{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-19","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Nuvemshop manages product catalogs, promotions, and store reporting. Create products, update stock or prices, and maintain categories, coupons, or visibility. Inspect orders, customers, shipping, and payment methods through your connected store.","did":"9393dd2f-38ff-4bce-bdd1-9536cce48202","documentation_url":"https://atendimento.nuvemshop.com.br/conectores-de-ia/como-conectar-sua-loja-nuvemshop-ao-claude","editorial_description":{"extended_description":"Tools can delete individual or multiple products and update promotion rules. Order and payment-method access is for inspection, not order modification or charging customers.","schema_version":1,"summary":"Nuvemshop manages product catalogs, promotions, and store reporting.\nCreate products, update stock or prices, and maintain categories, coupons, or visibility.\nInspect orders, customers, shipping, and payment methods through your connected store."},"homepage_url":"","icon":"","id":"9393dd2f-38ff-4bce-bdd1-9536cce48202","installs":0,"last_scanned":"","license":"","long_description":"Tools can delete individual or multiple products and update promotion rules. Order and payment-method access is for inspection, not order modification or charging customers.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools remove durable storefront/catalog/discount resources.","reasoning":"They can cause severe commerce and sales disruption.","risk_type":"data_deletion","severity":"high","title":"Bulk/singly deletes products, categories, coupons and promotions","triggering_tools_or_skills":["bulk_delete_products","delete_product","delete_category","delete_coupon","delete_promotion"]},{"evidence":"These tools alter discounts and product pricing that determine customer charges.","reasoning":"They materially change financial/commercial terms, even without order capture.","risk_type":"financial_transaction","severity":"high","title":"Creates/updates coupons, promotions, stock and prices","triggering_tools_or_skills":["create_coupon","create_promotion","update_coupon","update_promotion","update_stock_and_price"]},{"evidence":"These tools change the live store catalogue.","reasoning":"They materially alter customer-facing commerce data.","risk_type":"data_modification","severity":"medium","title":"Creates/updates products, categories and visibility","triggering_tools_or_skills":["create_product","update_product","assign_categories","update_visibility"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; store products, customers, orders, discounts and shipping/payment configuration follow Nuvemshop permissions.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9393dd2f-38ff-4bce-bdd1-9536cce48202.json","what_it_proves":"Candidate PR #125 record identity (name \"Nuvemshop\", publisher, type web_connector) and 28 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9393dd2f-38ff-4bce-bdd1-9536cce48202: complete tool_names inventory (28 tools), remote streamable-http endpoint https://admin-mcp.nuvemshop.com.br/, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"Nuvemshop can bulk-delete storefront content and change live pricing/discounts.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:9393dd2f-38ff-4bce-bdd1-9536cce48202","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 28 tools. list_orders/customers are reads; no refund, fulfillment or direct payment capture tool is listed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":28,"tools_or_skills_total":28},"name":"Nuvemshop","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9393dd2f-38ff-4bce-bdd1-9536cce48202&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.nuvemshop.com.br/termos-de-uso/nuvemshop","provisional_risk":null,"publication_recommendation":"accept","publisher":"Nuvemshop  / Tiendanube","publisher_url":"https://www.nuvemshop.com.br/","remote_url":"https://admin-mcp.nuvemshop.com.br/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: They can cause severe commerce and sales disruption.","evidence":"Bulk/singly deletes products, categories, coupons and promotions: These tools remove durable storefront/catalog/discount resources.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Bulk/singly deletes products, categories, coupons and promotions","triggering_tools":["bulk_delete_products","delete_product","delete_category","delete_coupon","delete_promotion"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They materially change financial/commercial terms, even without order capture.","evidence":"Creates/updates coupons, promotions, stock and prices: These tools alter discounts and product pricing that determine customer charges.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Creates/updates coupons, promotions, stock and prices","triggering_tools":["create_coupon","create_promotion","update_coupon","update_promotion","update_stock_and_price"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter customer-facing commerce data.","evidence":"Creates/updates products, categories and visibility: These tools change the live store catalogue.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates/updates products, categories and visibility","triggering_tools":["create_product","update_product","assign_categories","update_visibility"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://atendimento.nuvemshop.com.br/","tags":["deletes_data","modifies_data","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"assign_categories","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter customer-facing commerce data."}},{"description":"","name":"bulk_delete_products","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause severe commerce and sales disruption."}},{"description":"","name":"create_category"},{"description":"","name":"create_coupon","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They materially change financial/commercial terms, even without order capture."}},{"description":"","name":"create_product","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter customer-facing commerce data."}},{"description":"","name":"create_promotion","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They materially change financial/commercial terms, even without order capture."}},{"description":"","name":"delete_category","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause severe commerce and sales disruption."}},{"description":"","name":"delete_coupon","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause severe commerce and sales disruption."}},{"description":"","name":"delete_product","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause severe commerce and sales disruption."}},{"description":"","name":"delete_promotion","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause severe commerce and sales disruption."}},{"description":"","name":"get_coupon_details"},{"description":"","name":"get_free_shipping_promotions"},{"description":"","name":"get_payment_methods"},{"description":"","name":"get_promotions"},{"description":"","name":"get_promotions_by_products"},{"description":"","name":"get_shipping_methods"},{"description":"","name":"list_categories"},{"description":"","name":"list_coupons"},{"description":"","name":"list_customers"},{"description":"","name":"list_orders"},{"description":"","name":"list_products"},{"description":"","name":"search_products"},{"description":"","name":"update_category_visibility"},{"description":"","name":"update_coupon","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They materially change financial/commercial terms, even without order capture."}},{"description":"","name":"update_product","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter customer-facing commerce data."}},{"description":"","name":"update_promotion","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They materially change financial/commercial terms, even without order capture."}},{"description":"","name":"update_stock_and_price","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They materially change financial/commercial terms, even without order capture."}},{"description":"","name":"update_visibility","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially alter customer-facing commerce data."}}],"tools_count":28,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9393dd2f-38ff-4bce-bdd1-9536cce48202","uuid":"6f9c23a8-ca62-5648-8c11-f90261c7b57f","verification_tier":"community","version":""},"query_key":"nuvemshop tiendanube nuvemshop","schema_version":1,"status":"match"}