{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"AfterShip Post-Purchase brings shipment and return workflows into Claude. Inspect delivery timelines, exceptions, return items, refund progress, and RMA status. With confirmation, update shipments or move returns through approval, receiving, and resolution within your organization and role.","did":"5416a6ef-1df5-44a6-a9b0-fb90a57625d1","documentation_url":"https://www.aftership.com/docs/post-purchase-mcp","editorial_description":{"extended_description":"Shipment tools correct records, retrack parcels, and mark final status. Return tools approve or reject requests, receive items, add comments, resolve cases, and manage return allowlists or blocklists.","schema_version":1,"summary":"AfterShip Post-Purchase brings shipment and return workflows into Claude.\nInspect delivery timelines, exceptions, return items, refund progress, and RMA status.\nWith confirmation, update shipments or move returns through approval, receiving, and resolution within your organization and role."},"homepage_url":"","icon":"https://websites.am-static.com/assets/brands/glyph/aftership-colored.svg","id":"5416a6ef-1df5-44a6-a9b0-fb90a57625d1","installs":0,"last_scanned":"","license":"","long_description":"Shipment tools correct records, retrack parcels, and mark final status. Return tools approve or reject requests, receive items, add comments, resolve cases, and manage return allowlists or blocklists.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Tools materially change live fulfillment workflows.","reasoning":"Production commerce operations are High.","risk_type":"deployment_infrastructure","severity":"high","title":"Executes return and shipment operations","triggering_tools_or_skills":["approve_return","reject_return","resolve_return","receive_return_items","retrack_shipment"]},{"evidence":"Tools persist operational record changes.","reasoning":"Meaningful state modifications are Medium.","risk_type":"data_modification","severity":"medium","title":"Updates shipment and return records","triggering_tools_or_skills":["update_shipment","mark_shipment_status","add_return_comment"]},{"evidence":"Tools remove access/policy entries.","reasoning":"Deleting policy entries is High.","risk_type":"data_deletion","severity":"high","title":"Removes return allow/block entries","triggering_tools_or_skills":["remove_return_allowlist","remove_return_blocklist"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capabilities can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/5416a6ef-1df5-44a6-a9b0-fb90a57625d1.json","what_it_proves":"Candidate PR #125 record identity (name \"AfterShip Post-Purchase\", publisher, type interactive_connector) and 22 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/5416a6ef-1df5-44a6-a9b0-fb90a57625d1: complete tool_names inventory (22 tools), remote streamable-http endpoint https://mcp.aftership.com/post-purchase, auth_posture auth_required, directory tier community"}],"primary_reason":"AfterShip approves/rejects returns and changes live shipment/returns operations.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:5416a6ef-1df5-44a6-a9b0-fb90a57625d1","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were not available.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":22,"tools_or_skills_total":22},"name":"AfterShip Post-Purchase","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=5416a6ef-1df5-44a6-a9b0-fb90a57625d1&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.aftership.com/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AfterShip","publisher_url":"https://www.aftership.com/","remote_url":"https://mcp.aftership.com/post-purchase","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Production commerce operations are High.","evidence":"Executes return and shipment operations: Tools materially change live fulfillment workflows.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Executes return and shipment operations","triggering_tools":["approve_return","reject_return","resolve_return","receive_return_items","retrack_shipment"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful state modifications are Medium.","evidence":"Updates shipment and return records: Tools persist operational record changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Updates shipment and return records","triggering_tools":["update_shipment","mark_shipment_status","add_return_comment"]},{"description":"This connector can permanently remove data or resources. Review findings: Deleting policy entries is High.","evidence":"Removes return allow/block entries: Tools remove access/policy entries.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Removes return allow/block entries","triggering_tools":["remove_return_allowlist","remove_return_blocklist"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.aftership.com/en","tags":["code_deployment","deletes_data","interactive_connector","modifies_data","network_access","oauth_required"],"tools":[{"description":"","name":"add_return_allowlist"},{"description":"","name":"add_return_blocklist"},{"description":"","name":"add_return_comment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful state modifications are Medium."}},{"description":"","name":"approve_return","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production commerce operations are High."}},{"description":"","name":"get_field_options"},{"description":"","name":"get_return"},{"description":"","name":"get_return_workflow"},{"description":"","name":"get_shipment"},{"description":"","name":"list_return_allowlist"},{"description":"","name":"list_return_blocklist"},{"description":"","name":"list_return_workflow"},{"description":"","name":"list_returns"},{"description":"","name":"list_shipments"},{"description":"","name":"list_tracking_filter_options"},{"description":"","name":"mark_shipment_status","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful state modifications are Medium."}},{"description":"","name":"receive_return_items","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production commerce operations are High."}},{"description":"","name":"reject_return","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production commerce operations are High."}},{"description":"","name":"remove_return_allowlist","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting policy entries is High."}},{"description":"","name":"remove_return_blocklist","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting policy entries is High."}},{"description":"","name":"resolve_return","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production commerce operations are High."}},{"description":"","name":"retrack_shipment","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production commerce operations are High."}},{"description":"","name":"update_shipment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful state modifications are Medium."}}],"tools_count":22,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/5416a6ef-1df5-44a6-a9b0-fb90a57625d1","uuid":"6d1dff71-9b3f-5579-857e-ef7ad7f7b016","verification_tier":"community","version":""},"query_key":"aftership aftership post purchase","schema_version":1,"status":"match"}