{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Deploys and manages multiplayer game servers through PingCore. Create servers, change configurations, monitor status and logs, and restart or stop instances. Manage game mods, resource settings and scheduled operational tasks from Claude.","did":"1fe2988e-d605-42de-97e9-d639ebf07046","documentation_url":"https://pingcore.io/docs","editorial_description":{"extended_description":"Explore available games, deployment specifications and locations; inspect or update server memory, features and settings. Mod tools support search, installation, updates and removal. The connector also provides workflow guidance and can reinstall or delete servers.","schema_version":1,"summary":"Deploys and manages multiplayer game servers through PingCore.\nCreate servers, change configurations, monitor status and logs, and restart or stop instances.\nManage game mods, resource settings and scheduled operational tasks from Claude."},"homepage_url":"","icon":"https://pingcore.io/images/pingcore-favicon.png","id":"1fe2988e-d605-42de-97e9-d639ebf07046","installs":0,"last_scanned":"","license":"","long_description":"Explore available games, deployment specifications and locations; inspect or update server memory, features and settings. Mod tools support search, installation, updates and removal. The connector also provides workflow guidance and can reinstall or delete servers.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The declared tools materially provision and control hosted server infrastructure.","reasoning":"These actions can disrupt or replace live services.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates, reinstalls, restarts and reconfigures game servers","triggering_tools_or_skills":["create_server","reinstall_server","restart_server","stop_server","install_mod","uninstall_mod","update_mod","update_server_config","update_server_memory"]},{"evidence":"The inventory explicitly declares deletion of infrastructure and configuration.","reasoning":"These actions can permanently destroy deployed services and automation.","risk_type":"data_deletion","severity":"high","title":"Deletes servers, configs and scheduled tasks","triggering_tools_or_skills":["delete_server","delete_server_config","delete_server_task"]},{"evidence":"The connector can obtain a server credential and rotate an FTP password.","reasoning":"These are powerful credential operations.","risk_type":"credential_admin","severity":"high","title":"Reveals auth tokens and resets FTP passwords","triggering_tools_or_skills":["get_server_auth_token","reset_ftp_password"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication reaches Pingcore game servers, clusters, mods, configs, tasks and server credentials; infrastructure role and credential-reveal controls are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1fe2988e-d605-42de-97e9-d639ebf07046.json","what_it_proves":"Candidate PR #125 record identity (name \"Pingcore\", publisher, type web_connector) and 49 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1fe2988e-d605-42de-97e9-d639ebf07046: complete tool_names inventory (49 tools), remote streamable-http endpoint https://pingcore.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Pingcore provisions and destroys server infrastructure and reads/resets powerful credentials.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:1fe2988e-d605-42de-97e9-d639ebf07046","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 49 names. Verify confirmation, billing/plan effects of server creation, token redaction, mod source validation and recovery from reinstall/delete.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":49,"tools_or_skills_total":49},"name":"Pingcore","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1fe2988e-d605-42de-97e9-d639ebf07046&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://pingcore.io/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Thinkhuge","publisher_url":"https://thinkhuge.net/","remote_url":"https://pingcore.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services.","evidence":"Creates, reinstalls, restarts and reconfigures game servers: The declared tools materially provision and control hosted server infrastructure.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates, reinstalls, restarts and reconfigures game servers","triggering_tools":["create_server","reinstall_server","restart_server","stop_server","install_mod","uninstall_mod","update_mod","update_server_config","update_server_memory"]},{"description":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy deployed services and automation.","evidence":"Deletes servers, configs and scheduled tasks: The inventory explicitly declares deletion of infrastructure and configuration.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes servers, configs and scheduled tasks","triggering_tools":["delete_server","delete_server_config","delete_server_task"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential operations.","evidence":"Reveals auth tokens and resets FTP passwords: The connector can obtain a server credential and rotate an FTP password.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Reveals auth tokens and resets FTP passwords","triggering_tools":["get_server_auth_token","reset_ftp_password"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@pingcore.io","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"acknowledge_manual_mod"},{"description":"","name":"check_mod_updates"},{"description":"","name":"create_server","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"create_server_config"},{"description":"","name":"create_server_task"},{"description":"","name":"delete_server","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy deployed services and automation."}},{"description":"","name":"delete_server_config","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy deployed services and automation."}},{"description":"","name":"delete_server_task","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can permanently destroy deployed services and automation."}},{"description":"","name":"get_guide"},{"description":"","name":"get_mod_details"},{"description":"","name":"get_mod_download_url"},{"description":"","name":"get_server_auth_token","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential operations."}},{"description":"","name":"get_server_config"},{"description":"","name":"get_server_config_template"},{"description":"","name":"get_server_console_logs"},{"description":"","name":"get_server_job"},{"description":"","name":"get_server_resource_options"},{"description":"","name":"get_server_settings"},{"description":"","name":"get_server_status"},{"description":"","name":"get_server_task"},{"description":"","name":"install_mod","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"list_available_games"},{"description":"","name":"list_clusters"},{"description":"","name":"list_deployment_specs"},{"description":"","name":"list_installed_mods"},{"description":"","name":"list_locations"},{"description":"","name":"list_minecraft_versions"},{"description":"","name":"list_mod_collections"},{"description":"","name":"list_mod_providers"},{"description":"","name":"list_modloader_versions"},{"description":"","name":"list_server_configs"},{"description":"","name":"list_server_tasks"},{"description":"","name":"plan_mod_reconfigure"},{"description":"","name":"reinstall_server","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"rename_server"},{"description":"","name":"reset_ftp_password","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are powerful credential operations."}},{"description":"","name":"restart_server","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"search_mods"},{"description":"","name":"set_config_write_mode"},{"description":"","name":"set_mod_provider"},{"description":"","name":"stop_server","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"uninstall_mod","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"update_mod","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"update_server_config","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"update_server_features"},{"description":"","name":"update_server_memory","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions can disrupt or replace live services."}},{"description":"","name":"update_server_settings"},{"description":"","name":"update_server_task"},{"description":"","name":"whoami"}],"tools_count":49,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1fe2988e-d605-42de-97e9-d639ebf07046","uuid":"00b3e9a2-6caf-5163-b61c-be5cc94b25b7","verification_tier":"community","version":""},"query_key":"pingcore","schema_version":1,"status":"match"}