{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-23","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"AutoDS connects Claude to dropshipping product research and store catalogs. Search products, inspect suppliers and variations, and import or publish listings. Use your AutoDS account to check connected stores, subscription details, and credits.","did":"637146fd-4fdc-4098-9c90-1e8c4063ca3a","documentation_url":"https://autods-mcp-docs.vercel.app/","editorial_description":{"extended_description":"Imports can originate from supplier links, CSVs, or categories and be drafts, scheduled, or live. Tools retrieve recommendations, category trees, images, and per-item import progress; publishing drafts changes the selling channel.","schema_version":1,"summary":"AutoDS connects Claude to dropshipping product research and store catalogs.\nSearch products, inspect suppliers and variations, and import or publish listings.\nUse your AutoDS account to check connected stores, subscription details, and credits."},"homepage_url":"","icon":"","id":"637146fd-4fdc-4098-9c90-1e8c4063ca3a","installs":0,"last_scanned":"","license":"","long_description":"Imports can originate from supplier links, CSVs, or categories and be drafts, scheduled, or live. Tools retrieve recommendations, category trees, images, and per-item import progress; publishing drafts changes the selling channel.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory explicitly exposes publication of drafted products to a connected marketplace.","reasoning":"Publishing changes a live external storefront and makes content publicly available.","risk_type":"deployment_infrastructure","severity":"high","title":"Publishes product drafts to a live marketplace","triggering_tools_or_skills":["publish_drafts_to_marketplace"]},{"evidence":"Upload and bulk-action tooling alters connected store product state.","reasoning":"These are persistent commerce-workspace writes even before publication.","risk_type":"data_modification","severity":"medium","title":"Uploads products and initiates bulk store actions","triggering_tools_or_skills":["upload_products","get_bulk_action_items"]}],"assessment_status":"provisional","auth_and_scopes":"Authenticated AutoDS account and store connection are required; exact marketplace publish scopes are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/637146fd-4fdc-4098-9c90-1e8c4063ca3a.json","what_it_proves":"Candidate PR #125 record identity (name \"AutoDS — Dropshipping Product Research & Store Automation\", publisher, type web_connector) and 13 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/637146fd-4fdc-4098-9c90-1e8c4063ca3a: complete tool_names inventory (13 tools), remote streamable-http endpoint https://mcp.autods.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"AutoDS can publish product listings to a connected live marketplace.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:637146fd-4fdc-4098-9c90-1e8c4063ca3a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 13 tools. No checkout, order purchase or explicit delete tool is listed; runtime confirmation around publication should be verified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":13,"tools_or_skills_total":13},"name":"AutoDS — Dropshipping Product Research & Store Automation","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=637146fd-4fdc-4098-9c90-1e8c4063ca3a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.autods.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"AutoDS LTD","publisher_url":"https://www.autods.com/","remote_url":"https://mcp.autods.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Publishing changes a live external storefront and makes content publicly available.","evidence":"Publishes product drafts to a live marketplace: The inventory explicitly exposes publication of drafted products to a connected marketplace.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Publishes product drafts to a live marketplace","triggering_tools":["publish_drafts_to_marketplace"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent commerce-workspace writes even before publication.","evidence":"Uploads products and initiates bulk store actions: Upload and bulk-action tooling alters connected store product state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Uploads products and initiates bulk store actions","triggering_tools":["upload_products","get_bulk_action_items"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.autods.com/","tags":["code_deployment","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"get_bulk_action_items","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent commerce-workspace writes even before publication."}},{"description":"","name":"get_current_user"},{"description":"","name":"get_product_by_id"},{"description":"","name":"get_recommended_products"},{"description":"","name":"get_similar_products"},{"description":"","name":"get_winning_products"},{"description":"","name":"list_products"},{"description":"","name":"list_stores_api"},{"description":"","name":"publish_drafts_to_marketplace","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Publishing changes a live external storefront and makes content publicly available."}},{"description":"","name":"search_products"},{"description":"","name":"upload_products","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent commerce-workspace writes even before publication."}},{"description":"","name":"get_categories"},{"description":"","name":"get_user_subscription"}],"tools_count":13,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/637146fd-4fdc-4098-9c90-1e8c4063ca3a","uuid":"20c2e8c2-a333-52d4-9cd4-2cb7ab3c7be4","verification_tier":"community","version":""},"query_key":"autods ltd autods dropshipping product research store automation","schema_version":1,"status":"match"}