{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Webdock manages cloud servers and application infrastructure from Claude. Provision or resize servers, inspect metrics, run scripts, and manage databases or snapshots. Authenticated tools can also change access settings, reinstall servers, or delete resources.","did":"87487f23-1faa-4a80-9ed0-68168983aaa9","documentation_url":"https://docs.webdock.io/mcp-guides/","editorial_description":{"extended_description":"Manage server power, SSH users and keys, monitoring, backups, certificates, hooks, and WordPress installation or updates on European infrastructure.","schema_version":1,"summary":"Webdock manages cloud servers and application infrastructure from Claude.\nProvision or resize servers, inspect metrics, run scripts, and manage databases or snapshots.\nAuthenticated tools can also change access settings, reinstall servers, or delete resources."},"homepage_url":"","icon":"https://webdock.io/__l5e/assets-v1/caf6c3ef-cb17-4af5-821f-800a75325d0f/webdock-logo.svg","id":"87487f23-1faa-4a80-9ed0-68168983aaa9","installs":0,"last_scanned":"","license":"","long_description":"Manage server power, SSH users and keys, monitoring, backups, certificates, hooks, and WordPress installation or updates on European infrastructure.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector can create/execute scripts against managed servers.","reasoning":"This is arbitrary remote code execution with server access.","risk_type":"code_execution","severity":"high","title":"Executes server scripts and changes server files","triggering_tools_or_skills":["webdock_execute_server_script","webdock_create_server_script","webdock_patch_user_script","webdock_fetch_server_file"]},{"evidence":"These actions materially change live cloud infrastructure and applications.","reasoning":"They can provision, replace or disrupt production systems.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates, reinstalls, resizes, starts/stops and reconfigures servers","triggering_tools_or_skills":["webdock_create_server","webdock_reinstall_server","webdock_resize_server","webdock_start_server","webdock_stop_server","webdock_restore_snapshot","webdock_install_wordpress"]},{"evidence":"These tools destroy infrastructure, data and access resources.","reasoning":"Their impact is irreversible or operationally severe.","risk_type":"data_deletion","severity":"high","title":"Deletes servers, databases, snapshots, keys and users","triggering_tools_or_skills":["webdock_delete_server","webdock_delete_server_mysql_database","webdock_delete_server_snapshot_by_id","webdock_delete_public_key","webdock_delete_shell_user"]},{"evidence":"These tools grant/revoke server access and change authentication/network protections.","reasoning":"They are privileged security-administration actions.","risk_type":"credential_admin","severity":"high","title":"Manages SSH keys, shell users, passwords and security controls","triggering_tools_or_skills":["webdock_post_public_keys","webdock_post_server_shell_users","webdock_post_server_shell_user_reset_password","webdock_post_server_ssh_settings","webdock_enable_basic_auth","webdock_set_ip_banned_state"]},{"evidence":"Provisioning/resizing cloud capacity can change recurring infrastructure charges.","reasoning":"It can incur paid-resource commitments.","risk_type":"financial_transaction","severity":"high","title":"Creates and resizes billable cloud servers","triggering_tools_or_skills":["webdock_create_server","webdock_resize_server"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a Webdock cloud account is required; the inventory includes account, server, script, database, key, shell-user and monitoring administration.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/87487f23-1faa-4a80-9ed0-68168983aaa9.json","what_it_proves":"Candidate PR #125 record identity (name \"mcp.webdock.io\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/87487f23-1faa-4a80-9ed0-68168983aaa9: complete tool_names inventory (96 tools), remote streamable-http endpoint https://mcp.webdock.io/, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://docs.webdock.io/mcp-guides/","what_it_proves":"Official Webdock MCP guide index confirms the hosted connector is for authenticated interaction with Webdock cloud servers across supported MCP clients."}],"primary_reason":"Webdock provides remote code execution, cloud provisioning/destruction and privileged server credential administration.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:87487f23-1faa-4a80-9ed0-68168983aaa9","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 97 tools. Dry-run/status tools are safe retrieval, but the broad production-control surface remains High regardless of confirmations.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":96,"tools_or_skills_total":96},"name":"mcp.webdock.io","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=87487f23-1faa-4a80-9ed0-68168983aaa9&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://docs.webdock.io/general-information/legal-stuff/privacy-policy-gdpr","provisional_risk":null,"publication_recommendation":"accept","publisher":"Webdock.io","publisher_url":"https://webdock.io/","remote_url":"https://mcp.webdock.io/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: This is arbitrary remote code execution with server access.","evidence":"Executes server scripts and changes server files: The connector can create/execute scripts against managed servers.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes server scripts and changes server files","triggering_tools":["webdock_execute_server_script","webdock_create_server_script","webdock_patch_user_script","webdock_fetch_server_file"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They can provision, replace or disrupt production systems.","evidence":"Creates, reinstalls, resizes, starts/stops and reconfigures servers: These actions materially change live cloud infrastructure and applications.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates, reinstalls, resizes, starts/stops and reconfigures servers","triggering_tools":["webdock_create_server","webdock_reinstall_server","webdock_resize_server","webdock_start_server","webdock_stop_server","webdock_restore_snapshot","webdock_install_wordpress"]},{"description":"This connector can permanently remove data or resources. Review findings: Their impact is irreversible or operationally severe.","evidence":"Deletes servers, databases, snapshots, keys and users: These tools destroy infrastructure, data and access resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes servers, databases, snapshots, keys and users","triggering_tools":["webdock_delete_server","webdock_delete_server_mysql_database","webdock_delete_server_snapshot_by_id","webdock_delete_public_key","webdock_delete_shell_user"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security-administration actions.","evidence":"Manages SSH keys, shell users, passwords and security controls: These tools grant/revoke server access and change authentication/network protections.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Manages SSH keys, shell users, passwords and security controls","triggering_tools":["webdock_post_public_keys","webdock_post_server_shell_users","webdock_post_server_shell_user_reset_password","webdock_post_server_ssh_settings","webdock_enable_basic_auth","webdock_set_ip_banned_state"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: It can incur paid-resource commitments.","evidence":"Creates and resizes billable cloud servers: Provisioning/resizing cloud capacity can change recurring infrastructure charges.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Creates and resizes billable cloud servers","triggering_tools":["webdock_create_server","webdock_resize_server"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@webdock.io","tags":["accesses_calendar","code_deployment","deletes_data","modifies_data","network_access","oauth_required","runs_code","spends_money","web_connector"],"tools":[{"description":"","name":"webdock_archive_server"},{"description":"","name":"webdock_block_search_engines"},{"description":"","name":"webdock_change_server_ip"},{"description":"","name":"webdock_check_wordpress_updates"},{"description":"","name":"webdock_create_profile"},{"description":"","name":"webdock_create_server","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: It can incur paid-resource commitments."}},{"description":"","name":"webdock_create_server_mysql_database"},{"description":"","name":"webdock_create_server_script","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: This is arbitrary remote code execution with server access."}},{"description":"","name":"webdock_create_snapshot"},{"description":"","name":"webdock_create_user_script"},{"description":"","name":"webdock_crete_hook"},{"description":"","name":"webdock_delete_global_monitoring_rule"},{"description":"","name":"webdock_delete_hook_by_id"},{"description":"","name":"webdock_delete_profile"},{"description":"","name":"webdock_delete_public_key","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Their impact is irreversible or operationally severe."}},{"description":"","name":"webdock_delete_server","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Their impact is irreversible or operationally severe."}},{"description":"","name":"webdock_delete_server_monitoring"},{"description":"","name":"webdock_delete_server_mysql_database","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Their impact is irreversible or operationally severe."}},{"description":"","name":"webdock_delete_server_script_by_id"},{"description":"","name":"webdock_delete_server_snapshot_by_id","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Their impact is irreversible or operationally severe."}},{"description":"","name":"webdock_delete_shell_user","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Their impact is irreversible or operationally severe."}},{"description":"","name":"webdock_delete_user_script"},{"description":"","name":"webdock_disable_basic_auth"},{"description":"","name":"webdock_disable_database_backup_on_disk"},{"description":"","name":"webdock_disable_ipv6"},{"description":"","name":"webdock_disable_server_monitoring"},{"description":"","name":"webdock_enable_basic_auth","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security-administration actions."}},{"description":"","name":"webdock_enable_database_backup_on_disk"},{"description":"","name":"webdock_enable_ipv6"},{"description":"","name":"webdock_event_callbacks_hooks"},{"description":"","name":"webdock_execute_server_script","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: This is arbitrary remote code execution with server access."}},{"description":"","name":"webdock_fetch_server_file","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: This is arbitrary remote code execution with server access."}},{"description":"","name":"webdock_get_account_information"},{"description":"","name":"webdock_get_all_snapshots"},{"description":"","name":"webdock_get_database_backup_on_disk_status"},{"description":"","name":"webdock_get_events"},{"description":"","name":"webdock_get_global_monitoring_rule"},{"description":"","name":"webdock_get_hook_by_id"},{"description":"","name":"webdock_get_instant_metrics"},{"description":"","name":"webdock_get_monitoring_overview"},{"description":"","name":"webdock_get_ping"},{"description":"","name":"webdock_get_platforms"},{"description":"","name":"webdock_get_public_keys"},{"description":"","name":"webdock_get_scripts"},{"description":"","name":"webdock_get_server_by_slug"},{"description":"","name":"webdock_get_server_ip_blocks"},{"description":"","name":"webdock_get_server_metrics"},{"description":"","name":"webdock_get_server_metrics_warnings_overview"},{"description":"","name":"webdock_get_server_monitoring"},{"description":"","name":"webdock_get_server_mysql_databases"},{"description":"","name":"webdock_get_server_script_by_id"},{"description":"","name":"webdock_get_server_scripts"},{"description":"","name":"webdock_get_server_shell_users"},{"description":"","name":"webdock_get_server_snapshot_by_id"},{"description":"","name":"webdock_get_server_snapshots"},{"description":"","name":"webdock_get_servers"},{"description":"","name":"webdock_get_servers_images"},{"description":"","name":"webdock_get_servers_locations"},{"description":"","name":"webdock_get_servers_profiles"},{"description":"","name":"webdock_get_user_script_by_id"},{"description":"","name":"webdock_get_user_scripts"},{"description":"","name":"webdock_inspect_ip_block"},{"description":"","name":"webdock_install_wordpress","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can provision, replace or disrupt production systems."}},{"description":"","name":"webdock_lockdown_wordpress"},{"description":"","name":"webdock_patch_account_information"},{"description":"","name":"webdock_patch_global_monitoring_rule"},{"description":"","name":"webdock_patch_server"},{"description":"","name":"webdock_patch_server_identity"},{"description":"","name":"webdock_patch_server_monitoring"},{"description":"","name":"webdock_patch_server_shell_users"},{"description":"","name":"webdock_patch_user_script","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: This is arbitrary remote code execution with server access."}},{"description":"","name":"webdock_post_public_keys","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security-administration actions."}},{"description":"","name":"webdock_post_server_shell_user_reset_password","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security-administration actions."}},{"description":"","name":"webdock_post_server_shell_users","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security-administration actions."}},{"description":"","name":"webdock_post_server_shell_users_webssh_token"},{"description":"","name":"webdock_post_server_ssh_settings","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security-administration actions."}},{"description":"","name":"webdock_reboot_server"},{"description":"","name":"webdock_register_wordpress_installation"},{"description":"","name":"webdock_reinstall_server","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can provision, replace or disrupt production systems."}},{"description":"","name":"webdock_resize_dry_run"},{"description":"","name":"webdock_resize_server","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: It can incur paid-resource commitments."}},{"description":"","name":"webdock_restore_snapshot","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can provision, replace or disrupt production systems."}},{"description":"","name":"webdock_run_certbot"},{"description":"","name":"webdock_run_database_backup_on_disk"},{"description":"","name":"webdock_set_bandwidth_overage_protection"},{"description":"","name":"webdock_set_ip_banned_state","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged security-administration actions."}},{"description":"","name":"webdock_set_server_settings"},{"description":"","name":"webdock_setup_wordpress_cli"},{"description":"","name":"webdock_start_server","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can provision, replace or disrupt production systems."}},{"description":"","name":"webdock_stop_server","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can provision, replace or disrupt production systems."}},{"description":"","name":"webdock_test_certbot"},{"description":"","name":"webdock_unblock_search_engines"},{"description":"","name":"webdock_uncancel_server"},{"description":"","name":"webdock_unlock_wordpress"},{"description":"","name":"webdock_update_database_backup_on_disk"},{"description":"","name":"webdock_update_wordpress"}],"tools_count":96,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/87487f23-1faa-4a80-9ed0-68168983aaa9","uuid":"4257e833-a96a-500a-ac09-da83bfd70ca9","verification_tier":"community","version":""},"query_key":"mcp webdock io","schema_version":1,"status":"match"}