{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-02","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"AveryGPT researches commercial properties, lenders, and finance deals. Find listings and comparables, inspect property details, and create or review deals. Lender search, bank details, and quote management require paid membership.","did":"96e96500-c808-4da6-af0a-e4e89714d504","documentation_url":"https://mcp.averygpt.com/docs","editorial_description":{"extended_description":"Property lookups, deal management, and reading uploaded deal documents are available to free accounts. Search by geography and property type, inspect ownership or sale history, and manage lender quotes when your membership allows it.","schema_version":1,"summary":"AveryGPT researches commercial properties, lenders, and finance deals.\nFind listings and comparables, inspect property details, and create or review deals.\nLender search, bank details, and quote management require paid membership."},"homepage_url":"","icon":"https://media.averygpt.com/images/logo.png","id":"96e96500-c808-4da6-af0a-e4e89714d504","installs":0,"last_scanned":"","license":"","long_description":"Property lookups, deal management, and reading uploaded deal documents are available to free accounts. Search by geography and property type, inspect ownership or sale history, and manage lender quotes when your membership allows it.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"These tools persist commercial-real-estate financing pipeline records.","reasoning":"They do not accept a loan, submit an application or move funds.","risk_type":"data_modification","severity":"medium","title":"Creates finance deals and adds/updates lender quotes","triggering_tools_or_skills":["create_finance_deal","upsert_finance_deal_quote"]},{"evidence":"These are sensitive financial/business records.","reasoning":"They are read-only retrieval.","risk_type":"private_data_read","severity":"low","title":"Reads deal documents, quotes and borrower/property finance details","triggering_tools_or_skills":["read_finance_deal_document","list_finance_deal_quotes","get_finance_deal_details"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; some lender/quote tools require paid membership; deal/document visibility follows account access.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/96e96500-c808-4da6-af0a-e4e89714d504.json","what_it_proves":"Candidate PR #125 record identity (name \"AveryGPT\", publisher, type web_connector) and 23 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/96e96500-c808-4da6-af0a-e4e89714d504: complete tool_names inventory (23 tools), remote streamable-http endpoint https://mcp.averygpt.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"AveryGPT writes internal finance-deal/quote records without executing financing.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:96e96500-c808-4da6-af0a-e4e89714d504","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 23 tools. Paid membership is access pricing, not per-call transaction; no lender outreach/submission tool is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":23,"tools_or_skills_total":23},"name":"AveryGPT","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=96e96500-c808-4da6-af0a-e4e89714d504&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.averygpt.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AveryGPT LLC","publisher_url":"https://www.averygpt.com/","remote_url":"https://mcp.averygpt.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They do not accept a loan, submit an application or move funds.","evidence":"Creates finance deals and adds/updates lender quotes: These tools persist commercial-real-estate financing pipeline records.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates finance deals and adds/updates lender quotes","triggering_tools":["create_finance_deal","upsert_finance_deal_quote"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They are read-only retrieval.","evidence":"Reads deal documents, quotes and borrower/property finance details: These are sensitive financial/business records.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads deal documents, quotes and borrower/property finance details","triggering_tools":["read_finance_deal_document","list_finance_deal_quotes","get_finance_deal_details"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"avery@averygpt.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"create_finance_deal","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They do not accept a loan, submit an application or move funds."}},{"description":"","name":"geocode_address"},{"description":"","name":"get_bank_details"},{"description":"","name":"get_banker_details"},{"description":"","name":"get_basic_property_info_by_address"},{"description":"","name":"get_finance_deal_details"},{"description":"","name":"get_property_details"},{"description":"","name":"list_finance_deal_documents"},{"description":"","name":"list_finance_deal_quotes"},{"description":"","name":"list_finance_deals"},{"description":"","name":"read_finance_deal_document"},{"description":"","name":"search_lender_by_name"},{"description":"","name":"search_lenders_by_profile"},{"description":"","name":"search_lenders_public_data_by_radius"},{"description":"","name":"search_lenders_public_data_by_state"},{"description":"","name":"search_property_finance_comps_by_radius"},{"description":"","name":"search_property_finance_comps_by_states_and_property_types"},{"description":"","name":"search_property_listings_by_radius"},{"description":"","name":"search_property_listings_by_states_and_property_types"},{"description":"","name":"search_property_sales_comps_by_radius"},{"description":"","name":"search_property_sales_comps_by_states_and_property_types"},{"description":"","name":"sort_locations_by_distance"},{"description":"","name":"upsert_finance_deal_quote","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They do not accept a loan, submit an application or move funds."}}],"tools_count":23,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/96e96500-c808-4da6-af0a-e4e89714d504","uuid":"546ab154-acc5-55d5-8952-62ccf69a74dc","verification_tier":"community","version":""},"query_key":"averygpt","schema_version":1,"status":"match"}