{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-21","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Brazilian estate agents to VeloImob CRM from Claude. Find properties, leads, clients and appointments, and update sales follow-up. New property records are published on the site; access is limited to the connected agency and your role.","did":"bb2537dd-da03-477b-8cc0-616cfbce7bd2","documentation_url":"https://veloimob.com.br/assistentes-ia","editorial_description":{"extended_description":"Tools update property prices or status, move leads and schedule visits. Agents see their own leads, clients and calendar, while account owners can inspect the agency portfolio. Outputs are in Portuguese with Brazilian-real amounts. An enabled VeloImob account is required; deletion remains in its dashboard.","schema_version":1,"summary":"Connects Brazilian estate agents to VeloImob CRM from Claude.\nFind properties, leads, clients and appointments, and update sales follow-up.\nNew property records are published on the site; access is limited to the connected agency and your role."},"homepage_url":"","icon":"","id":"bb2537dd-da03-477b-8cc0-616cfbce7bd2","installs":0,"last_scanned":"","license":"","long_description":"Tools update property prices or status, move leads and schedule visits. Agents see their own leads, clients and calendar, while account owners can inspect the agency portfolio. Outputs are in Portuguese with Brazilian-real amounts. An enabled VeloImob account is required; deletion remains in its dashboard.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares create, save, move, schedule and update operations over CRM records.","reasoning":"These operations persistently change customer CRM data but do not unambiguously send messages or perform another High action.","risk_type":"data_modification","severity":"medium","title":"Changes CRM leads, properties and visits","triggering_tools_or_skills":["create_property","save_lead","move_lead","schedule_visit","update_property"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; account/CRM object scopes and team authorization are not described.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/bb2537dd-da03-477b-8cc0-616cfbce7bd2.json","what_it_proves":"Candidate PR #125 record identity (name \"VeloImob CRM\", publisher, type web_connector) and 15 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/bb2537dd-da03-477b-8cc0-616cfbce7bd2: complete tool_names inventory (15 tools), remote streamable-http endpoint https://mcp.veloimob.com.br/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"VeloImob can create and update properties, save and move leads, and schedule visits.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:bb2537dd-da03-477b-8cc0-616cfbce7bd2","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 15 names. The official documentation URL could not be fetched; the broad fetch and search tools require runtime scope/tenant checks.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":15,"tools_or_skills_total":15},"name":"VeloImob CRM","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=bb2537dd-da03-477b-8cc0-616cfbce7bd2&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://veloimob.com.br/privacidade","provisional_risk":null,"publication_recommendation":"accept","publisher":"CodesGO Tecnologia LTDA","publisher_url":"https://veloimob.com.br/","remote_url":"https://mcp.veloimob.com.br/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change customer CRM data but do not unambiguously send messages or perform another High action.","evidence":"Changes CRM leads, properties and visits: The complete inventory explicitly declares create, save, move, schedule and update operations over CRM records.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes CRM leads, properties and visits","triggering_tools":["create_property","save_lead","move_lead","schedule_visit","update_property"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contato@veloimob.com.br","tags":["modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"create_property","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change customer CRM data but do not unambiguously send messages or perform another High action."}},{"description":"","name":"fetch"},{"description":"","name":"get_account_setup"},{"description":"","name":"get_business_summary"},{"description":"","name":"get_lead"},{"description":"","name":"get_properties"},{"description":"","name":"get_schedule"},{"description":"","name":"move_lead","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change customer CRM data but do not unambiguously send messages or perform another High action."}},{"description":"","name":"save_lead","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change customer CRM data but do not unambiguously send messages or perform another High action."}},{"description":"","name":"schedule_visit","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change customer CRM data but do not unambiguously send messages or perform another High action."}},{"description":"","name":"search"},{"description":"","name":"search_clients"},{"description":"","name":"search_leads"},{"description":"","name":"search_properties"},{"description":"","name":"update_property","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These operations persistently change customer CRM data but do not unambiguously send messages or perform another High action."}}],"tools_count":15,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/bb2537dd-da03-477b-8cc0-616cfbce7bd2","uuid":"b836e20a-0aa9-512b-bf2c-a11c7dc15550","verification_tier":"community","version":""},"query_key":"codesgo tecnologia ltda veloimob crm","schema_version":1,"status":"match"}