{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Read marketplace and Amazon analytics from your Bonsai workspace. Explore advertising, sales, inventory, pricing, feedback and catalog-health dashboards. Requires enabled modules and existing data; marketplace records are not changed.","did":"c8c62b82-9e79-42fd-8379-88ca3c359627","documentation_url":"https://bonsaigrowth.it/en/docs/claude-mcp-connector","editorial_description":{"extended_description":"Company users connect to Bonsai, while agency users select an authorized tenant through Bonsai Agency. Tools provide KPI summaries and product-level tables for vendor, seller, FBA and advertising analyses. Apart from changing the active agency tenant, tools are read-only and do not call Amazon SP-API directly.","schema_version":1,"summary":"Read marketplace and Amazon analytics from your Bonsai workspace.\nExplore advertising, sales, inventory, pricing, feedback and catalog-health dashboards.\nRequires enabled modules and existing data; marketplace records are not changed."},"homepage_url":"","icon":"","id":"c8c62b82-9e79-42fd-8379-88ca3c359627","installs":0,"last_scanned":"","license":"","long_description":"Company users connect to Bonsai, while agency users select an authorized tenant through Bonsai Agency. Tools provide KPI summaries and product-level tables for vendor, seller, FBA and advertising analyses. Apart from changing the active agency tenant, tools are read-only and do not call Amazon SP-API directly.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All 70 declared actions are analytics/status/tenant selection, and official docs explicitly say the connector reads existing Bonsai data and does not write Vendor, Ads or Seller data.","reasoning":"Private commercial analytics are exposed read-only; selecting an already-authorized tenant changes session context, not business data.","risk_type":"private_data_read","severity":"low","title":"Amazon marketplace and advertising analytics are read only","triggering_tools_or_skills":["amazon-vendor-standard-sales-summary-tool","amazon-ads-campaigns-summary-tool","amazon-seller-sales-summary-tool","list-my-tenants-tool","switch-tenant-tool"]},{"evidence":"The connector runs at https://mcp.bonsaisolutions.it/mcp and no pinned server implementation was available in the review packet.","reasoning":"The hosted implementation and action semantics can change independently of this catalog snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Bonsai Solutions is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth authenticates a company workspace or an agency with an allowlisted set of client tenants; the active tenant can be switched only within that allowlist.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c8c62b82-9e79-42fd-8379-88ca3c359627.json","what_it_proves":"Candidate PR #125 record identity (name \"Bonsai Solutions\", publisher, type web_connector) and 70 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c8c62b82-9e79-42fd-8379-88ca3c359627: complete tool_names inventory (70 tools), remote streamable-http endpoint https://mcp.bonsaisolutions.it/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:04:12Z","url_or_path":"https://bonsaigrowth.it/en/docs/claude-mcp-connector","what_it_proves":"Bonsai documents OAuth, tenant allowlisting and read-only Amazon analytics; switch-tenant only selects the active allowed agency client."}],"primary_reason":"Bonsai provides read-only marketplace analytics within an OAuth-scoped, allowlisted tenant set.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c8c62b82-9e79-42fd-8379-88ca3c359627","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 70 declared tools and the official module list. No campaign mutation, Amazon API call, purchase or data write is exposed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":70,"tools_or_skills_total":70},"name":"Bonsai Solutions","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c8c62b82-9e79-42fd-8379-88ca3c359627&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://bonsaigrowth.it/en/privacy-mcp-connector","provisional_risk":null,"publication_recommendation":"accept","publisher":"Bonsai Solutions","publisher_url":"https://bonsaigrowth.it/","remote_url":"https://mcp.bonsaisolutions.it/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Private commercial analytics are exposed read-only; selecting an already-authorized tenant changes session context, not business data.","evidence":"Amazon marketplace and advertising analytics are read only: All 70 declared actions are analytics/status/tenant selection, and official docs explicitly say the connector reads existing Bonsai data and does not write Vendor, Ads or Seller data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Amazon marketplace and advertising analytics are read only","triggering_tools":["amazon-vendor-standard-sales-summary-tool","amazon-ads-campaigns-summary-tool","amazon-seller-sales-summary-tool","list-my-tenants-tool","switch-tenant-tool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@bonsaigrowth.it","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"amazon-ads-ad-groups-products-tool"},{"description":"","name":"amazon-ads-ad-groups-summary-tool"},{"description":"","name":"amazon-ads-ads-products-products-tool"},{"description":"","name":"amazon-ads-ads-products-summary-tool"},{"description":"","name":"amazon-ads-brand-store-asin-tool"},{"description":"","name":"amazon-ads-brand-store-insights-tool"},{"description":"","name":"amazon-ads-brand-store-quality-tool"},{"description":"","name":"amazon-ads-campaigns-products-tool"},{"description":"","name":"amazon-ads-campaigns-summary-tool"},{"description":"","name":"amazon-ads-category-benchmarks-breakdown-tool"},{"description":"","name":"amazon-ads-category-benchmarks-summary-tool"},{"description":"","name":"amazon-ads-conversion-path-products-tool"},{"description":"","name":"amazon-ads-conversion-path-summary-tool"},{"description":"","name":"amazon-ads-keywords-products-tool"},{"description":"","name":"amazon-ads-keywords-summary-tool"},{"description":"","name":"amazon-ads-product-ads-products-tool"},{"description":"","name":"amazon-ads-product-ads-summary-tool"},{"description":"","name":"amazon-ads-search-terms-products-tool"},{"description":"","name":"amazon-ads-search-terms-summary-tool"},{"description":"","name":"amazon-brand-analytics-search-terms-products-tool"},{"description":"","name":"amazon-brand-analytics-search-terms-summary-tool"},{"description":"","name":"amazon-fba-fees-products-tool"},{"description":"","name":"amazon-fba-fees-summary-tool"},{"description":"","name":"amazon-fba-supplies-products-tool"},{"description":"","name":"amazon-fba-supplies-summary-tool"},{"description":"","name":"amazon-feedback-asins-tool"},{"description":"","name":"amazon-feedback-overview-tool"},{"description":"","name":"amazon-listing-catalog-health-products-tool"},{"description":"","name":"amazon-listing-catalog-health-summary-tool"},{"description":"","name":"amazon-rank-price-buy-box-impact-tool"},{"description":"","name":"amazon-rank-price-buy-box-offers-tool"},{"description":"","name":"amazon-rank-price-buy-box-products-tool"},{"description":"","name":"amazon-rank-price-buy-box-summary-tool"},{"description":"","name":"amazon-rank-price-price-analysis-tool"},{"description":"","name":"amazon-rank-price-price-products-tool"},{"description":"","name":"amazon-rank-price-price-summary-tool"},{"description":"","name":"amazon-rank-price-rank-analysis-tool"},{"description":"","name":"amazon-rank-price-rank-products-tool"},{"description":"","name":"amazon-rank-price-rank-summary-tool"},{"description":"","name":"amazon-seller-performance-account-tool"},{"description":"","name":"amazon-seller-sales-products-tool"},{"description":"","name":"amazon-seller-sales-summary-tool"},{"description":"","name":"amazon-vendor-advanced-catalog-health-products-tool"},{"description":"","name":"amazon-vendor-advanced-catalog-health-summary-tool"},{"description":"","name":"amazon-vendor-advanced-net-ppm-products-tool"},{"description":"","name":"amazon-vendor-advanced-net-ppm-summary-tool"},{"description":"","name":"amazon-vendor-advanced-returns-products-tool"},{"description":"","name":"amazon-vendor-advanced-returns-summary-tool"},{"description":"","name":"amazon-vendor-advanced-strategic-sales-products-tool"},{"description":"","name":"amazon-vendor-advanced-strategic-sales-summary-tool"},{"description":"","name":"amazon-vendor-advanced-tca-products-tool"},{"description":"","name":"amazon-vendor-advanced-tca-summary-tool"},{"description":"","name":"amazon-vendor-advanced-vendor-coverage-products-tool"},{"description":"","name":"amazon-vendor-advanced-vendor-coverage-summary-tool"},{"description":"","name":"amazon-vendor-standard-forecast-products-tool"},{"description":"","name":"amazon-vendor-standard-forecast-summary-tool"},{"description":"","name":"amazon-vendor-standard-geo-sales-products-tool"},{"description":"","name":"amazon-vendor-standard-geo-sales-summary-tool"},{"description":"","name":"amazon-vendor-standard-inventory-products-tool"},{"description":"","name":"amazon-vendor-standard-inventory-summary-tool"},{"description":"","name":"amazon-vendor-standard-sales-products-tool"},{"description":"","name":"amazon-vendor-standard-sales-summary-tool"},{"description":"","name":"amazon-vendor-standard-sourcing-excluded-products-tool"},{"description":"","name":"amazon-vendor-standard-sourcing-excluded-summary-tool"},{"description":"","name":"amazon-vendor-standard-traffic-products-tool"},{"description":"","name":"amazon-vendor-standard-traffic-summary-tool"},{"description":"","name":"list-my-tenants-tool"},{"description":"","name":"server-status-tool"},{"description":"","name":"switch-tenant-tool"},{"description":"","name":"whoami-tool"}],"tools_count":70,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c8c62b82-9e79-42fd-8379-88ca3c359627","uuid":"9edce559-993c-5140-8a28-b80e2da66a6e","verification_tier":"community","version":""},"query_key":"bonsai solutions","schema_version":1,"status":"match"}