{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"TSeller analyzes and updates South African Takealot seller accounts. Inspect sales, profit, orders, stock, fees, returns, and Buy Box competition. Listing changes require confirmation; an active TSeller subscription is required.","did":"eb170e15-bed0-4092-bd5a-0da08d241d7d","documentation_url":"https://tseller.co.za/docs/ai-connector/","editorial_description":{"extended_description":"Update prices, stock, lead times, or listing status individually or in bulk, then read back the applied result. Customer names and delivery areas need separate consent. Amounts use Rand and dates follow Johannesburg time.","schema_version":1,"summary":"TSeller analyzes and updates South African Takealot seller accounts.\nInspect sales, profit, orders, stock, fees, returns, and Buy Box competition.\nListing changes require confirmation; an active TSeller subscription is required."},"homepage_url":"","icon":"https://tseller.co.za/icon-512.png","id":"eb170e15-bed0-4092-bd5a-0da08d241d7d","installs":0,"last_scanned":"","license":"","long_description":"Update prices, stock, lead times, or listing status individually or in bulk, then read back the applied result. Customer names and delivery areas need separate consent. Amounts use Rand and dates follow Johannesburg time.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The tools explicitly bulk-update offers and change live price, stock, status, and lead time for Takealot listings.","reasoning":"These changes affect storefront availability and commercial terms, although the tools do not directly move funds.","risk_type":"data_modification","severity":"medium","title":"Offers can be bulk repriced and restocked","triggering_tools_or_skills":["bulk_update_offers","update_offer_price","update_offer_stock","update_offer_status","update_offer_leadtime"]},{"evidence":"The listing covers orders, sales, prices, fees, transactions, payouts, realized profit, returns, and reconciliation data.","reasoning":"This is sensitive seller financial and operational information.","risk_type":"private_data_read","severity":"medium","title":"Orders, payouts, profit, and returns are readable","triggering_tools_or_skills":["get_order","get_transactions","get_profitability","get_recon_report","get_returns"]},{"evidence":"get_product_reviews retrieves customer-authored review text from the marketplace.","reasoning":"Customer content is untrusted and may contain prompt-injection instructions.","risk_type":"prompt_injection_exposure","severity":"low","title":"Product reviews enter model context","triggering_tools_or_skills":["get_product_reviews"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects one Takealot seller account; exact seller roles and API scopes are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/eb170e15-bed0-4092-bd5a-0da08d241d7d.json","what_it_proves":"Candidate PR #125 record identity (name \"tseller.co.za\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/eb170e15-bed0-4092-bd5a-0da08d241d7d: complete tool_names inventory (28 tools), remote streamable-http endpoint https://tseller.co.za/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"TSeller can change live marketplace offers and reads sensitive seller operations.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:eb170e15-bed0-4092-bd5a-0da08d241d7d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 28 names; no delete, order-fulfilment, refund, or direct funds-transfer tool is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"tseller.co.za","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=eb170e15-bed0-4092-bd5a-0da08d241d7d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://tseller.co.za/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Block Seven","publisher_url":"https://tseller.co.za/","remote_url":"https://tseller.co.za/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These changes affect storefront availability and commercial terms, although the tools do not directly move funds.","evidence":"Offers can be bulk repriced and restocked: The tools explicitly bulk-update offers and change live price, stock, status, and lead time for Takealot listings.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Offers can be bulk repriced and restocked","triggering_tools":["bulk_update_offers","update_offer_price","update_offer_stock","update_offer_status","update_offer_leadtime"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive seller financial and operational information.","evidence":"Orders, payouts, profit, and returns are readable: The listing covers orders, sales, prices, fees, transactions, payouts, realized profit, returns, and reconciliation data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Orders, payouts, profit, and returns are readable","triggering_tools":["get_order","get_transactions","get_profitability","get_recon_report","get_returns"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://tseller.co.za/contact/","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"bulk_update_offers","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These changes affect storefront availability and commercial terms, although the tools do not directly move funds."}},{"description":"","name":"get_buybox"},{"description":"","name":"get_offer"},{"description":"","name":"get_offer_batch"},{"description":"","name":"get_offer_charges"},{"description":"","name":"get_order","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive seller financial and operational information."}},{"description":"","name":"get_product_reviews"},{"description":"","name":"get_profitability","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive seller financial and operational information."}},{"description":"","name":"get_promotions"},{"description":"","name":"get_recon_claims"},{"description":"","name":"get_recon_report","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive seller financial and operational information."}},{"description":"","name":"get_replenishment"},{"description":"","name":"get_return"},{"description":"","name":"get_returns","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive seller financial and operational information."}},{"description":"","name":"get_sales"},{"description":"","name":"get_shipment"},{"description":"","name":"get_shipments"},{"description":"","name":"get_store_overview"},{"description":"","name":"get_transactions","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive seller financial and operational information."}},{"description":"","name":"list_offers"},{"description":"","name":"list_product_costs"},{"description":"","name":"untrack_buybox_products"},{"description":"","name":"update_buybox_alerts"},{"description":"","name":"update_buybox_product"},{"description":"","name":"update_offer_leadtime","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These changes affect storefront availability and commercial terms, although the tools do not directly move funds."}},{"description":"","name":"update_offer_price","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These changes affect storefront availability and commercial terms, although the tools do not directly move funds."}},{"description":"","name":"update_offer_status","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These changes affect storefront availability and commercial terms, although the tools do not directly move funds."}},{"description":"","name":"update_offer_stock","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These changes affect storefront availability and commercial terms, although the tools do not directly move funds."}}],"tools_count":28,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/eb170e15-bed0-4092-bd5a-0da08d241d7d","uuid":"eaccb368-ed3d-585b-925e-8202afbbb13f","verification_tier":"community","version":""},"query_key":"block seven tseller co za","schema_version":1,"status":"match"}