{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"AFAS AI Connect gives Claude access to selected AFAS Profit administrations. Analyze finance, inventory, sales, purchasing, customer, and production data. Write actions are prepared as drafts and require explicit confirmation before execution in AFAS Profit.","did":"4f981b4a-41ad-4ef7-8174-2095818faf3a","documentation_url":"https://www.iwebdevelopment.com/kennisbank/tag/ai","editorial_description":{"extended_description":"Supported workflows include receivables analysis, stock checks, draft journal entries and invoices, purchase orders, business-relation updates, and production-hour registration. You select connected administrations and can revoke access. The connector uses the AFAS Profit API without requiring installations inside Profit.","schema_version":1,"summary":"AFAS AI Connect gives Claude access to selected AFAS Profit administrations.\nAnalyze finance, inventory, sales, purchasing, customer, and production data.\nWrite actions are prepared as drafts and require explicit confirmation before execution in AFAS Profit."},"homepage_url":"","icon":"https://www.iwebdevelopment.com/hubfs/favicon.png","id":"4f981b4a-41ad-4ef7-8174-2095818faf3a","installs":0,"last_scanned":"","license":"","long_description":"Supported workflows include receivables analysis, stock checks, draft journal entries and invoices, purchase orders, business-relation updates, and production-hour registration. You select connected administrations and can revoke access. The connector uses the AFAS Profit API without requiring installations inside Profit.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Inventory discovers endpoints then executes generic operations.","reasoning":"Reachable operation set is dynamic and may include High actions.","risk_type":"generic_gateway","severity":"high","title":"Generic write and read operations expose hidden AFAS endpoints","triggering_tools_or_skills":["write_operation","read_operation","get_scope_endpoints"]},{"evidence":"Generic operations are not bounded by schemas in the packet.","reasoning":"Broad backend operation execution is conservatively High.","risk_type":"query_execution","severity":"high","title":"Can execute broad data analysis/operations","triggering_tools_or_skills":["analyze_data","read_operation","write_operation"]},{"evidence":"Tool name declares account-data writes.","reasoning":"Meaningful ERP changes are possible.","risk_type":"data_modification","severity":"medium","title":"Explicit generic write capability","triggering_tools_or_skills":["write_operation"]},{"evidence":"No authorization scope boundaries are provided.","reasoning":"Tenant and operation boundaries need verification.","risk_type":"authz_ambiguity","severity":"low","title":"Administration and endpoint scopes are unknown","triggering_tools_or_skills":["select_administration","get_scope_endpoints"]}],"assessment_status":"provisional","auth_and_scopes":"Authenticated AFAS administration access is implied; endpoint/write scopes are undocumented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4f981b4a-41ad-4ef7-8174-2095818faf3a.json","what_it_proves":"Candidate PR #125 record identity (name \"AFAS AI Connect, by iWebDevelopment\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4f981b4a-41ad-4ef7-8174-2095818faf3a: complete tool_names inventory (14 tools), remote streamable-http endpoint https://mcp-afas.iwebdevelopment.com/, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"AFAS AI Connect provides dynamic endpoint discovery and generic write execution.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:4f981b4a-41ad-4ef7-8174-2095818faf3a","reviewed_at":"2026-10-10","reviewer_notes":"All 14 names reviewed; publish only with an explicit operation allowlist and schemas.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"AFAS AI Connect, by iWebDevelopment","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4f981b4a-41ad-4ef7-8174-2095818faf3a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.iwebdevelopment.com/privacybeleid","provisional_risk":null,"publication_recommendation":"fix","publisher":"iWebDevelopment","publisher_url":"https://www.iwebdevelopment.com/ai-connect","remote_url":"https://mcp-afas.iwebdevelopment.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Reachable operation set is dynamic and may include High actions.; Broad backend operation execution is conservatively High.","evidence":"Generic write and read operations expose hidden AFAS endpoints: Inventory discovers endpoints then executes generic operations. | Can execute broad data analysis/operations: Generic operations are not bounded by schemas in the packet.","manual_risk_type":"generic_gateway,query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["write_operation","read_operation","get_scope_endpoints","analyze_data"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful ERP changes are possible.","evidence":"Explicit generic write capability: Tool name declares account-data writes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Explicit generic write capability","triggering_tools":["write_operation"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@iwebdevelopment.com","tags":["modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"analyze_data","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Reachable operation set is dynamic and may include High actions.; Broad backend operation execution is conservatively High."}},{"description":"","name":"read_operation","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Reachable operation set is dynamic and may include High actions.; Broad backend operation execution is conservatively High."}},{"description":"","name":"get_assistant_guidelines"},{"description":"","name":"get_entity_schema"},{"description":"","name":"get_provider_capabilities"},{"description":"","name":"get_scope_endpoints","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Reachable operation set is dynamic and may include High actions.; Broad backend operation execution is conservatively High."}},{"description":"","name":"get_started"},{"description":"","name":"list_administrations"},{"description":"","name":"list_available_tables"},{"description":"","name":"list_scopes"},{"description":"","name":"search_endpoints"},{"description":"","name":"select_administration"},{"description":"","name":"set_context"},{"description":"","name":"write_operation","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Reachable operation set is dynamic and may include High actions.; Broad backend operation execution is conservatively High."}}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4f981b4a-41ad-4ef7-8174-2095818faf3a","uuid":"63d7e4ff-21ba-51b6-9bc9-7bd38644920c","verification_tier":"community","version":""},"query_key":"afas ai connect by iwebdevelopment","schema_version":1,"status":"match"}