{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-06","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage invoicing, bookkeeping, and tax workflows in Norman Finance. Send invoices, categorize transactions, match documents, and maintain client or vendor records. Create tax previews and submit supported reports, including VAT returns.","did":"e08bee32-4b97-4919-a99b-0862724bdaf5","documentation_url":"https://github.com/norman-finance/norman-mcp-server","editorial_description":{"extended_description":"OAuth connects your financial workspace. Tools handle recurring or ZUGFeRD invoices, offers, overdue reminders, receipts, company balances, DATEV exports, and tax settings. Bill actions include recording paid status and paying bills; tax and invoice actions can send information outside the workspace.","schema_version":1,"summary":"Manage invoicing, bookkeeping, and tax workflows in Norman Finance.\nSend invoices, categorize transactions, match documents, and maintain client or vendor records.\nCreate tax previews and submit supported reports, including VAT returns."},"homepage_url":"","icon":"","id":"e08bee32-4b97-4919-a99b-0862724bdaf5","installs":0,"last_scanned":"","license":"","long_description":"OAuth connects your financial workspace. Tools handle recurring or ZUGFeRD invoices, offers, overdue reminders, receipts, company balances, DATEV exports, and tax settings. Bill actions include recording paid status and paying bills; tax and invoice actions can send information outside the workspace.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Explicit tools move funds or make a legal filing.","reasoning":"These are financially and legally consequential.","risk_type":"financial_transaction","severity":"high","title":"Bills can be paid and tax reports filed","triggering_tools_or_skills":["pay_bill","submit_tax_report"]},{"evidence":"These tools communicate externally as the business.","reasoning":"Recipients may act on official financial messages.","risk_type":"messaging_as_user","severity":"high","title":"Invoices, offers and reminders can be sent","triggering_tools_or_skills":["send_invoice","send_offer","send_invoice_overdue_reminder","ping_client_for_documents"]},{"evidence":"The inventory includes destructive accounting actions.","reasoning":"These remove material financial records.","risk_type":"data_deletion","severity":"high","title":"Bills, clients, vendors and attachments can be deleted","triggering_tools_or_skills":["delete_bill","delete_client","delete_vendor","delete_attachment"]},{"evidence":"Sensitive financial documents are persisted.","reasoning":"This changes the accounting workspace.","risk_type":"file_write","severity":"medium","title":"Receipts and supporting files can be uploaded/attached","triggering_tools_or_skills":["create_attachment","upload_bulk_attachments"]},{"evidence":"Counterparty documents are returned.","reasoning":"They can contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Invoices, attachments and client data enter model context","triggering_tools_or_skills":["get_invoice","get_attachment_preview","get_client"]},{"evidence":"The connector runs at https://mcp.norman.finance/mcp without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Norman Finance is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth connects the user's financial workspace; exact payment/tax step-up and company-role scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e08bee32-4b97-4919-a99b-0862724bdaf5.json","what_it_proves":"Candidate PR #125 record identity (name \"Norman Finance\", publisher, type web_connector) and 67 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e08bee32-4b97-4919-a99b-0862724bdaf5: complete tool_names inventory (67 tools), remote streamable-http endpoint https://mcp.norman.finance/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Norman can pay bills, file taxes, send invoices and delete accounting records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e08bee32-4b97-4919-a99b-0862724bdaf5","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 67 tools. Runtime verification is required for payment/tax confirmation and company switching.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":67,"tools_or_skills_total":67},"name":"Norman Finance","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e08bee32-4b97-4919-a99b-0862724bdaf5&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://norman.finance/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Norman AI Inc.","publisher_url":"https://norman.finance/","remote_url":"https://mcp.norman.finance/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These are financially and legally consequential.","evidence":"Bills can be paid and tax reports filed: Explicit tools move funds or make a legal filing.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Bills can be paid and tax reports filed","triggering_tools":["pay_bill","submit_tax_report"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients may act on official financial messages.","evidence":"Invoices, offers and reminders can be sent: These tools communicate externally as the business.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Invoices, offers and reminders can be sent","triggering_tools":["send_invoice","send_offer","send_invoice_overdue_reminder","ping_client_for_documents"]},{"description":"This connector can permanently remove data or resources. Review findings: These remove material financial records.","evidence":"Bills, clients, vendors and attachments can be deleted: The inventory includes destructive accounting actions.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Bills, clients, vendors and attachments can be deleted","triggering_tools":["delete_bill","delete_client","delete_vendor","delete_attachment"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: This changes the accounting workspace.","evidence":"Receipts and supporting files can be uploaded/attached: Sensitive financial documents are persisted.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Receipts and supporting files can be uploaded/attached","triggering_tools":["create_attachment","upload_bulk_attachments"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@norman.finance","tags":["deletes_data","filesystem_access","network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"categorize_transaction"},{"description":"","name":"change_transaction_verification"},{"description":"","name":"convert_offer_to_invoice"},{"description":"","name":"create_attachment","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This changes the accounting workspace."}},{"description":"","name":"create_client"},{"description":"","name":"create_company_category"},{"description":"","name":"create_invoice"},{"description":"","name":"create_offer"},{"description":"","name":"create_recurring_invoice"},{"description":"","name":"create_transaction"},{"description":"","name":"create_vendor"},{"description":"","name":"delete_attachment","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These remove material financial records."}},{"description":"","name":"delete_bill","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These remove material financial records."}},{"description":"","name":"delete_client","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These remove material financial records."}},{"description":"","name":"delete_vendor","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These remove material financial records."}},{"description":"","name":"generate_finanzamt_preview"},{"description":"","name":"get_attachment_preview"},{"description":"","name":"get_bill"},{"description":"","name":"get_client"},{"description":"","name":"get_client_overview"},{"description":"","name":"get_company_balance"},{"description":"","name":"get_company_details"},{"description":"","name":"get_company_tax_statistics"},{"description":"","name":"get_einvoice_xml"},{"description":"","name":"get_invoice"},{"description":"","name":"get_invoice_preview"},{"description":"","name":"get_missing_documents_summary"},{"description":"","name":"get_offer"},{"description":"","name":"get_tax_compliance_status"},{"description":"","name":"get_tax_report"},{"description":"","name":"get_vat_next_report"},{"description":"","name":"get_vendor"},{"description":"","name":"link_attachment_transaction"},{"description":"","name":"link_transaction"},{"description":"","name":"list_attachments"},{"description":"","name":"list_bills"},{"description":"","name":"list_clients"},{"description":"","name":"list_coa_templates"},{"description":"","name":"list_company_categories"},{"description":"","name":"list_invoices"},{"description":"","name":"list_offers"},{"description":"","name":"list_tax_advisor_clients"},{"description":"","name":"list_tax_reports"},{"description":"","name":"list_tax_settings"},{"description":"","name":"list_tax_states"},{"description":"","name":"list_vendors"},{"description":"","name":"mark_bill_paid"},{"description":"","name":"pay_bill","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These are financially and legally consequential."}},{"description":"","name":"ping_client_for_documents","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients may act on official financial messages."}},{"description":"","name":"request_file_upload"},{"description":"","name":"search_skr_by_code"},{"description":"","name":"search_transactions"},{"description":"","name":"send_invoice","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients may act on official financial messages."}},{"description":"","name":"send_invoice_overdue_reminder","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients may act on official financial messages."}},{"description":"","name":"send_offer","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Recipients may act on official financial messages."}},{"description":"","name":"submit_tax_report","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These are financially and legally consequential."}},{"description":"","name":"suggest_skr_category"},{"description":"","name":"switch_company"},{"description":"","name":"trigger_datev_export"},{"description":"","name":"update_bill"},{"description":"","name":"update_client"},{"description":"","name":"update_company_details"},{"description":"","name":"update_tax_setting"},{"description":"","name":"update_transaction"},{"description":"","name":"update_vendor"},{"description":"","name":"upload_bulk_attachments","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: This changes the accounting workspace."}},{"description":"","name":"validate_tax_number"}],"tools_count":67,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e08bee32-4b97-4919-a99b-0862724bdaf5","uuid":"25d02d75-43a5-58d1-8031-1f31559d6638","verification_tier":"community","version":""},"query_key":"norman finance","schema_version":1,"status":"match"}