{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"3aa7dbe24c66eb87e4db6b1c6234cf6809eb252b68c1d8018fe8450742c6bba2","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"Low-confidence entry. The product page shows read access to the general ledger, VAT, receivables/payables and relations. Writes are limited to preparing draft ('concept') bookings and sales invoices, drafting payment reminders 'die jij nog goedkeurt', and creating or updating customers/suppliers. The consent screen reads 'Lezen en analyseren - concept-acties klaarzetten', and 'Er wordt niets vastgelegd zonder dat jij het eerst bevestigt'. No payment execution, money movement or reminder sending is evidenced, so the prior spends_money ('Handles Payments/Billing') and sends_messages_as_you cards are unsupported. The runs_code card mislabels a generic API dispatcher. Private financial reads plus confirmation-gated, correctable accounting drafts => Medium. Residual: the write_operation schema was not seen. If it can post final ledger entries or delete records without the draft step, a High 'modifies financial records' card would be warranted.","review_key":"claudesec:98695ee4-60d9-424c-963d-8ce89094ad5f","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://www.iwebdevelopment.com/kennisbank/tag/ai","https://www.iwebdevelopment.com/twinfield/ai-mcp-koppeling"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Twinfield AI Connect queries your Twinfield bookkeeping and accounting data. Analyze invoices, balances, ledger activity, customers, suppliers, and cash-flow trends. Every write is drafted first and requires your explicit confirmation before execution.","did":"98695ee4-60d9-424c-963d-8ce89094ad5f","documentation_url":"https://www.iwebdevelopment.com/kennisbank/tag/ai","editorial_description":{"extended_description":"Connect with your own Twinfield account and choose which administrations to expose. Prepare journal entries or payment reminders, create or update debtors and creditors, and investigate receivables, payables, VAT, and working capital. Authorization can be revoked.","schema_version":1,"summary":"Twinfield AI Connect queries your Twinfield bookkeeping and accounting data.\nAnalyze invoices, balances, ledger activity, customers, suppliers, and cash-flow trends.\nEvery write is drafted first and requires your explicit confirmation before execution."},"homepage_url":"","icon":"https://www.iwebdevelopment.com/hubfs/favicon.png","id":"98695ee4-60d9-424c-963d-8ce89094ad5f","installs":0,"last_scanned":"","license":"","long_description":"Connect with your own Twinfield account and choose which administrations to expose. Prepare journal entries or payment reminders, create or update debtors and creditors, and investigate receivables, payables, VAT, and working capital. Authorization can be revoked.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The single write dispatcher can create/update debtors/creditors and journal entries, with action schemas discovered dynamically.","reasoning":"It hides potentially financial, messaging or deletion effects.","risk_type":"generic_gateway","severity":"high","title":"Executes opaque accounting writes","triggering_tools_or_skills":["write_operation"]},{"evidence":"The listing explicitly supports draft journal entries that execute after confirmation.","reasoning":"Posting accounting entries is consequential financial state.","risk_type":"financial_transaction","severity":"high","title":"Creates accounting/journal operations","triggering_tools_or_skills":["write_operation"]},{"evidence":"The description includes payment reminders under the write flow.","reasoning":"If execution sends a reminder, it communicates as the business; the exact action enum is undocumented.","risk_type":"messaging_as_user","severity":"high","title":"Can prepare/execute payment reminders","triggering_tools_or_skills":["write_operation"]},{"evidence":"Generic operations query live financial data.","reasoning":"The flexible query surface is High under taxonomy.","risk_type":"query_execution","severity":"high","title":"Runs generic live accounting reads/analysis","triggering_tools_or_skills":["read_operation","analyze_data"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes selected Twinfield administrations; writes are draft/confirmation gated.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/98695ee4-60d9-424c-963d-8ce89094ad5f.json","what_it_proves":"Candidate PR #125 record identity (name \"Twinfield AI Connect, by iWebDevelopment\", publisher, type web_connector) and 14 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/98695ee4-60d9-424c-963d-8ce89094ad5f: complete tool_names inventory (14 tools), remote streamable-http endpoint https://mcp-twinfield.iwebdevelopment.com/, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"Twinfield exposes generic live accounting read/write operations with financial and possible reminder effects.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:98695ee4-60d9-424c-963d-8ce89094ad5f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 14 tools. Confirmation is a safeguard; exhaustive write_operation schemas are needed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":14,"tools_or_skills_total":14},"name":"Twinfield AI Connect, by iWebDevelopment","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=98695ee4-60d9-424c-963d-8ce89094ad5f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.iwebdevelopment.com/privacybeleid","provisional_risk":null,"publication_recommendation":"fix","publisher":"iWebDevelopment","publisher_url":"https://www.iwebdevelopment.com/twinfield/ai-mcp-koppeling","remote_url":"https://mcp-twinfield.iwebdevelopment.com/","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"Reads the general ledger, VAT, open receivables and payables, and business relationships in selected Twinfield administrations.","evidence":"Actions: read_operation, analyze_data, list_administrations, select_administration. https://www.iwebdevelopment.com/twinfield/ai-mcp-koppeling — 'Wat je kunt doen' table: Financieel, Btw, Debiteuren en crediteuren, Relaties - read on all plans","risk_type":"reads_private_data","severity":"medium","title":"Reads private accounting information"},{"description":"Prepares draft bookings, invoices and reminders, and creates or updates customers and suppliers after confirmation.","evidence":"Actions: write_operation. https://www.iwebdevelopment.com/twinfield/ai-mcp-koppeling — 'Met lezen en schrijven zet je ook boekingen en facturen klaar. Er wordt niets vastgelegd zonder dat jij het eerst bevestigt'; 'Zet een herinnering klaar ... die jij nog goedkeurt'; consent 'concept-acties klaarzetten'; https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — id 98695ee4 description: 'Every write action is prepared as a draft and requires your explicit confirmation'","risk_type":"modifies_data","severity":"medium","title":"Prepares accounting drafts and updates business contacts"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@iwebdevelopment.com","tags":["reads_private_data","modifies_data"],"tools":[{"description":"","name":"analyze_data","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: It hides potentially financial, messaging or deletion effects.; The flexible query surface is High under taxonomy."}},{"description":"","name":"read_operation","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: It hides potentially financial, messaging or deletion effects.; The flexible query surface is High under taxonomy."}},{"description":"","name":"get_assistant_guidelines"},{"description":"","name":"get_entity_schema"},{"description":"","name":"get_provider_capabilities"},{"description":"","name":"get_scope_endpoints"},{"description":"","name":"get_started"},{"description":"","name":"list_administrations"},{"description":"","name":"list_available_tables"},{"description":"","name":"list_scopes"},{"description":"","name":"search_endpoints"},{"description":"","name":"select_administration"},{"description":"","name":"set_context"},{"description":"","name":"write_operation","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: If execution sends a reminder, it communicates as the business; the exact action enum is undocumented."}}],"tools_count":14,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/98695ee4-60d9-424c-963d-8ce89094ad5f","uuid":"a911b813-ea72-594a-bb78-91cda32316e1","verification_tier":"community","version":""},"query_key":"iwebdevelopment twinfield ai connect by iwebdevelopment","schema_version":1,"status":"match"}