{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage Tigris object storage from connected AI workflows. Create or delete buckets, upload or retrieve objects, and inspect storage details. Use checkpoints, forks, restoration, and workspaces to manage versions or environments.","did":"e597d910-6c83-488e-ab1b-12b41ad029df","documentation_url":"https://www.tigrisdata.com/docs/mcp/remote/","editorial_description":{"extended_description":"Select an organization, browse objects or checkpoints, and generate signed object links. Tools can delete objects and tear down forks or workspaces.","schema_version":1,"summary":"Manage Tigris object storage from connected AI workflows.\nCreate or delete buckets, upload or retrieve objects, and inspect storage details.\nUse checkpoints, forks, restoration, and workspaces to manage versions or environments."},"homepage_url":"","icon":"","id":"e597d910-6c83-488e-ab1b-12b41ad029df","installs":0,"last_scanned":"","license":"","long_description":"Select an organization, browse objects or checkpoints, and generate signed object links. Tools can delete objects and tear down forks or workspaces.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit tools destructively remove storage/data.","reasoning":"These can cause irreversible loss.","risk_type":"data_deletion","severity":"high","title":"Buckets and objects can be deleted","triggering_tools_or_skills":["tigris_delete_bucket","tigris_delete_object"]},{"evidence":"The tool creates a bearer-style access capability to stored data.","reasoning":"Credential-like link issuance is sensitive.","risk_type":"credential_admin","severity":"high","title":"Signed object access URLs can be minted","triggering_tools_or_skills":["tigris_get_signed_object_url"]},{"evidence":"These tools manage cloud storage infrastructure.","reasoning":"They alter production data services.","risk_type":"deployment_infrastructure","severity":"high","title":"Buckets, workspaces, forks and restores can be created/controlled","triggering_tools_or_skills":["tigris_create_bucket","tigris_create_workspace","tigris_restore","tigris_teardown_workspace"]},{"evidence":"The connector writes arbitrary object content.","reasoning":"This changes stored data.","risk_type":"file_write","severity":"medium","title":"Objects can be uploaded","triggering_tools_or_skills":["tigris_put_object"]},{"evidence":"User-supplied files are returned.","reasoning":"They may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Stored objects enter model context","triggering_tools_or_skills":["tigris_get_object"]},{"evidence":"The connector runs at https://mcp.storage.dev/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"mcp.storage.dev is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes organizations, buckets and objects to Tigris permissions; signed-URL expiry and restore safeguards are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e597d910-6c83-488e-ab1b-12b41ad029df.json","what_it_proves":"Candidate PR #125 record identity (name \"mcp.storage.dev\", publisher, type web_connector) and 19 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e597d910-6c83-488e-ab1b-12b41ad029df: complete tool_names inventory (19 tools), remote streamable-http endpoint https://mcp.storage.dev/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Tigris MCP can delete cloud storage, mint signed URLs and manage restore/workspace infrastructure.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e597d910-6c83-488e-ab1b-12b41ad029df","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 19 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":19,"tools_or_skills_total":19},"name":"mcp.storage.dev","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e597d910-6c83-488e-ab1b-12b41ad029df&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.tigrisdata.com/docs/legal/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Tigris Data Inc","publisher_url":"https://tigrisdata.com/","remote_url":"https://mcp.storage.dev/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These can cause irreversible loss.","evidence":"Buckets and objects can be deleted: Explicit tools destructively remove storage/data.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Buckets and objects can be deleted","triggering_tools":["tigris_delete_bucket","tigris_delete_object"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential-like link issuance is sensitive.","evidence":"Signed object access URLs can be minted: The tool creates a bearer-style access capability to stored data.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Signed object access URLs can be minted","triggering_tools":["tigris_get_signed_object_url"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter production data services.","evidence":"Buckets, workspaces, forks and restores can be created/controlled: These tools manage cloud storage infrastructure.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Buckets, workspaces, forks and restores can be created/controlled","triggering_tools":["tigris_create_bucket","tigris_create_workspace","tigris_restore","tigris_teardown_workspace"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: This changes stored data.","evidence":"Objects can be uploaded: The connector writes arbitrary object content.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Objects can be uploaded","triggering_tools":["tigris_put_object"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"help@tigrisdata.com","tags":["code_deployment","deletes_data","filesystem_access","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"tigris_checkpoint"},{"description":"","name":"tigris_create_bucket","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter production data services."}},{"description":"","name":"tigris_create_forks"},{"description":"","name":"tigris_create_workspace","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter production data services."}},{"description":"","name":"tigris_delete_bucket","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can cause irreversible loss."}},{"description":"","name":"tigris_delete_object","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can cause irreversible loss."}},{"description":"","name":"tigris_get_bucket_details"},{"description":"","name":"tigris_get_object"},{"description":"","name":"tigris_get_object_details"},{"description":"","name":"tigris_get_signed_object_url","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Credential-like link issuance is sensitive."}},{"description":"","name":"tigris_list_buckets"},{"description":"","name":"tigris_list_checkpoints"},{"description":"","name":"tigris_list_objects"},{"description":"","name":"tigris_list_organizations"},{"description":"","name":"tigris_put_object","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This changes stored data."}},{"description":"","name":"tigris_restore","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter production data services."}},{"description":"","name":"tigris_select_organization"},{"description":"","name":"tigris_teardown_forks"},{"description":"","name":"tigris_teardown_workspace","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They alter production data services."}}],"tools_count":19,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e597d910-6c83-488e-ab1b-12b41ad029df","uuid":"80cde5d2-56c0-5f9d-808f-d3c9406a207a","verification_tier":"community","version":""},"query_key":"mcp storage dev","schema_version":1,"status":"match"}