{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Loop Returns connects Claude to an existing shop's return operations. Inspect return items or timelines, process or reject requests, and add team notes. Manage fraud flags, allowlists, blocklists, and return status with authenticated access.","did":"83950890-b60c-4f99-b0e9-63ba024e0342","documentation_url":"https://docs.loopreturns.com/mcp/overview","editorial_description":{"extended_description":"Cancel or close returns, report fraud, and inspect return policies or automation workflows.","schema_version":1,"summary":"Loop Returns connects Claude to an existing shop's return operations.\nInspect return items or timelines, process or reject requests, and add team notes.\nManage fraud flags, allowlists, blocklists, and return status with authenticated access."},"homepage_url":"","icon":"","id":"83950890-b60c-4f99-b0e9-63ba024e0342","installs":0,"last_scanned":"","license":"","long_description":"Cancel or close returns, report fraud, and inspect return policies or automation workflows.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These explicit tools execute return-disposition workflows that can drive refunds, exchanges or retained funds.","reasoning":"Return processing materially affects customer financial/commerce outcomes.","risk_type":"financial_transaction","severity":"high","title":"Processes, rejects, cancels and closes customer returns","triggering_tools_or_skills":["process-return-tool","reject-return-tool","cancel-return-tool","close-return-tool"]},{"evidence":"The tools terminate durable return requests/workflows.","reasoning":"They can irreversibly end customer return handling.","risk_type":"data_deletion","severity":"high","title":"Cancels or closes active return workflows","triggering_tools_or_skills":["cancel-return-tool","close-return-tool"]},{"evidence":"These tools change security/fraud decision controls for customers/returns.","reasoning":"Allow/block decisions are privileged administrative actions.","risk_type":"credential_admin","severity":"high","title":"Manages fraud allowlists and blocklists","triggering_tools_or_skills":["add-to-allowlist-tool","add-to-blocklist-tool","remove-from-allowlist-tool","remove-from-blocklist-tool"]},{"evidence":"The connector can enumerate and load skills whose actions are not included in the fixed Directory inventory.","reasoning":"The reachable return-management action set may change or include additional high-impact operations.","risk_type":"generic_gateway","severity":"high","title":"Loads server-defined workflow skills dynamically","triggering_tools_or_skills":["list-skills-tool","load-skill-tool"]},{"evidence":"These operations persist operational and fraud-review records.","reasoning":"They materially alter merchant return workflows.","risk_type":"data_modification","severity":"medium","title":"Adds notes and changes fraud/return state","triggering_tools_or_skills":["add-return-note-tool","flag-return-tool","unflag-return-tool","report-fraud-tool"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a Loop Returns shop is required; return-processing, fraud and list-management permissions are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/83950890-b60c-4f99-b0e9-63ba024e0342.json","what_it_proves":"Candidate PR #125 record identity (name \"Loop Returns\", publisher, type interactive_connector) and 24 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/83950890-b60c-4f99-b0e9-63ba024e0342: complete tool_names inventory (24 tools), remote streamable-http endpoint https://api.loopreturns.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Loop Returns executes consequential return outcomes, administers fraud controls and loads dynamic skills.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:83950890-b60c-4f99-b0e9-63ba024e0342","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 24 tools. Runtime evidence is needed for exact refund/exchange behavior and loaded-skill bounds; publication should enumerate all skills rather than present a static complete surface.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":24,"tools_or_skills_total":24},"name":"Loop Returns","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=83950890-b60c-4f99-b0e9-63ba024e0342&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.loopreturns.com/legal/privacy-notice/","provisional_risk":null,"publication_recommendation":"fix","publisher":"Loop Returns","publisher_url":"https://loopreturns.com/","remote_url":"https://api.loopreturns.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Return processing materially affects customer financial/commerce outcomes.","evidence":"Processes, rejects, cancels and closes customer returns: These explicit tools execute return-disposition workflows that can drive refunds, exchanges or retained funds.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Processes, rejects, cancels and closes customer returns","triggering_tools":["process-return-tool","reject-return-tool","cancel-return-tool","close-return-tool"]},{"description":"This connector can permanently remove data or resources. Review findings: They can irreversibly end customer return handling.","evidence":"Cancels or closes active return workflows: The tools terminate durable return requests/workflows.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Cancels or closes active return workflows","triggering_tools":["cancel-return-tool","close-return-tool"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows.","evidence":"Manages fraud allowlists and blocklists: These tools change security/fraud decision controls for customers/returns. | Adds notes and changes fraud/return state: These operations persist operational and fraud-review records.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["add-to-allowlist-tool","add-to-blocklist-tool","remove-from-allowlist-tool","remove-from-blocklist-tool","add-return-note-tool","flag-return-tool","unflag-return-tool","report-fraud-tool"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The reachable return-management action set may change or include additional high-impact operations.","evidence":"Loads server-defined workflow skills dynamically: The connector can enumerate and load skills whose actions are not included in the fixed Directory inventory.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Loads server-defined workflow skills dynamically","triggering_tools":["list-skills-tool","load-skill-tool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@loopreturns.com","tags":["deletes_data","interactive_connector","modifies_data","network_access","oauth_required","runs_code","spends_money"],"tools":[{"description":"","name":"add-return-note-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}},{"description":"","name":"add-to-allowlist-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}},{"description":"","name":"add-to-blocklist-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}},{"description":"","name":"cancel-return-tool","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can irreversibly end customer return handling."}},{"description":"","name":"close-return-tool","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can irreversibly end customer return handling."}},{"description":"","name":"flag-return-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}},{"description":"","name":"get-return-timeline-tool"},{"description":"","name":"get-return-tool"},{"description":"","name":"get-shop-info-tool"},{"description":"","name":"get-workflow-tool"},{"description":"","name":"list-allowlist-tool"},{"description":"","name":"list-blocklist-tool"},{"description":"","name":"list-fraud-categories-tool"},{"description":"","name":"list-returns-tool"},{"description":"","name":"list-skills-tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The reachable return-management action set may change or include additional high-impact operations."}},{"description":"","name":"list-workflows-tool"},{"description":"","name":"load-skill-tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The reachable return-management action set may change or include additional high-impact operations."}},{"description":"","name":"process-return-tool","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Return processing materially affects customer financial/commerce outcomes."}},{"description":"","name":"read-return-policies-tool"},{"description":"","name":"reject-return-tool","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Return processing materially affects customer financial/commerce outcomes."}},{"description":"","name":"remove-from-allowlist-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}},{"description":"","name":"remove-from-blocklist-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}},{"description":"","name":"report-fraud-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}},{"description":"","name":"unflag-return-tool","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Allow/block decisions are privileged administrative actions.; They materially alter merchant return workflows."}}],"tools_count":24,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/83950890-b60c-4f99-b0e9-63ba024e0342","uuid":"64061cd7-71e7-5edb-ad2e-282053225e81","verification_tier":"community","version":""},"query_key":"loop returns loop returns","schema_version":1,"status":"match"}