{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Optilogic supports supply-chain modeling and scenario analysis. Use agents and data models to explore networks, sourcing, inventory, transport, and risk. A free or paid account is required; tools can modify databases, files, and shared artifacts.","did":"807907b4-7fca-484b-9a7b-d0d2cbf50227","documentation_url":"https://optilogic.com/resources/help-center/docs/getting-started-with-the-ada-claude-connector","editorial_description":{"extended_description":"Workflows include demand, safety-stock, tariff, and disruption scenarios. Tools manage agent sessions, team context, file sharing or deletion, database queries and writes, and model artifacts.","schema_version":1,"summary":"Optilogic supports supply-chain modeling and scenario analysis.\nUse agents and data models to explore networks, sourcing, inventory, transport, and risk.\nA free or paid account is required; tools can modify databases, files, and shared artifacts."},"homepage_url":"","icon":"https://cdn.optilogic.app/web/assets/optilogic-logo-icon-color.png","id":"807907b4-7fca-484b-9a7b-d0d2cbf50227","installs":0,"last_scanned":"","license":"","long_description":"Workflows include demand, safety-stock, tariff, and disruption scenarios. Tools manage agent sessions, team context, file sharing or deletion, database queries and writes, and model artifacts.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These explicit tools remove durable workspace resources.","reasoning":"They can destroy supply-chain models, artifacts or project content.","risk_type":"data_deletion","severity":"high","title":"Deletes files and folders","triggering_tools_or_skills":["delete_file","delete_folder"]},{"evidence":"The tools explicitly share workspace content externally or with collaborators.","reasoning":"Sharing communicates/grants access as the authenticated user.","risk_type":"messaging_as_user","severity":"high","title":"Shares files and folders with other people","triggering_tools_or_skills":["share_file","share_folder"]},{"evidence":"The packet exposes generic database query/write tools without a documented query language or read-only restriction.","reasoning":"Unbounded database statements can read or alter sensitive model data.","risk_type":"query_execution","severity":"high","title":"Executes database queries and writes","triggering_tools_or_skills":["query_database","write_database"]},{"evidence":"The agent’s available actions and side effects are not enumerated in the Directory tool list.","reasoning":"A server-side agent can hide high-impact operations beyond the declared wrapper tools.","risk_type":"generic_gateway","severity":"high","title":"Starts and prompts autonomous platform agents","triggering_tools_or_skills":["start_agent_session","prompt_agent","get_agent_response"]},{"evidence":"These tools broadly write workspace files and generated artifacts.","reasoning":"They materially alter supply-chain project content.","risk_type":"file_write","severity":"medium","title":"Creates, edits, uploads, moves and saves files/artifacts","triggering_tools_or_skills":["copy_file","edit_file","upload_file","move_file","save_artifacts"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a free or paid Optilogic account is required; team switching, file sharing, database access and agent permissions follow the connected account but exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/807907b4-7fca-484b-9a7b-d0d2cbf50227.json","what_it_proves":"Candidate PR #125 record identity (name \"Optilogic\", publisher, type web_connector) and 37 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/807907b4-7fca-484b-9a7b-d0d2cbf50227: complete tool_names inventory (37 tools), remote streamable-http endpoint https://mcp.optilogic.app/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Optilogic deletes/shares files, exposes generic database execution and delegates work to opaque server-side agents.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:807907b4-7fca-484b-9a7b-d0d2cbf50227","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 37 tools. The documentation lookup did not provide schemas or agent action bounds; publication should enumerate database statement restrictions, share recipients and agent capabilities.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":37,"tools_or_skills_total":37},"name":"Optilogic","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=807907b4-7fca-484b-9a7b-d0d2cbf50227&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://optilogic.com/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Optilogic","publisher_url":"https://optilogic.com/","remote_url":"https://mcp.optilogic.app/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can destroy supply-chain models, artifacts or project content.","evidence":"Deletes files and folders: These explicit tools remove durable workspace resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes files and folders","triggering_tools":["delete_file","delete_folder"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Sharing communicates/grants access as the authenticated user.","evidence":"Shares files and folders with other people: The tools explicitly share workspace content externally or with collaborators.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Shares files and folders with other people","triggering_tools":["share_file","share_folder"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded database statements can read or alter sensitive model data.; A server-side agent can hide high-impact operations beyond the declared wrapper tools.","evidence":"Executes database queries and writes: The packet exposes generic database query/write tools without a documented query language or read-only restriction. | Starts and prompts autonomous platform agents: The agent’s available actions and side effects are not enumerated in the Directory tool list.","manual_risk_type":"query_execution,generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["query_database","write_database","start_agent_session","prompt_agent","get_agent_response"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They materially alter supply-chain project content.","evidence":"Creates, edits, uploads, moves and saves files/artifacts: These tools broadly write workspace files and generated artifacts.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Creates, edits, uploads, moves and saves files/artifacts","triggering_tools":["copy_file","edit_file","upload_file","move_file","save_artifacts"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@optilogic.com","tags":["accesses_messaging","deletes_data","filesystem_access","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"copy_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially alter supply-chain project content."}},{"description":"","name":"create_database"},{"description":"","name":"delete_file","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy supply-chain models, artifacts or project content."}},{"description":"","name":"delete_folder","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can destroy supply-chain models, artifacts or project content."}},{"description":"","name":"end_agent_session"},{"description":"","name":"get_account"},{"description":"","name":"get_agent_response","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded database statements can read or alter sensitive model data.; A server-side agent can hide high-impact operations beyond the declared wrapper tools."}},{"description":"","name":"list_agents"},{"description":"","name":"list_artifacts"},{"description":"","name":"list_database_templates"},{"description":"","name":"list_databases"},{"description":"","name":"list_files"},{"description":"","name":"list_team_members"},{"description":"","name":"list_teams"},{"description":"","name":"move_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially alter supply-chain project content."}},{"description":"","name":"prompt_agent","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded database statements can read or alter sensitive model data.; A server-side agent can hide high-impact operations beyond the declared wrapper tools."}},{"description":"","name":"read_artifact"},{"description":"","name":"read_file"},{"description":"","name":"rename_database"},{"description":"","name":"save_artifacts","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially alter supply-chain project content."}},{"description":"","name":"share_file","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Sharing communicates/grants access as the authenticated user."}},{"description":"","name":"share_folder","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Sharing communicates/grants access as the authenticated user."}},{"description":"","name":"start_agent_session","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded database statements can read or alter sensitive model data.; A server-side agent can hide high-impact operations beyond the declared wrapper tools."}},{"description":"","name":"switch_team"},{"description":"","name":"update_database_description"},{"description":"","name":"upload_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially alter supply-chain project content."}},{"description":"","name":"list_conversations"},{"description":"","name":"get_conversation_history"},{"description":"","name":"rename_conversation"},{"description":"","name":"edit_file","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially alter supply-chain project content."}},{"description":"","name":"preview_file"},{"description":"","name":"search_files"},{"description":"","name":"list_tables"},{"description":"","name":"describe_table"},{"description":"","name":"show_database"},{"description":"","name":"query_database","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded database statements can read or alter sensitive model data.; A server-side agent can hide high-impact operations beyond the declared wrapper tools."}},{"description":"","name":"write_database","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Unbounded database statements can read or alter sensitive model data.; A server-side agent can hide high-impact operations beyond the declared wrapper tools."}}],"tools_count":37,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/807907b4-7fca-484b-9a7b-d0d2cbf50227","uuid":"4919fa03-003d-550a-9100-c19851ac90b3","verification_tier":"community","version":""},"query_key":"optilogic optilogic","schema_version":1,"status":"match"}