{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Investigate ecommerce behavior, conversion and technical issues with Noibu. Explore store sessions, journeys, errors, performance data and replay visuals. Issue-workflow and release changes require explicit requests; settings and billing are out of scope.","did":"c70ffc58-9788-43a7-b1d0-e2cbfb8f7d4f","documentation_url":"https://help.noibu.com/collections/7430584064-noibu_plugin_for_claude","editorial_description":{"extended_description":"Analyses can compare traffic and funnel performance by device, country, channel or campaign. Error diagnostics include impact prioritization, stack traces and Core Web Vitals, with heatmaps and replays providing visual context. Tools also expose business context and platform logs alongside the store's analytics.","schema_version":1,"summary":"Investigate ecommerce behavior, conversion and technical issues with Noibu.\nExplore store sessions, journeys, errors, performance data and replay visuals.\nIssue-workflow and release changes require explicit requests; settings and billing are out of scope."},"homepage_url":"","icon":"","id":"c70ffc58-9788-43a7-b1d0-e2cbfb8f7d4f","installs":0,"last_scanned":"","license":"","long_description":"Analyses can compare traffic and funnel performance by device, country, channel or campaign. Error diagnostics include impact prioritization, stack traces and Core Web Vitals, with heatmaps and replays providing visual context. Tools also expose business context and platform logs alongside the store's analytics.","manual_assessment":"medium","manual_review":{"all_findings":[{"evidence":"The declared tool names explicitly create or update Noibu records; the Directory description frames releases as monitoring events.","reasoning":"These are persistent changes in the merchant's monitoring workspace.","risk_type":"data_modification","severity":"medium","title":"Release, issue and business-context records can be created or updated","triggering_tools_or_skills":["noibu_create_release","noibu_update_release","noibu_update_issue","noibu_insert_business_context"]},{"evidence":"The declared inventory includes a send_feedback tool.","reasoning":"Publisher feedback forwarding does not itself send a message as the user to chosen recipients.","risk_type":"third_party_data_forwarding","severity":"low","title":"Feedback can be submitted to Noibu","triggering_tools_or_skills":["noibu_send_feedback"]},{"evidence":"The connector runs at https://mcp.noibu.com/mcp and no pinned server implementation was available in the review packet.","reasoning":"The hosted implementation and action semantics can change independently of this catalog snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Noibu is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for merchant Noibu data; the help collection did not expose exact OAuth scopes in the fetched page.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"medium","evidence_completeness":"partial","manual_overall_risk":"medium","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c70ffc58-9788-43a7-b1d0-e2cbfb8f7d4f.json","what_it_proves":"Candidate PR #125 record identity (name \"Noibu\", publisher, type interactive_connector) and 32 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c70ffc58-9788-43a7-b1d0-e2cbfb8f7d4f: complete tool_names inventory (32 tools), remote streamable-http endpoint https://mcp.noibu.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Noibu can modify monitoring records, while the exact semantics of create_release remain insufficiently documented.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:c70ffc58-9788-43a7-b1d0-e2cbfb8f7d4f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 32 tools. The official Noibu help collection page was opened but did not describe connector actions. create_release appears to record an observed software release rather than deploy one, but its schema/description is required to settle deployment_or_infrastructure.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":32,"tools_or_skills_total":32},"name":"Noibu","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c70ffc58-9788-43a7-b1d0-e2cbfb8f7d4f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.noibu.com/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Noibu","publisher_url":"https://www.noibu.com/","remote_url":"https://mcp.noibu.com/mcp","repository_url":"","risk":"medium","risk_severity":"medium","security_risks":[{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent changes in the merchant's monitoring workspace.","evidence":"Release, issue and business-context records can be created or updated: The declared tool names explicitly create or update Noibu records; the Directory description frames releases as monitoring events.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Release, issue and business-context records can be created or updated","triggering_tools":["noibu_create_release","noibu_update_release","noibu_update_issue","noibu_insert_business_context"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Publisher feedback forwarding does not itself send a message as the user to chosen recipients.","evidence":"Feedback can be submitted to Noibu: The declared inventory includes a send_feedback tool.","manual_risk_type":"third_party_data_forwarding","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Feedback can be submitted to Noibu","triggering_tools":["noibu_send_feedback"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@noibu.com","tags":["accesses_calendar","forwards_data_to_third_party","interactive_connector","modifies_data","network_access","oauth_required"],"tools":[{"description":"","name":"noibu_check_data_connection"},{"description":"","name":"noibu_create_release","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent changes in the merchant's monitoring workspace."}},{"description":"","name":"noibu_discover_custom_events"},{"description":"","name":"noibu_get_business_context"},{"description":"","name":"noibu_get_company"},{"description":"","name":"noibu_get_current_user"},{"description":"","name":"noibu_get_domain"},{"description":"","name":"noibu_get_error"},{"description":"","name":"noibu_get_error_diagnosis"},{"description":"","name":"noibu_get_error_trends"},{"description":"","name":"noibu_get_issue_top_session_highlights"},{"description":"","name":"noibu_get_log_groups_time_series"},{"description":"","name":"noibu_get_log_level_trends"},{"description":"","name":"noibu_get_page_visit_trends"},{"description":"","name":"noibu_get_page_visits"},{"description":"","name":"noibu_get_session_trends"},{"description":"","name":"noibu_get_stacktrace"},{"description":"","name":"noibu_insert_business_context","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent changes in the merchant's monitoring workspace."}},{"description":"","name":"noibu_list_domains"},{"description":"","name":"noibu_list_log_groups"},{"description":"","name":"noibu_list_page_group_journeys"},{"description":"","name":"noibu_list_priority_errors"},{"description":"","name":"noibu_list_releases"},{"description":"","name":"noibu_search_errors"},{"description":"","name":"noibu_search_platform_logs"},{"description":"","name":"noibu_search_sessions"},{"description":"","name":"noibu_send_feedback"},{"description":"","name":"noibu_session_lookup"},{"description":"","name":"noibu_show_session_replay"},{"description":"","name":"noibu_update_issue","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent changes in the merchant's monitoring workspace."}},{"description":"","name":"noibu_update_release","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These are persistent changes in the merchant's monitoring workspace."}},{"description":"","name":"noibu_visualize_page_visits"}],"tools_count":32,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/c70ffc58-9788-43a7-b1d0-e2cbfb8f7d4f","uuid":"659acc5d-383d-5dac-afce-768ea1392d55","verification_tier":"community","version":""},"query_key":"noibu","schema_version":1,"status":"match"}