{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Evident UGC connects Claude to store reviews, FAQs, loyalty, and customer evidence. Analyze feedback, moderate or reply to reviews, and request new reviews. Actions use your role in the organization selected at sign-in.","did":"479a4bce-b1dd-49fd-9188-d6e4a6e17ee2","documentation_url":"https://evidentugc.com/docs/agent-access","editorial_description":{"extended_description":"Tools also adjust loyalty points, create rewards, and maintain FAQs. The source includes BigCommerce, Shopify, and headless-store integrations.","schema_version":1,"summary":"Evident UGC connects Claude to store reviews, FAQs, loyalty, and customer evidence.\nAnalyze feedback, moderate or reply to reviews, and request new reviews.\nActions use your role in the organization selected at sign-in."},"homepage_url":"","icon":"","id":"479a4bce-b1dd-49fd-9188-d6e4a6e17ee2","installs":0,"last_scanned":"","license":"","long_description":"Tools also adjust loyalty points, create rewards, and maintain FAQs. The source includes BigCommerce, Shopify, and headless-store integrations.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The description identifies both reply and review-request tools as write actions.","reasoning":"They communicate with customers or publish a merchant response under the store identity.","risk_type":"messaging_as_user","severity":"high","title":"Replies publicly and sends customer review requests","triggering_tools_or_skills":["reply_to_review","send_review_request"]},{"evidence":"The write surface changes customer loyalty balances and creates redeemable rewards.","reasoning":"Loyalty points and rewards carry economic value and can create merchant liability.","risk_type":"financial_transaction","severity":"high","title":"Adjusts loyalty points and creates rewards","triggering_tools_or_skills":["adjust_loyalty_points","create_loyalty_reward"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication selects an Evident organization and rechecks role membership per call across customers, orders, reviews, FAQs and loyalty.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"complete","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/479a4bce-b1dd-49fd-9188-d6e4a6e17ee2.json","what_it_proves":"Candidate PR #125 record identity (name \"Evident UGC\", publisher, type web_connector) and 22 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/479a4bce-b1dd-49fd-9188-d6e4a6e17ee2: complete tool_names inventory (22 tools), remote streamable-http endpoint https://mcp.evidentugc.com/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"Evident UGC can contact customers and change economically valuable loyalty balances/rewards.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:479a4bce-b1dd-49fd-9188-d6e4a6e17ee2","reviewed_at":"2026-10-10","reviewer_notes":"Require customer/order/content confirmation for review requests and balance/reward deltas.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":22,"tools_or_skills_total":22},"name":"Evident UGC","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=479a4bce-b1dd-49fd-9188-d6e4a6e17ee2&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://evidentugc.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Epic Design Labs","publisher_url":"https://evidentugc.com/","remote_url":"https://mcp.evidentugc.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate with customers or publish a merchant response under the store identity.","evidence":"Replies publicly and sends customer review requests: The description identifies both reply and review-request tools as write actions.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Replies publicly and sends customer review requests","triggering_tools":["reply_to_review","send_review_request"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Loyalty points and rewards carry economic value and can create merchant liability.","evidence":"Adjusts loyalty points and creates rewards: The write surface changes customer loyalty balances and creates redeemable rewards.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Adjusts loyalty points and creates rewards","triggering_tools":["adjust_loyalty_points","create_loyalty_reward"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@evidentugc.com","tags":["network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"adjust_loyalty_points","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Loyalty points and rewards carry economic value and can create merchant liability."}},{"description":"","name":"create_faq"},{"description":"","name":"create_loyalty_reward","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Loyalty points and rewards carry economic value and can create merchant liability."}},{"description":"","name":"get_customer_activity"},{"description":"","name":"get_evidence_analytics"},{"description":"","name":"get_loyalty_account"},{"description":"","name":"get_loyalty_stats"},{"description":"","name":"get_product"},{"description":"","name":"get_product_review_stats"},{"description":"","name":"get_review"},{"description":"","name":"get_review_analytics"},{"description":"","name":"get_top_products_by_reviews"},{"description":"","name":"list_faqs"},{"description":"","name":"list_loyalty_rewards"},{"description":"","name":"list_orders"},{"description":"","name":"list_stores"},{"description":"","name":"moderate_review"},{"description":"","name":"reply_to_review","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate with customers or publish a merchant response under the store identity."}},{"description":"","name":"search_products"},{"description":"","name":"search_reviews"},{"description":"","name":"send_review_request","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They communicate with customers or publish a merchant response under the store identity."}},{"description":"","name":"update_faq"}],"tools_count":22,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/479a4bce-b1dd-49fd-9188-d6e4a6e17ee2","uuid":"ef2d6ebe-5a11-5928-921f-513d0f02b190","verification_tier":"community","version":""},"query_key":"epic design labs evident ugc","schema_version":1,"status":"match"}