{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connects Claude to personal-finance and investment data in Minhas Economias. Review net worth, transactions and holdings, and manage manual financial records. Research Brazilian fixed income, funds, B3 stocks and real-estate investment funds.","did":"25587429-8d72-4b82-9d11-819d45cc6db3","documentation_url":"https://minhaseconomias.com.br/biblioteca-de-prompts","editorial_description":{"extended_description":"Filter transactions by period, account, card or category, and create, edit or delete ledger entries. Investment tools cover holdings, historical prices and returns, company financial statements, corporate events, analyst consensus and published documents. Listed order tools retrieve information rather than place trades.","schema_version":1,"summary":"Connects Claude to personal-finance and investment data in Minhas Economias.\nReview net worth, transactions and holdings, and manage manual financial records.\nResearch Brazilian fixed income, funds, B3 stocks and real-estate investment funds."},"homepage_url":"","icon":"","id":"25587429-8d72-4b82-9d11-819d45cc6db3","installs":0,"last_scanned":"","license":"","long_description":"Filter transactions by period, account, card or category, and create, edit or delete ledger entries. Investment tools cover holdings, historical prices and returns, company financial statements, corporate events, analyst consensus and published documents. Listed order tools retrieve information rather than place trades.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly includes ME_ExcluirTransacao (delete transaction).","reasoning":"Deleting a user's finance record is destructive, even though the connector does not evidence a bank transfer or trade.","risk_type":"data_deletion","severity":"high","title":"Deletes personal finance transactions","triggering_tools_or_skills":["ME_ExcluirTransacao"]},{"evidence":"The declared tools create/edit manual accounts, credit-card records, tags, members and transactions in the personal-finance system.","reasoning":"These are durable changes to financial tracking data, not direct issuance of a card or movement of funds.","risk_type":"data_modification","severity":"medium","title":"Creates and edits finance-account records","triggering_tools_or_skills":["ME_CriarCartaoDeCredito","ME_CriarContaManual","ME_CriarMembroDeTransacao","ME_CriarTagDeTransacao","ME_CriarTransacao","ME_EditarTransacao"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for the user's Minhas Economias finance account; exact OAuth scopes and transaction/account boundaries are not provided.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/25587429-8d72-4b82-9d11-819d45cc6db3.json","what_it_proves":"Candidate PR #125 record identity (name \"Minhas Economias\", publisher, type web_connector) and 63 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/25587429-8d72-4b82-9d11-819d45cc6db3: complete tool_names inventory (63 tools), remote streamable-http endpoint https://mcp.minhaseconomias.com.br/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Minhas Economias can delete and modify sensitive personal-finance transactions and account records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:25587429-8d72-4b82-9d11-819d45cc6db3","reviewed_at":"2026-10-10","reviewer_notes":"The investment-order tools are read-only listings; no tool places a trade or moves money. Live-chart open/edit behavior may involve browser UI and needs runtime clarification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"unknown","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":63,"tools_or_skills_total":63},"name":"Minhas Economias","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=25587429-8d72-4b82-9d11-819d45cc6db3&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mcp.minhaseconomias.com.br/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Minhas Economias","publisher_url":"https://minhaseconomias.com.br/","remote_url":"https://mcp.minhaseconomias.com.br/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deleting a user's finance record is destructive, even though the connector does not evidence a bank transfer or trade.","evidence":"Deletes personal finance transactions: The complete inventory explicitly includes ME_ExcluirTransacao (delete transaction).","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes personal finance transactions","triggering_tools":["ME_ExcluirTransacao"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are durable changes to financial tracking data, not direct issuance of a card or movement of funds.","evidence":"Creates and edits finance-account records: The declared tools create/edit manual accounts, credit-card records, tags, members and transactions in the personal-finance system.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and edits finance-account records","triggering_tools":["ME_CriarCartaoDeCredito","ME_CriarContaManual","ME_CriarMembroDeTransacao","ME_CriarTagDeTransacao","ME_CriarTransacao","ME_EditarTransacao"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contato@minhaseconomias.com.br","tags":["deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"Acoes_EventosCorporativos"},{"description":"","name":"ConsensoEmpresa_ListarPorAtivos"},{"description":"","name":"DocumentosEmpresa_ListarCategorias"},{"description":"","name":"DocumentosEmpresa_ListarDocumentos"},{"description":"","name":"EconomicIndicators_GetIndicatorRanking"},{"description":"","name":"EconomicIndicators_GetIndicatorValues"},{"description":"","name":"EconomicIndicators_GetIndicatorValuesRange"},{"description":"","name":"EconomicIndicators_ListBalanceGuide"},{"description":"","name":"EconomicIndicators_ListIndicators"},{"description":"","name":"EconomicIndicators_SearchCompanies"},{"description":"","name":"Empresa_DadosCadastrais"},{"description":"","name":"FixedIncome_BondRanking"},{"description":"","name":"FixedIncome_BondsByFilterWithDetails"},{"description":"","name":"FixedIncome_CustodiesByInvestor"},{"description":"","name":"FixedIncome_SearchBond"},{"description":"","name":"FixedIncome_Simulator"},{"description":"","name":"Fundos_AnaliseUnderwater"},{"description":"","name":"Fundos_BuscaPorParametros"},{"description":"","name":"Fundos_BuscarPorCnpj"},{"description":"","name":"Fundos_CarteiraConsolidada"},{"description":"","name":"Fundos_DatasPortfolio"},{"description":"","name":"Fundos_FiltrosDisponiveis"},{"description":"","name":"Fundos_GraficoCotas"},{"description":"","name":"Fundos_OpenFinance_FundosPorParticipante"},{"description":"","name":"Fundos_OpenFinance_Listar"},{"description":"","name":"Fundos_OpenFinance_Participantes"},{"description":"","name":"Fundos_OpenFinance_ParticipantesPorFundo"},{"description":"","name":"Fundos_PapelCarteira"},{"description":"","name":"Fundos_Rentabilidade"},{"description":"","name":"Funds_PortfolioFundoInvestimento"},{"description":"","name":"Gestoras_Classes"},{"description":"","name":"Gestoras_FundosMasterPorClasse"},{"description":"","name":"Indicators_GetBalanceSheet"},{"description":"","name":"Indicators_GetCashFlow"},{"description":"","name":"Indicators_GetIncomeStatements"},{"description":"","name":"Indicators_GetIndicators"},{"description":"","name":"Indices_Performance"},{"description":"","name":"ME_BensPatrimoniais"},{"description":"","name":"ME_CategoriasDeTransacao"},{"description":"","name":"ME_CriarCartaoDeCredito","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are durable changes to financial tracking data, not direct issuance of a card or movement of funds."}},{"description":"","name":"ME_CriarContaManual","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are durable changes to financial tracking data, not direct issuance of a card or movement of funds."}},{"description":"","name":"ME_CriarMembroDeTransacao","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are durable changes to financial tracking data, not direct issuance of a card or movement of funds."}},{"description":"","name":"ME_CriarTagDeTransacao","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are durable changes to financial tracking data, not direct issuance of a card or movement of funds."}},{"description":"","name":"ME_CriarTransacao","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are durable changes to financial tracking data, not direct issuance of a card or movement of funds."}},{"description":"","name":"ME_Dividas"},{"description":"","name":"ME_EditarTransacao","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are durable changes to financial tracking data, not direct issuance of a card or movement of funds."}},{"description":"","name":"ME_ExcluirTransacao","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deleting a user's finance record is destructive, even though the connector does not evidence a bank transfer or trade."}},{"description":"","name":"ME_InstituicoesFinanceiras"},{"description":"","name":"ME_Investimentos"},{"description":"","name":"ME_MembrosDeTransacao"},{"description":"","name":"ME_Patrimonio"},{"description":"","name":"ME_ResumoDeTransacoes"},{"description":"","name":"ME_Saldo"},{"description":"","name":"ME_SubcategoriasDeTransacao"},{"description":"","name":"ME_TagsDeTransacao"},{"description":"","name":"ME_Transacoes"},{"description":"","name":"Ordens_Corretoras"},{"description":"","name":"Ordens_Paginadas"},{"description":"","name":"RT_CotacaoHistoricoPreco"},{"description":"","name":"RT_Performance_Relatorio"},{"description":"","name":"abrir_grafico_candle_ao_vivo"},{"description":"","name":"desativar_grafico_candle_ao_vivo"},{"description":"","name":"editar_grafico_candle_ao_vivo"}],"tools_count":63,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/25587429-8d72-4b82-9d11-819d45cc6db3","uuid":"2c9ead1c-b4ff-5f4f-8af9-abffcabe88ca","verification_tier":"community","version":""},"query_key":"minhas economias","schema_version":1,"status":"match"}