{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Builds and tests app integrations inside your Pabbly Connect account. Create actions, triggers and dropdown lists, then test them against the vendor's real API. Integrations remain private until you publish them yourself in the Pabbly portal.","did":"28f5c43a-e56e-48d3-8fa6-53d683ec20fd","documentation_url":"https://docs.pabbly.com/pabbly/doc/pabbly-connect-test-docs-kamal-bce0j","editorial_description":{"extended_description":"The builder records endpoint details and agreed plans and works only on apps your account may edit. App credentials are entered through a Pabbly page rather than in the agent conversation. Testing can contact real vendor APIs, even though publishing is a separate manual action.","schema_version":1,"summary":"Builds and tests app integrations inside your Pabbly Connect account.\nCreate actions, triggers and dropdown lists, then test them against the vendor's real API.\nIntegrations remain private until you publish them yourself in the Pabbly portal."},"homepage_url":"","icon":"","id":"28f5c43a-e56e-48d3-8fa6-53d683ec20fd","installs":0,"last_scanned":"","license":"","long_description":"The builder records endpoint details and agreed plans and works only on apps your account may edit. App credentials are entered through a Pabbly page rather than in the agent conversation. Testing can contact real vendor APIs, even though publishing is a separate manual action.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares delete_function and delete_row.","reasoning":"These actions destructively remove integration logic or test data.","risk_type":"data_deletion","severity":"high","title":"Deletes integration functions and test rows","triggering_tools_or_skills":["delete_function","delete_row"]},{"evidence":"The integration builder can define/update functions, execute test_function and use live service connections.","reasoning":"Executing user-defined integration logic with connected-service access is code/action execution across arbitrary vendor endpoints.","risk_type":"code_execution","severity":"high","title":"Tests user-defined integration functions","triggering_tools_or_skills":["test_function","use_connection","get_function_calls"]},{"evidence":"The inventory explicitly requests authentication secrets, proposes/proves auth and creates connection links.","reasoning":"Handling live integration secrets and authorization connections is a powerful credential action.","risk_type":"credential_admin","severity":"high","title":"Collects authentication secrets and creates connection links","triggering_tools_or_skills":["request_auth_secrets","request_connection_link","propose_auth","prove_auth"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for Pabbly apps/connections; secret handling, connected-service scopes and test execution isolation are not described.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/28f5c43a-e56e-48d3-8fa6-53d683ec20fd.json","what_it_proves":"Candidate PR #125 record identity (name \"Pabbly Connect Integration Builder\", publisher, type web_connector) and 40 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/28f5c43a-e56e-48d3-8fa6-53d683ec20fd: complete tool_names inventory (40 tools), remote streamable-http endpoint https://connect.pabbly.com/backend/mcp/integration-builder, auth_posture auth_required, directory tier community"}],"primary_reason":"Pabbly's builder can delete functions, execute integration tests and handle live connection secrets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:28f5c43a-e56e-48d3-8fa6-53d683ec20fd","reviewed_at":"2026-10-10","reviewer_notes":"Generic connected actions create hidden network and authorization scope. Runtime verification should ensure secrets are never returned to the model and tests cannot invoke production-destructive vendor actions without confirmation.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":40,"tools_or_skills_total":40},"name":"Pabbly Connect Integration Builder","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=28f5c43a-e56e-48d3-8fa6-53d683ec20fd&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.pabbly.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Pabbly","publisher_url":"https://www.pabbly.com/","remote_url":"https://connect.pabbly.com/backend/mcp/integration-builder","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions destructively remove integration logic or test data.","evidence":"Deletes integration functions and test rows: The complete inventory explicitly declares delete_function and delete_row.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes integration functions and test rows","triggering_tools":["delete_function","delete_row"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing user-defined integration logic with connected-service access is code/action execution across arbitrary vendor endpoints.","evidence":"Tests user-defined integration functions: The integration builder can define/update functions, execute test_function and use live service connections.","manual_risk_type":"code_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Tests user-defined integration functions","triggering_tools":["test_function","use_connection","get_function_calls"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Handling live integration secrets and authorization connections is a powerful credential action.","evidence":"Collects authentication secrets and creates connection links: The inventory explicitly requests authentication secrets, proposes/proves auth and creates connection links.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Collects authentication secrets and creates connection links","triggering_tools":["request_auth_secrets","request_connection_link","propose_auth","prove_auth"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@pabbly.com","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"create_app"},{"description":"","name":"delete_function","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove integration logic or test data."}},{"description":"","name":"delete_row","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions destructively remove integration logic or test data."}},{"description":"","name":"get_action"},{"description":"","name":"get_app"},{"description":"","name":"get_endpoint_specs"},{"description":"","name":"get_examples"},{"description":"","name":"get_function"},{"description":"","name":"get_function_calls","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing user-defined integration logic with connected-service access is code/action execution across arbitrary vendor endpoints."}},{"description":"","name":"get_guidance"},{"description":"","name":"get_inbuilt_action"},{"description":"","name":"get_status"},{"description":"","name":"get_trigger"},{"description":"","name":"list_actions"},{"description":"","name":"list_apps"},{"description":"","name":"list_connections"},{"description":"","name":"list_functions"},{"description":"","name":"list_inbuilt_actions"},{"description":"","name":"list_triggers"},{"description":"","name":"propose_action"},{"description":"","name":"propose_app_details"},{"description":"","name":"propose_auth","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Handling live integration secrets and authorization connections is a powerful credential action."}},{"description":"","name":"propose_function"},{"description":"","name":"propose_inbuilt_action"},{"description":"","name":"propose_trigger"},{"description":"","name":"prove_auth","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Handling live integration secrets and authorization connections is a powerful credential action."}},{"description":"","name":"record_endpoint_spec"},{"description":"","name":"record_plan"},{"description":"","name":"record_vendor_note"},{"description":"","name":"request_auth_secrets","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Handling live integration secrets and authorization connections is a powerful credential action."}},{"description":"","name":"request_connection_link","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Handling live integration secrets and authorization connections is a powerful credential action."}},{"description":"","name":"skip_auth_proof"},{"description":"","name":"start_here"},{"description":"","name":"test_function","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing user-defined integration logic with connected-service access is code/action execution across arbitrary vendor endpoints."}},{"description":"","name":"test_row"},{"description":"","name":"update_action"},{"description":"","name":"update_function"},{"description":"","name":"update_inbuilt_action"},{"description":"","name":"update_trigger"},{"description":"","name":"use_connection","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Executing user-defined integration logic with connected-service access is code/action execution across arbitrary vendor endpoints."}}],"tools_count":40,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/28f5c43a-e56e-48d3-8fa6-53d683ec20fd","uuid":"f5e89011-785d-5694-839c-7ceb3e714fa5","verification_tier":"community","version":""},"query_key":"pabbly connect integration builder","schema_version":1,"status":"match"}