{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-28","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Advanced GSC analyzes SEO and traffic using connected Search Console and GA4 data. Compare queries, pages, conversions, and trends, and investigate ranking or traffic changes. Audit technical page details, backlinks, and search results, including AI Overviews and People Also Ask.","did":"5f1bcc22-6374-49e4-82a9-c8f770985dd2","documentation_url":"https://www.advancedgsc.com/mcp/docs","editorial_description":{"extended_description":"Tools inspect indexing, sitemaps, robots rules, redirects, headers, schema, and internal links. Analytics include landing pages, channels, devices, geography, cohorts, and retention; backlink tools compare datasets and competitor gaps. The connector also manages stored backlink datasets.","schema_version":1,"summary":"Advanced GSC analyzes SEO and traffic using connected Search Console and GA4 data.\nCompare queries, pages, conversions, and trends, and investigate ranking or traffic changes.\nAudit technical page details, backlinks, and search results, including AI Overviews and People Also Ask."},"homepage_url":"","icon":"https://www.advancedgsc.com/icon.png","id":"5f1bcc22-6374-49e4-82a9-c8f770985dd2","installs":0,"last_scanned":"","license":"","long_description":"Tools inspect indexing, sitemaps, robots rules, redirects, headers, schema, and internal links. Analytics include landing pages, channels, devices, geography, cohorts, and retention; backlink tools compare datasets and competitor gaps. The connector also manages stored backlink datasets.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The publisher permission statement explicitly says cached backlink datasets can be deleted, and the named pruning tool performs that operation.","reasoning":"Deleting a user-owned analysis dataset is destructive even though connected Google properties remain read-only.","risk_type":"data_deletion","severity":"high","title":"Prunes cached backlink datasets","triggering_tools_or_skills":["backlinks_prune_my_datasets"]},{"evidence":"Declared permissions say it can fetch public pages the user specifies, and the inventory includes page/header/redirect retrieval tools.","reasoning":"Caller-selected URLs give the hosted connector outbound network reach and return untrusted web content.","risk_type":"arbitrary_network_access","severity":"low","title":"Fetches and audits user-specified web pages","triggering_tools_or_skills":["bulk_seo_audit","fetch_robots_txt","get_page_content","inspect_http_headers","trace_redirects"]},{"evidence":"The permission statement identifies search-performance, analytics and Google account email data as accessible to the connector.","reasoning":"Search and analytics properties contain private business performance information.","risk_type":"private_data_read","severity":"low","title":"Reads private Search Console and GA4 analytics","triggering_tools_or_skills":["get_search_analytics","ga4_organic_conversions","ga4_traffic_overview","get_search_by_page_query"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth-style authenticated access is required; declared permissions say connected Search Console and GA4 properties are read-only.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5f1bcc22-6374-49e4-82a9-c8f770985dd2.json","what_it_proves":"Candidate PR #125 record identity (name \"Advanced GSC\", publisher, type interactive_connector) and 62 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5f1bcc22-6374-49e4-82a9-c8f770985dd2: complete tool_names inventory (62 tools), remote streamable-http endpoint https://www.advancedgsc.com/api/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"Advanced GSC can delete cached backlink datasets while reading private analytics and fetching arbitrary public URLs.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5f1bcc22-6374-49e4-82a9-c8f770985dd2","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 62 tools and publisher-declared permissions. Private-data access rests on the numerous GA4 and Search Console tools. Runtime verification should confirm URL restrictions and dataset-pruning confirmation.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":62,"tools_or_skills_total":62},"name":"Advanced GSC","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5f1bcc22-6374-49e4-82a9-c8f770985dd2&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.advancedgsc.com/mcp/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Advanced GSC","publisher_url":"https://www.advancedgsc.com/","remote_url":"https://www.advancedgsc.com/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a user-owned analysis dataset is destructive even though connected Google properties remain read-only.","evidence":"Prunes cached backlink datasets: The publisher permission statement explicitly says cached backlink datasets can be deleted, and the named pruning tool performs that operation.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Prunes cached backlink datasets","triggering_tools":["backlinks_prune_my_datasets"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Caller-selected URLs give the hosted connector outbound network reach and return untrusted web content.","evidence":"Fetches and audits user-specified web pages: Declared permissions say it can fetch public pages the user specifies, and the inventory includes page/header/redirect retrieval tools.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Fetches and audits user-specified web pages","triggering_tools":["bulk_seo_audit","fetch_robots_txt","get_page_content","inspect_http_headers","trace_redirects"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Search and analytics properties contain private business performance information.","evidence":"Reads private Search Console and GA4 analytics: The permission statement identifies search-performance, analytics and Google account email data as accessible to the connector.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private Search Console and GA4 analytics","triggering_tools":["get_search_analytics","ga4_organic_conversions","ga4_traffic_overview","get_search_by_page_query"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.advancedgsc.com/contact","tags":["accesses_messaging","deletes_data","forwards_data_to_third_party","interactive_connector","network_access","oauth_required","reads_private_data"],"tools":[{"description":"","name":"analyze_ai_overview"},{"description":"","name":"analyze_paa"},{"description":"","name":"audit_sitemap"},{"description":"","name":"backlinks_aggregate"},{"description":"","name":"backlinks_audit"},{"description":"","name":"backlinks_compare"},{"description":"","name":"backlinks_competitive_analysis"},{"description":"","name":"backlinks_gap"},{"description":"","name":"backlinks_intersect_datasets"},{"description":"","name":"backlinks_list_datasets"},{"description":"","name":"backlinks_prune_my_datasets","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a user-owned analysis dataset is destructive even though connected Google properties remain read-only."}},{"description":"","name":"backlinks_query"},{"description":"","name":"backlinks_summary"},{"description":"","name":"batch_url_inspection"},{"description":"","name":"bulk_seo_audit"},{"description":"","name":"bulk_test_urls_robots"},{"description":"","name":"check_indexing_issues"},{"description":"","name":"check_serp"},{"description":"","name":"check_urls_in_sitemaps"},{"description":"","name":"compare_search_periods"},{"description":"","name":"discover_sitemaps"},{"description":"","name":"explore_performance"},{"description":"","name":"fetch_robots_txt"},{"description":"","name":"find_keyword_cannibalization"},{"description":"","name":"ga4_cohort_retention"},{"description":"","name":"ga4_compare_periods"},{"description":"","name":"ga4_content_group_performance"},{"description":"","name":"ga4_device_breakdown"},{"description":"","name":"ga4_exit_pages"},{"description":"","name":"ga4_geo_breakdown"},{"description":"","name":"ga4_list_properties"},{"description":"","name":"ga4_new_vs_returning_organic"},{"description":"","name":"ga4_organic_conversions"},{"description":"","name":"ga4_organic_landing_pages"},{"description":"","name":"ga4_organic_trend"},{"description":"","name":"ga4_page_engagement_deep"},{"description":"","name":"ga4_property_info"},{"description":"","name":"ga4_realtime"},{"description":"","name":"ga4_site_search_terms"},{"description":"","name":"ga4_top_pages"},{"description":"","name":"ga4_traffic_by_channel"},{"description":"","name":"ga4_traffic_overview"},{"description":"","name":"get_advanced_search_analytics"},{"description":"","name":"get_capabilities"},{"description":"","name":"get_google_updates"},{"description":"","name":"get_internal_links"},{"description":"","name":"get_page_content"},{"description":"","name":"get_page_schema"},{"description":"","name":"get_page_seo_info"},{"description":"","name":"get_performance_overview"},{"description":"","name":"get_search_analytics"},{"description":"","name":"get_search_by_page_query"},{"description":"","name":"get_site_details"},{"description":"","name":"get_sitemap_details"},{"description":"","name":"get_sitemaps"},{"description":"","name":"inspect_http_headers"},{"description":"","name":"inspect_url_enhanced"},{"description":"","name":"list_properties"},{"description":"","name":"list_sitemaps_enhanced"},{"description":"","name":"serp_share_of_voice"},{"description":"","name":"test_url_robots"},{"description":"","name":"trace_redirects"}],"tools_count":62,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/5f1bcc22-6374-49e4-82a9-c8f770985dd2","uuid":"1dfaa185-619a-5a8e-b71c-8b3961b371bc","verification_tier":"community","version":""},"query_key":"advanced gsc","schema_version":1,"status":"match"}