{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Laioutr lets Claude edit frontend pages and components in Studio. Inspect schemas and page trees, then add, move, or update sections and blocks. Work with properties, variants, global references, and style tokens.","did":"47f4846e-6a51-4ecb-831e-ead6b247cbcd","documentation_url":"https://docs.laioutr.com/agent-api/laioutr-mcp/overview","editorial_description":{"extended_description":"Tools also remove supported blocks or sections and list projects. The platform combines frontend management with integrations and hosting.","schema_version":1,"summary":"Laioutr lets Claude edit frontend pages and components in Studio.\nInspect schemas and page trees, then add, move, or update sections and blocks.\nWork with properties, variants, global references, and style tokens."},"homepage_url":"","icon":"https://www.laioutr.com/icon.png","id":"47f4846e-6a51-4ecb-831e-ead6b247cbcd","installs":0,"last_scanned":"","license":"","long_description":"Tools also remove supported blocks or sections and list projects. The platform combines frontend management with integrations and hosting.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly deletes page blocks and sections.","reasoning":"These actions remove customer-facing page structure/content.","risk_type":"data_deletion","severity":"high","title":"Deletes frontend blocks and sections","triggering_tools_or_skills":["studio_delete_block","studio_delete_section"]},{"evidence":"The description presents Cockpit as a real-time frontend management/hosting platform and the tools mutate pages and components.","reasoning":"These writes affect a hosted customer-facing frontend.","risk_type":"deployment_infrastructure","severity":"high","title":"Changes hosted frontend structure in real time","triggering_tools_or_skills":["studio_add_block","studio_add_section","studio_set_static_props","studio_update_block","studio_update_page_variant","studio_update_section"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants project-scoped access to Cockpit page structures, components, styles and props used by the hosted Laioutr frontend.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/47f4846e-6a51-4ecb-831e-ead6b247cbcd.json","what_it_proves":"Candidate PR #125 record identity (name \"Laioutr\", publisher, type web_connector) and 23 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/47f4846e-6a51-4ecb-831e-ead6b247cbcd: complete tool_names inventory (23 tools), remote streamable-http endpoint https://cockpit.laioutr.cloud/api/mcp/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Laioutr can delete and modify production hosted frontend structure.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:47f4846e-6a51-4ecb-831e-ead6b247cbcd","reviewed_at":"2026-10-10","reviewer_notes":"Clarify draft versus immediate-live semantics and require visual diff confirmation.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":23,"tools_or_skills_total":23},"name":"Laioutr","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=47f4846e-6a51-4ecb-831e-ead6b247cbcd&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.laioutr.com/en/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Laioutr GmbH","publisher_url":"https://www.laioutr.com/","remote_url":"https://cockpit.laioutr.cloud/api/mcp/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions remove customer-facing page structure/content.","evidence":"Deletes frontend blocks and sections: The complete inventory explicitly deletes page blocks and sections.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes frontend blocks and sections","triggering_tools":["studio_delete_block","studio_delete_section"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These writes affect a hosted customer-facing frontend.","evidence":"Changes hosted frontend structure in real time: The description presents Cockpit as a real-time frontend management/hosting platform and the tools mutate pages and components.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Changes hosted frontend structure in real time","triggering_tools":["studio_add_block","studio_add_section","studio_set_static_props","studio_update_block","studio_update_page_variant","studio_update_section"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@laioutr.com","tags":["code_deployment","deletes_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"project_list"},{"description":"","name":"studio_add_array_item"},{"description":"","name":"studio_add_block","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These writes affect a hosted customer-facing frontend."}},{"description":"","name":"studio_add_global_section_reference"},{"description":"","name":"studio_add_section","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These writes affect a hosted customer-facing frontend."}},{"description":"","name":"studio_delete_block","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove customer-facing page structure/content."}},{"description":"","name":"studio_delete_section","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions remove customer-facing page structure/content."}},{"description":"","name":"studio_get_capabilities"},{"description":"","name":"studio_get_component_schemas"},{"description":"","name":"studio_get_data_model"},{"description":"","name":"studio_get_page_tree"},{"description":"","name":"studio_get_prop"},{"description":"","name":"studio_get_section"},{"description":"","name":"studio_get_style_tokens"},{"description":"","name":"studio_list_components"},{"description":"","name":"studio_list_global_sections"},{"description":"","name":"studio_list_pages"},{"description":"","name":"studio_move_block"},{"description":"","name":"studio_move_section"},{"description":"","name":"studio_set_static_props","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These writes affect a hosted customer-facing frontend."}},{"description":"","name":"studio_update_block","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These writes affect a hosted customer-facing frontend."}},{"description":"","name":"studio_update_page_variant","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These writes affect a hosted customer-facing frontend."}},{"description":"","name":"studio_update_section","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These writes affect a hosted customer-facing frontend."}}],"tools_count":23,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/47f4846e-6a51-4ecb-831e-ead6b247cbcd","uuid":"4420d851-b76f-589b-b69d-80d088cf75cd","verification_tier":"community","version":""},"query_key":"laioutr","schema_version":1,"status":"match"}