{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-14","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"IDrive e2 lets Claude manage S3-compatible cloud storage. Browse regions, buckets, objects, and versions, and configure storage settings or presigned links. The connector includes destructive operations such as deleting buckets and objects.","did":"509f3100-f981-425e-9e76-090ece07d44d","documentation_url":"https://www.idrive.com/s3-storage-e2/claude-with-idrive-e2-mcp","editorial_description":{"extended_description":"Tools manage multipart uploads, object copies, lifecycle rules, replication, encryption settings, CORS, policies, tagging, and notifications. Object Lock, retention, legal holds, and restoration are also exposed. Presigned links support downloads, uploads, and deletion.","schema_version":1,"summary":"IDrive e2 lets Claude manage S3-compatible cloud storage.\nBrowse regions, buckets, objects, and versions, and configure storage settings or presigned links.\nThe connector includes destructive operations such as deleting buckets and objects."},"homepage_url":"","icon":"https://mcp.idrivee2.com/favicon.ico","id":"509f3100-f981-425e-9e76-090ece07d44d","installs":0,"last_scanned":"","license":"","long_description":"Tools manage multipart uploads, object copies, lifecycle rules, replication, encryption settings, CORS, policies, tagging, and notifications. Object Lock, retention, legal holds, and restoration are also exposed. Presigned links support downloads, uploads, and deletion.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Declared tools explicitly delete storage resources and policies.","reasoning":"Destructive cloud-storage actions are High.","risk_type":"data_deletion","severity":"high","title":"Deletes buckets, objects, and storage configuration","triggering_tools_or_skills":["delete_bucket","delete_object","delete_objects","delete_bucket_policy"]},{"evidence":"Presigned URLs delegate powerful storage operations.","reasoning":"Creating delegated delete/write credentials is High.","risk_type":"credential_admin","severity":"high","title":"Creates presigned write and delete capabilities","triggering_tools_or_skills":["presign_delete_object","presign_put_object","presign_upload_part"]},{"evidence":"These tools materially alter storage infrastructure and protection settings.","reasoning":"Cloud infrastructure changes are High.","risk_type":"deployment_infrastructure","severity":"high","title":"Changes bucket security and lifecycle infrastructure","triggering_tools_or_skills":["put_bucket_policy","put_bucket_replication","put_object_lock_configuration","put_bucket_encryption"]},{"evidence":"The remote hosted implementation is not pinned.","reasoning":"Runtime capabilities may change after review.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/509f3100-f981-425e-9e76-090ece07d44d.json","what_it_proves":"Candidate PR #125 record identity (name \"IDrive e2\", publisher, type web_connector) and 65 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/509f3100-f981-425e-9e76-090ece07d44d: complete tool_names inventory (65 tools), remote streamable-http endpoint https://mcp.idrivee2.com/s3, auth_posture auth_required, directory tier community"}],"primary_reason":"IDrive e2 can delete storage data, change bucket security/configuration, and mint presigned write/delete URLs.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:509f3100-f981-425e-9e76-090ece07d44d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 65 S3-compatible tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":65,"tools_or_skills_total":65},"name":"IDrive e2","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=509f3100-f981-425e-9e76-090ece07d44d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.idrive.com/s3-storage-e2/privacy_policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"IDrive","publisher_url":"https://www.idrivee2.com/","remote_url":"https://mcp.idrivee2.com/s3","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Destructive cloud-storage actions are High.","evidence":"Deletes buckets, objects, and storage configuration: Declared tools explicitly delete storage resources and policies.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes buckets, objects, and storage configuration","triggering_tools":["delete_bucket","delete_object","delete_objects","delete_bucket_policy"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating delegated delete/write credentials is High.","evidence":"Creates presigned write and delete capabilities: Presigned URLs delegate powerful storage operations.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Creates presigned write and delete capabilities","triggering_tools":["presign_delete_object","presign_put_object","presign_upload_part"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Cloud infrastructure changes are High.","evidence":"Changes bucket security and lifecycle infrastructure: These tools materially alter storage infrastructure and protection settings.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Changes bucket security and lifecycle infrastructure","triggering_tools":["put_bucket_policy","put_bucket_replication","put_object_lock_configuration","put_bucket_encryption"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.idrive.com/s3-storage-e2/support","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"abort_multipart_upload"},{"description":"","name":"complete_multipart_upload"},{"description":"","name":"copy_object"},{"description":"","name":"create_bucket"},{"description":"","name":"create_multipart_upload"},{"description":"","name":"delete_bucket","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive cloud-storage actions are High."}},{"description":"","name":"delete_bucket_cors"},{"description":"","name":"delete_bucket_encryption"},{"description":"","name":"delete_bucket_inventory_configuration"},{"description":"","name":"delete_bucket_lifecycle"},{"description":"","name":"delete_bucket_policy","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive cloud-storage actions are High."}},{"description":"","name":"delete_bucket_replication"},{"description":"","name":"delete_bucket_tagging"},{"description":"","name":"delete_bucket_website"},{"description":"","name":"delete_object","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive cloud-storage actions are High."}},{"description":"","name":"delete_object_tagging"},{"description":"","name":"delete_objects","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive cloud-storage actions are High."}},{"description":"","name":"get_bucket_cors"},{"description":"","name":"get_bucket_encryption"},{"description":"","name":"get_bucket_inventory_configuration"},{"description":"","name":"get_bucket_lifecycle_configuration"},{"description":"","name":"get_bucket_location"},{"description":"","name":"get_bucket_logging"},{"description":"","name":"get_bucket_notification_configuration"},{"description":"","name":"get_bucket_policy"},{"description":"","name":"get_bucket_replication"},{"description":"","name":"get_bucket_tagging"},{"description":"","name":"get_bucket_versioning"},{"description":"","name":"get_bucket_website"},{"description":"","name":"get_object_attributes"},{"description":"","name":"get_object_legal_hold"},{"description":"","name":"get_object_lock_configuration"},{"description":"","name":"get_object_retention"},{"description":"","name":"get_object_tagging"},{"description":"","name":"head_bucket"},{"description":"","name":"head_object"},{"description":"","name":"list_bucket_inventory_configurations"},{"description":"","name":"list_buckets"},{"description":"","name":"list_multipart_uploads"},{"description":"","name":"list_object_versions"},{"description":"","name":"list_objects"},{"description":"","name":"list_objects_v2"},{"description":"","name":"list_parts"},{"description":"","name":"list_regions"},{"description":"","name":"presign_delete_object","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating delegated delete/write credentials is High."}},{"description":"","name":"presign_get_object"},{"description":"","name":"presign_put_object","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating delegated delete/write credentials is High."}},{"description":"","name":"presign_upload_part","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creating delegated delete/write credentials is High."}},{"description":"","name":"put_bucket_cors"},{"description":"","name":"put_bucket_encryption","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Cloud infrastructure changes are High."}},{"description":"","name":"put_bucket_inventory_configuration"},{"description":"","name":"put_bucket_lifecycle_configuration"},{"description":"","name":"put_bucket_logging"},{"description":"","name":"put_bucket_notification_configuration"},{"description":"","name":"put_bucket_policy","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Cloud infrastructure changes are High."}},{"description":"","name":"put_bucket_replication","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Cloud infrastructure changes are High."}},{"description":"","name":"put_bucket_tagging"},{"description":"","name":"put_bucket_versioning"},{"description":"","name":"put_bucket_website"},{"description":"","name":"put_object_legal_hold"},{"description":"","name":"put_object_lock_configuration","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Cloud infrastructure changes are High."}},{"description":"","name":"put_object_retention"},{"description":"","name":"put_object_tagging"},{"description":"","name":"restore_object"},{"description":"","name":"upload_part_copy"}],"tools_count":65,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/509f3100-f981-425e-9e76-090ece07d44d","uuid":"7f0414b5-8fdd-5a61-ba47-d4f5e33e32fe","verification_tier":"community","version":""},"query_key":"idrive e2","schema_version":1,"status":"match"}