{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Offri creates interactive business proposals from reusable content and pricing. Generate or edit proposals, manage contacts and components, and send proposals to clients. Connection permissions can be limited by module, including read-only access.","did":"f6fd91a6-e574-4a77-b1c2-0dcb96a6497f","documentation_url":"https://api.offri.app/docs/","editorial_description":{"extended_description":"Inspect templates, retrieve proposal PDFs, expose or hide proposals, and maintain categories, tags, or units. Tools can also delete proposals, contacts, clients, and components.","schema_version":1,"summary":"Offri creates interactive business proposals from reusable content and pricing.\nGenerate or edit proposals, manage contacts and components, and send proposals to clients.\nConnection permissions can be limited by module, including read-only access."},"homepage_url":"","icon":"https://offri.app/img/logos/logo-color.svg","id":"f6fd91a6-e574-4a77-b1c2-0dcb96a6497f","installs":0,"last_scanned":"","license":"","long_description":"Inspect templates, retrieve proposal PDFs, expose or hide proposals, and maintain categories, tags, or units. Tools can also delete proposals, contacts, clients, and components.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector explicitly sends interactive proposals for client review and signature.","reasoning":"This communicates pricing and commercial terms externally as the authenticated business.","risk_type":"messaging_as_user","severity":"high","title":"Proposals can be sent to clients","triggering_tools_or_skills":["sendProposal"]},{"evidence":"The inventory exposes deletion across proposals, customer records, reusable content/pricing components, categories, tags, and units.","reasoning":"Destructive changes can remove deal records and reusable commercial content.","risk_type":"data_deletion","severity":"high","title":"Proposals, clients, contacts, pricing components, and taxonomy can be deleted","triggering_tools_or_skills":["deleteProposal","deleteClient","deleteContactPerson","deleteComponent","deleteCategory","deleteTag","deleteUnit"]},{"evidence":"exposeProposal makes an interactive proposal available for online review/signature, while hideProposal withdraws it.","reasoning":"These tools publish or unpublish client-facing commercial content.","risk_type":"deployment_infrastructure","severity":"high","title":"Proposals can be exposed or hidden online","triggering_tools_or_skills":["exposeProposal","hideProposal","getProposalPdfUrl"]},{"evidence":"The connector creates AI-drafted proposals and edits clients, contacts, content blocks, pricing units, and metadata.","reasoning":"These writes change binding-adjacent commercial drafts and customer records.","risk_type":"data_modification","severity":"medium","title":"Proposals and customer/pricing data can be created or updated","triggering_tools_or_skills":["createProposal","generateProposal","updateProposal","createClient","updateClient","createComponent"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants control over Offri clients, contacts, proposals, pricing components, templates, and visibility; exact roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f6fd91a6-e574-4a77-b1c2-0dcb96a6497f.json","what_it_proves":"Candidate PR #125 record identity (name \"Offri\", publisher, type web_connector) and 40 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f6fd91a6-e574-4a77-b1c2-0dcb96a6497f: complete tool_names inventory (40 tools), remote streamable-http endpoint https://mcp.offri.app/, auth_posture auth_required, declared sensitive data types, directory tier community"}],"primary_reason":"Offri can send and publish proposals and delete broad customer and commercial records.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f6fd91a6-e574-4a77-b1c2-0dcb96a6497f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 40 tools; signature and acceptance are client-side, not a connector action.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":40,"tools_or_skills_total":40},"name":"Offri","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f6fd91a6-e574-4a77-b1c2-0dcb96a6497f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.offri.nl/support/veiligheid/privacyverklaring/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Offri","publisher_url":"https://offri.nl/","remote_url":"https://mcp.offri.app/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates pricing and commercial terms externally as the authenticated business.","evidence":"Proposals can be sent to clients: The connector explicitly sends interactive proposals for client review and signature.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Proposals can be sent to clients","triggering_tools":["sendProposal"]},{"description":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content.","evidence":"Proposals, clients, contacts, pricing components, and taxonomy can be deleted: The inventory exposes deletion across proposals, customer records, reusable content/pricing components, categories, tags, and units.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Proposals, clients, contacts, pricing components, and taxonomy can be deleted","triggering_tools":["deleteProposal","deleteClient","deleteContactPerson","deleteComponent","deleteCategory","deleteTag","deleteUnit"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These tools publish or unpublish client-facing commercial content.","evidence":"Proposals can be exposed or hidden online: exposeProposal makes an interactive proposal available for online review/signature, while hideProposal withdraws it.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Proposals can be exposed or hidden online","triggering_tools":["exposeProposal","hideProposal","getProposalPdfUrl"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change binding-adjacent commercial drafts and customer records.","evidence":"Proposals and customer/pricing data can be created or updated: The connector creates AI-drafted proposals and edits clients, contacts, content blocks, pricing units, and metadata.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Proposals and customer/pricing data can be created or updated","triggering_tools":["createProposal","generateProposal","updateProposal","createClient","updateClient","createComponent"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.offri.nl/support/","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"createCategory"},{"description":"","name":"createClient","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change binding-adjacent commercial drafts and customer records."}},{"description":"","name":"createComponent","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change binding-adjacent commercial drafts and customer records."}},{"description":"","name":"createContactPerson"},{"description":"","name":"createProposal","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change binding-adjacent commercial drafts and customer records."}},{"description":"","name":"createTag"},{"description":"","name":"createUnit"},{"description":"","name":"deleteCategory","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content."}},{"description":"","name":"deleteClient","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content."}},{"description":"","name":"deleteComponent","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content."}},{"description":"","name":"deleteContactPerson","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content."}},{"description":"","name":"deleteProposal","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content."}},{"description":"","name":"deleteTag","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content."}},{"description":"","name":"deleteUnit","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Destructive changes can remove deal records and reusable commercial content."}},{"description":"","name":"duplicateComponent"},{"description":"","name":"exposeProposal","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These tools publish or unpublish client-facing commercial content."}},{"description":"","name":"generateProposal","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change binding-adjacent commercial drafts and customer records."}},{"description":"","name":"getAllComponents"},{"description":"","name":"getCategories"},{"description":"","name":"getClient"},{"description":"","name":"getClients"},{"description":"","name":"getComponentDetail"},{"description":"","name":"getContactPersons"},{"description":"","name":"getProposal"},{"description":"","name":"getProposalPdfUrl","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These tools publish or unpublish client-facing commercial content."}},{"description":"","name":"getProposals"},{"description":"","name":"getTags"},{"description":"","name":"getTemplates"},{"description":"","name":"getUnits"},{"description":"","name":"getVatOptions"},{"description":"","name":"hideProposal","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These tools publish or unpublish client-facing commercial content."}},{"description":"","name":"offri_overview"},{"description":"","name":"sendProposal","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates pricing and commercial terms externally as the authenticated business."}},{"description":"","name":"updateCategory"},{"description":"","name":"updateClient","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change binding-adjacent commercial drafts and customer records."}},{"description":"","name":"updateComponent"},{"description":"","name":"updateContactPerson"},{"description":"","name":"updateProposal","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change binding-adjacent commercial drafts and customer records."}},{"description":"","name":"updateTag"},{"description":"","name":"updateUnit"}],"tools_count":40,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f6fd91a6-e574-4a77-b1c2-0dcb96a6497f","uuid":"80c434b7-0ac5-506a-ba88-8e9d632c4cc7","verification_tier":"community","version":""},"query_key":"offri offri","schema_version":1,"status":"match"}