{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-07","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"15d5c9867740b1686f341a73f95e6e8b823616e34e3e9b649f39896cf73c38e4","risk":"high"},"proposal_file":"final-evidence-proposals.json","rationale":"Low-confidence entry; High is supported, but for a different reason than the only visible card. The docs say graphql_execute is read/write and 'Mutations are real ... create, modify, or delete data in your account'. operations_list classifies operations by risk 'read | write | destructive | billing | admin'. The security page says the single mcp:full scope lets the assistant do anything the user can, 'including modifying and deleting animations'. Destructive deletion across shared team workspaces, plus admin/billing-class operations, as the user => High. The sole card, runs_code 'Can execute code, queries, or dynamic actions', mislabels a GraphQL API gateway as code execution (consistency anchor). Replace it with deletion and modification cards. Confidence is medium because specific admin/billing mutation names were not enumerated. Independent QA: bounded animation/project writes are Medium; the documented destructive delete action is the High driver.","review_key":"claudesec:a36072d7-6386-4515-83e1-d46739e4661c","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://docs.lottiefiles.com/en/platform/mcp","https://docs.lottiefiles.com/en/platform/mcp/tools","https://docs.lottiefiles.com/en/platform/mcp/security.md","https://mcp.lottiefiles.com/.well-known/oauth-protected-resource/mcp"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"LottieFiles connects its animation library and workspace to Claude. Search free Lottie animations, bring them into projects, and organize your workspace. The hosted connector uses OAuth and is available on every plan.","did":"a36072d7-6386-4515-83e1-d46739e4661c","documentation_url":"https://docs.lottiefiles.com/en/platform/mcp","editorial_description":{"extended_description":"","schema_version":1,"summary":"LottieFiles connects its animation library and workspace to Claude.\nSearch free Lottie animations, bring them into projects, and organize your workspace.\nThe hosted connector uses OAuth and is available on every plan."},"homepage_url":"","icon":"https://lottie.host/757f5deb-3164-45b7-98d5-1cf1075419c7/6R3VhJTUYi.svg","id":"a36072d7-6386-4515-83e1-d46739e4661c","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The tools discover schema/operations and execute a selected GraphQL request.","reasoning":"The complete runtime read/write/destructive surface is hidden.","risk_type":"generic_gateway","severity":"high","title":"Executes arbitrary discovered GraphQL operations","triggering_tools_or_skills":["schema_search","schema_details","operations_list","graphql_execute"]},{"evidence":"The generic executor accepts runtime operations.","reasoning":"Flexible query execution is High.","risk_type":"query_execution","severity":"high","title":"Executes flexible GraphQL queries/mutations","triggering_tools_or_skills":["graphql_execute"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes the LottieFiles workspace.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a36072d7-6386-4515-83e1-d46739e4661c.json","what_it_proves":"Candidate PR #125 record identity (name \"LottieFiles MCP\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a36072d7-6386-4515-83e1-d46739e4661c: complete tool_names inventory (4 tools), remote streamable-http endpoint https://mcp.lottiefiles.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"LottieFiles exposes a dynamic GraphQL gateway rather than fixed workspace actions.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:a36072d7-6386-4515-83e1-d46739e4661c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all four wrapper tools; official listing claims organization but exhaustive mutation schemas are required.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"LottieFiles MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a36072d7-6386-4515-83e1-d46739e4661c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://lottiefiles.com/page/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"LottieFiles","publisher_url":"https://lottiefiles.com/","remote_url":"https://mcp.lottiefiles.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"GraphQL mutations can delete animations and other account or workspace content using your LottieFiles permissions.","evidence":"Actions: graphql_execute. https://docs.lottiefiles.com/en/platform/mcp/tools — 'Mutations are real' callout: graphql_execute can run mutations that create, modify, or delete data; https://docs.lottiefiles.com/en/platform/mcp/security.md — 'The assistant acts as you ... including modifying and deleting animations'; scope mcp:full","risk_type":"deletes_data","severity":"high","title":"Deletes animations and workspace content"},{"description":"GraphQL mutations can create or modify animations, projects and workspace data while acting under your account permissions.","evidence":"Actions: graphql_execute. https://docs.lottiefiles.com/en/platform/mcp/tools — 'Mutations are real' callout: graphql_execute can run mutations that create, modify, or delete data; https://docs.lottiefiles.com/en/platform/mcp/security.md — 'The assistant acts as you ... including modifying and deleting animations'; scope mcp:full","risk_type":"modifies_data","severity":"medium","title":"Changes animation and workspace content"},{"description":"Retrieves your accessible LottieFiles workspaces, projects and animations.","evidence":"Actions: graphql_execute. https://docs.lottiefiles.com/en/platform/mcp — 'What You Can Do' - explore workspace","risk_type":"reads_private_data","severity":"medium","title":"Reads private animations and projects"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@lottiefiles.com","tags":["deletes_data","modifies_data","reads_private_data"],"tools":[{"description":"","name":"graphql_execute","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete runtime read/write/destructive surface is hidden.; Flexible query execution is High."}},{"description":"","name":"operations_list","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete runtime read/write/destructive surface is hidden.; Flexible query execution is High."}},{"description":"","name":"schema_details","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete runtime read/write/destructive surface is hidden.; Flexible query execution is High."}},{"description":"","name":"schema_search","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete runtime read/write/destructive surface is hidden.; Flexible query execution is High."}}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a36072d7-6386-4515-83e1-d46739e4661c","uuid":"c7018bb3-fbfc-504f-b612-5a8eef9f23b0","verification_tier":"community","version":""},"query_key":"lottiefiles lottiefiles mcp","schema_version":1,"status":"match"}