patch_app_file","restore_file_from_version","write_app_file","publish_app"]},{"evidence":"The named tools delete database records, A/B tests and secrets and remove domains and members.","reasoning":"They destroy persistent application, security and access resources.","risk_type":"data_deletion","severity":"high","title":"Deletes application data, tests and secrets","triggering_tools_or_skills":["delete_ab_test","delete_entity_records","delete_secret","discard_change_set","remove_custom_domain","remove_app_member"]},{"evidence":"The inventory sets secrets, changes member roles, invites/removes members and edits entity policy.","reasoning":"These are powerful credential and authorization-control actions.","risk_type":"credential_admin","severity":"high","title":"Stores secrets and administers members and access policy","triggering_tools_or_skills":["invite_app_member","remove_app_member","set_entity_policy","set_secret","update_app_member_role"]},{"evidence":"The declared tool sends or creates a membership invitation for another person.","reasoning":"Invitations are external messages and access-grant actions.","risk_type":"messaging_as_user","severity":"high","title":"Invites application members","triggering_tools_or_skills":["invite_app_member"]},{"evidence":"candidate_tools_truncated is true while the Directory packet contains 82 tools.","reasoning":"The shortened candidate inventory can omit material deployment, deletion or administrative capabilities.","risk_type":"identity_discrepancy","severity":"low","title":"Candidate stores a truncated tool list","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to apps, source files, databases, integrations, secrets, members and domains in the Fine Structure account; per-tool roles are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/12574e4f-86ac-4cfd-9c29-4afe74a0f7b4.json","what_it_proves":"Candidate PR #125 record identity (name \"Fine Structure\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/12574e4f-86ac-4cfd-9c29-4afe74a0f7b4: complete tool_names inventory (82 tools), remote streamable-http endpoint https://finestructure.ai/api/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"The connector writes and publishes full-stack code, deletes resources, manages secrets and members, and the candidate tool inventory is truncated.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:12574e4f-86ac-4cfd-9c29-4afe74a0f7b4","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 82 Directory names. Regenerate the candidate from the full inventory; runtime tests should confirm role boundaries, publication confirmation and secret redaction.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":82,"tools_or_skills_total":82},"name":"Fine Structure","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=12574e4f-86ac-4cfd-9c29-4afe74a0f7b4&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://finestructure.ai/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Fine Structure","publisher_url":"https://finestructure.ai/","remote_url":"https://finestructure.ai/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions materially change production applications and infrastructure.","evidence":"Builds, configures and publishes full-stack applications: The inventory publishes apps and changes integrations, routes and domains; the listing says apps include a managed database, auth, backend and hosting on a live URL.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Builds, configures and publishes full-stack applications","triggering_tools":["apply_change_set","configure_domain_redirects","configure_integration","publish_app","set_primary_domain","set_route_policy","update_app"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary application code supplied through file changes can execute after publication.","evidence":"Writes and deploys executable application source: The connector reads, patches and writes app files and publishes the full-stack result, including backend code.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Writes and deploys executable application source","triggering_tools":["add_file_change","patch_app_file","restore_file_from_version","write_app_file","publish_app"]},{"description":"This connector can permanently remove data or resources. Review findings: They destroy persistent application, security and access resources.","evidence":"Deletes application data, tests and secrets: The named tools delete database records, A/B tests and secrets and remove domains and members.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes application data, tests and secrets","triggering_tools":["delete_ab_test","delete_entity_records","delete_secret","discard_change_set","remove_custom_domain","remove_app_member"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and authorization-control actions.","evidence":"Stores secrets and administers members and access policy: The inventory sets secrets, changes member roles, invites/removes members and edits entity policy.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Stores secrets and administers members and access policy","triggering_tools":["invite_app_member","remove_app_member","set_entity_policy","set_secret","update_app_member_role"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Invitations are external messages and access-grant actions.","evidence":"Invites application members: The declared tool sends or creates a membership invitation for another person.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Invites application members","triggering_tools":["invite_app_member"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@finestructure.ai","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_custom_domain"},{"description":"","name":"add_file_change","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary application code supplied through file changes can execute after publication."}},{"description":"","name":"agency_create_claim_link"},{"description":"","name":"agency_create_client"},{"description":"","name":"agency_create_client_app"},{"description":"","name":"agency_get_claim_status"},{"description":"","name":"agency_list_clients"},{"description":"","name":"apply_change_set","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions materially change production applications and infrastructure."}},{"description":"","name":"attach_agent_whatsapp"},{"description":"","name":"check_domain_verification"},{"description":"","name":"compare_current_to_version"},{"description":"","name":"compare_saved_versions"},{"description":"","name":"configure_domain_redirects","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions materially change production applications and infrastructure."}},{"description":"","name":"configure_integration","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions materially change production applications and infrastructure."}},{"description":"","name":"confirm_owner_phone_verification"},{"description":"","name":"create_ab_test"},{"description":"","name":"create_agent"},{"description":"","name":"create_app"},{"description":"","name":"create_change_set"},{"description":"","name":"create_entity_records"},{"description":"","name":"create_entity_schema"},{"description":"","name":"delete_ab_test","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They destroy persistent application, security and access resources."}},{"description":"","name":"delete_entity_records","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They destroy persistent application, security and access resources."}},{"description":"","name":"delete_secret","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They destroy persistent application, security and access resources."}},{"description":"","name":"detach_agent_whatsapp"},{"description":"","name":"discard_change_set","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They destroy persistent application, security and access resources."}},{"description":"","name":"get_ab_test_stats"},{"description":"","name":"get_agent_whatsapp"},{"description":"","name":"get_app_analytics"},{"description":"","name":"get_app_detail"},{"description":"","name":"get_app_files"},{"description":"","name":"get_app_links"},{"description":"","name":"get_app_security_audit"},{"description":"","name":"get_app_security_context"},{"description":"","name":"get_app_status"},{"description":"","name":"get_domain_ssl_status"},{"description":"","name":"get_domain_verification"},{"description":"","name":"get_entities"},{"description":"","name":"get_errors"},{"description":"","name":"get_job_status"},{"description":"","name":"get_pages"},{"description":"","name":"get_platform_guide"},{"description":"","name":"get_preview_url"},{"description":"","name":"get_recommended_workflow"},{"description":"","name":"inspect_preview"},{"description":"","name":"invite_app_member","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Invitations are external messages and access-grant actions."}},{"description":"","name":"list_ab_tests"},{"description":"","name":"list_agent_tasks"},{"description":"","name":"list_agents"},{"description":"","name":"list_app_domains"},{"description":"","name":"list_app_members"},{"description":"","name":"list_apps"},{"description":"","name":"list_integrations"},{"description":"","name":"list_saved_versions"},{"description":"","name":"list_secret_keys"},{"description":"","name":"patch_app_file","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary application code supplied through file changes can execute after publication."}},{"description":"","name":"publish_app","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary application code supplied through file changes can execute after publication."}},{"description":"","name":"query_entity"},{"description":"","name":"read_app_file"},{"description":"","name":"read_app_files"},{"description":"","name":"remove_app_member","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and authorization-control actions."}},{"description":"","name":"remove_custom_domain","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They destroy persistent application, security and access resources."}},{"description":"","name":"rename_app_file"},{"description":"","name":"restore_file_from_version","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary application code supplied through file changes can execute after publication."}},{"description":"","name":"schedule_agent_task"},{"description":"","name":"seed_entity"},{"description":"","name":"set_entity_policy","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and authorization-control actions."}},{"description":"","name":"set_primary_domain","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions materially change production applications and infrastructure."}},{"description":"","name":"set_route_policy","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions materially change production applications and infrastructure."}},{"description":"","name":"set_secret","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and authorization-control actions."}},{"description":"","name":"start_owner_phone_verification"},{"description":"","name":"update_ab_test"},{"description":"","name":"update_app","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions materially change production applications and infrastructure."}},{"description":"","name":"update_app_member_role","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and authorization-control actions."}},{"description":"","name":"update_entity_metadata"},{"description":"","name":"update_entity_record"},{"description":"","name":"update_entity_records"},{"description":"","name":"update_entity_schema"},{"description":"","name":"validate_app"},{"description":"","name":"validate_change_set"},{"description":"","name":"validate_entity_relationships"},{"description":"","name":"write_app_file","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary application code supplied through file changes can execute after publication."}}],"tools_count":82,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/12574e4f-86ac-4cfd-9c29-4afe74a0f7b4","uuid":"325cae22-6794-5070-8eda-7b9d2be0b55b","verification_tier":"community","version":""},"query_key":"fine structure","schema_version":1,"status":"match"}