{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-30","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Searches, reads and organizes files in your NetExplorer platform from Claude. Create folders, move or copy documents, save outputs and generate sharing or collection links. Read, write and sharing access follow administrator settings; the connector has no deletion action.","did":"2ac5795c-fcba-47f0-bafd-7295ff14ad66","documentation_url":"https://www.netexplorer.fr/blog/netexplorer-se-connecte-a-votre-ia-decouvrez-notre-connecteur-mcp","editorial_description":{"extended_description":"Find documents by text, meaning, name, date or recent activity, then read or download them. Sharing tools can email a file or create deposit links for people without accounts. Each user connects with their own NetExplorer profile and permissions.","schema_version":1,"summary":"Searches, reads and organizes files in your NetExplorer platform from Claude.\nCreate folders, move or copy documents, save outputs and generate sharing or collection links.\nRead, write and sharing access follow administrator settings; the connector has no deletion action."},"homepage_url":"","icon":"https://mcp.netexplorer.io/favicon.svg","id":"2ac5795c-fcba-47f0-bafd-7295ff14ad66","installs":0,"last_scanned":"","license":"","long_description":"Find documents by text, meaning, name, date or recent activity, then read or download them. Sharing tools can email a file or create deposit links for people without accounts. Each user connects with their own NetExplorer profile and permissions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly creates sharing/upload/deposit links and sends a share by email.","reasoning":"These actions expose private files or send external content as the user.","risk_type":"messaging_as_user","severity":"high","title":"Shares cloud files and emails share links","triggering_tools_or_skills":["share","share_by_email","create_deposit_link","create_upload_link","web_link"]},{"evidence":"The connector can create links granting read or upload/deposit access to cloud storage.","reasoning":"Generating access-bearing links changes authorization to private storage content.","risk_type":"credential_admin","severity":"high","title":"Changes access by creating externally usable links","triggering_tools_or_skills":["share","create_upload_link","create_deposit_link"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for NetExplorer cloud storage; exact roots, sharing permissions, expiration defaults and email-recipient restrictions are unknown.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/2ac5795c-fcba-47f0-bafd-7295ff14ad66.json","what_it_proves":"Candidate PR #125 record identity (name \"NetExplorer\", publisher, type web_connector) and 20 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/2ac5795c-fcba-47f0-bafd-7295ff14ad66: complete tool_names inventory (20 tools), remote streamable-http endpoint https://mcp.netexplorer.io/t/files.netexplorer.pro/N5wMiVeEbXIvPU5GPtQTK0d62Fb4soelGQ5KClWe173/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"NetExplorer can expose private cloud files through links and email them to external recipients.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:2ac5795c-fcba-47f0-bafd-7295ff14ad66","reviewed_at":"2026-10-10","reviewer_notes":"copy/move/rename/upload are Medium writes. Remote cloud-file access is not marked local filesystem access under the guide definition; verify root confinement and link expiry.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":20,"tools_or_skills_total":20},"name":"NetExplorer","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=2ac5795c-fcba-47f0-bafd-7295ff14ad66&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.netexplorer.fr/politique-protection-donnees","provisional_risk":null,"publication_recommendation":"accept","publisher":"NetExplorer","publisher_url":"https://www.netexplorer.fr/","remote_url":"https://mcp.netexplorer.io/t/files.netexplorer.pro/N5wMiVeEbXIvPU5GPtQTK0d62Fb4soelGQ5KClWe173/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: These actions expose private files or send external content as the user.","evidence":"Shares cloud files and emails share links: The inventory explicitly creates sharing/upload/deposit links and sends a share by email.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Shares cloud files and emails share links","triggering_tools":["share","share_by_email","create_deposit_link","create_upload_link","web_link"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Generating access-bearing links changes authorization to private storage content.","evidence":"Changes access by creating externally usable links: The connector can create links granting read or upload/deposit access to cloud storage.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Changes access by creating externally usable links","triggering_tools":["share","create_upload_link","create_deposit_link"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.netexplorer.fr/","tags":["modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"browse_folder"},{"description":"","name":"copy"},{"description":"","name":"create_deposit_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Generating access-bearing links changes authorization to private storage content."}},{"description":"","name":"create_folder"},{"description":"","name":"create_upload_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Generating access-bearing links changes authorization to private storage content."}},{"description":"","name":"download_file"},{"description":"","name":"file_info"},{"description":"","name":"get_path"},{"description":"","name":"list_roots"},{"description":"","name":"move"},{"description":"","name":"read_file"},{"description":"","name":"recent_files"},{"description":"","name":"rename"},{"description":"","name":"resolve_path"},{"description":"","name":"search"},{"description":"","name":"share","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Generating access-bearing links changes authorization to private storage content."}},{"description":"","name":"share_by_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions expose private files or send external content as the user."}},{"description":"","name":"upload_file"},{"description":"","name":"web_link","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions expose private files or send external content as the user."}},{"description":"","name":"whoami"}],"tools_count":20,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/2ac5795c-fcba-47f0-bafd-7295ff14ad66","uuid":"1887c3d2-b988-52ab-b9bb-5b51850cfe46","verification_tier":"community","version":""},"query_key":"netexplorer netexplorer","schema_version":1,"status":"match"}