{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-19","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Turbofy provides a cloud workspace for building applications with an AI assistant. Manage app code, data, files, flows, and shared workspace configuration. Authenticated tools can execute workspace commands and publish app or flow changes.","did":"751675ca-1557-44b6-8a6b-0fa74c70b193","documentation_url":"https://docs.turbofy.com/","editorial_description":{"extended_description":"The platform describes databases, authentication, storage, APIs, and UI under a shared data model. Tools pull and push workspace content, perform data CRUD, and manage files; hosting is described as European.","schema_version":1,"summary":"Turbofy provides a cloud workspace for building applications with an AI assistant.\nManage app code, data, files, flows, and shared workspace configuration.\nAuthenticated tools can execute workspace commands and publish app or flow changes."},"homepage_url":"","icon":"","id":"751675ca-1557-44b6-8a6b-0fa74c70b193","installs":0,"last_scanned":"","license":"","long_description":"The platform describes databases, authentication, storage, APIs, and UI under a shared data model. Tools pull and push workspace content, perform data CRUD, and manage files; hosting is described as European.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes fs_exec.","reasoning":"Arbitrary command execution has a High impact ceiling.","risk_type":"code_execution","severity":"high","title":"Executes commands in the Turbofy filesystem/runtime","triggering_tools_or_skills":["fs_exec"]},{"evidence":"Push operations apply local/generated state to remote application infrastructure.","reasoning":"They can materially change deployed services and workflows.","risk_type":"deployment_infrastructure","severity":"high","title":"Pushes applications, workspaces and flows","triggering_tools_or_skills":["app_push","workspace_push","flow_push"]},{"evidence":"Explicit delete tools remove durable application records and automation.","reasoning":"These are destructive remote actions.","risk_type":"data_deletion","severity":"high","title":"Deletes data and flows","triggering_tools_or_skills":["data_delete","flow_delete"]},{"evidence":"These tools write workspace files.","reasoning":"They alter meaningful application source/artifacts.","risk_type":"file_write","severity":"medium","title":"Uploads, creates and edits files","triggering_tools_or_skills":["file_upload","fs_edit","fs_write"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to Turbofy organizations/workspaces is required; filesystem execution and app/workspace deployment roles are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/751675ca-1557-44b6-8a6b-0fa74c70b193.json","what_it_proves":"Candidate PR #125 record identity (name \"Turbofy\", publisher, type web_connector) and 29 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/751675ca-1557-44b6-8a6b-0fa74c70b193: complete tool_names inventory (29 tools), remote streamable-http endpoint https://mcp.turbofy.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Turbofy executes commands, deploys workspace/app state and deletes remote data and flows.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:751675ca-1557-44b6-8a6b-0fa74c70b193","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 29 tools. Pull/list/read/check operations are lower risk; High is established by explicit execution/deployment/deletion tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":29,"tools_or_skills_total":29},"name":"Turbofy","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=751675ca-1557-44b6-8a6b-0fa74c70b193&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://turbofy.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"GraphApi.io GmbH","publisher_url":"https://turbofy.com/","remote_url":"https://mcp.turbofy.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary command execution has a High impact ceiling.","evidence":"Executes commands in the Turbofy filesystem/runtime: The inventory explicitly exposes fs_exec.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes commands in the Turbofy filesystem/runtime","triggering_tools":["fs_exec"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They can materially change deployed services and workflows.","evidence":"Pushes applications, workspaces and flows: Push operations apply local/generated state to remote application infrastructure.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Pushes applications, workspaces and flows","triggering_tools":["app_push","workspace_push","flow_push"]},{"description":"This connector can permanently remove data or resources. Review findings: These are destructive remote actions.","evidence":"Deletes data and flows: Explicit delete tools remove durable application records and automation.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes data and flows","triggering_tools":["data_delete","flow_delete"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They alter meaningful application source/artifacts.","evidence":"Uploads, creates and edits files: These tools write workspace files.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Uploads, creates and edits files","triggering_tools":["file_upload","fs_edit","fs_write"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@turbofy.com","tags":["code_deployment","deletes_data","filesystem_access","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"app_init"},{"description":"","name":"app_pull"},{"description":"","name":"app_push","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can materially change deployed services and workflows."}},{"description":"","name":"block_type_check"},{"description":"","name":"block_type_open"},{"description":"","name":"data_add_many"},{"description":"","name":"data_create"},{"description":"","name":"data_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive remote actions."}},{"description":"","name":"data_get"},{"description":"","name":"data_list"},{"description":"","name":"data_update"},{"description":"","name":"file_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They alter meaningful application source/artifacts."}},{"description":"","name":"file_upload_intent"},{"description":"","name":"flow_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive remote actions."}},{"description":"","name":"flow_init"},{"description":"","name":"flow_pull"},{"description":"","name":"flow_push","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can materially change deployed services and workflows."}},{"description":"","name":"fs_edit","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They alter meaningful application source/artifacts."}},{"description":"","name":"fs_exec","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary command execution has a High impact ceiling."}},{"description":"","name":"fs_list"},{"description":"","name":"fs_read"},{"description":"","name":"fs_search"},{"description":"","name":"fs_task_status"},{"description":"","name":"fs_write","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They alter meaningful application source/artifacts."}},{"description":"","name":"list_organizations"},{"description":"","name":"list_workspaces"},{"description":"","name":"table_list"},{"description":"","name":"workspace_pull"},{"description":"","name":"workspace_push","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can materially change deployed services and workflows."}}],"tools_count":29,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/751675ca-1557-44b6-8a6b-0fa74c70b193","uuid":"d6d62734-354e-5556-8af7-74613e11c03d","verification_tier":"community","version":""},"query_key":"graphapi io gmbh turbofy","schema_version":1,"status":"match"}