Claude security directory

Boltz API

Published by Boltz

High risk

The official Model Context Protocol (MCP) server for the Boltz API. Predict molecular structures and binding interactions, screen small-molecule and protein libraries against a target, and design small molecules and protein binders — all from chat. Each workflow estimates cost before running, then downloads structured results to your workspace when the job completes.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can retrieve job statuses and download structured results, which may include sensitive research inputs/outputs (e.g., proprietary sequences, compound libraries, or target information) stored in your workspace.
  • Can run commands or queries on your behalf: Starting prediction/screening workflows triggers remote computational jobs on the Boltz service; while not local code execution, it initiates powerful processing actions that could be misused to run unintended analyses.
  • Can spend money on your behalf: The connector can start paid screening/prediction jobs (after an estimate), potentially incurring costs if invoked unintentionally or at large scale.
  • Sends your data to outside companies: Inputs such as protein sequences, target structures, or compound/protein libraries must be sent to the Boltz API service to run predictions and screens.
  • Stores long-lived access tokens: Using the Boltz API typically requires an API key or token to authenticate requests, which may be stored for ongoing access to run jobs and fetch results.

Available capabilities

This add-on exposes 10 tools or capabilities.

  • boltz_estimate_protein_screen
  • boltz_estimate_small_molecule_screen
  • boltz_estimate_structure_and_binding
  • boltz_get_guidance
  • boltz_get_job_status
  • boltz_get_screen_results
  • boltz_get_structure_and_binding_prediction
  • boltz_start_protein_screen
  • boltz_start_small_molecule_screen
  • boltz_start_structure_and_binding

The interactive security report will load automatically.