{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage AnyDB records, documents, files and business workflows. Search or update data and build record types, views, reports and automations. Available actions follow your account permissions and include deletion and scripts.","did":"09dfebef-0bbc-4605-850b-5930bbd975e4","documentation_url":"https://www.anydb.com/support/integrations/anydb-mcp/","editorial_description":{"extended_description":"The connector supports schemas, formulas, layouts, document-generation templates, comments and version history, including restoring earlier versions. Its tools can delete records, revoke shares and execute scripts or workflows. Sign in with AnyDB; available reads and changes depend on your permissions.","schema_version":1,"summary":"Manage AnyDB records, documents, files and business workflows.\nSearch or update data and build record types, views, reports and automations.\nAvailable actions follow your account permissions and include deletion and scripts."},"homepage_url":"","icon":"","id":"09dfebef-0bbc-4605-850b-5930bbd975e4","installs":0,"last_scanned":"","license":"","long_description":"The connector supports schemas, formulas, layouts, document-generation templates, comments and version history, including restoring earlier versions. Its tools can delete records, revoke shares and execute scripts or workflows. Sign in with AnyDB; available reads and changes depend on your permissions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly deletes records and design resources and revokes shared access.","reasoning":"These actions can irreversibly remove business state or collaborator access.","risk_type":"data_deletion","severity":"high","title":"Records, templates, views, and shares can be removed","triggering_tools_or_skills":["delete_record","anydb_delete_docgen_template","anydb_delete_view","anydb_revoke_share"]},{"evidence":"The connector accepts, validates, simulates, and runs scripts inside the AnyDB workspace.","reasoning":"Caller-supplied code can access or mutate records according to runtime permissions.","risk_type":"code_execution","severity":"high","title":"Workspace scripts can execute","triggering_tools_or_skills":["anydb_run_script","anydb_simulate_script","anydb_validate_script"]},{"evidence":"Explicit tools define, update, and run persistent automation workflows.","reasoning":"Automations can perform future actions when events fire and therefore change executable infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Event-driven workflows can be created and executed","triggering_tools_or_skills":["anydb_create_workflow","anydb_execute_workflow","anydb_update_workflow"]},{"evidence":"Tools add shared comments and create record or form sharing links.","reasoning":"They publish content or access invitations under the user's workspace identity.","risk_type":"messaging_as_user","severity":"high","title":"Comments and shared forms can reach collaborators","triggering_tools_or_skills":["anydb_add_comment","anydb_create_share"]},{"evidence":"The connector creates workspaces and manages permission-bearing shares and schemas.","reasoning":"These operations alter access and structural authority in the business workspace.","risk_type":"credential_admin","severity":"high","title":"Workspaces, shares, and permissions can be administered","triggering_tools_or_skills":["anydb_create_workspace","anydb_create_share","anydb_revoke_share","anydb_update_type"]}],"assessment_status":"provisional","auth_and_scopes":"Authenticated AnyDB permissions govern records, files, schemas, views, reports, shares, workflows, and scripts; exact role and execution restrictions are not documented here.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/09dfebef-0bbc-4605-850b-5930bbd975e4.json","what_it_proves":"Candidate PR #125 record identity (name \"AnyDB\", publisher, type web_connector) and 67 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/09dfebef-0bbc-4605-850b-5930bbd975e4: complete tool_names inventory (67 tools), remote streamable-http endpoint https://mcp.anydb.com/, auth_posture auth_required, directory tier community"}],"primary_reason":"Explicit deletion, code execution, automation workflow, sharing, and broad schema or record writes establish high impact.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:09dfebef-0bbc-4605-850b-5930bbd975e4","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 67 names. Runtime testing must bound script APIs, workflow actions, network egress, costs, file handling, share expiry, permission inheritance, and deletion recovery.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":67,"tools_or_skills_total":67},"name":"AnyDB","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=09dfebef-0bbc-4605-850b-5930bbd975e4&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.anydb.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Humanly Inc","publisher_url":"https://www.anydb.com/","remote_url":"https://mcp.anydb.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly remove business state or collaborator access.","evidence":"Records, templates, views, and shares can be removed: The complete inventory explicitly deletes records and design resources and revokes shared access.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Records, templates, views, and shares can be removed","triggering_tools":["delete_record","anydb_delete_docgen_template","anydb_delete_view","anydb_revoke_share"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Caller-supplied code can access or mutate records according to runtime permissions.","evidence":"Workspace scripts can execute: The connector accepts, validates, simulates, and runs scripts inside the AnyDB workspace.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Workspace scripts can execute","triggering_tools":["anydb_run_script","anydb_simulate_script","anydb_validate_script"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Automations can perform future actions when events fire and therefore change executable infrastructure.","evidence":"Event-driven workflows can be created and executed: Explicit tools define, update, and run persistent automation workflows.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Event-driven workflows can be created and executed","triggering_tools":["anydb_create_workflow","anydb_execute_workflow","anydb_update_workflow"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They publish content or access invitations under the user's workspace identity.","evidence":"Comments and shared forms can reach collaborators: Tools add shared comments and create record or form sharing links.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Comments and shared forms can reach collaborators","triggering_tools":["anydb_add_comment","anydb_create_share"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations alter access and structural authority in the business workspace.","evidence":"Workspaces, shares, and permissions can be administered: The connector creates workspaces and manages permission-bearing shares and schemas.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Workspaces, shares, and permissions can be administered","triggering_tools":["anydb_create_workspace","anydb_create_share","anydb_revoke_share","anydb_update_type"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.anydb.com/support","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"anydb_add_comment","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They publish content or access invitations under the user's workspace identity."}},{"description":"","name":"anydb_check_permissions"},{"description":"","name":"anydb_create_docgen_template"},{"description":"","name":"anydb_create_report"},{"description":"","name":"anydb_create_share","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations alter access and structural authority in the business workspace."}},{"description":"","name":"anydb_create_type"},{"description":"","name":"anydb_create_view"},{"description":"","name":"anydb_create_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Automations can perform future actions when events fire and therefore change executable infrastructure."}},{"description":"","name":"anydb_create_workspace","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations alter access and structural authority in the business workspace."}},{"description":"","name":"anydb_delete_docgen_template","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly remove business state or collaborator access."}},{"description":"","name":"anydb_delete_view","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly remove business state or collaborator access."}},{"description":"","name":"anydb_discover_types"},{"description":"","name":"anydb_execute_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Automations can perform future actions when events fire and therefore change executable infrastructure."}},{"description":"","name":"anydb_generate_document"},{"description":"","name":"anydb_get_authoring_guide"},{"description":"","name":"anydb_get_inbox"},{"description":"","name":"anydb_get_permissions"},{"description":"","name":"anydb_get_record_version"},{"description":"","name":"anydb_get_record_version_delta"},{"description":"","name":"anydb_get_report"},{"description":"","name":"anydb_get_setup_guide"},{"description":"","name":"anydb_get_share"},{"description":"","name":"anydb_get_type_definition"},{"description":"","name":"anydb_get_type_migration_status"},{"description":"","name":"anydb_get_workflow"},{"description":"","name":"anydb_get_workflow_execution_history"},{"description":"","name":"anydb_list_docgen_templates"},{"description":"","name":"anydb_list_record_versions"},{"description":"","name":"anydb_list_reports"},{"description":"","name":"anydb_list_shares"},{"description":"","name":"anydb_list_team_groups"},{"description":"","name":"anydb_list_views"},{"description":"","name":"anydb_list_workflow_actions"},{"description":"","name":"anydb_list_workflow_triggers"},{"description":"","name":"anydb_list_workflows"},{"description":"","name":"anydb_resolve_comment"},{"description":"","name":"anydb_revert_record_to_version"},{"description":"","name":"anydb_revoke_share","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations alter access and structural authority in the business workspace."}},{"description":"","name":"anydb_run_script","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Caller-supplied code can access or mutate records according to runtime permissions."}},{"description":"","name":"anydb_semantic_search"},{"description":"","name":"anydb_simulate_script","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Caller-supplied code can access or mutate records according to runtime permissions."}},{"description":"","name":"anydb_update_docgen_template"},{"description":"","name":"anydb_update_report"},{"description":"","name":"anydb_update_type","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations alter access and structural authority in the business workspace."}},{"description":"","name":"anydb_update_view"},{"description":"","name":"anydb_update_workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Automations can perform future actions when events fire and therefore change executable infrastructure."}},{"description":"","name":"anydb_validate_script","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Caller-supplied code can access or mutate records according to runtime permissions."}},{"description":"","name":"anydb_whoami"},{"description":"","name":"bulk_create_records"},{"description":"","name":"bulk_update_records"},{"description":"","name":"complete_file_upload"},{"description":"","name":"copy_record"},{"description":"","name":"create_record"},{"description":"","name":"delete_record","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can irreversibly remove business state or collaborator access."}},{"description":"","name":"download_file"},{"description":"","name":"get_record"},{"description":"","name":"get_template"},{"description":"","name":"list_databases_for_team"},{"description":"","name":"list_records"},{"description":"","name":"list_teams"},{"description":"","name":"list_templates"},{"description":"","name":"move_record"},{"description":"","name":"prepare_file_upload"},{"description":"","name":"search_records"},{"description":"","name":"search_team_records"},{"description":"","name":"update_record"},{"description":"","name":"upload_file"}],"tools_count":67,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/09dfebef-0bbc-4605-850b-5930bbd975e4","uuid":"7dbc2f84-e8a8-5a19-9a5d-8cc43889546b","verification_tier":"community","version":""},"query_key":"humanly inc anydb","schema_version":1,"status":"match"}