{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Gorgias connects Claude to an ecommerce helpdesk for analysis and operational work. Read and reply to tickets, manage macros and rules, maintain help content, and tune AI Agent settings. It acts as your Gorgias user through OAuth and is available on all Helpdesk plans.","did":"4c33089c-a82b-4e4d-bfa3-b6cdde6f7e90","documentation_url":"https://docs.gorgias.com/en-US/connect-your-ai-assistant-to-the-gorgias-mcp-6310546","editorial_description":{"extended_description":"Tools support customer and team lookups, helpdesk reporting queries, internal notes, tags, and ticket status changes. AI Agent workflows include previewing replies and tone, configuring support actions and handovers, and publishing guidance or Help Center articles. Connecting requires your Gorgias subdomain.","schema_version":1,"summary":"Gorgias connects Claude to an ecommerce helpdesk for analysis and operational work.\nRead and reply to tickets, manage macros and rules, maintain help content, and tune AI Agent settings.\nIt acts as your Gorgias user through OAuth and is available on all Helpdesk plans."},"homepage_url":"","icon":"https://mcp.gorgias.com/assets/logo.svg","id":"4c33089c-a82b-4e4d-bfa3-b6cdde6f7e90","installs":0,"last_scanned":"","license":"","long_description":"Tools support customer and team lookups, helpdesk reporting queries, internal notes, tags, and ticket status changes. AI Agent workflows include previewing replies and tone, configuring support actions and handovers, and publishing guidance or Help Center articles. Connecting requires your Gorgias subdomain.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Inventory and directory description explicitly include replies, messages, and publishing guidance/articles.","reasoning":"External messages and publications act as the user.","risk_type":"messaging_as_user","severity":"high","title":"Can communicate with customers and publish help content","triggering_tools_or_skills":["create_message","reply_and_close","publish_help_center_article","publish_guidance"]},{"evidence":"Declared tools enable automation rules, actions, and AI Agent channels.","reasoning":"Changing live support automation is a powerful administrative action.","risk_type":"credential_admin","severity":"high","title":"Can enable support automation and AI channels","triggering_tools_or_skills":["enable_ai_agent_on_channel","enable_rule","enable_support_action"]},{"evidence":"The inventory declares query without a bounded schema.","reasoning":"An unrestricted account-data query is conservatively High.","risk_type":"query_execution","severity":"high","title":"Provides an unbounded helpdesk query tool","triggering_tools_or_skills":["query"]},{"evidence":"Remote hosted MCP source is not pinned.","reasoning":"Capabilities can change after review.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth to the user’s Gorgias account; scopes are not enumerated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/4c33089c-a82b-4e4d-bfa3-b6cdde6f7e90.json","what_it_proves":"Candidate PR #125 record identity (name \"Gorgias MCP\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/4c33089c-a82b-4e4d-bfa3-b6cdde6f7e90: complete tool_names inventory (88 tools), remote streamable-http endpoint https://mcp.gorgias.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"The connector can reply to customers, publish help content, change live automation, and run a generic account query.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:4c33089c-a82b-4e4d-bfa3-b6cdde6f7e90","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 88 names and the directory description. Candidate stores only 80 names, so publication must regenerate the complete tool inventory.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":88,"tools_or_skills_total":88},"name":"Gorgias MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=4c33089c-a82b-4e4d-bfa3-b6cdde6f7e90&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.gorgias.com/legal/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Gorgias","publisher_url":"https://www.gorgias.com/","remote_url":"https://mcp.gorgias.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: External messages and publications act as the user.","evidence":"Can communicate with customers and publish help content: Inventory and directory description explicitly include replies, messages, and publishing guidance/articles.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Can communicate with customers and publish help content","triggering_tools":["create_message","reply_and_close","publish_help_center_article","publish_guidance"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing live support automation is a powerful administrative action.","evidence":"Can enable support automation and AI channels: Declared tools enable automation rules, actions, and AI Agent channels.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can enable support automation and AI channels","triggering_tools":["enable_ai_agent_on_channel","enable_rule","enable_support_action"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: An unrestricted account-data query is conservatively High.","evidence":"Provides an unbounded helpdesk query tool: The inventory declares query without a bounded schema.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Provides an unbounded helpdesk query tool","triggering_tools":["query"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@gorgias.com","tags":["accesses_messaging","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"add_internal_note"},{"description":"","name":"add_tags"},{"description":"","name":"ai_agent_setup_completion"},{"description":"","name":"apply_macro"},{"description":"","name":"archive_macro"},{"description":"","name":"convert_to_advanced_view"},{"description":"","name":"create_action_from_template"},{"description":"","name":"create_draft_guidance"},{"description":"","name":"create_draft_skill"},{"description":"","name":"create_help_center_article"},{"description":"","name":"create_macro"},{"description":"","name":"create_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External messages and publications act as the user."}},{"description":"","name":"create_rule"},{"description":"","name":"create_support_action"},{"description":"","name":"create_ticket"},{"description":"","name":"disable_guidance"},{"description":"","name":"disable_rule"},{"description":"","name":"disable_support_action"},{"description":"","name":"discard_draft_guidance"},{"description":"","name":"discard_help_center_article_draft"},{"description":"","name":"enable_ai_agent_on_channel","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing live support automation is a powerful administrative action."}},{"description":"","name":"enable_rule","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing live support automation is a powerful administrative action."}},{"description":"","name":"enable_support_action","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Changing live support automation is a powerful administrative action."}},{"description":"","name":"escalate_ticket"},{"description":"","name":"get_action_template"},{"description":"","name":"get_agent_configuration"},{"description":"","name":"get_current_user"},{"description":"","name":"get_custom_field"},{"description":"","name":"get_customer"},{"description":"","name":"get_gaia_instructions"},{"description":"","name":"get_guidance"},{"description":"","name":"get_help_center_article"},{"description":"","name":"get_instruction"},{"description":"","name":"get_job"},{"description":"","name":"get_macro"},{"description":"","name":"get_product_custom_info"},{"description":"","name":"get_reporting_stats"},{"description":"","name":"get_reporting_stats_schema"},{"description":"","name":"get_rule"},{"description":"","name":"get_skill"},{"description":"","name":"get_support_action"},{"description":"","name":"get_table_metadata"},{"description":"","name":"get_tables"},{"description":"","name":"get_ticket"},{"description":"","name":"list_action_templates"},{"description":"","name":"list_agent_configurations"},{"description":"","name":"list_custom_fields"},{"description":"","name":"list_customers"},{"description":"","name":"list_guidance_templates"},{"description":"","name":"list_guidances"},{"description":"","name":"list_help_center_articles"},{"description":"","name":"list_help_center_categories"},{"description":"","name":"list_help_centers"},{"description":"","name":"list_integrations"},{"description":"","name":"list_intents"},{"description":"","name":"list_macros"},{"description":"","name":"list_metric_cards"},{"description":"","name":"list_product_metafield_definitions"},{"description":"","name":"list_rules"},{"description":"","name":"list_skills"},{"description":"","name":"list_support_actions"},{"description":"","name":"list_tags"},{"description":"","name":"list_teams"},{"description":"","name":"list_tickets"},{"description":"","name":"list_users"},{"description":"","name":"pin_metafield_definition"},{"description":"","name":"preview_ai_agent"},{"description":"","name":"preview_tone_of_voice"},{"description":"","name":"publish_guidance","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External messages and publications act as the user."}},{"description":"","name":"publish_help_center_article","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External messages and publications act as the user."}},{"description":"","name":"publish_skill"},{"description":"","name":"query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: An unrestricted account-data query is conservatively High."}},{"description":"","name":"reply_and_close","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: External messages and publications act as the user."}},{"description":"","name":"search_products"},{"description":"","name":"search_tickets"},{"description":"","name":"set_product_custom_info"},{"description":"","name":"snooze_ticket"},{"description":"","name":"unarchive_macro"},{"description":"","name":"unpublish_help_center_article"},{"description":"","name":"update_draft_guidance"},{"description":"","name":"update_draft_skill"},{"description":"","name":"update_excluded_handover_topics"},{"description":"","name":"update_help_center_article"},{"description":"","name":"update_macro"},{"description":"","name":"update_rule"},{"description":"","name":"update_support_action"},{"description":"","name":"update_ticket"},{"description":"","name":"update_tone_of_voice"}],"tools_count":88,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/4c33089c-a82b-4e4d-bfa3-b6cdde6f7e90","uuid":"1aba904f-4b30-502f-a12e-c9f8c4def2c6","verification_tier":"community","version":""},"query_key":"gorgias gorgias mcp","schema_version":1,"status":"match"}