{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-14","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Explore your OpsLevel software catalog and standards in Claude. Read components, dependencies, teams, checks and linked documentation. The connector uses read-only access to your account.","did":"0df4aae7-2c7d-4919-91ac-deb84d5f8d78","documentation_url":"https://docs.opslevel.com/docs/mcp","editorial_description":{"extended_description":"Inventory tools also cover repositories, systems, domains and filters. Dependency and dependent lookups help understand relationships between components. Reading action metadata does not grant execution of those actions through this connector.","schema_version":1,"summary":"Explore your OpsLevel software catalog and standards in Claude.\nRead components, dependencies, teams, checks and linked documentation.\nThe connector uses read-only access to your account."},"homepage_url":"","icon":"","id":"0df4aae7-2c7d-4919-91ac-deb84d5f8d78","installs":0,"last_scanned":"","license":"","long_description":"Inventory tools also cover repositories, systems, domains and filters. Dependency and dependent lookups help understand relationships between components. Reading action metadata does not grant execution of those actions through this connector.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official docs confirm read access to architecture, relationships, documentation, infrastructure, repositories, teams, and users.","reasoning":"Internal service topology and ownership can be security-sensitive.","risk_type":"private_data_read","severity":"low","title":"Production architecture and ownership data are readable","triggering_tools_or_skills":["list_components","list_infrastructure_resources","list_repositories","list_systems","list_teams","list_users"]},{"evidence":"Tools return collaborator-authored technical documentation and catalog metadata.","reasoning":"Internal text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Documentation and repository metadata enter context","triggering_tools_or_skills":["list_documents","list_documents_on_component","get_opslevel_resource"]}],"assessment_status":"reviewed","auth_and_scopes":"OAuth to the user's OpsLevel account with read-only access to catalog resources allowed by existing account permissions.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"complete","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0df4aae7-2c7d-4919-91ac-deb84d5f8d78.json","what_it_proves":"Candidate PR #125 record identity (name \"OpsLevel\", publisher, type web_connector) and 17 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0df4aae7-2c7d-4919-91ac-deb84d5f8d78: complete tool_names inventory (17 tools), remote streamable-http endpoint https://app.opslevel.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:57:31Z","url_or_path":"https://docs.opslevel.com/do/docs/mcp","what_it_proves":"Official MCP documentation explicitly states the server currently uses read-only access and lists the supported account resource classes."}],"primary_reason":"Official documentation explicitly confirms all currently exposed OpsLevel MCP access is read-only.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:0df4aae7-2c7d-4919-91ac-deb84d5f8d78","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 17 names against official MCP docs; repository access is metadata and documentation retrieval, with no source mutation.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":17,"tools_or_skills_total":17},"name":"OpsLevel","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0df4aae7-2c7d-4919-91ac-deb84d5f8d78&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.opslevel.com/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Opslevel","publisher_url":"https://www.opslevel.com/","remote_url":"https://app.opslevel.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Internal service topology and ownership can be security-sensitive.","evidence":"Production architecture and ownership data are readable: Official docs confirm read access to architecture, relationships, documentation, infrastructure, repositories, teams, and users.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Production architecture and ownership data are readable","triggering_tools":["list_components","list_infrastructure_resources","list_repositories","list_systems","list_teams","list_users"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@opslevel.com","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"account_metadata"},{"description":"","name":"componentDependencies"},{"description":"","name":"componentDependents"},{"description":"","name":"get_opslevel_resource"},{"description":"","name":"list_campaigns"},{"description":"","name":"list_checks"},{"description":"","name":"list_components"},{"description":"","name":"list_documents"},{"description":"","name":"list_documents_on_component"},{"description":"","name":"list_domains"},{"description":"","name":"list_filters"},{"description":"","name":"list_infrastructure_resources"},{"description":"","name":"list_repositories"},{"description":"","name":"list_systems"},{"description":"","name":"list_teams"},{"description":"","name":"list_users"},{"description":"","name":"whoami"}],"tools_count":17,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0df4aae7-2c7d-4919-91ac-deb84d5f8d78","uuid":"3a289d25-60e0-5899-867f-1a93792b7cbe","verification_tier":"community","version":""},"query_key":"opslevel opslevel","schema_version":1,"status":"match"}