{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-01","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"no_auth","category":"Web Connector","confidence":"high","description":"Atlas connects Claude to restaurant operations. Manage outlets, menus, products, stock, orders, deliveries, promotions, and customer records. It can update operational data, cancel orders or deliveries, issue refunds, and retrieve sales reports.","did":"51bef9d9-eaef-493c-8e62-1477600e3320","documentation_url":"https://help.atlas.kitchen/connect/mcp/setup","editorial_description":{"extended_description":"Tools configure operating hours and POS layouts, manage vouchers and rewards, update product availability, synchronize aggregator menus, and create storefront announcements or banners. Data queries and reporting support operational analysis.","schema_version":1,"summary":"Atlas connects Claude to restaurant operations.\nManage outlets, menus, products, stock, orders, deliveries, promotions, and customer records.\nIt can update operational data, cancel orders or deliveries, issue refunds, and retrieve sales reports."},"homepage_url":"","icon":"","id":"51bef9d9-eaef-493c-8e62-1477600e3320","installs":0,"last_scanned":"","license":"","long_description":"Tools configure operating hours and POS layouts, manage vouchers and rewards, update product availability, synchronize aggregator menus, and create storefront announcements or banners. Data queries and reporting support operational analysis.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Tools explicitly move/refund customer value.","reasoning":"Financial movement is High.","risk_type":"financial_transaction","severity":"high","title":"Issues refunds and reward credits/debits","triggering_tools_or_skills":["issue_refund","credit_customer_rewards","debit_customer_rewards"]},{"evidence":"Tool explicitly sends customer email.","reasoning":"External messaging is High.","risk_type":"messaging_as_user","severity":"high","title":"Resends order confirmation email","triggering_tools_or_skills":["resend_order_confirmation_email"]},{"evidence":"These tools materially change live restaurant commerce operations.","reasoning":"Production operational changes are High.","risk_type":"deployment_infrastructure","severity":"high","title":"Changes live outlet/menu/order operations","triggering_tools_or_skills":["toggle_outlet_status","sync_aggregator_menu","update_order_status","cancel_delivery"]},{"evidence":"Packet says no_auth; official guide requires merchant sign-in/OAuth or API key and merchant ID.","reasoning":"Auth metadata must be corrected.","risk_type":"identity_discrepancy","severity":"low","title":"Directory auth posture conflicts with official setup","triggering_tools_or_skills":[]},{"evidence":"The remote hosted implementation is not pinned.","reasoning":"Runtime capabilities may change after review.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Directory says no_auth, but official setup requires merchant OAuth or X-Api-Key plus merchant ID; metadata is contradictory.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/51bef9d9-eaef-493c-8e62-1477600e3320.json","what_it_proves":"Candidate PR #125 record identity (name \"Atlas\", publisher, type web_connector) and 77 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/51bef9d9-eaef-493c-8e62-1477600e3320: complete tool_names inventory (77 tools), remote streamable-http endpoint https://mcp.atlas.kitchen/, auth_posture no_auth, directory tier community"},{"accessed_at":"2026-10-10T21:53:28Z","url_or_path":"https://help.atlas.kitchen/connect/mcp/setup","what_it_proves":"Official Atlas setup says the assistant accesses live merchant data and can edit menus/availability through OAuth to one selected merchant."}],"primary_reason":"Atlas can refund/cancel orders and deliveries, email customers, and change live commerce operations despite being marked no-auth in the Directory.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:51bef9d9-eaef-493c-8e62-1477600e3320","reviewed_at":"2026-10-10","reviewer_notes":"All 77 names reviewed; correct auth posture before publication.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"unknown","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":77,"tools_or_skills_total":77},"name":"Atlas","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=51bef9d9-eaef-493c-8e62-1477600e3320&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://atlaskitchen.notion.site/Atlas-Online-Privacy-Policy-c256dd2a5fa64f1eb903d03b04f6ea3d","provisional_risk":null,"publication_recommendation":"fix","publisher":"Atlas","publisher_url":"https://atlas.kitchen/","remote_url":"https://mcp.atlas.kitchen/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Financial movement is High.","evidence":"Issues refunds and reward credits/debits: Tools explicitly move/refund customer value.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Issues refunds and reward credits/debits","triggering_tools":["issue_refund","credit_customer_rewards","debit_customer_rewards"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External messaging is High.","evidence":"Resends order confirmation email: Tool explicitly sends customer email.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Resends order confirmation email","triggering_tools":["resend_order_confirmation_email"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Production operational changes are High.","evidence":"Changes live outlet/menu/order operations: These tools materially change live restaurant commerce operations.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Changes live outlet/menu/order operations","triggering_tools":["toggle_outlet_status","sync_aggregator_menu","update_order_status","cancel_delivery"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"engineering@atlas.kitchen","tags":["accesses_calendar","code_deployment","network_access","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"add_product_to_pos_layout"},{"description":"","name":"add_tile_to_pos_layout"},{"description":"","name":"archive_outlet"},{"description":"","name":"book_delivery"},{"description":"","name":"cancel_delivery","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production operational changes are High."}},{"description":"","name":"cancel_order"},{"description":"","name":"create_announcement"},{"description":"","name":"create_cash_voucher"},{"description":"","name":"create_cross_sell_group"},{"description":"","name":"create_discount"},{"description":"","name":"create_landing_page_banner"},{"description":"","name":"create_menu_section"},{"description":"","name":"create_popup"},{"description":"","name":"create_pos_layout"},{"description":"","name":"create_product"},{"description":"","name":"create_reporting_category"},{"description":"","name":"create_surcharge"},{"description":"","name":"credit_customer_rewards","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Financial movement is High."}},{"description":"","name":"debit_customer_rewards","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Financial movement is High."}},{"description":"","name":"delete_outlet_special_hours"},{"description":"","name":"generate_cross_sell"},{"description":"","name":"get_atlas_help"},{"description":"","name":"get_cash_voucher"},{"description":"","name":"get_cross_sell_group"},{"description":"","name":"get_customer"},{"description":"","name":"get_customer_rewards_balance"},{"description":"","name":"get_delivery_status"},{"description":"","name":"get_discount"},{"description":"","name":"get_menu"},{"description":"","name":"get_modifier_group"},{"description":"","name":"get_order"},{"description":"","name":"get_order_count"},{"description":"","name":"get_outlet"},{"description":"","name":"get_product"},{"description":"","name":"get_product_availability"},{"description":"","name":"get_query_result"},{"description":"","name":"get_sales_report"},{"description":"","name":"get_stock_levels"},{"description":"","name":"inspect_pos_layout"},{"description":"","name":"issue_refund","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Financial movement is High."}},{"description":"","name":"list_active_deliveries"},{"description":"","name":"list_cash_vouchers"},{"description":"","name":"list_cross_sell_groups"},{"description":"","name":"list_customers"},{"description":"","name":"list_discounts"},{"description":"","name":"list_menu_sections"},{"description":"","name":"list_menus"},{"description":"","name":"list_modifier_groups"},{"description":"","name":"list_order_payments"},{"description":"","name":"list_orders"},{"description":"","name":"list_outlets"},{"description":"","name":"list_products"},{"description":"","name":"list_reporting_categories"},{"description":"","name":"list_reward_programs"},{"description":"","name":"list_surcharges"},{"description":"","name":"query_data"},{"description":"","name":"resend_order_confirmation_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External messaging is High."}},{"description":"","name":"set_outlet_operating_hours"},{"description":"","name":"set_outlet_special_hours"},{"description":"","name":"set_product_availability"},{"description":"","name":"set_product_lead_time"},{"description":"","name":"sync_aggregator_menu","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production operational changes are High."}},{"description":"","name":"tag_customer"},{"description":"","name":"toggle_cross_sell_group"},{"description":"","name":"toggle_discount"},{"description":"","name":"toggle_outlet_status","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production operational changes are High."}},{"description":"","name":"update_cash_voucher"},{"description":"","name":"update_cross_sell_group"},{"description":"","name":"update_discount"},{"description":"","name":"update_menu_section"},{"description":"","name":"update_modifier_group"},{"description":"","name":"update_order_status","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Production operational changes are High."}},{"description":"","name":"update_outlet"},{"description":"","name":"update_product"},{"description":"","name":"update_product_stock"},{"description":"","name":"update_reporting_category"},{"description":"","name":"update_surcharge"}],"tools_count":77,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/51bef9d9-eaef-493c-8e62-1477600e3320","uuid":"9de33250-f31b-575e-a620-62a573229420","verification_tier":"community","version":""},"query_key":"atlas atlas","schema_version":1,"status":"match"}