{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"GitBook MCP connects Claude to documentation content and organization settings. Edit pages, manage sites, use change requests, and publish OpenAPI specifications. Connect through OAuth or a personal access token.","did":"34583a0a-767a-440b-bb82-7f067afe058f","documentation_url":"https://gitbook.com/docs/getting-started/ai-documentation/gitbook-mcp","editorial_description":{"extended_description":"The connector exposes operation discovery and invocation alongside page and site retrieval. Change requests can be created and submitted or merged. The source mentions an accompanying GitBook Skills plugin for usage guidance.","schema_version":1,"summary":"GitBook MCP connects Claude to documentation content and organization settings.\nEdit pages, manage sites, use change requests, and publish OpenAPI specifications.\nConnect through OAuth or a personal access token."},"homepage_url":"","icon":"https://raw.githubusercontent.com/GitbookIO/community/refs/heads/main/assets/gitbook_icon_dark.svg","id":"34583a0a-767a-440b-bb82-7f067afe058f","installs":0,"last_scanned":"","license":"","long_description":"The connector exposes operation discovery and invocation alongside page and site retrieval. Change requests can be created and submitted or merged. The source mentions an accompanying GitBook Skills plugin for usage guidance.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs say merging updates content immediately on a live docs site.","reasoning":"This publishes external documentation as the connected organization.","risk_type":"messaging_as_user","severity":"high","title":"Can merge documentation changes to a live site","triggering_tools_or_skills":["submit_or_merge_change_request"]},{"evidence":"The nine-tool surface uses describe/invoke operation indirection while the Directory description claims full site, space, section, content and customization management.","reasoning":"The actual mutation and deletion surface is dynamic and not statically reviewable from stored tool names.","risk_type":"generic_gateway","severity":"high","title":"Invokes operations not enumerated in the tool inventory","triggering_tools_or_skills":["describe_operation","invoke_operation"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth or a personal access token grants organization-level GitBook access; invoke_operation dynamically exposes API operations and exact operation-level scopes are not captured.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/34583a0a-767a-440b-bb82-7f067afe058f.json","what_it_proves":"Candidate PR #125 record identity (name \"GitBook MCP\", publisher, type web_connector) and 9 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/34583a0a-767a-440b-bb82-7f067afe058f: complete tool_names inventory (9 tools), remote streamable-http endpoint https://mcp.gitbook.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:36:54Z","url_or_path":"https://www.gitbook.com/features/mcp","what_it_proves":"Official GitBook MCP material confirms agents can create sites, draft and restructure pages through change requests."},{"accessed_at":"2026-10-10T21:36:54Z","url_or_path":"https://gitbook.com/docs/getting-started/quickstart","what_it_proves":"Official GitBook docs state merging a change request immediately updates a live docs site."}],"primary_reason":"GitBook can publish live documentation and routes a broad unenumerated API surface through invoke_operation.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:34583a0a-767a-440b-bb82-7f067afe058f","reviewed_at":"2026-10-10","reviewer_notes":"Record or snapshot the discoverable operation catalog and re-review deletion, access-control and site-configuration operations.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":9,"tools_or_skills_total":9},"name":"GitBook MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=34583a0a-767a-440b-bb82-7f067afe058f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://gitbook.com/docs/policies","provisional_risk":null,"publication_recommendation":"fix","publisher":"GitBook","publisher_url":"https://gitbook.com/","remote_url":"https://mcp.gitbook.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This publishes external documentation as the connected organization.","evidence":"Can merge documentation changes to a live site: Official docs say merging updates content immediately on a live docs site.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Can merge documentation changes to a live site","triggering_tools":["submit_or_merge_change_request"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The actual mutation and deletion surface is dynamic and not statically reviewable from stored tool names.","evidence":"Invokes operations not enumerated in the tool inventory: The nine-tool surface uses describe/invoke operation indirection while the Directory description claims full site, space, section, content and customization management.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Invokes operations not enumerated in the tool inventory","triggering_tools":["describe_operation","invoke_operation"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@gitbook.com","tags":["network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"create_change_request"},{"description":"","name":"describe_operation","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The actual mutation and deletion surface is dynamic and not statically reviewable from stored tool names."}},{"description":"","name":"get_page"},{"description":"","name":"get_site_structure"},{"description":"","name":"get_usage_guide"},{"description":"","name":"invoke_operation","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The actual mutation and deletion surface is dynamic and not statically reviewable from stored tool names."}},{"description":"","name":"list_sites"},{"description":"","name":"search"},{"description":"","name":"submit_or_merge_change_request","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This publishes external documentation as the connected organization."}}],"tools_count":9,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/34583a0a-767a-440b-bb82-7f067afe058f","uuid":"5f7fe373-d5a0-526c-b904-2e2e048ebe66","verification_tier":"community","version":""},"query_key":"gitbook gitbook mcp","schema_version":1,"status":"match"}