{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage Storyblok CMS content from Claude. Search, create, update and publish stories, components or digital assets. Discover supported operations for releases, tags and data sources in your workspace.","did":"1a0ae3af-9916-49e9-8417-0cdcbfb754ae","documentation_url":"https://www.storyblok.com/docs/libraries/mcp-server","editorial_description":{"extended_description":"The connector looks up an operation and its parameters before executing it through separate read, mutation and destructive interfaces. Asset upload is supported. Publishing or destructive actions can affect live content.","schema_version":1,"summary":"Manage Storyblok CMS content from Claude.\nSearch, create, update and publish stories, components or digital assets.\nDiscover supported operations for releases, tags and data sources in your workspace."},"homepage_url":"","icon":"","id":"1a0ae3af-9916-49e9-8417-0cdcbfb754ae","installs":0,"last_scanned":"","license":"","long_description":"The connector looks up an operation and its parameters before executing it through separate read, mutation and destructive interfaces. Asset upload is supported. Publishing or destructive actions can affect live content.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory includes discovery plus a generic execute_destructive gateway rather than enumerated destructive operations.","reasoning":"It explicitly reaches destructive actions against meaningful CMS resources, while hiding exact targets and safeguards.","risk_type":"data_deletion","severity":"high","title":"Executes dynamically selected destructive Storyblok actions","triggering_tools_or_skills":["describe","execute_destructive"]},{"evidence":"The connector discovers operations through describe and invokes them through generic executors.","reasoning":"Static review cannot enumerate the reachable action catalogue or detect future server-side additions.","risk_type":"generic_gateway","severity":"high","title":"Mutation and read action sets are dynamically hidden","triggering_tools_or_skills":["describe","execute_mutating","execute_readonly"]},{"evidence":"Two explicit tools perform and finalize asset upload.","reasoning":"They persist content in the connected CMS.","risk_type":"data_modification","severity":"medium","title":"Uploads assets into Storyblok","triggering_tools_or_skills":["upload_asset","upload_asset_finish"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication reaches an unspecified Storyblok space; generic execute tools do not disclose actions, scopes, content environments or confirmation controls.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1a0ae3af-9916-49e9-8417-0cdcbfb754ae.json","what_it_proves":"Candidate PR #125 record identity (name \"Storyblok\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1a0ae3af-9916-49e9-8417-0cdcbfb754ae: complete tool_names inventory (7 tools), remote streamable-http endpoint https://mcp.storyblok.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Storyblok exposes explicit destructive and mutating generic gateways whose reachable action set is not captured.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:1a0ae3af-9916-49e9-8417-0cdcbfb754ae","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 7 names. Publish the describe action catalogue, per-action schemas/scopes and confirmation behavior; refresh whenever server-side operations change.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"true","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"unknown","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Storyblok","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1a0ae3af-9916-49e9-8417-0cdcbfb754ae&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.storyblok.com/legal/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Storyblok","publisher_url":"https://www.storyblok.com/","remote_url":"https://mcp.storyblok.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: It explicitly reaches destructive actions against meaningful CMS resources, while hiding exact targets and safeguards.","evidence":"Executes dynamically selected destructive Storyblok actions: The complete inventory includes discovery plus a generic execute_destructive gateway rather than enumerated destructive operations.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Executes dynamically selected destructive Storyblok actions","triggering_tools":["describe","execute_destructive"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Static review cannot enumerate the reachable action catalogue or detect future server-side additions.","evidence":"Mutation and read action sets are dynamically hidden: The connector discovers operations through describe and invokes them through generic executors.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Mutation and read action sets are dynamically hidden","triggering_tools":["describe","execute_mutating","execute_readonly"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist content in the connected CMS.","evidence":"Uploads assets into Storyblok: Two explicit tools perform and finalize asset upload.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Uploads assets into Storyblok","triggering_tools":["upload_asset","upload_asset_finish"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.storyblok.com/","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"describe","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Static review cannot enumerate the reachable action catalogue or detect future server-side additions."}},{"description":"","name":"execute_destructive","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: It explicitly reaches destructive actions against meaningful CMS resources, while hiding exact targets and safeguards."}},{"description":"","name":"execute_mutating","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Static review cannot enumerate the reachable action catalogue or detect future server-side additions."}},{"description":"","name":"execute_readonly","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Static review cannot enumerate the reachable action catalogue or detect future server-side additions."}},{"description":"","name":"search"},{"description":"","name":"upload_asset","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist content in the connected CMS."}},{"description":"","name":"upload_asset_finish","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist content in the connected CMS."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1a0ae3af-9916-49e9-8417-0cdcbfb754ae","uuid":"fee35dea-bdad-5cbf-8621-3b7b138eb2ce","verification_tier":"community","version":""},"query_key":"storyblok","schema_version":1,"status":"match"}