{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to LimaCharlie security operations and endpoint telemetry. Investigate events, detections, sensors and processes, and manage response rules or playbooks. Administrative actions can change access, handle secrets, isolate endpoints and delete resources.","did":"b9b7e1a5-378f-40bb-a752-ab0a8df595f0","documentation_url":"https://doc.limacharlie.io/","editorial_description":{"extended_description":"Tools query security data, inspect host state, collect artifacts and run YARA scans. They also manage organizations, users, API keys, integrations and saved investigations, with network isolation and rejoin controls for supported sensors.","schema_version":1,"summary":"Connects Claude to LimaCharlie security operations and endpoint telemetry.\nInvestigate events, detections, sensors and processes, and manage response rules or playbooks.\nAdministrative actions can change access, handle secrets, isolate endpoints and delete resources."},"homepage_url":"","icon":"https://limacharlie.io/favicon.ico","id":"b9b7e1a5-378f-40bb-a752-ab0a8df595f0","installs":0,"last_scanned":"","license":"","long_description":"Tools query security data, inspect host state, collect artifacts and run YARA scans. They also manage organizations, users, API keys, integrations and saved investigations, with network isolation and rejoin controls for supported sensors.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The stored inventory creates API/installation keys and administers users, roles and permissions.","reasoning":"These are powerful credential and security-administration actions.","risk_type":"credential_admin","severity":"high","title":"Creates keys and changes organization permissions","triggering_tools_or_skills":["create_api_key","create_installation_key","add_org_user","add_user_permission","set_user_role","remove_user_permission"]},{"evidence":"Multiple declared tools delete credentials, endpoints, rules, secrets, playbooks and investigations.","reasoning":"They can permanently remove core security-platform resources.","risk_type":"data_deletion","severity":"high","title":"Deletes sensors, keys, rules and security data","triggering_tools_or_skills":["delete_api_key","delete_sensor","delete_cloud_sensor","delete_rule","delete_secret","delete_playbook","delete_investigation"]},{"evidence":"The connector exposes reliable endpoint tasking, Velociraptor collection, Python playbook generation and process/memory scans.","reasoning":"Endpoint tasking and playbooks can execute privileged security operations on managed systems.","risk_type":"code_execution","severity":"high","title":"Runs endpoint tasks and generated playbooks","triggering_tools_or_skills":["reliable_tasking","collect_velociraptor_artifact","generate_python_playbook","yara_scan_process"]},{"evidence":"lc_call_tool is a generic tool gateway and the candidate inventory is truncated at 175 names.","reasoning":"Hidden/dynamic actions may reach additional High capabilities not visible in the record.","risk_type":"generic_gateway","severity":"high","title":"Invokes unenumerated LimaCharlie tools","triggering_tools_or_skills":["lc_call_tool"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; org roles, sensor/tasking approvals and generic-gateway boundaries are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b9b7e1a5-378f-40bb-a752-ab0a8df595f0.json","what_it_proves":"Candidate PR #125 record identity (name \"LimaCharlie\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b9b7e1a5-378f-40bb-a752-ab0a8df595f0: complete tool_names inventory (175 tools), remote streamable-http endpoint https://mcp.limacharlie.io/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"LimaCharlie exposes credential administration, destructive SecOps actions, endpoint tasking and a generic gateway.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:b9b7e1a5-378f-40bb-a752-ab0a8df595f0","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 175 stored tools. candidate_tools_truncated=true, so the full Directory action set is missing and the record must be regenerated before publication.","risk_domains":{"arbitrary_network_access":"unknown","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":175,"tools_or_skills_total":175},"name":"LimaCharlie","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b9b7e1a5-378f-40bb-a752-ab0a8df595f0&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://app.limacharlie.io/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"LimaCharlie","publisher_url":"https://limacharlie.io/","remote_url":"https://mcp.limacharlie.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and security-administration actions.","evidence":"Creates keys and changes organization permissions: The stored inventory creates API/installation keys and administers users, roles and permissions.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Creates keys and changes organization permissions","triggering_tools":["create_api_key","create_installation_key","add_org_user","add_user_permission","set_user_role","remove_user_permission"]},{"description":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources.","evidence":"Deletes sensors, keys, rules and security data: Multiple declared tools delete credentials, endpoints, rules, secrets, playbooks and investigations.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes sensors, keys, rules and security data","triggering_tools":["delete_api_key","delete_sensor","delete_cloud_sensor","delete_rule","delete_secret","delete_playbook","delete_investigation"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Endpoint tasking and playbooks can execute privileged security operations on managed systems.; Hidden/dynamic actions may reach additional High capabilities not visible in the record.","evidence":"Runs endpoint tasks and generated playbooks: The connector exposes reliable endpoint tasking, Velociraptor collection, Python playbook generation and process/memory scans. | Invokes unenumerated LimaCharlie tools: lc_call_tool is a generic tool gateway and the candidate inventory is truncated at 175 names.","manual_risk_type":"code_execution,generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["reliable_tasking","collect_velociraptor_artifact","generate_python_playbook","yara_scan_process","lc_call_tool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@limacharlie.io","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"add_group_member"},{"description":"","name":"add_group_owner"},{"description":"","name":"add_org_to_group"},{"description":"","name":"add_org_user","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and security-administration actions."}},{"description":"","name":"add_output"},{"description":"","name":"add_tag"},{"description":"","name":"add_user_permission","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and security-administration actions."}},{"description":"","name":"analyze_lcql_query"},{"description":"","name":"batch_search_iocs"},{"description":"","name":"collect_velociraptor_artifact","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Endpoint tasking and playbooks can execute privileged security operations on managed systems.; Hidden/dynamic actions may reach additional High capabilities not visible in the record."}},{"description":"","name":"create_api_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and security-administration actions."}},{"description":"","name":"create_group"},{"description":"","name":"create_installation_key","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and security-administration actions."}},{"description":"","name":"create_org"},{"description":"","name":"create_payload"},{"description":"","name":"delete_api_key","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources."}},{"description":"","name":"delete_cloud_sensor","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources."}},{"description":"","name":"delete_dr_general_rule"},{"description":"","name":"delete_dr_managed_rule"},{"description":"","name":"delete_extension_config"},{"description":"","name":"delete_external_adapter"},{"description":"","name":"delete_fp_rule"},{"description":"","name":"delete_group"},{"description":"","name":"delete_installation_key"},{"description":"","name":"delete_investigation","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources."}},{"description":"","name":"delete_lookup"},{"description":"","name":"delete_org_note"},{"description":"","name":"delete_output"},{"description":"","name":"delete_payload"},{"description":"","name":"delete_playbook","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources."}},{"description":"","name":"delete_rule","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources."}},{"description":"","name":"delete_saved_query"},{"description":"","name":"delete_secret","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources."}},{"description":"","name":"delete_sensor","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can permanently remove core security-platform resources."}},{"description":"","name":"delete_sop"},{"description":"","name":"delete_yara_rule"},{"description":"","name":"dir_find_hash"},{"description":"","name":"dir_list"},{"description":"","name":"dismiss_org_error"},{"description":"","name":"estimate_lcql_query"},{"description":"","name":"expand_investigation"},{"description":"","name":"find_strings"},{"description":"","name":"generate_detection_summary"},{"description":"","name":"generate_dr_rule_detection"},{"description":"","name":"generate_dr_rule_respond"},{"description":"","name":"generate_lcql_query"},{"description":"","name":"generate_python_playbook","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Endpoint tasking and playbooks can execute privileged security operations on managed systems.; Hidden/dynamic actions may reach additional High capabilities not visible in the record."}},{"description":"","name":"generate_sensor_selector"},{"description":"","name":"get_artifact"},{"description":"","name":"get_autoruns"},{"description":"","name":"get_billing_details"},{"description":"","name":"get_cloud_sensor"},{"description":"","name":"get_detection"},{"description":"","name":"get_detection_rules"},{"description":"","name":"get_dr_general_rule"},{"description":"","name":"get_dr_managed_rule"},{"description":"","name":"get_drivers"},{"description":"","name":"get_event_schema"},{"description":"","name":"get_event_schemas_batch"},{"description":"","name":"get_event_types_with_schemas"},{"description":"","name":"get_event_types_with_schemas_for_platform"},{"description":"","name":"get_extension_config"},{"description":"","name":"get_extension_schema"},{"description":"","name":"get_external_adapter"},{"description":"","name":"get_fp_rule"},{"description":"","name":"get_fp_rules"},{"description":"","name":"get_group_info"},{"description":"","name":"get_historic_detections"},{"description":"","name":"get_historic_events"},{"description":"","name":"get_investigation"},{"description":"","name":"get_lookup"},{"description":"","name":"get_mitre_report"},{"description":"","name":"get_network_connections"},{"description":"","name":"get_online_sensors"},{"description":"","name":"get_org_errors"},{"description":"","name":"get_org_info"},{"description":"","name":"get_org_invoice_url"},{"description":"","name":"get_org_note"},{"description":"","name":"get_org_urls"},{"description":"","name":"get_os_version"},{"description":"","name":"get_packages"},{"description":"","name":"get_payload"},{"description":"","name":"get_platform_names"},{"description":"","name":"get_playbook"},{"description":"","name":"get_process_modules"},{"description":"","name":"get_process_strings"},{"description":"","name":"get_processes"},{"description":"","name":"get_registry_keys"},{"description":"","name":"get_rule"},{"description":"","name":"get_saved_query"},{"description":"","name":"get_secret"},{"description":"","name":"get_sensor_info"},{"description":"","name":"get_services"},{"description":"","name":"get_sku_definitions"},{"description":"","name":"get_sop"},{"description":"","name":"get_time_when_sensor_has_data"},{"description":"","name":"get_usage_stats"},{"description":"","name":"get_users"},{"description":"","name":"get_users_permissions"},{"description":"","name":"get_yara_rule"},{"description":"","name":"is_isolated"},{"description":"","name":"is_online"},{"description":"","name":"isolate_network"},{"description":"","name":"lc_call_tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Endpoint tasking and playbooks can execute privileged security operations on managed systems.; Hidden/dynamic actions may reach additional High capabilities not visible in the record."}},{"description":"","name":"list_api_keys"},{"description":"","name":"list_artifacts"},{"description":"","name":"list_cloud_sensors"},{"description":"","name":"list_dr_general_rules"},{"description":"","name":"list_dr_managed_rules"},{"description":"","name":"list_extension_configs"},{"description":"","name":"list_external_adapters"},{"description":"","name":"list_groups"},{"description":"","name":"list_groups_detailed"},{"description":"","name":"list_installation_keys"},{"description":"","name":"list_investigations"},{"description":"","name":"list_lookups"},{"description":"","name":"list_org_notes"},{"description":"","name":"list_org_users"},{"description":"","name":"list_outputs"},{"description":"","name":"list_payloads"},{"description":"","name":"list_playbooks"},{"description":"","name":"list_reliable_tasks"},{"description":"","name":"list_rules"},{"description":"","name":"list_saved_queries"},{"description":"","name":"list_secrets"},{"description":"","name":"list_sensor_tags"},{"description":"","name":"list_sensors"},{"description":"","name":"list_sops"},{"description":"","name":"list_user_orgs"},{"description":"","name":"list_velociraptor_artifacts"},{"description":"","name":"list_with_platform"},{"description":"","name":"list_yara_rules"},{"description":"","name":"query_lookup"},{"description":"","name":"rejoin_network"},{"description":"","name":"reliable_tasking","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Endpoint tasking and playbooks can execute privileged security operations on managed systems.; Hidden/dynamic actions may reach additional High capabilities not visible in the record."}},{"description":"","name":"remove_group_member"},{"description":"","name":"remove_group_owner"},{"description":"","name":"remove_org_from_group"},{"description":"","name":"remove_org_user"},{"description":"","name":"remove_tag"},{"description":"","name":"remove_user_permission","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and security-administration actions."}},{"description":"","name":"run_lcql_query"},{"description":"","name":"run_lcql_query_free"},{"description":"","name":"run_saved_query"},{"description":"","name":"search_hosts"},{"description":"","name":"search_iocs"},{"description":"","name":"set_cloud_sensor"},{"description":"","name":"set_dr_general_rule"},{"description":"","name":"set_dr_managed_rule"},{"description":"","name":"set_extension_config"},{"description":"","name":"set_external_adapter"},{"description":"","name":"set_fp_rule"},{"description":"","name":"set_group_permissions"},{"description":"","name":"set_investigation"},{"description":"","name":"set_lookup"},{"description":"","name":"set_org_note"},{"description":"","name":"set_playbook"},{"description":"","name":"set_rule"},{"description":"","name":"set_saved_query"},{"description":"","name":"set_secret"},{"description":"","name":"set_sop"},{"description":"","name":"set_user_role","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential and security-administration actions."}},{"description":"","name":"set_yara_rule"},{"description":"","name":"show_velociraptor_artifact"},{"description":"","name":"subscribe_to_extension"},{"description":"","name":"test_tool"},{"description":"","name":"unsubscribe_from_extension"},{"description":"","name":"validate_dr_rule_components"},{"description":"","name":"validate_lcql_query"},{"description":"","name":"validate_yara_rule"},{"description":"","name":"who_am_i"},{"description":"","name":"yara_scan_directory"},{"description":"","name":"yara_scan_file"},{"description":"","name":"yara_scan_memory"},{"description":"","name":"yara_scan_process","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Endpoint tasking and playbooks can execute privileged security operations on managed systems.; Hidden/dynamic actions may reach additional High capabilities not visible in the record."}}],"tools_count":175,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b9b7e1a5-378f-40bb-a752-ab0a8df595f0","uuid":"84f98a3a-b720-5617-acad-7960061b30d6","verification_tier":"community","version":""},"query_key":"limacharlie limacharlie","schema_version":1,"status":"match"}