{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Design HVAC systems and solve thermodynamic balances with HVAC Builder. Use component catalogs, weather data, annual simulations, and building models. Design and solving have a free tier; simulations require paid access or limited free example-building runs.","did":"d8ebba26-1abd-4b8e-a934-ae87a83fd9ba","documentation_url":"https://hvacbuilder.app/docs/ai","editorial_description":{"extended_description":"Save or publish systems, model rooms and schedules, import weather data, and request supplier quotes. Supplier tools fit AHRI 540 compressor maps and import product ranges. Account tools manage saved buildings, published designs, vendor capabilities, and quote requests.","schema_version":1,"summary":"Design HVAC systems and solve thermodynamic balances with HVAC Builder.\nUse component catalogs, weather data, annual simulations, and building models.\nDesign and solving have a free tier; simulations require paid access or limited free example-building runs."},"homepage_url":"","icon":"https://hvacbuilder.app/icon-512.png","id":"d8ebba26-1abd-4b8e-a934-ae87a83fd9ba","installs":0,"last_scanned":"","license":"","long_description":"Save or publish systems, model rooms and schedules, import weather data, and request supplier quotes. Supplier tools fit AHRI 540 compressor maps and import product ranges. Account tools manage saved buildings, published designs, vendor capabilities, and quote requests.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Official docs say the few update/delete account tools are marked destructive and require confirmation.","reasoning":"Deletion removes saved engineering work.","risk_type":"data_deletion","severity":"high","title":"Saved systems and buildings can be deleted","triggering_tools_or_skills":["delete_saved_system","delete_building"]},{"evidence":"The declared tools request vendor quotations using account/project data.","reasoning":"This communicates a commercial request externally as the user.","risk_type":"messaging_as_user","severity":"high","title":"Quote requests can be sent to suppliers","triggering_tools_or_skills":["request_quotes","request_building_quotes"]},{"evidence":"Official docs explicitly describe saving and publishing completed systems.","reasoning":"Publishing exposes persistent supplier/customer-facing engineering configurations.","risk_type":"deployment_infrastructure","severity":"high","title":"HVAC designs can be published or unpublished","triggering_tools_or_skills":["publish_system","unpublish_system","update_published_system"]},{"evidence":"Declared tools persist engineering and vendor data.","reasoning":"These change the account.","risk_type":"data_modification","severity":"medium","title":"Systems, buildings and supplier catalogs can be saved or imported","triggering_tools_or_skills":["save_system","save_building","import_catalog_items","update_vendor_capabilities"]},{"evidence":"The connector runs at https://hvacbuilder.app/api/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"hvacbuilder.app is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication gives the connector the same HVAC Builder account and supplier permissions as the user; writes are marked and destructive tools require client confirmation.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d8ebba26-1abd-4b8e-a934-ae87a83fd9ba.json","what_it_proves":"Candidate PR #125 record identity (name \"hvacbuilder.app\", publisher, type web_connector) and 39 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d8ebba26-1abd-4b8e-a934-ae87a83fd9ba: complete tool_names inventory (39 tools), remote streamable-http endpoint https://hvacbuilder.app/api/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:25:50Z","url_or_path":"https://hvacbuilder.app/docs/ai","what_it_proves":"Official documentation confirms account writes, destructive update/delete tools, paid-tier simulations, saving and publishing designs."}],"primary_reason":"HVAC Builder can delete engineering projects, publish systems and send supplier quote requests.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d8ebba26-1abd-4b8e-a934-ae87a83fd9ba","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 39 tools and official AI/MCP documentation. Paid-tier entitlement alone was not treated as a direct charge.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"false","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":39,"tools_or_skills_total":39},"name":"hvacbuilder.app","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d8ebba26-1abd-4b8e-a934-ae87a83fd9ba&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://hvacbuilder.app/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Myron Van Staden","publisher_url":"https://www.linkedin.com/in/myron-van-staden-452346106/","remote_url":"https://hvacbuilder.app/api/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Deletion removes saved engineering work.","evidence":"Saved systems and buildings can be deleted: Official docs say the few update/delete account tools are marked destructive and require confirmation.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Saved systems and buildings can be deleted","triggering_tools":["delete_saved_system","delete_building"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates a commercial request externally as the user.","evidence":"Quote requests can be sent to suppliers: The declared tools request vendor quotations using account/project data.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Quote requests can be sent to suppliers","triggering_tools":["request_quotes","request_building_quotes"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Publishing exposes persistent supplier/customer-facing engineering configurations.","evidence":"HVAC designs can be published or unpublished: Official docs explicitly describe saving and publishing completed systems.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"HVAC designs can be published or unpublished","triggering_tools":["publish_system","unpublish_system","update_published_system"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These change the account.","evidence":"Systems, buildings and supplier catalogs can be saved or imported: Declared tools persist engineering and vendor data.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Systems, buildings and supplier catalogs can be saved or imported","triggering_tools":["save_system","save_building","import_catalog_items","update_vendor_capabilities"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@hvacbuilder.app","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"create_weather_dataset"},{"description":"","name":"delete_building","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion removes saved engineering work."}},{"description":"","name":"delete_saved_system","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion removes saved engineering work."}},{"description":"","name":"fetch_tmy_weather"},{"description":"","name":"fit_compressor_map"},{"description":"","name":"get_building"},{"description":"","name":"get_catalog_item"},{"description":"","name":"get_saved_system"},{"description":"","name":"get_supplier_preset"},{"description":"","name":"import_catalog_items","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These change the account."}},{"description":"","name":"import_weather_csv"},{"description":"","name":"list_buildings"},{"description":"","name":"list_component_kinds"},{"description":"","name":"list_refrigerants"},{"description":"","name":"list_saved_systems"},{"description":"","name":"list_supplier_presets"},{"description":"","name":"list_tmy_cities"},{"description":"","name":"list_weather_datasets"},{"description":"","name":"match_building_suppliers"},{"description":"","name":"match_suppliers"},{"description":"","name":"my_account"},{"description":"","name":"my_leads"},{"description":"","name":"my_published_systems"},{"description":"","name":"my_quote_requests"},{"description":"","name":"my_vendor_profile"},{"description":"","name":"publish_system","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Publishing exposes persistent supplier/customer-facing engineering configurations."}},{"description":"","name":"request_building_quotes","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates a commercial request externally as the user."}},{"description":"","name":"request_quotes","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates a commercial request externally as the user."}},{"description":"","name":"save_building","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These change the account."}},{"description":"","name":"save_system","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These change the account."}},{"description":"","name":"search_catalog"},{"description":"","name":"simulate_annual"},{"description":"","name":"simulate_building"},{"description":"","name":"solve_system"},{"description":"","name":"unpublish_system","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Publishing exposes persistent supplier/customer-facing engineering configurations."}},{"description":"","name":"update_building"},{"description":"","name":"update_published_system","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Publishing exposes persistent supplier/customer-facing engineering configurations."}},{"description":"","name":"update_saved_system"},{"description":"","name":"update_vendor_capabilities","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These change the account."}}],"tools_count":39,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d8ebba26-1abd-4b8e-a934-ae87a83fd9ba","uuid":"1ea96afd-f0ab-510e-a7bb-c1e73b208935","verification_tier":"community","version":""},"query_key":"myron van staden hvacbuilder app","schema_version":1,"status":"match"}