{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-16","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"f6106de91ec73d5654a9273808fd429c5305b8298bdaa19565f034ed16e232c0","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"High is supported by purchase-invoice approval in the payment and booking workflow. Unverified bank-payment initiation, supplier bank-detail edits and generic gateway reach are excluded from visible capability claims.","review_key":"claudesec:aec67d43-b18e-426c-bb8b-805e28cec313","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://help.cashfeed.com/en/articles/76-cashfeed-mcp-connection"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Cashfeed connects invoice, supplier, transaction, and spending workflows to Claude. Read financial records, inspect approval queues, and review aggregates or processing metrics. Invoice, supplier, and approval changes require confirmation and follow organization permissions.","did":"aec67d43-b18e-426c-bb8b-805e28cec313","documentation_url":"https://help.cashfeed.com/en/articles/76-cashfeed-mcp-connection","editorial_description":{"extended_description":"Inspect purchase and sales invoices, ledger or analytic accounts, active connections, and organization settings. Supported operations also update user or organization settings; available API operations can be discovered with their schemas.","schema_version":1,"summary":"Cashfeed connects invoice, supplier, transaction, and spending workflows to Claude.\nRead financial records, inspect approval queues, and review aggregates or processing metrics.\nInvoice, supplier, and approval changes require confirmation and follow organization permissions."},"homepage_url":"","icon":"","id":"aec67d43-b18e-426c-bb8b-805e28cec313","installs":0,"last_scanned":"","license":"","long_description":"Inspect purchase and sales invoices, ledger or analytic accounts, active connections, and organization settings. Supported operations also update user or organization settings; available API operations can be discovered with their schemas.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools commit finance-operations approval/accounting state.","reasoning":"They can trigger downstream booking/payment workflows.","risk_type":"financial_transaction","severity":"high","title":"Approves and updates invoices","triggering_tools_or_skills":["cashfeed_approve_invoices","cashfeed_update_invoice"]},{"evidence":"The connector enumerates runtime schemas then invokes selected operations.","reasoning":"The complete financial/destructive surface is hidden.","risk_type":"generic_gateway","severity":"high","title":"Discovers and invokes dynamic Cashfeed API operations","triggering_tools_or_skills":["cashfeed_api_list_operations","cashfeed_api_get_operation_schema","cashfeed_api_invoke"]},{"evidence":"These tools alter privileged organization/user configuration.","reasoning":"They are administrative.","risk_type":"credential_admin","severity":"high","title":"Updates organization/users/connections-related settings","triggering_tools_or_skills":["cashfeed_update_organisation","cashfeed_update_user_settings","cashfeed_get_active_connections"]},{"evidence":"The generic executor can run live finance operations.","reasoning":"Generic execution is High.","risk_type":"query_execution","severity":"high","title":"Invokes dynamic finance API operations","triggering_tools_or_skills":["cashfeed_api_invoke"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes invoices, suppliers, transactions, approvers and accounting connections.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/aec67d43-b18e-426c-bb8b-805e28cec313.json","what_it_proves":"Candidate PR #125 record identity (name \"Cashfeed\", publisher, type web_connector) and 34 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/aec67d43-b18e-426c-bb8b-805e28cec313: complete tool_names inventory (34 tools), remote streamable-http endpoint https://api.app.cashfeed.com/api/v1/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Cashfeed approves invoices and exposes a dynamic finance API gateway.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:aec67d43-b18e-426c-bb8b-805e28cec313","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 34 tools; exhaustive invoke schemas and downstream payment effects are required.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":34,"tools_or_skills_total":34},"name":"Cashfeed","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=aec67d43-b18e-426c-bb8b-805e28cec313&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.cashfeed.com/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Cashfeed","publisher_url":"https://www.cashfeed.com/","remote_url":"https://api.app.cashfeed.com/api/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"Approves or updates invoices in the connected organization’s payment and accounting workflow.","evidence":"Actions: cashfeed_approve_invoices, cashfeed_update_invoice. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — Cashfeed one_liner 'Pay, book and review your invoices'; tool cashfeed_approve_invoices; https://help.cashfeed.com/en/articles/76-cashfeed-mcp-connection — MCP lets assistants access Cashfeed data and tools; org selection","risk_type":"modifies_data","severity":"high","title":"Approves and changes purchase invoices"},{"description":"Retrieves invoices, suppliers, bank transactions, ledger information and organization users.","evidence":"Actions: cashfeed_get_invoices, cashfeed_get_transactions, cashfeed_get_suppliers, cashfeed_get_organisation_users. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — tool_names cashfeed_get_*","risk_type":"reads_private_data","severity":"medium","title":"Reads private invoices and financial records"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@cashfeed.com","tags":["modifies_data","reads_private_data"],"tools":[{"description":"","name":"cashfeed_api_get_operation_schema","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete financial/destructive surface is hidden.; Generic execution is High."}},{"description":"","name":"cashfeed_api_invoke","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete financial/destructive surface is hidden.; Generic execution is High."}},{"description":"","name":"cashfeed_api_list_operations","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete financial/destructive surface is hidden.; Generic execution is High."}},{"description":"","name":"cashfeed_api_list_tags"},{"description":"","name":"cashfeed_approve_invoices","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They can trigger downstream booking/payment workflows."}},{"description":"","name":"cashfeed_get_active_connections","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are administrative."}},{"description":"","name":"cashfeed_get_analytic_accounts"},{"description":"","name":"cashfeed_get_invoice"},{"description":"","name":"cashfeed_get_invoice_aggregates"},{"description":"","name":"cashfeed_get_invoice_cycle_time_stats"},{"description":"","name":"cashfeed_get_invoice_status_breakdown"},{"description":"","name":"cashfeed_get_invoices"},{"description":"","name":"cashfeed_get_ledger_accounts"},{"description":"","name":"cashfeed_get_me"},{"description":"","name":"cashfeed_get_organisation_approvers"},{"description":"","name":"cashfeed_get_organisation_settings"},{"description":"","name":"cashfeed_get_organisation_users"},{"description":"","name":"cashfeed_get_outgoing_invoice"},{"description":"","name":"cashfeed_get_outgoing_invoice_aggregates"},{"description":"","name":"cashfeed_get_outgoing_invoices"},{"description":"","name":"cashfeed_get_supplier_details"},{"description":"","name":"cashfeed_get_supplier_spend_summary"},{"description":"","name":"cashfeed_get_suppliers"},{"description":"","name":"cashfeed_get_support_topic"},{"description":"","name":"cashfeed_get_todo_invoices"},{"description":"","name":"cashfeed_get_transaction"},{"description":"","name":"cashfeed_get_transaction_aggregates"},{"description":"","name":"cashfeed_get_transactions"},{"description":"","name":"cashfeed_list_support_topics"},{"description":"","name":"cashfeed_process_data"},{"description":"","name":"cashfeed_update_invoice","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They can trigger downstream booking/payment workflows."}},{"description":"","name":"cashfeed_update_organisation","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are administrative."}},{"description":"","name":"cashfeed_update_supplier"},{"description":"","name":"cashfeed_update_user_settings","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are administrative."}}],"tools_count":34,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/aec67d43-b18e-426c-bb8b-805e28cec313","uuid":"748e2657-d5cf-59ca-817e-53d889c256b6","verification_tier":"community","version":""},"query_key":"cashfeed","schema_version":1,"status":"match"}