{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-04","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Kometrics provides read-only SaaS subscription analytics. Inspect recurring revenue, churn, cohorts, customers, renewals, trials, and overdue payments. OAuth access is limited to the workspace you select and cannot change billing or settings.","did":"7e3e4b4f-c005-4965-9c54-2c885ea044ec","documentation_url":"https://kometrics.com/docs/mcp","editorial_description":{"extended_description":"Metrics link back to reports. Inspect customer movements, risk signals, and forecast baselines from prior months. The platform syncs with Stripe, Paddle, Asaas, and Creem, with free use below its MRR threshold.","schema_version":1,"summary":"Kometrics provides read-only SaaS subscription analytics.\nInspect recurring revenue, churn, cohorts, customers, renewals, trials, and overdue payments.\nOAuth access is limited to the workspace you select and cannot change billing or settings."},"homepage_url":"","icon":"","id":"7e3e4b4f-c005-4965-9c54-2c885ea044ec","installs":0,"last_scanned":"","license":"","long_description":"Metrics link back to reports. Inspect customer movements, risk signals, and forecast baselines from prior months. The platform syncs with Stripe, Paddle, Asaas, and Creem, with free use below its MRR threshold.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All ten tools are reporting/detail/search/forecast operations over subscription analytics.","reasoning":"Customer identity, revenue, delinquency, churn and renewal data are sensitive business records.","risk_type":"private_data_read","severity":"low","title":"Reads private subscription/customer revenue and churn data","triggering_tools_or_skills":["cohort_retention","customer_detail","customer_search","movement_list","past_due_summary","risk_radar","trial_summary","upcoming_renewals"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a Kometrics account is required; analytics/customer visibility follows the workspace.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/7e3e4b4f-c005-4965-9c54-2c885ea044ec.json","what_it_proves":"Candidate PR #125 record identity (name \"Kometrics\", publisher, type web_connector) and 10 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/7e3e4b4f-c005-4965-9c54-2c885ea044ec: complete tool_names inventory (10 tools), remote streamable-http endpoint https://app.kometrics.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-11T02:17:00Z","url_or_path":"https://kometrics.com/docs/mcp","what_it_proves":"Official MCP reference describes read-only subscription analytics: MRR, churn, cohorts, customers, renewals and past-due summaries."}],"primary_reason":"Kometrics exposes a complete read-only subscription analytics inventory.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:7e3e4b4f-c005-4965-9c54-2c885ea044ec","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all ten tools. forecast_baseline computes a projection and does not commit financial/account changes; no write, charge or message action is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":10,"tools_or_skills_total":10},"name":"Kometrics","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=7e3e4b4f-c005-4965-9c54-2c885ea044ec&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://kometrics.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Kometrics","publisher_url":"https://kometrics.com/","remote_url":"https://app.kometrics.com/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Customer identity, revenue, delinquency, churn and renewal data are sensitive business records.","evidence":"Reads private subscription/customer revenue and churn data: All ten tools are reporting/detail/search/forecast operations over subscription analytics.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private subscription/customer revenue and churn data","triggering_tools":["cohort_retention","customer_detail","customer_search","movement_list","past_due_summary","risk_radar","trial_summary","upcoming_renewals"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@kometrics.com","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"cohort_retention"},{"description":"","name":"customer_detail"},{"description":"","name":"customer_search"},{"description":"","name":"forecast_baseline"},{"description":"","name":"movement_list"},{"description":"","name":"past_due_summary"},{"description":"","name":"report_series"},{"description":"","name":"risk_radar"},{"description":"","name":"trial_summary"},{"description":"","name":"upcoming_renewals"}],"tools_count":10,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/7e3e4b4f-c005-4965-9c54-2c885ea044ec","uuid":"9433c178-3993-5440-9556-d828ea86de92","verification_tier":"community","version":""},"query_key":"kometrics kometrics","schema_version":1,"status":"match"}