{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Build and manage barcode-tracking systems with Orca Scan. Create sheets and fields, query or update records and customize tracking workflows. Manage users, automation triggers and integrations through your connected account.","did":"14740053-58ff-4b9a-a3a6-63f86d1d391b","documentation_url":"https://orcascan.com/guides","editorial_description":{"extended_description":"The inventory supports record history, webhook management, field changes and batch row updates. Sheets and rows can be cleared or deleted. The source mentions barcode labels, but the provided inventory does not identify a dedicated label-generation tool.","schema_version":1,"summary":"Build and manage barcode-tracking systems with Orca Scan.\nCreate sheets and fields, query or update records and customize tracking workflows.\nManage users, automation triggers and integrations through your connected account."},"homepage_url":"","icon":"","id":"14740053-58ff-4b9a-a3a6-63f86d1d391b","installs":0,"last_scanned":"","license":"","long_description":"The inventory supports record history, webhook management, field changes and batch row updates. Sheets and rows can be cleared or deleted. The source mentions barcode labels, but the provided inventory does not identify a dedicated label-generation tool.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares deletion and clearing across core barcode-system resources.","reasoning":"These actions can permanently destroy operational data and automation configuration.","risk_type":"data_deletion","severity":"high","title":"Deletes fields, hooks, rows, sheets and triggers","triggering_tools_or_skills":["orca_fields_delete","orca_hooks_delete","orca_rows_delete_many","orca_rows_delete_one","orca_sheets_clear","orca_sheets_delete","orca_triggers_delete"]},{"evidence":"The connector exposes user membership creation, removal and update operations.","reasoning":"These are administrative access-control actions.","risk_type":"credential_admin","severity":"high","title":"Adds, removes and updates account users","triggering_tools_or_skills":["orca_users_add","orca_users_remove","orca_users_update"]},{"evidence":"The named tools change fields, hooks, rows, settings, sheets and triggers.","reasoning":"They persist broad changes to shared inventory and scanning systems.","risk_type":"data_modification","severity":"medium","title":"Creates and updates barcode-system data and automation","triggering_tools_or_skills":["orca_fields_create","orca_fields_update","orca_hooks_create","orca_hooks_update","orca_rows_add","orca_rows_update_many","orca_settings_update","orca_sheets_create","orca_sheets_rename","orca_triggers_create","orca_triggers_update"]},{"evidence":"Hook tools configure event-driven integration endpoints, but allowed target schemes and domains are not described.","reasoning":"A caller may be able to direct event delivery to a chosen network endpoint.","risk_type":"arbitrary_network_access","severity":"low","title":"Creates outbound hooks with undocumented targets","triggering_tools_or_skills":["orca_hooks_create","orca_hooks_update"]},{"evidence":"Barcode rows and history contain data entered by scanners and workspace users.","reasoning":"Returned row text can contain adversarial instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Scanned row data is user-controlled","triggering_tools_or_skills":["orca_rows_get","orca_rows_list","orca_history_row"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes sheets, rows, hooks, triggers and users to an Orca Scan account; role boundaries and webhook URL restrictions are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/14740053-58ff-4b9a-a3a6-63f86d1d391b.json","what_it_proves":"Candidate PR #125 record identity (name \"Orca Scan\", publisher, type web_connector) and 37 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/14740053-58ff-4b9a-a3a6-63f86d1d391b: complete tool_names inventory (37 tools), remote streamable-http endpoint https://mcp.orcascan.com/, auth_posture auth_required, directory tier community"}],"primary_reason":"Declared tools delete core data and administer Orca Scan users, in addition to broad writes and webhook creation.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:14740053-58ff-4b9a-a3a6-63f86d1d391b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 37 names. Runtime verification should establish user-role permissions, webhook target validation and confirmation for bulk deletion and sheet clearing.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"false"},"tools_or_skills_reviewed":37,"tools_or_skills_total":37},"name":"Orca Scan","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=14740053-58ff-4b9a-a3a6-63f86d1d391b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://orcascan.com/legal/orca-scan-privacy-policy-e6ce39fb","provisional_risk":null,"publication_recommendation":"accept","publisher":"Orca Scan","publisher_url":"https://orcascan.com/","remote_url":"https://mcp.orcascan.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration.","evidence":"Deletes fields, hooks, rows, sheets and triggers: The complete inventory explicitly declares deletion and clearing across core barcode-system resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes fields, hooks, rows, sheets and triggers","triggering_tools":["orca_fields_delete","orca_hooks_delete","orca_rows_delete_many","orca_rows_delete_one","orca_sheets_clear","orca_sheets_delete","orca_triggers_delete"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems.","evidence":"Adds, removes and updates account users: The connector exposes user membership creation, removal and update operations. | Creates and updates barcode-system data and automation: The named tools change fields, hooks, rows, settings, sheets and triggers.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["orca_users_add","orca_users_remove","orca_users_update","orca_fields_create","orca_fields_update","orca_hooks_create","orca_hooks_update","orca_rows_add","orca_rows_update_many","orca_settings_update","orca_sheets_create","orca_sheets_rename","orca_triggers_create","orca_triggers_update"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: A caller may be able to direct event delivery to a chosen network endpoint.","evidence":"Creates outbound hooks with undocumented targets: Hook tools configure event-driven integration endpoints, but allowed target schemes and domains are not described.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Creates outbound hooks with undocumented targets","triggering_tools":["orca_hooks_create","orca_hooks_update"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@orcascan.com","tags":["accesses_calendar","deletes_data","forwards_data_to_third_party","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"orca_fields_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_fields_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration."}},{"description":"","name":"orca_fields_get"},{"description":"","name":"orca_fields_list"},{"description":"","name":"orca_fields_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_history_row"},{"description":"","name":"orca_history_sheet"},{"description":"","name":"orca_hooks_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_hooks_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration."}},{"description":"","name":"orca_hooks_events"},{"description":"","name":"orca_hooks_get"},{"description":"","name":"orca_hooks_list"},{"description":"","name":"orca_hooks_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_rows_add","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_rows_delete_many","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration."}},{"description":"","name":"orca_rows_delete_one","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration."}},{"description":"","name":"orca_rows_get"},{"description":"","name":"orca_rows_list"},{"description":"","name":"orca_rows_update_many","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_rows_update_one"},{"description":"","name":"orca_settings_get"},{"description":"","name":"orca_settings_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_sheets_clear","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration."}},{"description":"","name":"orca_sheets_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_sheets_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration."}},{"description":"","name":"orca_sheets_list"},{"description":"","name":"orca_sheets_rename","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_triggers_create","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_triggers_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy operational data and automation configuration."}},{"description":"","name":"orca_triggers_get"},{"description":"","name":"orca_triggers_list"},{"description":"","name":"orca_triggers_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_users_add","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_users_list"},{"description":"","name":"orca_users_remove","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"orca_users_update","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are administrative access-control actions.; They persist broad changes to shared inventory and scanning systems."}},{"description":"","name":"ping"}],"tools_count":37,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/14740053-58ff-4b9a-a3a6-63f86d1d391b","uuid":"099b3be6-65ae-5f48-af37-5e515305b03c","verification_tier":"community","version":""},"query_key":"orca scan orca scan","schema_version":1,"status":"match"}