Claude security directory

LatchBio

Published by LatchBio

High risk

The Latch MCP lets you connect Latch to Claude, allowing you to browse data, start bioinformatics workflows and monitor workflow executions. Run serverless bioinformatics pipelines written in Nextflow or Python without leaving Claude.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector can list and retrieve files, workflow details, execution metadata, and task logs, which may include sensitive biological, research, or operational data.
  • Can run commands or queries on your behalf: It can launch bioinformatics workflows (e.g., Nextflow/Python pipelines), which effectively executes compute jobs that may process data and produce outputs.
  • Can change or update your information: Launching workflows can create new executions and generated artifacts, changing the state of your workspace and potentially writing outputs to storage.
  • Stores long-lived access tokens: Connecting Claude to Latch typically requires saved credentials/tokens to access workspaces, files, and workflow execution APIs across sessions.

Available capabilities

This add-on exposes 9 tools or capabilities.

  • list_files
  • get_file
  • list_workflows
  • get_workflow_schema
  • launch_workflow
  • list_executions
  • get_execution
  • get_task_logs
  • list_workspaces

The interactive security report will load automatically.