{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2026-07-05","analysis_method":"capability_triage","category":"Web Connector","description":"Model Context Protocol server for Ultipa Cloud and any self-managed Ultipa GQLDB instance. Provision and operate instances, run GQL queries and graph algorithms, manage backups and firewall rules, and","did":"ant-dir-ultipa","homepage_url":"","icon":"https://claude.ai/api/dxt/extensions/ant.dir.gh.ultipa.ultipa-mcp/versions/1.1.0/icon.png","id":"ant.dir.ultipa","installs":3565,"last_scanned":"2026-07-05","license":"","long_description":"Model Context Protocol server for Ultipa Cloud and any self-managed Ultipa GQLDB instance. Provision and operate instances, run GQL queries and graph algorithms, manage backups and firewall rules, and view metrics and billing — all through natural language.","name":"Ultipa","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ant-dir-ultipa&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"","publisher_url":"","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"The connector can access account details, instance logs/metrics, backups, billing/transactions, and database schema/data, which may contain sensitive operational or personal information.","risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"},{"description":"The connector can create/rename/upgrade/restart instances, modify firewall rules and backup schedules, and write/import database data and procedures.","risk_type":"modifies_data","severity":"medium","title":"Can change or update your information"},{"description":"The connector can delete instances, graphs, and backups, which may cause irreversible loss of infrastructure and stored data if used incorrectly or maliciously.","risk_type":"deletes_data","severity":"high","title":"Can permanently delete data"},{"description":"The connector can execute GQL queries and graph algorithms and can write procedures, enabling powerful actions that could exfiltrate data, alter datasets, or impact availability.","risk_type":"runs_code","severity":"high","title":"Can run commands or queries on your behalf"},{"description":"By provisioning and operating instances (and potentially triggering paid usage), the connector can increase costs; it also exposes billing, balance, and payment configuration surfaces.","risk_type":"spends_money","severity":"high","title":"Can spend money on your behalf"},{"description":"Managing cloud instances and database operations typically requires stored credentials; compromise of these tokens could grant broad access to infrastructure and data.","risk_type":"requires_persistent_credentials","severity":"medium","title":"Stores long-lived access tokens"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["deletes_data","modifies_data","reads_private_data","requires_persistent_credentials","runs_code","spends_money"],"tools":[{"description":"Fetches account details for the current Ultipa user/tenant.","name":"get_account"},{"description":"Lists Ultipa instances available in the account.","name":"list_instances"},{"description":"Lists previously deleted instances (e.g., recoverable or historical).","name":"list_deleted_instances"},{"description":"Retrieves configuration and status for a specific instance.","name":"get_instance"},{"description":"Retrieves access credentials for connecting to an instance.","name":"get_instance_credentials","risk":{"category":"privilege","level":"high","why":"Exposes secrets that can grant direct administrative access to databases/instances."}},{"description":"Lists supported deployment regions.","name":"list_regions"},{"description":"Lists available instance size/plan options.","name":"list_instance_sizes"},{"description":"Shows whether the account has enterprise features enabled.","name":"get_enterprise_status"},{"description":"Checks whether operational changes are currently locked for safety/compliance.","name":"get_operations_lock"},{"description":"Fetches trial state and related limits.","name":"get_trial_status"},{"description":"Retrieves the latest available Ultipa software/version information.","name":"get_latest_version"},{"description":"Provisions a new Ultipa instance.","name":"create_instance","risk":{"category":"financial","level":"high","why":"Creating instances can incur ongoing charges and allocate billable resources."}},{"description":"Changes the human-readable name of an instance.","name":"rename_instance","risk":{"category":"state_change","level":"medium","why":"Modifies instance metadata, which can affect identification and operations."}},{"description":"Pauses/suspends an instance to stop workload processing.","name":"pause_instance","risk":{"category":"state_change","level":"medium","why":"Can impact service availability by pausing production infrastructure."}},{"description":"Resumes a previously paused instance.","name":"resume_instance","risk":{"category":"state_change","level":"medium","why":"Changes instance operational state and may restart billable usage."}},{"description":"Restarts an instance.","name":"restart_instance","risk":{"category":"state_change","level":"medium","why":"Can cause downtime and disrupt workloads during restart."}},{"description":"Upgrades an instance to a newer Ultipa version.","name":"upgrade_version","risk":{"category":"state_change","level":"medium","why":"Changes runtime software and may introduce compatibility or availability risks."}},{"description":"Deletes an Ultipa instance.","name":"delete_instance","risk":{"category":"destructive","level":"high","why":"Permanently removes infrastructure and potentially all data hosted on the instance."}},{"description":"Resets the administrative password for an instance.","name":"reset_admin_password","risk":{"category":"privilege","level":"high","why":"Alters admin access controls and could enable account takeover of the database."}},{"description":"Sets the logging verbosity/level for an instance.","name":"set_log_level","risk":{"category":"state_change","level":"medium","why":"Changes logging behavior and could increase sensitive data exposure or reduce audit visibility."}},{"description":"Waits/polls until an instance reaches a specified status.","name":"wait_for_instance_status"},{"description":"Fetches real-time performance/health metrics for an instance.","name":"get_live_metrics"},{"description":"Retrieves historical performance/health metrics.","name":"get_metrics_history"},{"description":"Retrieves instance logs for troubleshooting and auditing.","name":"get_instance_logs"},{"description":"Lists alerts configured or generated in the account.","name":"list_alerts"},{"description":"Lists alerts for a specific instance.","name":"list_instance_alerts"},{"description":"Detects the caller's public IP address.","name":"get_my_ip"},{"description":"Lists firewall rules applied to an instance/account.","name":"list_firewall_rules"},{"description":"Adds a firewall rule to allow/deny network access.","name":"add_firewall_rule","risk":{"category":"state_change","level":"high","why":"Can open access to the database/instance or block legitimate access, affecting security and availability."}},{"description":"Removes an existing firewall rule.","name":"remove_firewall_rule","risk":{"category":"state_change","level":"high","why":"Can unintentionally expose services to the internet or weaken network controls."}},{"description":"Retrieves the current account balance.","name":"get_balance"},{"description":"Lists billing transactions for the account.","name":"list_transactions"},{"description":"Retrieves resource usage that may drive billing.","name":"get_usage"},{"description":"Retrieves configured payment method information.","name":"get_payment_method"},{"description":"Retrieves auto-reload/auto-top-up billing settings.","name":"get_auto_reload"},{"description":"Lists available backups for an instance.","name":"list_backups"},{"description":"Creates a new backup of an instance/database.","name":"create_backup","risk":{"category":"state_change","level":"medium","why":"Creates new sensitive backup artifacts and may increase storage costs."}},{"description":"Restores an instance/database from a backup.","name":"restore_backup","risk":{"category":"state_change","level":"high","why":"Overwrites current state and can cause data loss or operational disruption if restored incorrectly."}},{"description":"Configures automated backup scheduling.","name":"set_backup_schedule","risk":{"category":"state_change","level":"medium","why":"Changes backup behavior, impacting resilience, retention, and potential cost."}},{"description":"Deletes a backup artifact.","name":"delete_backup","risk":{"category":"destructive","level":"high","why":"Permanently removes recovery points, increasing the impact of future incidents."}},{"description":"Disables/clears the automated backup schedule.","name":"clear_backup_schedule","risk":{"category":"state_change","level":"medium","why":"Reduces resilience by stopping automated backups."}},{"description":"Tests connectivity to an instance/database endpoint.","name":"test_connection"},{"description":"Executes a GQL query against an Ultipa graph database.","name":"run_gql_query","risk":{"category":"code_execution","level":"high","why":"Queries can be used to extract sensitive data at scale or perform mutations depending on privileges."}},{"description":"Returns the execution plan or explanation for a GQL query.","name":"explain_query"},{"description":"Runs graph algorithms on data in an Ultipa instance.","name":"run_algo","risk":{"category":"code_execution","level":"high","why":"Algorithm execution can be compute-intensive and may expose or transform sensitive data."}},{"description":"Lists graphs/databases available within an instance.","name":"list_graphs"},{"description":"Retrieves schema information for a graph/database.","name":"describe_schema"},{"description":"Creates a new graph/database within an instance.","name":"create_graph","risk":{"category":"state_change","level":"medium","why":"Creates new database objects and can affect governance, quotas, and access control."}},{"description":"Deletes a graph/database within an instance.","name":"delete_graph","risk":{"category":"destructive","level":"high","why":"Permanently removes a database/graph and its stored data."}},{"description":"Writes or updates graph data (vertices/edges/properties).","name":"write_data","risk":{"category":"state_change","level":"high","why":"Can modify or corrupt datasets and potentially introduce malicious or incorrect records."}},{"description":"Imports bulk data into a graph database.","name":"import_data","risk":{"category":"state_change","level":"high","why":"Bulk loads can overwrite/poison datasets and may ingest sensitive data unintentionally."}},{"description":"Creates or updates stored procedures/routines in the database.","name":"write_procedure","risk":{"category":"code_execution","level":"high","why":"Stored procedures can embed powerful logic that persists and may enable hidden data access or destructive actions."}},{"description":"Retrieves the database engine version information.","name":"get_db_version"},{"description":"Retrieves database license information and status.","name":"get_db_license"},{"description":"Reloads or recalculates database statistics used for planning/optimization.","name":"reload_db_stats","risk":{"category":"state_change","level":"medium","why":"Changes optimizer/statistics state and can impact performance and stability."}},{"description":"Searches or fetches documentation references for Ultipa features.","name":"lookup_docs"}],"tools_count":56,"type":"web_connector","url":"","uuid":"ant.dir.gh.ultipa.ultipa-mcp","version":""},"query_key":"ultipa","schema_version":1,"status":"match"}