{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-08","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Creates and manages WordPress sites hosted by InstaWP. Handle sites, backups, versions and plans, or work inside connected WordPress installations. Account MCP access is disabled by default; site execution, file and database access must be selectively enabled.","did":"b6596529-5735-44e5-94ef-80a90c68b567","documentation_url":"https://docs.instawp.com/sites/connect-ai-assistants-to-your-wordpress-site-using-mcp","editorial_description":{"extended_description":"OAuth connects account-level operations, including site deletion and plan changes. Enabled site tools can edit posts, pages, blocks, media, fields, plugins and themes. Diagnostics and backups support maintenance, with PHP and WordPress version-management workflows.","schema_version":1,"summary":"Creates and manages WordPress sites hosted by InstaWP.\nHandle sites, backups, versions and plans, or work inside connected WordPress installations.\nAccount MCP access is disabled by default; site execution, file and database access must be selectively enabled."},"homepage_url":"","icon":"","id":"b6596529-5735-44e5-94ef-80a90c68b567","installs":0,"last_scanned":"","license":"","long_description":"OAuth connects account-level operations, including site deletion and plan changes. Enabled site tools can edit posts, pages, blocks, media, fields, plugins and themes. Diagnostics and backups support maintenance, with PHP and WordPress version-management workflows.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory includes delete_site for an account-level WordPress hosting connector.","reasoning":"Deleting a site destroys a meaningful hosted resource and its availability, which is High impact.","risk_type":"data_deletion","severity":"high","title":"Deletes hosted WordPress sites","triggering_tools_or_skills":["delete_site"]},{"evidence":"Named tools create sites, alter hosting plans, update PHP/site versions and toggle settings; the listing describes upgrading sandbox sites to production.","reasoning":"These actions provision and materially change deployed WordPress infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates and materially changes hosted sites","triggering_tools_or_skills":["create_site","change_plan","update_php","update_site","toggle_site_setting"]},{"evidence":"The listing says site-level access can enable execute/files/database capabilities and run_site_tool invokes a selected site tool not enumerated in this Directory record.","reasoning":"A hidden, dynamically selected site tool can reach High actions such as code execution or filesystem/database changes; the exact action set is not bounded here.","risk_type":"generic_gateway","severity":"high","title":"Exposes a dynamic site-level tool gateway","triggering_tools_or_skills":["get_site_mcp","run_site_tool"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth is required. The listing says account-level access is off by default and site-level users can selectively enable execute, files and database access; actual granted scopes are not enumerated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b6596529-5735-44e5-94ef-80a90c68b567.json","what_it_proves":"Candidate PR #125 record identity (name \"InstaWP\", publisher, type web_connector) and 13 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b6596529-5735-44e5-94ef-80a90c68b567: complete tool_names inventory (13 tools), remote streamable-http endpoint https://app.instawp.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"InstaWP can delete and provision sites and exposes an unenumerated site-tool gateway with optional execute/files/database access.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:b6596529-5735-44e5-94ef-80a90c68b567","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 13 Directory tools. The account inventory is complete, but get_site_mcp/run_site_tool dynamically reaches per-site capabilities that are absent from the packet. Publish only with explicit disclosure of this dynamic surface and runtime confirmation of approval boundaries.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"unknown","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":13,"tools_or_skills_total":13},"name":"InstaWP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b6596529-5735-44e5-94ef-80a90c68b567&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://instawp.com/legal/data-privacy/","provisional_risk":null,"publication_recommendation":"fix","publisher":"InstaWP Inc","publisher_url":"https://instawp.com/","remote_url":"https://app.instawp.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a site destroys a meaningful hosted resource and its availability, which is High impact.","evidence":"Deletes hosted WordPress sites: The complete inventory includes delete_site for an account-level WordPress hosting connector.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes hosted WordPress sites","triggering_tools":["delete_site"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions provision and materially change deployed WordPress infrastructure.","evidence":"Creates and materially changes hosted sites: Named tools create sites, alter hosting plans, update PHP/site versions and toggle settings; the listing describes upgrading sandbox sites to production.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates and materially changes hosted sites","triggering_tools":["create_site","change_plan","update_php","update_site","toggle_site_setting"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: A hidden, dynamically selected site tool can reach High actions such as code execution or filesystem/database changes; the exact action set is not bounded here.","evidence":"Exposes a dynamic site-level tool gateway: The listing says site-level access can enable execute/files/database capabilities and run_site_tool invokes a selected site tool not enumerated in this Directory record.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Exposes a dynamic site-level tool gateway","triggering_tools":["get_site_mcp","run_site_tool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@instawp.com","tags":["code_deployment","deletes_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"change_plan","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions provision and materially change deployed WordPress infrastructure."}},{"description":"","name":"create_backup"},{"description":"","name":"create_site","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions provision and materially change deployed WordPress infrastructure."}},{"description":"","name":"delete_site","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a site destroys a meaningful hosted resource and its availability, which is High impact."}},{"description":"","name":"get_billing_info"},{"description":"","name":"get_site_details"},{"description":"","name":"get_site_mcp","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: A hidden, dynamically selected site tool can reach High actions such as code execution or filesystem/database changes; the exact action set is not bounded here."}},{"description":"","name":"list_backups"},{"description":"","name":"list_sites"},{"description":"","name":"run_site_tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: A hidden, dynamically selected site tool can reach High actions such as code execution or filesystem/database changes; the exact action set is not bounded here."}},{"description":"","name":"toggle_site_setting","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions provision and materially change deployed WordPress infrastructure."}},{"description":"","name":"update_php","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions provision and materially change deployed WordPress infrastructure."}},{"description":"","name":"update_site","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions provision and materially change deployed WordPress infrastructure."}}],"tools_count":13,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b6596529-5735-44e5-94ef-80a90c68b567","uuid":"004e5c4b-7406-5123-804e-ebfd883aef0f","verification_tier":"community","version":""},"query_key":"instawp","schema_version":1,"status":"match"}