Claude security directory

Porkbun

High risk

The official Porkbun MCP server exposes the Porkbun v3 API as native tools for AI agents. Register, renew, and transfer domains; manage DNS and DNSSEC records; retrieve SSL bundles; configure nameservers, glue, URL forwarding, and domain contacts; provision and deploy Secure Static Hosting; and subscribe to signed webhooks — all from your assistant. Built for autonomous use: write tools attach an Idempotency-Key so retries never double-charge, and per-key domain/IP allowlists let you scope a key to exactly what an agent should touch. The documentation-search and mock tools work with no credentials, and you can mint a free, isolated **sandbox** key to rehearse the full lifecycle without spending money or touching a real registry.

Security assessment

Plutonium assessed this desktop extension for permissions, capabilities, and security-relevant behavior.

  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can spend money on your behalf: This connector can complete purchases, bookings, or payments. A misused or hijacked prompt could result in real financial charges before you confirm.
  • Can run commands or queries on your behalf: This connector can execute scripts, shell commands, or arbitrary database queries. In a worst case, an attacker could install software, read files, or pull or change any data its login can reach.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Sends your data to outside companies: Anything you share with this connector flows through one or more third-party services. Those companies see, store, and may use the data according to their own policies.

Available capabilities

This add-on exposes 61 tools or capabilities.

  • ping
  • check_domain
  • get_registration_requirements
  • get_pricing
  • list_marketplace
  • list_domains
  • get_domain
  • get_balance
  • get_api_settings
  • get_nameservers
  • list_dns_records
  • list_dnssec_records
  • list_url_forwards
  • list_glue_records
  • list_transfers
  • get_transfer_status
  • get_ssl_bundle
  • get_contacts
  • register_domain
  • renew_domain
  • transfer_domain
  • update_auto_renew
  • update_nameservers
  • update_contacts

The interactive security report will load automatically.