{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Moloni ON manages sales documents, customers, and products for Portuguese businesses. Documents start as drafts; issuing or emailing them requires explicit confirmation. Requires a subscription with the API Clients module enabled.","did":"fc64b6de-24c0-40a9-aa59-b53d7738260d","documentation_url":"https://docs.molonion.pt/guides/mcp","editorial_description":{"extended_description":"Create customers or products through preview-and-confirm steps, inspect stock or sales, and switch companies. Generate shareable document PDFs or review unpaid documents; drafts can also be completed in Moloni.","schema_version":1,"summary":"Moloni ON manages sales documents, customers, and products for Portuguese businesses.\nDocuments start as drafts; issuing or emailing them requires explicit confirmation.\nRequires a subscription with the API Clients module enabled."},"homepage_url":"","icon":"","id":"fc64b6de-24c0-40a9-aa59-b53d7738260d","installs":0,"last_scanned":"","license":"","long_description":"Create customers or products through preview-and-confirm steps, inspect stock or sales, and switch companies. Generate shareable document PDFs or review unpaid documents; drafts can also be completed in Moloni.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says document types include invoices, invoice-receipts, simplified invoices, credit notes, debit notes, estimates and pro formas; document_close finalizes them.","reasoning":"Finalizing certified commercial documents can establish receivables, tax records, or credits with direct financial consequences.","risk_type":"financial_transaction","severity":"high","title":"Invoices and credit/debit commercial documents can be created and closed","triggering_tools_or_skills":["document_create","document_close"]},{"evidence":"The connector explicitly sends invoices or other documents by email.","reasoning":"This communicates formal financial documents to customers as the business.","risk_type":"messaging_as_user","severity":"high","title":"Commercial documents can be emailed","triggering_tools_or_skills":["document_send_email"]},{"evidence":"Named tools persist customer/product records and select the operating company.","reasoning":"These writes alter the commercial-management account.","risk_type":"data_modification","severity":"medium","title":"Customers and products can be created","triggering_tools_or_skills":["customer_create","product_create","company_select"]},{"evidence":"The connector reads Portuguese business customers, documents, pending sales, stock, taxes, and payment methods.","reasoning":"This is sensitive customer and accounting data.","risk_type":"private_data_read","severity":"medium","title":"Customer, invoice, sales, stock, and tax data is exposed","triggering_tools_or_skills":["customer_list","document_list","sales_analysis","sales_pending","stock_list","tax_list"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants Moloni ON company, customer, product, stock, invoice, tax, and payment-method access; exact staff roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/fc64b6de-24c0-40a9-aa59-b53d7738260d.json","what_it_proves":"Candidate PR #125 record identity (name \"Moloni ON\", publisher, type web_connector) and 20 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/fc64b6de-24c0-40a9-aa59-b53d7738260d: complete tool_names inventory (20 tools), remote streamable-http endpoint https://mcp.molonion.pt/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Moloni ON can finalize and email certified commercial documents with financial and tax effects.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:fc64b6de-24c0-40a9-aa59-b53d7738260d","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 20 tools; no document deletion or actual bank/payment execution is declared.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":20,"tools_or_skills_total":20},"name":"Moloni ON","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=fc64b6de-24c0-40a9-aa59-b53d7738260d&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.molonion.pt/pdfs/pt/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Moloni","publisher_url":"https://www.molonion.pt/","remote_url":"https://mcp.molonion.pt/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Finalizing certified commercial documents can establish receivables, tax records, or credits with direct financial consequences.","evidence":"Invoices and credit/debit commercial documents can be created and closed: The listing says document types include invoices, invoice-receipts, simplified invoices, credit notes, debit notes, estimates and pro formas; document_close finalizes them.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Invoices and credit/debit commercial documents can be created and closed","triggering_tools":["document_create","document_close"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates formal financial documents to customers as the business.","evidence":"Commercial documents can be emailed: The connector explicitly sends invoices or other documents by email.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Commercial documents can be emailed","triggering_tools":["document_send_email"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes alter the commercial-management account.","evidence":"Customers and products can be created: Named tools persist customer/product records and select the operating company.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Customers and products can be created","triggering_tools":["customer_create","product_create","company_select"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive customer and accounting data.","evidence":"Customer, invoice, sales, stock, and tax data is exposed: The connector reads Portuguese business customers, documents, pending sales, stock, taxes, and payment methods.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Customer, invoice, sales, stock, and tax data is exposed","triggering_tools":["customer_list","document_list","sales_analysis","sales_pending","stock_list","tax_list"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"apoio@molonion.pt","tags":["modifies_data","network_access","oauth_required","reads_private_data","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"company_list"},{"description":"","name":"company_select","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes alter the commercial-management account."}},{"description":"","name":"customer_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes alter the commercial-management account."}},{"description":"","name":"customer_get"},{"description":"","name":"customer_list","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive customer and accounting data."}},{"description":"","name":"document_close","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Finalizing certified commercial documents can establish receivables, tax records, or credits with direct financial consequences."}},{"description":"","name":"document_create","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Finalizing certified commercial documents can establish receivables, tax records, or credits with direct financial consequences."}},{"description":"","name":"document_download"},{"description":"","name":"document_get"},{"description":"","name":"document_list","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive customer and accounting data."}},{"description":"","name":"document_send_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates formal financial documents to customers as the business."}},{"description":"","name":"payment_method_list"},{"description":"","name":"product_category_list"},{"description":"","name":"product_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes alter the commercial-management account."}},{"description":"","name":"product_get"},{"description":"","name":"product_list"},{"description":"","name":"sales_analysis","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive customer and accounting data."}},{"description":"","name":"sales_pending","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive customer and accounting data."}},{"description":"","name":"stock_list","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive customer and accounting data."}},{"description":"","name":"tax_list","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This is sensitive customer and accounting data."}}],"tools_count":20,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/fc64b6de-24c0-40a9-aa59-b53d7738260d","uuid":"83c8d939-1f74-5257-9511-beebf40b07dc","verification_tier":"community","version":""},"query_key":"moloni moloni on","schema_version":1,"status":"match"}