{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Hello Retail connects ecommerce search, recommendations, feeds, and analytics to Claude. Inspect performance and product data, then configure search or recommendation designs. A Hello Retail account is required; search analytics windows extend up to 92 days.","did":"a4e3c078-dcbd-4127-85fd-8d50490f8a86","documentation_url":"https://developer.helloretail.com/mcp/","editorial_description":{"extended_description":"Update filters, sorting, initial or link content, indexing settings, templates, and styles. Create or update product feeds and inspect run diagnostics. Product Agent analytics report messaging and revenue performance, while channels, synonyms, and stop words can be listed.","schema_version":1,"summary":"Hello Retail connects ecommerce search, recommendations, feeds, and analytics to Claude.\nInspect performance and product data, then configure search or recommendation designs.\nA Hello Retail account is required; search analytics windows extend up to 92 days."},"homepage_url":"","icon":"https://helloretail.com/icons/hr-logo-circle-white.png","id":"a4e3c078-dcbd-4127-85fd-8d50490f8a86","installs":0,"last_scanned":"","license":"","long_description":"Update filters, sorting, initial or link content, indexing settings, templates, and styles. Create or update product feeds and inspect run diagnostics. Product Agent analytics report messaging and revenue performance, while channels, synonyms, and stop words can be listed.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools alter production ecommerce personalization/search behavior.","reasoning":"They affect customer-facing site infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Creates/updates live search, recommendation and product-feed configuration","triggering_tools_or_skills":["createSearchConfig","createProductFeed","updateSearchDesign","updateRecommendationDesign","updateProductFeed"]},{"evidence":"The tools modify durable website-search configuration.","reasoning":"They materially affect live discovery results.","risk_type":"data_modification","severity":"medium","title":"Changes indexing, filters, sorting, synonyms and content","triggering_tools_or_skills":["updateContentFieldsIndexing","updateSearchFilters","updateSearchSorting","updateSearchInitialContent"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication scopes website search/recommendation/feed configuration.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/a4e3c078-dcbd-4127-85fd-8d50490f8a86.json","what_it_proves":"Candidate PR #125 record identity (name \"Hello Retail\", publisher, type web_connector) and 44 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/a4e3c078-dcbd-4127-85fd-8d50490f8a86: complete tool_names inventory (44 tools), remote streamable-http endpoint https://core.helloretail.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Hello Retail changes production ecommerce search/recommendation infrastructure.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:a4e3c078-dcbd-4127-85fd-8d50490f8a86","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 44 tools; no explicit delete tool is listed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":44,"tools_or_skills_total":44},"name":"Hello Retail","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=a4e3c078-dcbd-4127-85fd-8d50490f8a86&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://helloretail.com/en/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Hello Retail","publisher_url":"https://www.helloretail.com/","remote_url":"https://core.helloretail.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect customer-facing site infrastructure.","evidence":"Creates/updates live search, recommendation and product-feed configuration: These tools alter production ecommerce personalization/search behavior.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Creates/updates live search, recommendation and product-feed configuration","triggering_tools":["createSearchConfig","createProductFeed","updateSearchDesign","updateRecommendationDesign","updateProductFeed"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect live discovery results.","evidence":"Changes indexing, filters, sorting, synonyms and content: The tools modify durable website-search configuration.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes indexing, filters, sorting, synonyms and content","triggering_tools":["updateContentFieldsIndexing","updateSearchFilters","updateSearchSorting","updateSearchInitialContent"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@helloretail.com","tags":["accesses_messaging","code_deployment","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"createProductFeed","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect customer-facing site infrastructure."}},{"description":"","name":"createSearchConfig","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect customer-facing site infrastructure."}},{"description":"","name":"getContentFields"},{"description":"","name":"getLatestProductFeedRun"},{"description":"","name":"getProductAgentAnalytics"},{"description":"","name":"getProductAgentChannels"},{"description":"","name":"getProductChanges"},{"description":"","name":"getProductData"},{"description":"","name":"getProductFeed"},{"description":"","name":"getProductFeedRun"},{"description":"","name":"getProductFields"},{"description":"","name":"getRecommendationDesign"},{"description":"","name":"getSearchDesign"},{"description":"","name":"getSearchFilterUsage"},{"description":"","name":"getSearchFilters"},{"description":"","name":"getSearchInitialContent"},{"description":"","name":"getSearchLinkContent"},{"description":"","name":"getSearchOverview"},{"description":"","name":"getSearchSorting"},{"description":"","name":"getSearchSortingUsage"},{"description":"","name":"getTopSearches"},{"description":"","name":"getTopSearchesWithoutResults"},{"description":"","name":"getWebsiteInfo"},{"description":"","name":"internal_getMcpRequestLog"},{"description":"","name":"internal_getMcpRequestLogFacets"},{"description":"","name":"internal_getProductAgentCreditUsage"},{"description":"","name":"internal_getProductAgentMessageStats"},{"description":"","name":"listProductFeedRuns"},{"description":"","name":"listProductFeeds"},{"description":"","name":"listRecommendationBoxes"},{"description":"","name":"listRecommendationDesigns"},{"description":"","name":"listSearchConfigs"},{"description":"","name":"listSearchStopWords"},{"description":"","name":"listSearchSynonyms"},{"description":"","name":"listWebsitesForCompany"},{"description":"","name":"updateContentFieldsIndexing","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect live discovery results."}},{"description":"","name":"updateProductFeed","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect customer-facing site infrastructure."}},{"description":"","name":"updateProductFieldsIndexing"},{"description":"","name":"updateRecommendationDesign","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect customer-facing site infrastructure."}},{"description":"","name":"updateSearchDesign","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect customer-facing site infrastructure."}},{"description":"","name":"updateSearchFilters","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect live discovery results."}},{"description":"","name":"updateSearchInitialContent","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect live discovery results."}},{"description":"","name":"updateSearchLinkContent"},{"description":"","name":"updateSearchSorting","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially affect live discovery results."}}],"tools_count":44,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/a4e3c078-dcbd-4127-85fd-8d50490f8a86","uuid":"23fab38c-6776-570f-bcc1-0d54a2557e74","verification_tier":"community","version":""},"query_key":"hello retail hello retail","schema_version":1,"status":"match"}