{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-29","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Boomerang manages digital loyalty programs from Claude. Issue or update wallet cards, manage customers and rewards, and run automation workflows. Tools can redeem coupons, change balances, and administer agency sub-accounts.","did":"70fd0106-662e-4370-88e6-9a5113ee408b","documentation_url":"https://docs.boomerangme.cards/","editorial_description":{"extended_description":"Programs include stamps, points, cashback, memberships, and coupons for Apple Wallet and Google Wallet. Authenticated tools also manage templates, locations, reward tiers, tracking links, integrations, branding, custom domains, and workflow logs.","schema_version":1,"summary":"Boomerang manages digital loyalty programs from Claude.\nIssue or update wallet cards, manage customers and rewards, and run automation workflows.\nTools can redeem coupons, change balances, and administer agency sub-accounts."},"homepage_url":"","icon":"https://cdn.prod.website-files.com/65afaeb3bce411192f4d73ae/6a2bd09a9803b0b269098377_icon%204.png","id":"70fd0106-662e-4370-88e6-9a5113ee408b","installs":0,"last_scanned":"","license":"","long_description":"Programs include stamps, points, cashback, memberships, and coupons for Apple Wallet and Google Wallet. Authenticated tools also manage templates, locations, reward tiers, tracking links, integrations, branding, custom domains, and workflow logs.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The declared inventory explicitly removes multiple durable loyalty-program resources.","reasoning":"These actions can destroy customer, campaign and operational data.","risk_type":"data_deletion","severity":"high","title":"Deletes loyalty cards, customers, templates, locations, domains and workflows","triggering_tools_or_skills":["delete_card","delete_customer","delete_location","delete_template","delete_utm_link","delete_white_label_domain","delete_workflow"]},{"evidence":"The connector can establish integrations/domain bindings and assume another company context.","reasoning":"Integration and impersonation controls are privileged account-administration capabilities.","risk_type":"credential_admin","severity":"high","title":"Connects external services/domains and impersonates companies","triggering_tools_or_skills":["connect_external_service","connect_white_label_domain","impersonate_company"]},{"evidence":"These tools persist customer rewards, balances and automated campaign state.","reasoning":"They materially affect customer entitlements and shared business workflows.","risk_type":"data_modification","severity":"medium","title":"Changes loyalty value, rewards, customers and automated workflows","triggering_tools_or_skills":["add_amount_to_card","add_point_to_card","add_reward_to_card","redeem_coupon_card","create_customer","create_workflow","run_workflow"]},{"evidence":"candidate_tools_truncated=true while 90 names are present.","reasoning":"The omitted tools could add further High-risk capabilities and prevent a complete review.","risk_type":"evidence_gap","severity":"low","title":"Candidate omits part of the Directory tool inventory","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a Boomerang loyalty-program company is required; company impersonation, integration, workflow and stored-value roles are not documented.","blocked_missing_evidence":"The complete untruncated tools/list response with descriptions and schemas, plus RBAC/confirmation rules for impersonate_company, integration, workflows and stored-value operations.","confidence":"medium","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/70fd0106-662e-4370-88e6-9a5113ee408b.json","what_it_proves":"Candidate PR #125 record identity (name \"Boomerang\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/70fd0106-662e-4370-88e6-9a5113ee408b: complete tool_names inventory (90 tools), remote streamable-http endpoint https://api.digitalwallet.cards/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Boomerang deletes core loyalty resources and performs privileged integration/impersonation actions, while its candidate tool list is truncated.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:70fd0106-662e-4370-88e6-9a5113ee408b","reviewed_at":"2026-10-10","reviewer_notes":"Manually reviewed all 90 listed names. The missing tail is why this review cannot establish the full ceiling; no claim is made that unlisted tools are safe.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":90,"tools_or_skills_total":90},"name":"Boomerang","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=70fd0106-662e-4370-88e6-9a5113ee408b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://boomerangme.com/legal-docs/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Boomerangme Inc.","publisher_url":"https://boomerangme.com/","remote_url":"https://api.digitalwallet.cards/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data.","evidence":"Deletes loyalty cards, customers, templates, locations, domains and workflows: The declared inventory explicitly removes multiple durable loyalty-program resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes loyalty cards, customers, templates, locations, domains and workflows","triggering_tools":["delete_card","delete_customer","delete_location","delete_template","delete_utm_link","delete_white_label_domain","delete_workflow"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows.","evidence":"Connects external services/domains and impersonates companies: The connector can establish integrations/domain bindings and assume another company context. | Changes loyalty value, rewards, customers and automated workflows: These tools persist customer rewards, balances and automated campaign state.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["connect_external_service","connect_white_label_domain","impersonate_company","add_amount_to_card","add_point_to_card","add_reward_to_card","redeem_coupon_card","create_customer","create_workflow","run_workflow"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@boomerangme.com","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"activate_workflow"},{"description":"","name":"add_amount_to_card","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"add_feedback_link_to_template"},{"description":"","name":"add_membership_tier_to_template"},{"description":"","name":"add_point_to_card","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"add_purchase_to_card"},{"description":"","name":"add_reward_tier_to_template"},{"description":"","name":"add_reward_to_card","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"add_scores_to_card"},{"description":"","name":"add_stamp_to_card"},{"description":"","name":"add_visit_to_card"},{"description":"","name":"connect_external_service","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"connect_white_label_domain","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"create_card"},{"description":"","name":"create_customer","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"create_location"},{"description":"","name":"create_template"},{"description":"","name":"create_utm_link"},{"description":"","name":"create_workflow","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"delete_card","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data."}},{"description":"","name":"delete_customer","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data."}},{"description":"","name":"delete_location","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data."}},{"description":"","name":"delete_template","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data."}},{"description":"","name":"delete_utm_link","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data."}},{"description":"","name":"delete_white_label_branding_images"},{"description":"","name":"delete_white_label_domain","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data."}},{"description":"","name":"delete_workflow","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy customer, campaign and operational data."}},{"description":"","name":"disconnect_external_service"},{"description":"","name":"get_card"},{"description":"","name":"get_company"},{"description":"","name":"get_customer"},{"description":"","name":"get_external_service_status"},{"description":"","name":"get_location"},{"description":"","name":"get_template"},{"description":"","name":"get_template_reward_stats"},{"description":"","name":"get_template_utm_stats"},{"description":"","name":"get_utm_link"},{"description":"","name":"get_white_label_branding_images"},{"description":"","name":"get_white_label_dashboard_branding"},{"description":"","name":"get_white_label_promo_branding"},{"description":"","name":"get_white_label_scanner_branding"},{"description":"","name":"get_white_label_subaccount_menu"},{"description":"","name":"get_workflow"},{"description":"","name":"impersonate_company","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"list_cards"},{"description":"","name":"list_customers"},{"description":"","name":"list_external_services"},{"description":"","name":"list_locations"},{"description":"","name":"list_membership_tiers"},{"description":"","name":"list_templates"},{"description":"","name":"list_utm_links"},{"description":"","name":"list_white_label_domains"},{"description":"","name":"list_workflow_actions"},{"description":"","name":"list_workflow_filters"},{"description":"","name":"list_workflow_logs"},{"description":"","name":"list_workflow_triggers"},{"description":"","name":"list_workflows"},{"description":"","name":"pause_workflow"},{"description":"","name":"receive_reward_from_card"},{"description":"","name":"redeem_coupon_card","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"remove_feedback_link_from_template"},{"description":"","name":"remove_membership_tier_from_template"},{"description":"","name":"remove_reward_tier_from_template"},{"description":"","name":"run_workflow","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Integration and impersonation controls are privileged account-administration capabilities.; They materially affect customer entitlements and shared business workflows."}},{"description":"","name":"search_companies"},{"description":"","name":"set_card_expiration"},{"description":"","name":"set_card_membership_tier"},{"description":"","name":"stop_impersonation"},{"description":"","name":"subtract_amount_from_card"},{"description":"","name":"subtract_point_from_card"},{"description":"","name":"subtract_purchase_from_card"},{"description":"","name":"subtract_reward_from_card"},{"description":"","name":"subtract_scores_from_card"},{"description":"","name":"subtract_stamp_from_card"},{"description":"","name":"subtract_visit_from_card"},{"description":"","name":"update_card"},{"description":"","name":"update_customer"},{"description":"","name":"update_feedback_link_in_template"},{"description":"","name":"update_location"},{"description":"","name":"update_membership_tier_in_template"},{"description":"","name":"update_reward_tier_in_template"},{"description":"","name":"update_template"},{"description":"","name":"update_utm_link"},{"description":"","name":"update_white_label_dashboard_branding"},{"description":"","name":"update_white_label_promo_branding"},{"description":"","name":"update_white_label_scanner_branding"},{"description":"","name":"update_white_label_subaccount_menu"},{"description":"","name":"update_workflow"},{"description":"","name":"upload_white_label_branding_images"},{"description":"","name":"whoami"}],"tools_count":90,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/70fd0106-662e-4370-88e6-9a5113ee408b","uuid":"5f0eb5cb-728e-58a5-a0b2-482b3627f846","verification_tier":"community","version":""},"query_key":"boomerangme inc boomerang","schema_version":1,"status":"match"}