{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-14","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Analyze real estate listings, sales, commissions and expenses in MyOps. Review team production and property-specific information. Access is read-only and limited by your selected team and account role.","did":"0caddf79-a8af-4dc3-8b7f-4f4214683873","documentation_url":"https://support.myops.ai/docs/getting-started/connect-claude-chatgpt-or-grok-to-myops","editorial_description":{"extended_description":"Owners can see team income and expenses; agents see team production and their own financial information. Accessible documents return as text, without downloadable files or links, and agents are limited to documents on their own deals. Notes, contacts and tasks remain in the MyOps app.","schema_version":1,"summary":"Analyze real estate listings, sales, commissions and expenses in MyOps.\nReview team production and property-specific information.\nAccess is read-only and limited by your selected team and account role."},"homepage_url":"","icon":"https://mcp.myops.ai/mcp-assets/favicon.ico","id":"0caddf79-a8af-4dc3-8b7f-4f4214683873","installs":0,"last_scanned":"","license":"","long_description":"Owners can see team income and expenses; agents see team production and their own financial information. Accessible documents return as text, without downloadable files or links, and agents are limited to documents on their own deals. Notes, contacts and tasks remain in the MyOps app.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"The complete inventory retrieves internal documents and real-estate operational and financial reports.","reasoning":"Contracts, addresses, performance, expenses, and team income are confidential business and personal data.","risk_type":"private_data_read","severity":"low","title":"Contracts, sales, expenses, income, and agent performance are readable","triggering_tools_or_skills":["find_documents","read_document","query_contract_by_address","query_expenses_summary","query_team_income","query_agent_performance"]},{"evidence":"The connector searches and returns free-form documents from the real-estate workspace.","reasoning":"Document text is untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Workspace documents enter context","triggering_tools_or_skills":["find_documents","read_document"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication to a MyOps real-estate workspace; exact agent, team, document, contract, expense, and income scopes are not documented here.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0caddf79-a8af-4dc3-8b7f-4f4214683873.json","what_it_proves":"Candidate PR #125 record identity (name \"MyOps\", publisher, type web_connector) and 13 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0caddf79-a8af-4dc3-8b7f-4f4214683873: complete tool_names inventory (13 tools), remote streamable-http endpoint https://mcp.myops.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"All 13 complete-inventory tools find, read, or query authenticated data and expose no persistent write or high-impact action.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0caddf79-a8af-4dc3-8b7f-4f4214683873","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 13 names. Official docs lookup was uninformative, so row-level authorization, document formats, query constraints, and credential lifetime require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":13,"tools_or_skills_total":13},"name":"MyOps","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0caddf79-a8af-4dc3-8b7f-4f4214683873&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.myops.ai/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"MyOps LLC","publisher_url":"https://myops.ai/","remote_url":"https://mcp.myops.ai/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: Contracts, addresses, performance, expenses, and team income are confidential business and personal data.","evidence":"Contracts, sales, expenses, income, and agent performance are readable: The complete inventory retrieves internal documents and real-estate operational and financial reports.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Contracts, sales, expenses, income, and agent performance are readable","triggering_tools":["find_documents","read_document","query_contract_by_address","query_expenses_summary","query_team_income","query_agent_performance"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.myops.ai","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"find_documents"},{"description":"","name":"get_current_date"},{"description":"","name":"query_active_listings"},{"description":"","name":"query_agent_performance"},{"description":"","name":"query_closed_sales"},{"description":"","name":"query_contract_by_address"},{"description":"","name":"query_expenses_summary"},{"description":"","name":"query_highest_sale"},{"description":"","name":"query_list_to_sale_ratio"},{"description":"","name":"query_listings_taken"},{"description":"","name":"query_pending_sales"},{"description":"","name":"query_team_income"},{"description":"","name":"read_document"}],"tools_count":13,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0caddf79-a8af-4dc3-8b7f-4f4214683873","uuid":"60a92f66-82ce-5eb9-aad0-f8226e859b56","verification_tier":"community","version":""},"query_key":"myops","schema_version":1,"status":"match"}