{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Scispot connects Claude to laboratory records and workflows. Inspect or update labsheet rows and work with experiments, protocols, and documentation. Authenticated tools can create record stubs, attach images, and link lab data to documents.","did":"8b70b0d4-05a3-46c8-9736-01f9582fae28","documentation_url":"https://community.scispot.com/en/articles/13977073-scispot-mcp-server-beta","editorial_description":{"extended_description":"Tools discover labspaces, locations, samples, templates, schemas, and folders and support large-file or image uploads. Document-writing tools add content to experiments and protocols.","schema_version":1,"summary":"Scispot connects Claude to laboratory records and workflows.\nInspect or update labsheet rows and work with experiments, protocols, and documentation.\nAuthenticated tools can create record stubs, attach images, and link lab data to documents."},"homepage_url":"","icon":"https://www.google.com/s2/favicons?domain=scispot.io","id":"8b70b0d4-05a3-46c8-9736-01f9582fae28","installs":0,"last_scanned":"","license":"","long_description":"Tools discover labspaces, locations, samples, templates, schemas, and folders and support large-file or image uploads. Document-writing tools add content to experiments and protocols.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"These tools create upload flows and attach images into lab records.","reasoning":"They persist external files in the regulated lab workspace.","risk_type":"file_write","severity":"medium","title":"Uploads and attaches lab images/files","triggering_tools_or_skills":["request_large_file_upload","upload_labspace_image","attach_uploaded_image_to_labspace_page"]},{"evidence":"These tools persist and alter scientific records and linkages.","reasoning":"They materially change production lab workflows/audit data but expose no deletion or publication tool.","risk_type":"data_modification","severity":"medium","title":"Creates/updates experiments, protocols, documentation and labsheet rows","triggering_tools_or_skills":["create_experiment_stub","create_protocol_stub","create_documentation_stub","write_to_experiment","write_to_protocol","write_to_documentation","add_labsheet_rows","update_labsheet_rows"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; labspace, labsheet, experiment, protocol and documentation access follows the connected Scispot account.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/8b70b0d4-05a3-46c8-9736-01f9582fae28.json","what_it_proves":"Candidate PR #125 record identity (name \"Scispot.io\", publisher, type web_connector) and 34 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/8b70b0d4-05a3-46c8-9736-01f9582fae28: complete tool_names inventory (34 tools), remote streamable-http endpoint https://mcp.scispot.io/, auth_posture auth_required, directory tier community"}],"primary_reason":"Scispot writes scientific/lab records and uploads files without exposing destructive or external-send actions.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:8b70b0d4-05a3-46c8-9736-01f9582fae28","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 34 tools. The beta documentation article could not be verified in search; no approve/release/delete/sample-control tool appears in the declared inventory.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":34,"tools_or_skills_total":34},"name":"Scispot.io","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=8b70b0d4-05a3-46c8-9736-01f9582fae28&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.scispot.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Scispot.io Inc","publisher_url":"https://www.scispot.com/","remote_url":"https://mcp.scispot.io/","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, change, export, or otherwise write files. Review findings: They persist external files in the regulated lab workspace.","evidence":"Uploads and attaches lab images/files: These tools create upload flows and attach images into lab records.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Uploads and attaches lab images/files","triggering_tools":["request_large_file_upload","upload_labspace_image","attach_uploaded_image_to_labspace_page"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool.","evidence":"Creates/updates experiments, protocols, documentation and labsheet rows: These tools persist and alter scientific records and linkages.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates experiments, protocols, documentation and labsheet rows","triggering_tools":["create_experiment_stub","create_protocol_stub","create_documentation_stub","write_to_experiment","write_to_protocol","write_to_documentation","add_labsheet_rows","update_labsheet_rows"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"cs@scispot.io","tags":["filesystem_access","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_labsheet_rows","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}},{"description":"","name":"attach_uploaded_image_to_labspace_page","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They persist external files in the regulated lab workspace."}},{"description":"","name":"create_documentation_stub","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}},{"description":"","name":"create_experiment_stub","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}},{"description":"","name":"create_protocol_stub","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}},{"description":"","name":"get_documentation"},{"description":"","name":"get_experiment"},{"description":"","name":"get_image_thumbnail"},{"description":"","name":"get_labsheet_row"},{"description":"","name":"get_labsheet_row_by_id"},{"description":"","name":"get_labsheet_schema"},{"description":"","name":"get_manifest"},{"description":"","name":"get_protocol"},{"description":"","name":"link_labsheet_to_documentation"},{"description":"","name":"link_labsheet_to_experiment"},{"description":"","name":"link_labsheet_to_protocol"},{"description":"","name":"list_documentations"},{"description":"","name":"list_experiment_page_templates"},{"description":"","name":"list_experiments"},{"description":"","name":"list_labflow_samples"},{"description":"","name":"list_labsheet_folders"},{"description":"","name":"list_labsheets"},{"description":"","name":"list_labspaces"},{"description":"","name":"list_locations"},{"description":"","name":"list_protocol_page_templates"},{"description":"","name":"list_protocols"},{"description":"","name":"request_large_file_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They persist external files in the regulated lab workspace."}},{"description":"","name":"search_labsheet_rows"},{"description":"","name":"update_labsheet_rows","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}},{"description":"","name":"update_labsheet_rows_by_id_column"},{"description":"","name":"upload_labspace_image","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They persist external files in the regulated lab workspace."}},{"description":"","name":"write_to_documentation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}},{"description":"","name":"write_to_experiment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}},{"description":"","name":"write_to_protocol","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change production lab workflows/audit data but expose no deletion or publication tool."}}],"tools_count":34,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/8b70b0d4-05a3-46c8-9736-01f9582fae28","uuid":"4d534c77-1e9a-5a8b-8d0d-68008c6ee528","verification_tier":"community","version":""},"query_key":"scispot io","schema_version":1,"status":"match"}