Datasite

Yes, but only through one tool and only as a paid add-on. Datasite's skills repository states that searchDocuments is the only permitted source of document content, and that it returns text passages with document names and page numbers. It requires Blueflame AI Premium Search, which Datasite says must be enabled per project by a sales or support representative.

Yes. Anthropic's directory lists inviteUser, and Datasite's own documentation names inviting users to projects with specified roles and buyer or seller classifications as a connector feature. In a virtual data room, admitting the wrong party to confidential deal documents is the consequential act, so this is the tool to gate most carefully.

Only openid and profile. Datasite's RFC 9728 resource descriptor advertised exactly those two on 2026-08-22, and its Ping authorization server advertises openid, profile and email. All are OpenID identity claims. No scope separates reading a deal document from inviting a buyer or changing permissions on a folder.

No. Datasite's developer portal states the connector operates with the permissions of the authenticated user, cannot access projects the user lacks rights to, and cannot bypass or elevate existing access controls. The connector inherits your role rather than holding its own. An admin driving it therefore carries full admin reach.

Almost certainly multi-factor authentication. Datasite documents that accounts with MFA enforced at the project level cannot reach those projects through the connector, and that the connector blocks the attempt and tells the user to log in at datasite.com directly. This is a deliberate gate, not a fault, and there is no connector-side workaround.

About an hour. Datasite's developer portal states that its OAuth 2.0 flow with PKCE issues a time-limited Bearer token used for all subsequent API calls, and that sessions are valid for approximately 60 minutes before re-authentication is needed. Long unattended runs across a large data room will therefore hit a re-authentication prompt.

Not through the connector. Datasite's own smart-file-renaming skill states plainly that renaming is irreversible through this interface and that updateContent must not be called until the user explicitly confirms. The tool takes a metadata ID and a new name, so a bulk rename pass applies file by file with no undo path exposed.

One published workflow does. Datasite's risk-analysis-audit skill instructs the agent to extract top customer and vendor names from data room documents and run public web searches on each. That routes counterparty names from a confidential deal to a search engine. The step is optional, and no MCP tool performs it.

Yes. Datasite's developer portal states that all connector activity is logged for security and compliance purposes, and that Datasite may log connector activity under its API Program Terms. Datasite also cites AES-256 encryption in transit and at rest, ISO/IEC 27001 certification, SOC 2 Type II attestation and GDPR compliance for the underlying platform.