{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-14","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Bloom Profit Analytics reads ecommerce profit and sales data. Inspect Shopify and Amazon shops, daily summaries, and order or product profitability. Analyze revenue, margins, costs, ad spend, and attribution from connected store data.","did":"ad676446-762c-4258-8b03-0ecbbf0e8ae5","documentation_url":"https://docs.bloomanalytics.io/bloom-+-ai-assistants-via-mcp/connect-bloom-mcp-to-claude","editorial_description":{"extended_description":"","schema_version":1,"summary":"Bloom Profit Analytics reads ecommerce profit and sales data.\nInspect Shopify and Amazon shops, daily summaries, and order or product profitability.\nAnalyze revenue, margins, costs, ad spend, and attribution from connected store data."},"homepage_url":"","icon":"","id":"ad676446-762c-4258-8b03-0ecbbf0e8ae5","installs":0,"last_scanned":"","license":"","long_description":"","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The fixed tools retrieve aggregated/store analytics.","reasoning":"They do not alter orders or ads.","risk_type":"private_data_read","severity":"low","title":"Reads private revenue, orders, margins and product profit","triggering_tools_or_skills":["query_daily_summary","query_order_profits","query_product_profits"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes connected Shopify/Amazon shop profit data.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ad676446-762c-4258-8b03-0ecbbf0e8ae5.json","what_it_proves":"Candidate PR #125 record identity (name \"Bloom Profit Analytics\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ad676446-762c-4258-8b03-0ecbbf0e8ae5: complete tool_names inventory (4 tools), remote streamable-http endpoint https://app.bloomanalytics.io/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Bloom Profit Analytics is read-only ecommerce reporting.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:ad676446-762c-4258-8b03-0ecbbf0e8ae5","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all four tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"Bloom Profit Analytics","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ad676446-762c-4258-8b03-0ecbbf0e8ae5&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.bloomanalytics.io/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Estore Automate","publisher_url":"https://www.bloomanalytics.io/","remote_url":"https://app.bloomanalytics.io/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: They do not alter orders or ads.","evidence":"Reads private revenue, orders, margins and product profit: The fixed tools retrieve aggregated/store analytics.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private revenue, orders, margins and product profit","triggering_tools":["query_daily_summary","query_order_profits","query_product_profits"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@bloomanalytics.io","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"list_shops"},{"description":"","name":"query_daily_summary"},{"description":"","name":"query_order_profits"},{"description":"","name":"query_product_profits"}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ad676446-762c-4258-8b03-0ecbbf0e8ae5","uuid":"02b7a7cd-93f7-53e0-8b02-6609a829e05c","verification_tier":"community","version":""},"query_key":"estore automate bloom profit analytics","schema_version":1,"status":"match"}