{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-23","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Eventrise manages events, ticketing, attendees, and reporting. Configure venues, sessions, seating, prices, or promotions, and check attendees in. Inspect orders, reassign tickets, and preview, approve, reject, or process refunds.","did":"f5608c12-05ef-4b0d-b6a1-b1936af8c8cf","documentation_url":"https://app.eventrise.com/docs","editorial_description":{"extended_description":"Create comped orders, manage fees and finance entries, and report sales, payouts, taxes, or attendance. Tools configure webhooks and scheduled reports, and can cancel events or orders and delete event resources.","schema_version":1,"summary":"Eventrise manages events, ticketing, attendees, and reporting.\nConfigure venues, sessions, seating, prices, or promotions, and check attendees in.\nInspect orders, reassign tickets, and preview, approve, reject, or process refunds."},"homepage_url":"","icon":"https://api.eventrise.com/apple-touch-icon.png","id":"f5608c12-05ef-4b0d-b6a1-b1936af8c8cf","installs":0,"last_scanned":"","license":"","long_description":"Create comped orders, manage fees and finance entries, and report sales, payouts, taxes, or attendance. Tools configure webhooks and scheduled reports, and can cancel events or orders and delete event resources.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The 153 tools approve or reject refunds, refund order items, create comped orders/fees/finance entries, and lock or unlock event settlement.","reasoning":"These operations move or waive value and alter financial settlement and accounting records.","risk_type":"financial_transaction","severity":"high","title":"Refunds, comped orders, fees, and settlement locks can be committed","triggering_tools_or_skills":["organization_approve_refund","organization_refund_order_item","organization_create_comped_order","organization_create_fee","organization_lock_event_settlement"]},{"evidence":"Explicit delete tools cover events, tickets, venues, sessions, documents, speakers, fees, promo codes, reports, tracking links, and webhook subscriptions.","reasoning":"Deletion can destroy ticketing operations, content, and finance configuration.","risk_type":"data_deletion","severity":"high","title":"Events and most event resources can be deleted","triggering_tools_or_skills":["organization_delete_event","organization_delete_ticket","organization_delete_venue","organization_delete_session","organization_delete_document","organization_delete_promo_code"]},{"evidence":"The connector creates/deletes event webhooks and updates the organization profile.","reasoning":"Webhooks can forward attendee/order data to external destinations and are privileged integration settings.","risk_type":"credential_admin","severity":"high","title":"Webhook subscriptions and organization configuration can be administered","triggering_tools_or_skills":["organization_create_webhook_subscription","organization_delete_webhook_subscription","organization_update_organization"]},{"evidence":"The tools schedule reports and cancel, close, reopen, publish-state change, or otherwise operate events with attendees and ticket holders.","reasoning":"These actions can trigger communications or visible status changes as the organizer.","risk_type":"messaging_as_user","severity":"high","title":"Scheduled reports and event status changes can notify stakeholders","triggering_tools_or_skills":["organization_create_scheduled_report","organization_cancel_event","organization_unpublish_event","organization_reopen_event"]},{"evidence":"The connector retrieves attendee PDFs, orders/responses, check-in rosters, refunds, payout reports, sales tax, and transfers.","reasoning":"This combines personal attendee data with sensitive payment and event financial data.","risk_type":"private_data_read","severity":"medium","title":"Attendee, order, check-in, and finance data is exposed","triggering_tools_or_skills":["organization_get_attendee","organization_list_orders","organization_list_check_in_roster","organization_get_finance_summary"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants broad Eventrise organization, ticketing, finance, attendee, refund, webhook, and settlement permissions; exact roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f5608c12-05ef-4b0d-b6a1-b1936af8c8cf.json","what_it_proves":"Candidate PR #125 record identity (name \"Eventrise\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f5608c12-05ef-4b0d-b6a1-b1936af8c8cf: complete tool_names inventory (153 tools), remote streamable-http endpoint https://mcp.eventrise.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Eventrise can issue refunds, administer webhooks and settlement, cancel events, and delete nearly every event resource.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f5608c12-05ef-4b0d-b6a1-b1936af8c8cf","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 153 names; role enforcement and notification side effects need runtime verification.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":153,"tools_or_skills_total":153},"name":"Eventrise","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f5608c12-05ef-4b0d-b6a1-b1936af8c8cf&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://eventrise.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Eventrise LLC","publisher_url":"https://eventrise.com/","remote_url":"https://mcp.eventrise.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These operations move or waive value and alter financial settlement and accounting records.","evidence":"Refunds, comped orders, fees, and settlement locks can be committed: The 153 tools approve or reject refunds, refund order items, create comped orders/fees/finance entries, and lock or unlock event settlement.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Refunds, comped orders, fees, and settlement locks can be committed","triggering_tools":["organization_approve_refund","organization_refund_order_item","organization_create_comped_order","organization_create_fee","organization_lock_event_settlement"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion can destroy ticketing operations, content, and finance configuration.","evidence":"Events and most event resources can be deleted: Explicit delete tools cover events, tickets, venues, sessions, documents, speakers, fees, promo codes, reports, tracking links, and webhook subscriptions.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Events and most event resources can be deleted","triggering_tools":["organization_delete_event","organization_delete_ticket","organization_delete_venue","organization_delete_session","organization_delete_document","organization_delete_promo_code"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Webhooks can forward attendee/order data to external destinations and are privileged integration settings.","evidence":"Webhook subscriptions and organization configuration can be administered: The connector creates/deletes event webhooks and updates the organization profile.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Webhook subscriptions and organization configuration can be administered","triggering_tools":["organization_create_webhook_subscription","organization_delete_webhook_subscription","organization_update_organization"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: These actions can trigger communications or visible status changes as the organizer.","evidence":"Scheduled reports and event status changes can notify stakeholders: The tools schedule reports and cancel, close, reopen, publish-state change, or otherwise operate events with attendees and ticket holders.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Scheduled reports and event status changes can notify stakeholders","triggering_tools":["organization_create_scheduled_report","organization_cancel_event","organization_unpublish_event","organization_reopen_event"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal attendee data with sensitive payment and event financial data.","evidence":"Attendee, order, check-in, and finance data is exposed: The connector retrieves attendee PDFs, orders/responses, check-in rosters, refunds, payout reports, sales tax, and transfers.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Attendee, order, check-in, and finance data is exposed","triggering_tools":["organization_get_attendee","organization_list_orders","organization_list_check_in_roster","organization_get_finance_summary"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@eventrise.com","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","reads_private_data","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"organization_add_session_speaker"},{"description":"","name":"organization_add_session_ticket"},{"description":"","name":"organization_approve_refund","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These operations move or waive value and alter financial settlement and accounting records."}},{"description":"","name":"organization_calculate_ticket_price"},{"description":"","name":"organization_cancel_event","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions can trigger communications or visible status changes as the organizer."}},{"description":"","name":"organization_cancel_order"},{"description":"","name":"organization_check_in_sync"},{"description":"","name":"organization_checkin_attendee"},{"description":"","name":"organization_checkin_order_item"},{"description":"","name":"organization_close_event"},{"description":"","name":"organization_create_comped_order","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These operations move or waive value and alter financial settlement and accounting records."}},{"description":"","name":"organization_create_custom_question"},{"description":"","name":"organization_create_document"},{"description":"","name":"organization_create_event"},{"description":"","name":"organization_create_event_fee"},{"description":"","name":"organization_create_featured_event"},{"description":"","name":"organization_create_fee","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These operations move or waive value and alter financial settlement and accounting records."}},{"description":"","name":"organization_create_finance_entry"},{"description":"","name":"organization_create_finance_vendor"},{"description":"","name":"organization_create_promo_code"},{"description":"","name":"organization_create_scheduled_report","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions can trigger communications or visible status changes as the organizer."}},{"description":"","name":"organization_create_seat_map"},{"description":"","name":"organization_create_session"},{"description":"","name":"organization_create_speaker"},{"description":"","name":"organization_create_ticket"},{"description":"","name":"organization_create_tracking_link"},{"description":"","name":"organization_create_venue"},{"description":"","name":"organization_create_webhook_subscription","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Webhooks can forward attendee/order data to external destinations and are privileged integration settings."}},{"description":"","name":"organization_delete_comped_order"},{"description":"","name":"organization_delete_custom_question"},{"description":"","name":"organization_delete_document","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can destroy ticketing operations, content, and finance configuration."}},{"description":"","name":"organization_delete_event","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can destroy ticketing operations, content, and finance configuration."}},{"description":"","name":"organization_delete_event_fee_override"},{"description":"","name":"organization_delete_featured_event"},{"description":"","name":"organization_delete_fee"},{"description":"","name":"organization_delete_finance_entry"},{"description":"","name":"organization_delete_finance_vendor"},{"description":"","name":"organization_delete_promo_code","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can destroy ticketing operations, content, and finance configuration."}},{"description":"","name":"organization_delete_scheduled_report"},{"description":"","name":"organization_delete_seat_map"},{"description":"","name":"organization_delete_session","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can destroy ticketing operations, content, and finance configuration."}},{"description":"","name":"organization_delete_speaker"},{"description":"","name":"organization_delete_ticket","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can destroy ticketing operations, content, and finance configuration."}},{"description":"","name":"organization_delete_tracking_link"},{"description":"","name":"organization_delete_venue","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can destroy ticketing operations, content, and finance configuration."}},{"description":"","name":"organization_delete_webhook_subscription","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Webhooks can forward attendee/order data to external destinations and are privileged integration settings."}},{"description":"","name":"organization_duplicate_custom_question"},{"description":"","name":"organization_duplicate_event"},{"description":"","name":"organization_duplicate_seat_map"},{"description":"","name":"organization_duplicate_speaker"},{"description":"","name":"organization_get_attendee","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal attendee data with sensitive payment and event financial data."}},{"description":"","name":"organization_get_attendee_pdf"},{"description":"","name":"organization_get_custom_question"},{"description":"","name":"organization_get_document"},{"description":"","name":"organization_get_event"},{"description":"","name":"organization_get_event_checklist"},{"description":"","name":"organization_get_event_insights"},{"description":"","name":"organization_get_event_insights_overview"},{"description":"","name":"organization_get_fee"},{"description":"","name":"organization_get_finance_budget"},{"description":"","name":"organization_get_finance_entry"},{"description":"","name":"organization_get_finance_summary","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal attendee data with sensitive payment and event financial data."}},{"description":"","name":"organization_get_finance_vendor"},{"description":"","name":"organization_get_insights_overview"},{"description":"","name":"organization_get_order"},{"description":"","name":"organization_get_organization"},{"description":"","name":"organization_get_promo_code"},{"description":"","name":"organization_get_sales_by_source"},{"description":"","name":"organization_get_sales_by_ticket_type"},{"description":"","name":"organization_get_seat_map"},{"description":"","name":"organization_get_seat_map_categories"},{"description":"","name":"organization_get_session"},{"description":"","name":"organization_get_speaker"},{"description":"","name":"organization_get_ticket"},{"description":"","name":"organization_get_tracking_link"},{"description":"","name":"organization_get_venue"},{"description":"","name":"organization_list_attendees"},{"description":"","name":"organization_list_check_in_roster","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal attendee data with sensitive payment and event financial data."}},{"description":"","name":"organization_list_custom_questions"},{"description":"","name":"organization_list_documents"},{"description":"","name":"organization_list_event_fees"},{"description":"","name":"organization_list_events"},{"description":"","name":"organization_list_featured_events"},{"description":"","name":"organization_list_fees"},{"description":"","name":"organization_list_finance_entries"},{"description":"","name":"organization_list_finance_vendor_entries"},{"description":"","name":"organization_list_finance_vendors"},{"description":"","name":"organization_list_order_items"},{"description":"","name":"organization_list_order_referrer_hosts"},{"description":"","name":"organization_list_orders","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal attendee data with sensitive payment and event financial data."}},{"description":"","name":"organization_list_organizations"},{"description":"","name":"organization_list_promo_codes"},{"description":"","name":"organization_list_refund_requests"},{"description":"","name":"organization_list_scheduled_reports"},{"description":"","name":"organization_list_seat_maps"},{"description":"","name":"organization_list_sessions"},{"description":"","name":"organization_list_speakers"},{"description":"","name":"organization_list_tickets"},{"description":"","name":"organization_list_tracking_links"},{"description":"","name":"organization_list_venues"},{"description":"","name":"organization_list_webhook_subscriptions"},{"description":"","name":"organization_lock_event_settlement","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These operations move or waive value and alter financial settlement and accounting records."}},{"description":"","name":"organization_preview_fee"},{"description":"","name":"organization_preview_refund"},{"description":"","name":"organization_reassign_order_item"},{"description":"","name":"organization_refund_order_item","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These operations move or waive value and alter financial settlement and accounting records."}},{"description":"","name":"organization_reject_refund"},{"description":"","name":"organization_remove_session_speaker"},{"description":"","name":"organization_remove_session_ticket"},{"description":"","name":"organization_reopen_event","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions can trigger communications or visible status changes as the organizer."}},{"description":"","name":"organization_reorder_custom_questions"},{"description":"","name":"organization_reorder_event_fees"},{"description":"","name":"organization_reorder_featured_events"},{"description":"","name":"organization_reorder_fees"},{"description":"","name":"organization_reorder_sessions"},{"description":"","name":"organization_reorder_speakers"},{"description":"","name":"organization_reorder_tickets"},{"description":"","name":"organization_reorder_venues"},{"description":"","name":"organization_report_abandoned_carts"},{"description":"","name":"organization_report_checkins_and_attendees"},{"description":"","name":"organization_report_comps"},{"description":"","name":"organization_report_event_checkin"},{"description":"","name":"organization_report_manual_orders"},{"description":"","name":"organization_report_orders_details"},{"description":"","name":"organization_report_payout_summary"},{"description":"","name":"organization_report_payouts_and_fees"},{"description":"","name":"organization_report_promo_code_usage"},{"description":"","name":"organization_report_refunds"},{"description":"","name":"organization_report_revenue_summary"},{"description":"","name":"organization_report_sales_by_day"},{"description":"","name":"organization_report_sales_summary"},{"description":"","name":"organization_report_sales_tax"},{"description":"","name":"organization_report_transfers"},{"description":"","name":"organization_unarchive_event"},{"description":"","name":"organization_unlock_event_settlement"},{"description":"","name":"organization_unpublish_event","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These actions can trigger communications or visible status changes as the organizer."}},{"description":"","name":"organization_update_custom_question"},{"description":"","name":"organization_update_event"},{"description":"","name":"organization_update_event_fee_override"},{"description":"","name":"organization_update_fee"},{"description":"","name":"organization_update_finance_budget"},{"description":"","name":"organization_update_finance_entry"},{"description":"","name":"organization_update_finance_vendor"},{"description":"","name":"organization_update_order_item_responses"},{"description":"","name":"organization_update_order_responses"},{"description":"","name":"organization_update_organization","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Webhooks can forward attendee/order data to external destinations and are privileged integration settings."}},{"description":"","name":"organization_update_promo_code"},{"description":"","name":"organization_update_seat_map"},{"description":"","name":"organization_update_session"},{"description":"","name":"organization_update_speaker"},{"description":"","name":"organization_update_ticket"},{"description":"","name":"organization_update_tracking_link"},{"description":"","name":"organization_update_venue"}],"tools_count":153,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f5608c12-05ef-4b0d-b6a1-b1936af8c8cf","uuid":"675e5687-d7dc-54db-a395-3afaf82e4419","verification_tier":"community","version":""},"query_key":"eventrise","schema_version":1,"status":"match"}