{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-23","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Shop Bitrefill's gift cards, mobile top-ups and travel eSIMs from Claude. Search products, compare options and prices, and place orders. Sign in with your Bitrefill account to retrieve purchase details and digital delivery information.","did":"c5f01043-e585-4fc7-bce0-3b0b141893ae","documentation_url":"https://docs.bitrefill.com/docs/ecommerce-mcp/","editorial_description":{"extended_description":"The catalog covers international brands, mobile carriers and travel data, with availability depending on the product and country. Bitrefill supports crypto and traditional payment methods. Order and invoice tools let you revisit purchases, while delivery can include a gift-card code or eSIM link in the conversation.","schema_version":1,"summary":"Shop Bitrefill's gift cards, mobile top-ups and travel eSIMs from Claude.\nSearch products, compare options and prices, and place orders.\nSign in with your Bitrefill account to retrieve purchase details and digital delivery information."},"homepage_url":"","icon":"","id":"c5f01043-e585-4fc7-bce0-3b0b141893ae","installs":0,"last_scanned":"","license":"","long_description":"The catalog covers international brands, mobile carriers and travel data, with availability depending on the product and country. Bitrefill supports crypto and traditional payment methods. Order and invoice tools let you revisit purchases, while delivery can include a gift-card code or eSIM link in the conversation.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools initiate and progress a Bitrefill purchase.","reasoning":"They spend money or cryptocurrency and create paid orders.","risk_type":"financial_transaction","severity":"high","title":"Buys gift cards/products","triggering_tools_or_skills":["buy-products","submit-prepayment-step","update-order"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication covers a Bitrefill account, invoices and order/payment workflow; spending limits are unspecified.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c5f01043-e585-4fc7-bce0-3b0b141893ae.json","what_it_proves":"Candidate PR #125 record identity (name \"Bitrefill\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c5f01043-e585-4fc7-bce0-3b0b141893ae: complete tool_names inventory (7 tools), remote streamable-http endpoint https://api.bitrefill.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Bitrefill purchases products and submits prepayment/order updates.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c5f01043-e585-4fc7-bce0-3b0b141893ae","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 7 names; purchase capability is explicit.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"Bitrefill","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c5f01043-e585-4fc7-bce0-3b0b141893ae&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.bitrefill.com/privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Bitrefill","publisher_url":"https://www.bitrefill.com/","remote_url":"https://api.bitrefill.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They spend money or cryptocurrency and create paid orders.","evidence":"Buys gift cards/products: These tools initiate and progress a Bitrefill purchase.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Buys gift cards/products","triggering_tools":["buy-products","submit-prepayment-step","update-order"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://help.bitrefill.com/","tags":["network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"buy-products","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They spend money or cryptocurrency and create paid orders."}},{"description":"","name":"get-invoice-by-id"},{"description":"","name":"get-product-details"},{"description":"","name":"list-invoices"},{"description":"","name":"search-products"},{"description":"","name":"submit-prepayment-step","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They spend money or cryptocurrency and create paid orders."}},{"description":"","name":"update-order","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They spend money or cryptocurrency and create paid orders."}}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c5f01043-e585-4fc7-bce0-3b0b141893ae","uuid":"8b661a54-849e-5a5d-8441-5e8eb14a0a39","verification_tier":"community","version":""},"query_key":"bitrefill","schema_version":1,"status":"match"}