{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Connect product planning with customer and revenue context in AIOProductOS. Explore feedback and analytics, update delivery work and communicate with teams. Access follows organization and role permissions.","did":"0963d702-d6ae-4f53-a973-77f8d9b01f49","documentation_url":"https://aioproductos.com/mcp","editorial_description":{"extended_description":"The connector covers roadmaps, objectives, sprints, releases, pages, experiments, account views and codebase maps. It can reply to support conversations, manage bookings and modify customer identities. Task deletion requires an explicit confirmation argument according to the source; other writes include more than simple content additions.","schema_version":1,"summary":"Connect product planning with customer and revenue context in AIOProductOS.\nExplore feedback and analytics, update delivery work and communicate with teams.\nAccess follows organization and role permissions."},"homepage_url":"","icon":"https://aioproductos.com/favicon.png","id":"0963d702-d6ae-4f53-a973-77f8d9b01f49","installs":0,"last_scanned":"","license":"","long_description":"The connector covers roadmaps, objectives, sprints, releases, pages, experiments, account views and codebase maps. It can reply to support conversations, manage bookings and modify customer identities. Task deletion requires an explicit confirmation argument according to the source; other writes include more than simple content additions.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes delete_task with a publisher-declared confirmation argument.","reasoning":"Confirmed or not, it irreversibly removes a shared work item.","risk_type":"data_deletion","severity":"high","title":"Tasks can be deleted","triggering_tools_or_skills":["delete_task"]},{"evidence":"Explicit tools publish content in team channels, support inbox conversations, and shared tasks.","reasoning":"They communicate to customers or collaborators under the connected user.","risk_type":"messaging_as_user","severity":"high","title":"Channels and support conversations can receive replies","triggering_tools_or_skills":["post_to_channel","reply_in_channel","reply_to_conversation","comment_on_task"]},{"evidence":"The tools change the product identity graph by consolidating or separating customer identities.","reasoning":"Identity-graph administration can change attribution, access context, and customer history.","risk_type":"credential_admin","severity":"high","title":"End-user identities can be merged or unmerged","triggering_tools_or_skills":["merge_end_users","unmerge_end_users"]},{"evidence":"The 70-tool inventory exposes create, update, cancel, reschedule, promote, vote, capture, review, and revert actions across the product system.","reasoning":"These operations alter shared operational and customer state.","risk_type":"data_modification","severity":"medium","title":"Broad product records and bookings can change","triggering_tools_or_skills":["create_task","update_task","cancel_booking","reschedule_booking","create_feature","create_release","update_sprint","revert_to_version"]},{"evidence":"Tools retrieve support messages, team channels, product knowledge, and a live codebase map.","reasoning":"Customer and collaborator text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Customer, channel, and codebase content enters context","triggering_tools_or_skills":["get_conversation","read_channel","get_codebase_map","get_product_brain"]}],"assessment_status":"provisional","auth_and_scopes":"Organization- and role-scoped access across product, customer, support, channel, booking, codebase, and analytics records; exact permission matrix is not documented here.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0963d702-d6ae-4f53-a973-77f8d9b01f49.json","what_it_proves":"Candidate PR #125 record identity (name \"AIOProductOS\", publisher, type interactive_connector) and 70 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0963d702-d6ae-4f53-a973-77f8d9b01f49: complete tool_names inventory (70 tools), remote streamable-http endpoint https://platform.aioproductos.com/api/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"Explicit task deletion, customer and channel messaging, identity merging, and broad writes establish high impact.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0963d702-d6ae-4f53-a973-77f8d9b01f49","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 70 names; packet says 71 tools but Directory inventory contains 70, so runtime verification should reconcile that discrepancy and test confirmations, roles, booking effects, and identity merge recovery.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":70,"tools_or_skills_total":70},"name":"AIOProductOS","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0963d702-d6ae-4f53-a973-77f8d9b01f49&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://aioproductos.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AIOProductOS Inc.","publisher_url":"https://aioproductos.com/","remote_url":"https://platform.aioproductos.com/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Confirmed or not, it irreversibly removes a shared work item.","evidence":"Tasks can be deleted: The inventory explicitly exposes delete_task with a publisher-declared confirmation argument.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Tasks can be deleted","triggering_tools":["delete_task"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to customers or collaborators under the connected user.","evidence":"Channels and support conversations can receive replies: Explicit tools publish content in team channels, support inbox conversations, and shared tasks.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Channels and support conversations can receive replies","triggering_tools":["post_to_channel","reply_in_channel","reply_to_conversation","comment_on_task"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state.","evidence":"End-user identities can be merged or unmerged: The tools change the product identity graph by consolidating or separating customer identities. | Broad product records and bookings can change: The 70-tool inventory exposes create, update, cancel, reschedule, promote, vote, capture, review, and revert actions across the product system.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["merge_end_users","unmerge_end_users","create_task","update_task","cancel_booking","reschedule_booking","create_feature","create_release","update_sprint","revert_to_version"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"office@aioproductos.com","tags":["accesses_messaging","deletes_data","interactive_connector","modifies_data","network_access","oauth_required","sends_messages_as_you"],"tools":[{"description":"","name":"analyze_funnel"},{"description":"","name":"analyze_nps"},{"description":"","name":"analyze_nrr"},{"description":"","name":"analyze_paths"},{"description":"","name":"capture_insight"},{"description":"","name":"comment_on_task","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to customers or collaborators under the connected user."}},{"description":"","name":"create_task","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"get_codebase_map"},{"description":"","name":"get_conversation"},{"description":"","name":"get_customer_360"},{"description":"","name":"get_device_candidates"},{"description":"","name":"get_page"},{"description":"","name":"get_pm_playbook"},{"description":"","name":"get_product_brain"},{"description":"","name":"get_retention"},{"description":"","name":"get_roadmap_drift"},{"description":"","name":"get_task"},{"description":"","name":"get_weekly_signal_memo"},{"description":"","name":"list_artifact_versions"},{"description":"","name":"list_bookings"},{"description":"","name":"list_channels"},{"description":"","name":"list_conversations"},{"description":"","name":"list_experiments"},{"description":"","name":"list_features"},{"description":"","name":"list_insights"},{"description":"","name":"list_objectives"},{"description":"","name":"list_pages"},{"description":"","name":"list_releases"},{"description":"","name":"list_sprints"},{"description":"","name":"list_tasks"},{"description":"","name":"merge_end_users","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"pm_meta"},{"description":"","name":"read_channel"},{"description":"","name":"revert_to_version","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"review_artifact"},{"description":"","name":"unmerge_end_users","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"update_task","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"whoami"},{"description":"","name":"add_note"},{"description":"","name":"cancel_booking","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"create_decision"},{"description":"","name":"create_experiment"},{"description":"","name":"create_feature","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"create_idea"},{"description":"","name":"create_initiative"},{"description":"","name":"create_objective"},{"description":"","name":"create_page"},{"description":"","name":"create_release","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"create_sprint"},{"description":"","name":"delete_task","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Confirmed or not, it irreversibly removes a shared work item."}},{"description":"","name":"list_decisions"},{"description":"","name":"list_ideas"},{"description":"","name":"list_initiatives"},{"description":"","name":"post_to_channel","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to customers or collaborators under the connected user."}},{"description":"","name":"promote_idea"},{"description":"","name":"reply_in_channel","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to customers or collaborators under the connected user."}},{"description":"","name":"reply_to_conversation","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate to customers or collaborators under the connected user."}},{"description":"","name":"reschedule_booking","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"resolve_conversation"},{"description":"","name":"update_decision"},{"description":"","name":"update_experiment"},{"description":"","name":"update_feature"},{"description":"","name":"update_idea"},{"description":"","name":"update_initiative"},{"description":"","name":"update_key_result"},{"description":"","name":"update_objective"},{"description":"","name":"update_page"},{"description":"","name":"update_release"},{"description":"","name":"update_sprint","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Identity-graph administration can change attribution, access context, and customer history.; These operations alter shared operational and customer state."}},{"description":"","name":"vote_idea"}],"tools_count":70,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/0963d702-d6ae-4f53-a973-77f8d9b01f49","uuid":"e7e3f447-6c79-5be1-bed3-d2ec5842ae8d","verification_tier":"community","version":""},"query_key":"aioproductos","schema_version":1,"status":"match"}