{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Avo brings analytics tracking definitions into Claude. Search events, properties, and metrics, then design tracking on an Avo branch. Retrieve implementation guidance and code snippets based on your existing patterns.","did":"9cfe171c-c810-4e31-be17-5aa276c90e1c","documentation_url":"https://www.avo.app/docs/reference/avo-mcp/overview","editorial_description":{"extended_description":"Use product requirements or design context to plan tracking consistently with workspace rules. Metric definitions provide context for querying product data in analytics and warehouse tools such as Amplitude, Mixpanel, Snowflake, and BigQuery.","schema_version":1,"summary":"Avo brings analytics tracking definitions into Claude.\nSearch events, properties, and metrics, then design tracking on an Avo branch.\nRetrieve implementation guidance and code snippets based on your existing patterns."},"homepage_url":"","icon":"","id":"9cfe171c-c810-4e31-be17-5aa276c90e1c","installs":0,"last_scanned":"","license":"","long_description":"Use product requirements or design context to plan tracking consistently with workspace rules. Metric definitions provide context for querying product data in analytics and warehouse tools such as Amplitude, Mixpanel, Snowflake, and BigQuery.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The tools persist analytics definitions/workflow output in Avo branches.","reasoning":"They modify shared data-governance configuration.","risk_type":"data_modification","severity":"medium","title":"Saves tracking-plan items and runs design workflows","triggering_tools_or_skills":["save_items","workflow"]},{"evidence":"These tools retrieve organization analytics definitions.","reasoning":"They are read-only.","risk_type":"private_data_read","severity":"low","title":"Reads private tracking plans and workspaces","triggering_tools_or_skills":["get","search","list_branches","list_workspaces"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes workspaces/branches/items to the connected Avo account.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9cfe171c-c810-4e31-be17-5aa276c90e1c.json","what_it_proves":"Candidate PR #125 record identity (name \"Avo\", publisher, type web_connector) and 8 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9cfe171c-c810-4e31-be17-5aa276c90e1c: complete tool_names inventory (8 tools), remote streamable-http endpoint https://mcp.avo.app/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Avo can persist tracking-plan definitions in workspace branches.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:9cfe171c-c810-4e31-be17-5aa276c90e1c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all eight tools; workflow action schemas should be runtime-verified.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":8,"tools_or_skills_total":8},"name":"Avo","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9cfe171c-c810-4e31-be17-5aa276c90e1c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.avo.app/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Avo Software Inc.","publisher_url":"https://www.avo.app/","remote_url":"https://mcp.avo.app/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They modify shared data-governance configuration.","evidence":"Saves tracking-plan items and runs design workflows: The tools persist analytics definitions/workflow output in Avo branches.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Saves tracking-plan items and runs design workflows","triggering_tools":["save_items","workflow"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They are read-only.","evidence":"Reads private tracking plans and workspaces: These tools retrieve organization analytics definitions.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private tracking plans and workspaces","triggering_tools":["get","search","list_branches","list_workspaces"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@avo.app","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"describe_tool"},{"description":"","name":"get"},{"description":"","name":"give_feedback"},{"description":"","name":"list_branches"},{"description":"","name":"list_workspaces"},{"description":"","name":"save_items","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They modify shared data-governance configuration."}},{"description":"","name":"search"},{"description":"","name":"workflow","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They modify shared data-governance configuration."}}],"tools_count":8,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9cfe171c-c810-4e31-be17-5aa276c90e1c","uuid":"65b0570c-d2f8-553a-b18c-ab6bcf88f04d","verification_tier":"community","version":""},"query_key":"avo software inc avo","schema_version":1,"status":"match"}