{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-12","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Lueira manages operations for outdoor, adventure, and rental businesses. Create or update customers, orders, group lessons, private lessons, and rentals. Inspect catalogs, instructors, locations, boats, or dive sites through your account.","did":"87eae832-0fd3-4378-8f54-581a3da723f0","documentation_url":"https://lueira.com/developers/mcp","editorial_description":{"extended_description":"Authentication uses a Lueira API key or sign-in. Tools add shop stock and manage order items, including deletion of customers and booking or sales records.","schema_version":1,"summary":"Lueira manages operations for outdoor, adventure, and rental businesses.\nCreate or update customers, orders, group lessons, private lessons, and rentals.\nInspect catalogs, instructors, locations, boats, or dive sites through your account."},"homepage_url":"","icon":"","id":"87eae832-0fd3-4378-8f54-581a3da723f0","installs":0,"last_scanned":"","license":"","long_description":"Authentication uses a Lueira API key or sign-in. Tools add shop stock and manage order items, including deletion of customers and booking or sales records.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The stored inventory includes explicit delete tools for durable commerce and booking records.","reasoning":"Deleting customers or operational orders can cause severe business-data and reservation loss.","risk_type":"data_deletion","severity":"high","title":"Deletes customers, orders, order items and lesson/rental/shop bookings","triggering_tools_or_skills":["delete_customer","delete_order","delete_order_item","delete_group_lesson_order","delete_private_lesson_order","delete_rental_order","delete_shop_order"]},{"evidence":"Official docs describe creating bookings and registering payments; the listed create tools commit orders across paid business workflows.","reasoning":"Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed.","risk_type":"financial_transaction","severity":"high","title":"Creates commercial orders and booking records","triggering_tools_or_skills":["create_order","create_order_item","create_group_lesson_order","create_private_lesson_order","create_rental_order","create_shop_order"]},{"evidence":"These tools persist customer/commerce records and inventory state.","reasoning":"They materially change day-to-day business operations.","risk_type":"data_modification","severity":"medium","title":"Changes customers, orders and stock","triggering_tools_or_skills":["create_customer","update_customer","update_order","update_order_item","add_shop_stock_level"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.1/API access is required; operations act in the connected outdoor-business account under unspecified role/scopes.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/87eae832-0fd3-4378-8f54-581a3da723f0.json","what_it_proves":"Candidate PR #125 record identity (name \"Lueira\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/87eae832-0fd3-4378-8f54-581a3da723f0: complete tool_names inventory (84 tools), remote streamable-http endpoint https://api.lueira.com/api/v1/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:17:31Z","url_or_path":"https://lueira.com/en/developers/mcp/","what_it_proves":"Official Lueira MCP guide confirms authenticated booking/order/customer management and payment-related business operations."}],"primary_reason":"Lueira can create and delete commercial bookings/orders and destroy customer/order records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:87eae832-0fd3-4378-8f54-581a3da723f0","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 84 stored tools. The Directory marks 84 tools as truncated, so unlisted payment/product-management actions may exist; runtime inventory is still needed for completeness.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":84,"tools_or_skills_total":84},"name":"Lueira","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=87eae832-0fd3-4378-8f54-581a3da723f0&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://lueira.com/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Lueira","publisher_url":"https://lueira.com/","remote_url":"https://api.lueira.com/api/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss.","evidence":"Deletes customers, orders, order items and lesson/rental/shop bookings: The stored inventory includes explicit delete tools for durable commerce and booking records.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes customers, orders, order items and lesson/rental/shop bookings","triggering_tools":["delete_customer","delete_order","delete_order_item","delete_group_lesson_order","delete_private_lesson_order","delete_rental_order","delete_shop_order"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed.","evidence":"Creates commercial orders and booking records: Official docs describe creating bookings and registering payments; the listed create tools commit orders across paid business workflows.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Creates commercial orders and booking records","triggering_tools":["create_order","create_order_item","create_group_lesson_order","create_private_lesson_order","create_rental_order","create_shop_order"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change day-to-day business operations.","evidence":"Changes customers, orders and stock: These tools persist customer/commerce records and inventory state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes customers, orders and stock","triggering_tools":["create_customer","update_customer","update_order","update_order_item","add_shop_stock_level"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@luiera.com","tags":["deletes_data","modifies_data","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"add_shop_stock_level","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change day-to-day business operations."}},{"description":"","name":"create_customer","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change day-to-day business operations."}},{"description":"","name":"create_group_lesson_order","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed."}},{"description":"","name":"create_order","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed."}},{"description":"","name":"create_order_item","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed."}},{"description":"","name":"create_private_lesson_order","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed."}},{"description":"","name":"create_rental_order","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed."}},{"description":"","name":"create_shop_order","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating an order or reservation can establish a customer obligation even if card capture is not separately exposed."}},{"description":"","name":"delete_customer","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss."}},{"description":"","name":"delete_group_lesson_order","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss."}},{"description":"","name":"delete_order","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss."}},{"description":"","name":"delete_order_item","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss."}},{"description":"","name":"delete_private_lesson_order","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss."}},{"description":"","name":"delete_rental_order","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss."}},{"description":"","name":"delete_shop_order","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting customers or operational orders can cause severe business-data and reservation loss."}},{"description":"","name":"get_addon"},{"description":"","name":"get_addon_group"},{"description":"","name":"get_article"},{"description":"","name":"get_barcode"},{"description":"","name":"get_boat"},{"description":"","name":"get_custom_product"},{"description":"","name":"get_customer"},{"description":"","name":"get_dive_site"},{"description":"","name":"get_document_template"},{"description":"","name":"get_feedback"},{"description":"","name":"get_gallery"},{"description":"","name":"get_gift_voucher"},{"description":"","name":"get_group_lesson_order"},{"description":"","name":"get_group_lesson_product"},{"description":"","name":"get_instructor"},{"description":"","name":"get_lesson_level"},{"description":"","name":"get_location"},{"description":"","name":"get_order"},{"description":"","name":"get_partner"},{"description":"","name":"get_private_lesson_order"},{"description":"","name":"get_private_lesson_product"},{"description":"","name":"get_product_form"},{"description":"","name":"get_rental_order"},{"description":"","name":"get_rental_product"},{"description":"","name":"get_shop_order"},{"description":"","name":"get_shop_product"},{"description":"","name":"get_snippet"},{"description":"","name":"list_activities"},{"description":"","name":"list_addon_groups"},{"description":"","name":"list_addons"},{"description":"","name":"list_articles"},{"description":"","name":"list_boats"},{"description":"","name":"list_brands"},{"description":"","name":"list_categories"},{"description":"","name":"list_custom_products"},{"description":"","name":"list_customers"},{"description":"","name":"list_discount_codes"},{"description":"","name":"list_dive_sites"},{"description":"","name":"list_document_templates"},{"description":"","name":"list_feedbacks"},{"description":"","name":"list_galleries"},{"description":"","name":"list_gift_vouchers"},{"description":"","name":"list_group_lesson_orders"},{"description":"","name":"list_group_lesson_products"},{"description":"","name":"list_instructors"},{"description":"","name":"list_lesson_levels"},{"description":"","name":"list_locations"},{"description":"","name":"list_order_items"},{"description":"","name":"list_orders"},{"description":"","name":"list_partner_catalog_items"},{"description":"","name":"list_partners"},{"description":"","name":"list_private_lesson_orders"},{"description":"","name":"list_private_lesson_products"},{"description":"","name":"list_product_form_sections"},{"description":"","name":"list_product_forms"},{"description":"","name":"list_rental_orders"},{"description":"","name":"list_rental_products"},{"description":"","name":"list_seasons"},{"description":"","name":"list_shop_orders"},{"description":"","name":"list_shop_products"},{"description":"","name":"list_snippets"},{"description":"","name":"list_vat_types"},{"description":"","name":"update_customer","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change day-to-day business operations."}},{"description":"","name":"update_group_lesson_order"},{"description":"","name":"update_order","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change day-to-day business operations."}},{"description":"","name":"update_order_item","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change day-to-day business operations."}},{"description":"","name":"update_private_lesson_order"},{"description":"","name":"update_rental_order"},{"description":"","name":"update_shop_order"}],"tools_count":84,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/87eae832-0fd3-4378-8f54-581a3da723f0","uuid":"6c535797-b8a5-5df5-8c7c-9c11f663c119","verification_tier":"community","version":""},"query_key":"lueira lueira","schema_version":1,"status":"match"}