{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-28","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Analyze and manage advertising, analytics, CRM, and website integrations with NotFair. Review campaign performance, investigate SEO, and make supported account changes. Requires a NotFair account and connected integration; writes need approval and follow permissions.","did":"de4d9388-0830-4a14-90a4-efb6e95c6a8f","documentation_url":"https://notfair.co/claude-connector","editorial_description":{"extended_description":"Supported services include major ad platforms, GA4, Search Console, GoHighLevel, and WordPress. Operations cover campaign settings and creative assets, sitemap or analytics configuration, CRM workflows, and web content. Change history and undo are available only where supported.","schema_version":1,"summary":"Analyze and manage advertising, analytics, CRM, and website integrations with NotFair.\nReview campaign performance, investigate SEO, and make supported account changes.\nRequires a NotFair account and connected integration; writes need approval and follow permissions."},"homepage_url":"","icon":"","id":"de4d9388-0830-4a14-90a4-efb6e95c6a8f","installs":0,"last_scanned":"","license":"","long_description":"Supported services include major ad platforms, GA4, Search Console, GoHighLevel, and WordPress. Operations cover campaign settings and creative assets, sitemap or analytics configuration, CRM workflows, and web content. Change history and undo are available only where supported.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The description explicitly includes ad budget/bid management and GoHighLevel invoices/payments.","reasoning":"These actions spend or move money.","risk_type":"financial_transaction","severity":"high","title":"Advertising budgets, bids, invoices and payments can be managed","triggering_tools_or_skills":["execute"]},{"evidence":"The connected systems include customer conversations and public ads.","reasoning":"Writes can communicate externally as the business.","risk_type":"messaging_as_user","severity":"high","title":"CRM conversations and advertising creatives can be managed","triggering_tools_or_skills":["execute"]},{"evidence":"The connector manages live campaigns, sitemaps, key events and website posts/pages/media.","reasoning":"This changes production marketing/web infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Ad campaigns and WordPress content can be changed","triggering_tools_or_skills":["execute"]},{"evidence":"A single gateway reaches advertising, analytics, CRM and WordPress accounts under integration permissions.","reasoning":"The breadth requires strict per-tool authorization.","risk_type":"credential_admin","severity":"high","title":"Cross-platform integrations expose privileged account administration","triggering_tools_or_skills":["execute","executeRead"]},{"evidence":"Only four wrappers are declared for many platforms and actions.","reasoning":"Deletion, confirmation and undo boundaries cannot be independently checked.","risk_type":"generic_gateway","severity":"medium","title":"The downstream action inventory is undisclosed","triggering_tools_or_skills":["search","executeRead","execute"]},{"evidence":"External platform content is returned.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Ads, CRM messages and website content enter model context","triggering_tools_or_skills":["executeRead","execute"]},{"evidence":"The connector runs at https://notfair.co/api/mcp/notfair without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Notfair is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth permissions vary by connected ad, analytics, CRM and WordPress integration; generic execute hides the concrete downstream schemas.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/de4d9388-0830-4a14-90a4-efb6e95c6a8f.json","what_it_proves":"Candidate PR #125 record identity (name \"Notfair\", publisher, type web_connector) and 4 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/de4d9388-0830-4a14-90a4-efb6e95c6a8f: complete tool_names inventory (4 tools), remote streamable-http endpoint https://notfair.co/api/mcp/notfair, auth_posture auth_required, directory tier community"}],"primary_reason":"NotFair can change advertising spend, CRM communications and live websites through a generic cross-platform gateway.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:de4d9388-0830-4a14-90a4-efb6e95c6a8f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 4 wrappers. Publication should include the complete discovered tool inventory and schemas rather than relying on the marketing description.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"unknown","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":4,"tools_or_skills_total":4},"name":"Notfair","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=de4d9388-0830-4a14-90a4-efb6e95c6a8f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://notfair.co/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"NotFair","publisher_url":"https://notfair.co/","remote_url":"https://notfair.co/api/mcp/notfair","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These actions spend or move money.","evidence":"Advertising budgets, bids, invoices and payments can be managed: The description explicitly includes ad budget/bid management and GoHighLevel invoices/payments.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Advertising budgets, bids, invoices and payments can be managed","triggering_tools":["execute"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Writes can communicate externally as the business.","evidence":"CRM conversations and advertising creatives can be managed: The connected systems include customer conversations and public ads.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"CRM conversations and advertising creatives can be managed","triggering_tools":["execute"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: This changes production marketing/web infrastructure.","evidence":"Ad campaigns and WordPress content can be changed: The connector manages live campaigns, sitemaps, key events and website posts/pages/media.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Ad campaigns and WordPress content can be changed","triggering_tools":["execute"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The breadth requires strict per-tool authorization.","evidence":"Cross-platform integrations expose privileged account administration: A single gateway reaches advertising, analytics, CRM and WordPress accounts under integration permissions.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Cross-platform integrations expose privileged account administration","triggering_tools":["execute","executeRead"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Deletion, confirmation and undo boundaries cannot be independently checked.","evidence":"The downstream action inventory is undisclosed: Only four wrappers are declared for many platforms and actions.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"medium","title":"The downstream action inventory is undisclosed","triggering_tools":["search","executeRead","execute"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://notfair.co/claude-connector","tags":["code_deployment","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"execute","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The breadth requires strict per-tool authorization."}},{"description":"","name":"executeRead","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: The breadth requires strict per-tool authorization."}},{"description":"","name":"search","risk":{"category":"code_execution","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Deletion, confirmation and undo boundaries cannot be independently checked."}},{"description":"","name":"submitToolFeedback"}],"tools_count":4,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/de4d9388-0830-4a14-90a4-efb6e95c6a8f","uuid":"9606f280-13eb-5c0d-9f1b-055b226edd5d","verification_tier":"community","version":""},"query_key":"notfair notfair","schema_version":1,"status":"match"}