{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Mystore reads data from your Indian marketplace store. Find products, collections, orders, customers, sales analytics, and help documentation. The authenticated connector cannot create, change, delete, or place store items or orders.","did":"94f6c991-8a10-48d4-9e61-769a68ca3969","documentation_url":"https://help.mystore.in/en/topic/mystore-connector-for-claude","editorial_description":{"extended_description":"Use natural-language analytics for sales totals, order-status breakdowns, and top products. Detailed lookups return individual products, collections, customers, and orders; help search retrieves Mystore documentation.","schema_version":1,"summary":"Mystore reads data from your Indian marketplace store.\nFind products, collections, orders, customers, sales analytics, and help documentation.\nThe authenticated connector cannot create, change, delete, or place store items or orders."},"homepage_url":"","icon":"","id":"94f6c991-8a10-48d4-9e61-769a68ca3969","installs":0,"last_scanned":"","license":"","long_description":"Use natural-language analytics for sales totals, order-status breakdowns, and top products. Detailed lookups return individual products, collections, customers, and orders; help search retrieves Mystore documentation.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All ten tools are get/list/search/read-only analytics and the listing explicitly excludes writes/orders.","reasoning":"The data is commercially/personally sensitive but cannot be modified.","risk_type":"private_data_read","severity":"low","title":"Reads private products, orders, customers and store analytics","triggering_tools_or_skills":["www_mystore_in__analytics-query","www_mystore_in__get-order","www_mystore_in__list-customers"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth 2.0/PKCE is required; customer/order/store analytics follow Mystore account permissions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/94f6c991-8a10-48d4-9e61-769a68ca3969.json","what_it_proves":"Candidate PR #125 record identity (name \"Mystore\", publisher, type web_connector) and 10 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/94f6c991-8a10-48d4-9e61-769a68ca3969: complete tool_names inventory (10 tools), remote streamable-http endpoint https://www.mystore.in/api/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Mystore is explicitly read-only store analytics/data access.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:94f6c991-8a10-48d4-9e61-769a68ca3969","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all ten tools. analytics-query is natural-language bounded store analytics, not arbitrary SQL.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":10,"tools_or_skills_total":10},"name":"Mystore","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=94f6c991-8a10-48d4-9e61-769a68ca3969&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.mystore.in/en/page/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Mystore","publisher_url":"https://www.mystore.in/","remote_url":"https://www.mystore.in/api/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The data is commercially/personally sensitive but cannot be modified.","evidence":"Reads private products, orders, customers and store analytics: All ten tools are get/list/search/read-only analytics and the listing explicitly excludes writes/orders.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Reads private products, orders, customers and store analytics","triggering_tools":["www_mystore_in__analytics-query","www_mystore_in__get-order","www_mystore_in__list-customers"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"reachus@mystore.in","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"www_mystore_in__analytics-query"},{"description":"","name":"www_mystore_in__get-collection"},{"description":"","name":"www_mystore_in__get-customer"},{"description":"","name":"www_mystore_in__get-order"},{"description":"","name":"www_mystore_in__get-product"},{"description":"","name":"www_mystore_in__help-search"},{"description":"","name":"www_mystore_in__list-customers"},{"description":"","name":"www_mystore_in__list-orders"},{"description":"","name":"www_mystore_in__search-collections"},{"description":"","name":"www_mystore_in__search-products"}],"tools_count":10,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/94f6c991-8a10-48d4-9e61-769a68ca3969","uuid":"fd53cf3b-a098-5ce2-8c2a-2e7190473d22","verification_tier":"community","version":""},"query_key":"mystore mystore","schema_version":1,"status":"match"}