{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-05","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Tracks customer reviews and reputation through More Good Reviews. Review ratings across sites, send review requests by email or text, and manage replies. Check request engagement and follow up with customers who have not responded.","did":"25ce6543-6c61-41c2-99c9-9d9e5486e2f6","documentation_url":"https://docs.moregoodreviews.com/platform/mcp-server","editorial_description":{"extended_description":"Manage customers, locations, sources, tags and review visibility alongside review-request history. The connector also exposes deletion and customer subscription controls, so it can change stored records and communication preferences rather than only analyze ratings.","schema_version":1,"summary":"Tracks customer reviews and reputation through More Good Reviews.\nReview ratings across sites, send review requests by email or text, and manage replies.\nCheck request engagement and follow up with customers who have not responded."},"homepage_url":"","icon":"","id":"25ce6543-6c61-41c2-99c9-9d9e5486e2f6","installs":0,"last_scanned":"","license":"","long_description":"Manage customers, locations, sources, tags and review visibility alongside review-request history. The connector also exposes deletion and customer subscription controls, so it can change stored records and communication preferences rather than only analyze ratings.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The description says review requests are sent by email or text and can be followed up; the inventory includes createAsk and updateReviewIntegrationReply, while prompts include request-reviews-campaign and publish-replies-to-platform.","reasoning":"These operations communicate with customers or post publicly as the business.","risk_type":"messaging_as_user","severity":"high","title":"Sends review requests and can publish review replies","triggering_tools_or_skills":["createAsk","updateReviewIntegrationReply"]},{"evidence":"The complete inventory explicitly declares deletion of multiple meaningful business resources.","reasoning":"These are destructive account actions.","risk_type":"data_deletion","severity":"high","title":"Deletes customers, messages, reviews and configuration","triggering_tools_or_skills":["deleteCustomer","deleteMessage","deleteReview","deleteLocation","deleteShareTemplate","deleteSource","deleteTag","deleteCharge"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for a More Good Reviews business account; exact scopes, customer-message confirmation and charge semantics are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/25ce6543-6c61-41c2-99c9-9d9e5486e2f6.json","what_it_proves":"Candidate PR #125 record identity (name \"More Good Reviews\", publisher, type web_connector) and 43 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/25ce6543-6c61-41c2-99c9-9d9e5486e2f6: complete tool_names inventory (43 tools), remote streamable-http endpoint https://api.moregoodreviews.com/mcp, auth_posture auth_required, declared sensitive data types, directory tier community"}],"primary_reason":"More Good Reviews can send customer review requests, publish replies and delete customer/review resources.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:25ce6543-6c61-41c2-99c9-9d9e5486e2f6","reviewed_at":"2026-10-10","reviewer_notes":"createCharge/deleteCharge semantics are ambiguous, so direct money movement remains unknown and must be runtime-verified; High is established independently by messaging and deletion.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":43,"tools_or_skills_total":43},"name":"More Good Reviews","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=25ce6543-6c61-41c2-99c9-9d9e5486e2f6&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://moregoodreviews.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"More Good Reviews","publisher_url":"https://moregoodreviews.com/","remote_url":"https://api.moregoodreviews.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: These operations communicate with customers or post publicly as the business.","evidence":"Sends review requests and can publish review replies: The description says review requests are sent by email or text and can be followed up; the inventory includes createAsk and updateReviewIntegrationReply, while prompts include request-reviews-campaign and publish-replies-to-platform.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends review requests and can publish review replies","triggering_tools":["createAsk","updateReviewIntegrationReply"]},{"description":"This connector can permanently remove data or resources. Review findings: These are destructive account actions.","evidence":"Deletes customers, messages, reviews and configuration: The complete inventory explicitly declares deletion of multiple meaningful business resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes customers, messages, reviews and configuration","triggering_tools":["deleteCustomer","deleteMessage","deleteReview","deleteLocation","deleteShareTemplate","deleteSource","deleteTag","deleteCharge"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@moregoodreviews.com","tags":["accesses_messaging","deletes_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"archiveCustomer"},{"description":"","name":"cancelCustomerUnsentMessages"},{"description":"","name":"createAsk","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These operations communicate with customers or post publicly as the business."}},{"description":"","name":"createCharge"},{"description":"","name":"createCustomer"},{"description":"","name":"createLocation"},{"description":"","name":"createReviewShareImage"},{"description":"","name":"createSource"},{"description":"","name":"createTag"},{"description":"","name":"deleteCharge","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"deleteCustomer","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"deleteLocation","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"deleteMessage","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"deleteReview","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"deleteShareTemplate","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"deleteSource","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"deleteTag","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are destructive account actions."}},{"description":"","name":"getCustomer"},{"description":"","name":"getLocation"},{"description":"","name":"listCharges"},{"description":"","name":"listCustomerCharges"},{"description":"","name":"listCustomerMessages"},{"description":"","name":"listCustomerReviews"},{"description":"","name":"listCustomers"},{"description":"","name":"listLocations"},{"description":"","name":"listMessages"},{"description":"","name":"listReviews"},{"description":"","name":"listShareTemplates"},{"description":"","name":"listSources"},{"description":"","name":"listTags"},{"description":"","name":"markReviewReplied"},{"description":"","name":"resubscribeCustomer"},{"description":"","name":"unarchiveCustomer"},{"description":"","name":"unsubscribeCustomer"},{"description":"","name":"updateCustomerNotes"},{"description":"","name":"updateCustomerTags"},{"description":"","name":"updateLocation"},{"description":"","name":"updateReviewDuplicateFlag"},{"description":"","name":"updateReviewIntegrationReply","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: These operations communicate with customers or post publicly as the business."}},{"description":"","name":"updateReviewTags"},{"description":"","name":"updateReviewVisibility"},{"description":"","name":"updateSource"},{"description":"","name":"updateTag"}],"tools_count":43,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/25ce6543-6c61-41c2-99c9-9d9e5486e2f6","uuid":"cd3023ef-4b1b-54f6-881f-98c01b1e2188","verification_tier":"community","version":""},"query_key":"more good reviews more good reviews","schema_version":1,"status":"match"}