{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Analyze marketing and ecommerce data from your edrone store. Inspect campaign performance, attributed revenue, customer segments, products, and orders. OAuth access is restricted to the store you are authorized to view.","did":"d285ec53-f610-4443-9b39-0d458d47832c","documentation_url":"https://docs.edrone.me/guides/mcp/","editorial_description":{"extended_description":"Reports cover newsletters, automations, onsite widgets, subscriber growth, RFM segments, and channel revenue. You can also inspect billing, subscription information, and SMS or WhatsApp credits. Account administrators can revoke or block assistant access.","schema_version":1,"summary":"Analyze marketing and ecommerce data from your edrone store.\nInspect campaign performance, attributed revenue, customer segments, products, and orders.\nOAuth access is restricted to the store you are authorized to view."},"homepage_url":"","icon":"","id":"d285ec53-f610-4443-9b39-0d458d47832c","installs":0,"last_scanned":"","license":"","long_description":"Reports cover newsletters, automations, onsite widgets, subscriber growth, RFM segments, and channel revenue. You can also inspect billing, subscription information, and SMS or WhatsApp credits. Account administrators can revoke or block assistant access.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"Official docs list 75 analytical tools returning customer contact details, orders, campaigns, products, subscriptions and revenue.","reasoning":"The data is commercially and personally sensitive but the connector cannot alter it.","risk_type":"private_data_read","severity":"low","title":"Marketing, customer, order, product and billing analytics are readable","triggering_tools_or_skills":["search_customer","list_orders","get_billing_details","get_customer_product_interactions","get_engagement_messages"]},{"evidence":"The connector returns user/customer-originated marketing and commerce content.","reasoning":"Returned account content should be treated as untrusted data.","risk_type":"prompt_injection_exposure","severity":"low","title":"Customer and campaign text enters model context","triggering_tools_or_skills":["search_customer","get_engagement_messages","get_order_details"]},{"evidence":"The connector runs at https://mcp.edrone.me/mcp without a pinned server implementation in the review packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"edrone is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.1 restricts the connector to the single edrone store/tracker authorized by the user; admins can revoke or block connected assistants.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d285ec53-f610-4443-9b39-0d458d47832c.json","what_it_proves":"Candidate PR #125 record identity (name \"edrone\", publisher, type web_connector) and 75 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d285ec53-f610-4443-9b39-0d458d47832c: complete tool_names inventory (75 tools), remote streamable-http endpoint https://mcp.edrone.me/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:14:44Z","url_or_path":"https://docs.edrone.me/guides/mcp/","what_it_proves":"Official overview confirms OAuth and single-store authorization."},{"accessed_at":"2026-10-10T21:14:44Z","url_or_path":"https://docs.edrone.me/guides/mcp/available-tools/","what_it_proves":"Official reference enumerates all 75 tools and explicitly states every tool is analytical/read-only."}],"primary_reason":"edrone's documented 75-tool surface is read-only analytics over one authorized store.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d285ec53-f610-4443-9b39-0d458d47832c","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 75 Directory tools against the official complete tool reference; names/count and read-only posture match.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":75,"tools_or_skills_total":75},"name":"edrone","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d285ec53-f610-4443-9b39-0d458d47832c&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://edrone.me/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"edrone","publisher_url":"https://edrone.me/","remote_url":"https://mcp.edrone.me/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The data is commercially and personally sensitive but the connector cannot alter it.","evidence":"Marketing, customer, order, product and billing analytics are readable: Official docs list 75 analytical tools returning customer contact details, orders, campaigns, products, subscriptions and revenue.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Marketing, customer, order, product and billing analytics are readable","triggering_tools":["search_customer","list_orders","get_billing_details","get_customer_product_interactions","get_engagement_messages"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@edrone.me","tags":["accesses_calendar","accesses_messaging","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"count_customers_by_segment"},{"description":"","name":"get_active_engagements_count"},{"description":"","name":"get_automation_reports"},{"description":"","name":"get_billing_details"},{"description":"","name":"get_business_summary_audit"},{"description":"","name":"get_channel_performance_summary"},{"description":"","name":"get_channel_top_kpis"},{"description":"","name":"get_customer_activation_metrics"},{"description":"","name":"get_customer_product_interactions"},{"description":"","name":"get_dashboard_top_kpis"},{"description":"","name":"get_edrone_impact"},{"description":"","name":"get_email_deliverability_audit"},{"description":"","name":"get_engagement_attributions"},{"description":"","name":"get_engagement_details"},{"description":"","name":"get_engagement_health_audit"},{"description":"","name":"get_engagement_history_chart"},{"description":"","name":"get_engagement_messages"},{"description":"","name":"get_engagement_stats"},{"description":"","name":"get_engagements_top_metrics"},{"description":"","name":"get_impact_rate"},{"description":"","name":"get_newsletter_reports"},{"description":"","name":"get_onsite_performance_table"},{"description":"","name":"get_onsite_summary_metrics"},{"description":"","name":"get_order_attribution_timeline"},{"description":"","name":"get_order_count"},{"description":"","name":"get_order_details"},{"description":"","name":"get_other_subscriptions"},{"description":"","name":"get_product_analysis"},{"description":"","name":"get_product_details"},{"description":"","name":"get_product_info"},{"description":"","name":"get_product_statistics"},{"description":"","name":"get_products_availability"},{"description":"","name":"get_products_batch"},{"description":"","name":"get_push_newsletter_report"},{"description":"","name":"get_push_newsletter_statistics"},{"description":"","name":"get_revenue_by_channel"},{"description":"","name":"get_revenue_by_feature"},{"description":"","name":"get_revenue_over_time"},{"description":"","name":"get_revenue_per_sent"},{"description":"","name":"get_revenue_summary"},{"description":"","name":"get_rfm_segment_statistics"},{"description":"","name":"get_segment_details"},{"description":"","name":"get_segment_template_details"},{"description":"","name":"get_sending_domains_status"},{"description":"","name":"get_sms_credits"},{"description":"","name":"get_sms_newsletter_report"},{"description":"","name":"get_sms_newsletter_statistics"},{"description":"","name":"get_sms_subscription"},{"description":"","name":"get_subscribers_growth"},{"description":"","name":"get_subscribers_summary"},{"description":"","name":"get_subscriptions_report"},{"description":"","name":"get_top_customers"},{"description":"","name":"get_top_products"},{"description":"","name":"get_top_rfm_customers"},{"description":"","name":"get_volatile_counters"},{"description":"","name":"get_whatsapp_credits"},{"description":"","name":"get_whatsapp_subscription"},{"description":"","name":"list_completed_activation_subtypes"},{"description":"","name":"list_customer_activation_subtypes"},{"description":"","name":"list_customers_by_segment"},{"description":"","name":"list_customers_matching"},{"description":"","name":"list_customers_who_ordered_product"},{"description":"","name":"list_engaged_customers"},{"description":"","name":"list_engagement_active_types"},{"description":"","name":"list_engagements"},{"description":"","name":"list_newest_products_in_category"},{"description":"","name":"list_onsite_widgets"},{"description":"","name":"list_orders"},{"description":"","name":"list_orders_statistics"},{"description":"","name":"list_product_bestsellers"},{"description":"","name":"list_product_categories"},{"description":"","name":"list_segment_templates"},{"description":"","name":"list_segments"},{"description":"","name":"search_customer"},{"description":"","name":"search_product_categories"}],"tools_count":75,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d285ec53-f610-4443-9b39-0d458d47832c","uuid":"26d3c47d-ce96-5971-8127-0bff1d6923d0","verification_tier":"community","version":""},"query_key":"edrone","schema_version":1,"status":"match"}