{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"reviewed","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Manage apparel and consumer-goods development information in MakeMine. Review products, variants, quotes, orders and shipment progress. Prepare draft products or orders and add sizes or colorways.","did":"01af4771-e8d1-46b5-b4e3-9470fc07f450","documentation_url":"https://www.makemine.com/docs/claude-connector","editorial_description":{"extended_description":"Shipment information includes carrier details, estimated arrival and milestone history. Draft sample and production orders can use pricing from the latest quote. The connector also lists product categories, retrieves product details and tracks purchase orders for the connected MakeMine account.","schema_version":1,"summary":"Manage apparel and consumer-goods development information in MakeMine.\nReview products, variants, quotes, orders and shipment progress.\nPrepare draft products or orders and add sizes or colorways."},"homepage_url":"","icon":"","id":"01af4771-e8d1-46b5-b4e3-9470fc07f450","installs":0,"last_scanned":"","license":"","long_description":"Shipment information includes carrier details, estimated arrival and milestone history. Draft sample and production orders can use pricing from the latest quote. The connector also lists product categories, retrieves product details and tracks purchase orders for the connected MakeMine account.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"Docs: these tools write draft records; drafts must be reviewed and submitted in the MakeMine app; no payment or quote approval.","reasoning":"Creates business records but cannot commit a purchase, so not High.","risk_type":"data_modification","severity":"medium","title":"Creates draft products, variants and sample/production orders","triggering_tools_or_skills":["create_product","add_product_variants","create_order"]},{"evidence":"Docs list these as read-only.","reasoning":"Commercial pricing and supply-chain data.","risk_type":"private_data_read","severity":"low","title":"Reads products, quotes, purchase orders and shipments","triggering_tools_or_skills":["get_product","list_products","list_product_categories","list_product_quotes","list_purchase_orders","get_purchase_order","list_shipments","track_shipment","whoami"]},{"evidence":"Directory remote.url is api.makemine.com/mcp; no pinned source or version is available for the server.","reasoning":"Tool behaviour can change server-side after review; ratings rest on the 2026-09-22 snapshot.","risk_type":"provenance_uncertainty","severity":"low","title":"Closed hosted MCP server for MakeMine can change without notice","triggering_tools_or_skills":[]}],"assessment_status":"reviewed","auth_and_scopes":"OAuth 2.0 with MakeMine email/password; acts as the user within their organisation; scopes not documented.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"medium","evidence_completeness":"complete","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/01af4771-e8d1-46b5-b4e3-9470fc07f450.json","what_it_proves":"Candidate PR #125 record identity (name \"MakeMine\", publisher, type web_connector) and 12 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/01af4771-e8d1-46b5-b4e3-9470fc07f450: complete tool_names inventory (12 tools), remote streamable-http endpoint https://api.makemine.com/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T20:28:15Z","url_or_path":"https://www.makemine.com/docs/claude-connector","what_it_proves":"MakeMine connector docs describe every tool; create_order creates a draft order 'never submitted from Claude'; create_product/add_product_variants create drafts; connector cannot edit/delete existing records, approve quotes or pay; OAuth 2.0, org-scoped."}],"primary_reason":"Docs confirm create_order, create_product and add_product_variants only create drafts, with no submit, payment or delete capability.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":false,"review_key":"claude:01af4771-e8d1-46b5-b4e3-9470fc07f450","reviewed_at":"2026-10-10","reviewer_notes":"Identity consistent (makemine.com). Reviewed all 12 tool names. create_order looked like a possible purchase action; docs resolve it as draft-only, so spends_or_moves_money false.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"false","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":12,"tools_or_skills_total":12},"name":"MakeMine","needs_runtime_verification":false,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=01af4771-e8d1-46b5-b4e3-9470fc07f450&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.makemine.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"MakeMine Inc.","publisher_url":"https://www.makemine.com/","remote_url":"https://api.makemine.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creates business records but cannot commit a purchase, so not High.","evidence":"Creates draft products, variants and sample/production orders: Docs: these tools write draft records; drafts must be reviewed and submitted in the MakeMine app; no payment or quote approval.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates draft products, variants and sample/production orders","triggering_tools":["create_product","add_product_variants","create_order"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Commercial pricing and supply-chain data.","evidence":"Reads products, quotes, purchase orders and shipments: Docs list these as read-only.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads products, quotes, purchase orders and shipments","triggering_tools":["get_product","list_products","list_product_categories","list_product_quotes","list_purchase_orders","get_purchase_order","list_shipments","track_shipment","whoami"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@makemine.com","tags":["modifies_data","network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"add_product_variants","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creates business records but cannot commit a purchase, so not High."}},{"description":"","name":"create_order","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creates business records but cannot commit a purchase, so not High."}},{"description":"","name":"create_product","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Creates business records but cannot commit a purchase, so not High."}},{"description":"","name":"get_product"},{"description":"","name":"get_purchase_order"},{"description":"","name":"list_product_categories"},{"description":"","name":"list_product_quotes"},{"description":"","name":"list_products"},{"description":"","name":"list_purchase_orders"},{"description":"","name":"list_shipments"},{"description":"","name":"track_shipment"},{"description":"","name":"whoami"}],"tools_count":12,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/01af4771-e8d1-46b5-b4e3-9470fc07f450","uuid":"8104c138-70dc-5f49-ab0a-fc05a19afb5d","verification_tier":"community","version":""},"query_key":"makemine inc makemine","schema_version":1,"status":"match"}