{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"BidX lets Claude query Amazon Ads data for sellers and vendors. Inspect performance, investigate accounts, and prepare budgeting or tracking analysis. A BidX account is required, with advertiser selection available in the connector.","did":"8ce04fe6-98ed-4660-9556-3a3b171e54a8","documentation_url":"https://www.bidx.io/blog/intro-bidx-mcp","editorial_description":{"extended_description":"Tools discover SQL schemas, identify available advertisers, switch advertiser context, and run queries.","schema_version":1,"summary":"BidX lets Claude query Amazon Ads data for sellers and vendors.\nInspect performance, investigate accounts, and prepare budgeting or tracking analysis.\nA BidX account is required, with advertiser selection available in the connector."},"homepage_url":"","icon":"https://www.bidx.io/hubfs/raw_assets/public/bidx-theme/images/bidx-favicon-32x32.png","id":"8ce04fe6-98ed-4660-9556-3a3b171e54a8","installs":0,"last_scanned":"","license":"","long_description":"Tools discover SQL schemas, identify available advertisers, switch advertiser context, and run queries.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs explicitly say the tool executes SQL over live advertising, sales and campaign-structure data.","reasoning":"Arbitrary SQL/query execution is High even when the database role is read-only.","risk_type":"query_execution","severity":"high","title":"Runs caller-generated read-only SQL","triggering_tools_or_skills":["run-sql-query"]},{"evidence":"Queries can expose spend, sales, keywords, targets, bids and competitor tracking.","reasoning":"These are sensitive commercial records.","risk_type":"private_data_read","severity":"low","title":"Reads private Amazon Ads and sales performance","triggering_tools_or_skills":["run-sql-query","get-current-advertiser","list-available-advertisers"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; advertiser switching/query access is scoped to advertising profiles the BidX account can see.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/8ce04fe6-98ed-4660-9556-3a3b171e54a8.json","what_it_proves":"Candidate PR #125 record identity (name \"BidX - Scale Marketplace Ads\", publisher, type web_connector) and 5 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/8ce04fe6-98ed-4660-9556-3a3b171e54a8: complete tool_names inventory (5 tools), remote streamable-http endpoint https://app.bidx.io/mcp/sql, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://www.bidx.io/blog/intro-bidx-mcp","what_it_proves":"Official MCP guide confirms run-sql-query executes read-only SQL scoped to accessible Amazon advertising profiles."}],"primary_reason":"BidX exposes caller-authored SQL over private advertising/business data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:8ce04fe6-98ed-4660-9556-3a3b171e54a8","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all five tools. switch-advertiser changes only query context; official docs state bids/budgets/campaigns cannot be modified in this release.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":5,"tools_or_skills_total":5},"name":"BidX - Scale Marketplace Ads","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=8ce04fe6-98ed-4660-9556-3a3b171e54a8&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.bidx.io/en/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"BidX GmbH","publisher_url":"https://bidx.io/","remote_url":"https://app.bidx.io/mcp/sql","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL/query execution is High even when the database role is read-only.","evidence":"Runs caller-generated read-only SQL: Official docs explicitly say the tool executes SQL over live advertising, sales and campaign-structure data.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Runs caller-generated read-only SQL","triggering_tools":["run-sql-query"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: These are sensitive commercial records.","evidence":"Reads private Amazon Ads and sales performance: Queries can expose spend, sales, keywords, targets, bids and competitor tracking.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private Amazon Ads and sales performance","triggering_tools":["run-sql-query","get-current-advertiser","list-available-advertisers"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@bidx.io","tags":["network_access","oauth_required","reads_private_data","runs_code","web_connector"],"tools":[{"description":"","name":"discover-sql-schema"},{"description":"","name":"get-current-advertiser"},{"description":"","name":"list-available-advertisers"},{"description":"","name":"run-sql-query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL/query execution is High even when the database role is read-only."}},{"description":"","name":"switch-advertiser"}],"tools_count":5,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/8ce04fe6-98ed-4660-9556-3a3b171e54a8","uuid":"18b9c56c-5311-5431-be28-61dee5af57a1","verification_tier":"community","version":""},"query_key":"bidx gmbh bidx scale marketplace ads","schema_version":1,"status":"match"}