Microsoft Copilot security directory

Azure Cosmos DB

Published by Microsoft

High risk

Azure Cosmos DB is a globally distributed multi-model database service designed to enable you to elastically and independently scale throughput and storage across any number of geographical regions with a comprehensive SLA.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Can execute code or queries: This connector can run arbitrary queries or code against a database or execution engine. An AI-generated query could be manipulated to exfiltrate, corrupt, or destroy data.

Available capabilities

This add-on exposes 11 tools or capabilities.

  • Create or update document (V2) [DEPRECATED]
  • Create or update document (V3)
  • Create or update document [DEPRECATED]
  • Create stored procedure (V2)
  • Create stored procedure [DEPRECATED]
  • Delete a document (V2)
  • Delete a document [DEPRECATED]
  • Delete stored procedure (V2)
  • Delete stored procedure [DEPRECATED]
  • Execute stored procedure (V2)
  • Execute stored procedure [DEPRECATED]
  • Get a document (V2)
  • Get a document [DEPRECATED]
  • Get all documents (V3)
  • Get all documents [DEPRECATED]
  • Get all documents V2 [DEPRECATED]
  • Get stored procedures (V2)
  • Get stored procedures [DEPRECATED]
  • Query documents [DEPRECATED]
  • Query documents V2 [DEPRECATED]
  • Query documents V3 [DEPRECATED]
  • Query documents V4 [DEPRECATED]
  • Query documents V5
  • Replace a document (V2)

The interactive security report will load automatically.