{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"WyberAi lets Claude create app projects, request builds or edits, and track progress. Inspect files and versions, restore earlier versions, and publish apps to live public URLs. It operates in your WyberAi account, with builds consuming account credits while reads are free.","did":"56f4fdd9-c526-4a91-b7b5-9310aacd6075","documentation_url":"https://wyberai.com/docs/integrations/claude-mcp","editorial_description":{"extended_description":"Tools manage project knowledge, inspect database status, execute SQL, duplicate or delete projects, and run security scans. Build requests use the same credit rates as the web editor.","schema_version":1,"summary":"WyberAi lets Claude create app projects, request builds or edits, and track progress.\nInspect files and versions, restore earlier versions, and publish apps to live public URLs.\nIt operates in your WyberAi account, with builds consuming account credits while reads are free."},"homepage_url":"","icon":"","id":"56f4fdd9-c526-4a91-b7b5-9310aacd6075","installs":0,"last_scanned":"","license":"","long_description":"Tools manage project knowledge, inspect database status, execute SQL, duplicate or delete projects, and run security scans. Build requests use the same credit rates as the web editor.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Description says builds/edits consume WyberAi credits and send_message queues them.","reasoning":"Paid credit consumption is High.","risk_type":"financial_transaction","severity":"high","title":"Build actions consume account credits","triggering_tools_or_skills":["send_message"]},{"evidence":"Tool explicitly executes SQL.","reasoning":"Arbitrary query execution is High.","risk_type":"query_execution","severity":"high","title":"Executes SQL","triggering_tools_or_skills":["execute_sql"]},{"evidence":"Description says finished apps are published live.","reasoning":"Deployment is High.","risk_type":"deployment_infrastructure","severity":"high","title":"Publishes apps to public URLs","triggering_tools_or_skills":["publish_project"]},{"evidence":"Tool explicitly deletes a project.","reasoning":"Deletion is High.","risk_type":"data_deletion","severity":"high","title":"Deletes projects","triggering_tools_or_skills":["delete_project"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability may drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/56f4fdd9-c526-4a91-b7b5-9310aacd6075.json","what_it_proves":"Candidate PR #125 record identity (name \"WyberAi\", publisher, type web_connector) and 20 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/56f4fdd9-c526-4a91-b7b5-9310aacd6075: complete tool_names inventory (20 tools), remote streamable-http endpoint https://wyberai.com/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"WyberAi spends credits on builds, executes SQL, publishes apps, sends build messages, and deletes projects.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:56f4fdd9-c526-4a91-b7b5-9310aacd6075","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":20,"tools_or_skills_total":20},"name":"WyberAi","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=56f4fdd9-c526-4a91-b7b5-9310aacd6075&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://wyberai.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"SignalPulse Technologies","publisher_url":"https://wyberai.com/","remote_url":"https://wyberai.com/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Paid credit consumption is High.","evidence":"Build actions consume account credits: Description says builds/edits consume WyberAi credits and send_message queues them.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Build actions consume account credits","triggering_tools":["send_message"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary query execution is High.","evidence":"Executes SQL: Tool explicitly executes SQL.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes SQL","triggering_tools":["execute_sql"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Deployment is High.","evidence":"Publishes apps to public URLs: Description says finished apps are published live.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Publishes apps to public URLs","triggering_tools":["publish_project"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion is High.","evidence":"Deletes projects: Tool explicitly deletes a project.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes projects","triggering_tools":["delete_project"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@wyberai.com","tags":["accesses_messaging","code_deployment","deletes_data","network_access","oauth_required","runs_code","spends_money","web_connector"],"tools":[{"description":"","name":"create_project"},{"description":"","name":"delete_project","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion is High."}},{"description":"","name":"duplicate_project"},{"description":"","name":"execute_sql","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary query execution is High."}},{"description":"","name":"get_account"},{"description":"","name":"get_database_status"},{"description":"","name":"get_message_status"},{"description":"","name":"get_project"},{"description":"","name":"get_project_knowledge"},{"description":"","name":"list_connectors"},{"description":"","name":"list_files"},{"description":"","name":"list_projects"},{"description":"","name":"list_versions"},{"description":"","name":"publish_project","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Deployment is High."}},{"description":"","name":"read_file"},{"description":"","name":"rename_project"},{"description":"","name":"restore_version"},{"description":"","name":"run_security_scan"},{"description":"","name":"send_message","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Paid credit consumption is High."}},{"description":"","name":"set_project_knowledge"}],"tools_count":20,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/56f4fdd9-c526-4a91-b7b5-9310aacd6075","uuid":"169d65ec-2231-5c0d-a027-4032c2813428","verification_tier":"community","version":""},"query_key":"signalpulse technologies wyberai","schema_version":1,"status":"match"}