{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Omneky connects Claude to brand reporting, product catalogs, and advertising campaigns. Inspect performance, manage product data, and launch ads across connected channels. It can change budgets and targeting, update statuses, or delete campaign entities.","did":"67889b48-2c7f-424c-9453-d85fe8dfda8a","documentation_url":"https://www.omneky.com/mcp","editorial_description":{"extended_description":"Launch options cover Meta, Google, LinkedIn, Reddit, and TikTok objectives. Inspect channel connections, minimum budgets, reach estimates, targeting options, and product information before acting.","schema_version":1,"summary":"Omneky connects Claude to brand reporting, product catalogs, and advertising campaigns.\nInspect performance, manage product data, and launch ads across connected channels.\nIt can change budgets and targeting, update statuses, or delete campaign entities."},"homepage_url":"","icon":"","id":"67889b48-2c7f-424c-9453-d85fe8dfda8a","installs":0,"last_scanned":"","license":"","long_description":"Launch options cover Meta, Google, LinkedIn, Reddit, and TikTok objectives. Inspect channel connections, minimum budgets, reach estimates, targeting options, and product information before acting.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory contains campaign-launch tools for Facebook, Google, LinkedIn, Reddit and TikTok.","reasoning":"Launching ads deploys externally visible production campaigns.","risk_type":"deployment_infrastructure","severity":"high","title":"Launches live ads across five advertising platforms","triggering_tools_or_skills":["launch_facebook_sales_ad","launch_google_performance_max_ad","launch_linkedin_conversions_ad","launch_reddit_traffic_ad","launch_tiktok_conversions_ad"]},{"evidence":"This tool controls channel campaign budget.","reasoning":"Advertising budgets authorize paid spend.","risk_type":"financial_transaction","severity":"high","title":"Sets live advertising budgets","triggering_tools_or_skills":["set_ad_budget"]},{"evidence":"Explicit delete tools remove live advertising assets.","reasoning":"These are irreversible high-impact business actions.","risk_type":"data_deletion","severity":"high","title":"Deletes campaigns, ad groups and ads","triggering_tools_or_skills":["delete_campaign","delete_ad_group","delete_ads"]},{"evidence":"The connector retrieves external product pages selected by URL.","reasoning":"Untrusted web content enters the model context.","risk_type":"arbitrary_network_access","severity":"low","title":"Scrapes products from caller-provided URLs","triggering_tools_or_skills":["scrape_product_from_url","identify_product_from_url"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; connected advertising accounts and launch/budget roles are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/67889b48-2c7f-424c-9453-d85fe8dfda8a.json","what_it_proves":"Candidate PR #125 record identity (name \"Omneky\", publisher, type web_connector) and 59 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/67889b48-2c7f-424c-9453-d85fe8dfda8a: complete tool_names inventory (59 tools), remote streamable-http endpoint https://mcp.omneky.com/mcp-claude, auth_posture auth_required, directory tier community"}],"primary_reason":"Omneky can launch paid live ads, set budgets and delete campaign assets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:67889b48-2c7f-424c-9453-d85fe8dfda8a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 59 tools. Launch and budget confirmation/RBAC must be verified before publication.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":59,"tools_or_skills_total":59},"name":"Omneky","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=67889b48-2c7f-424c-9453-d85fe8dfda8a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.omneky.com/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Omneky Inc","publisher_url":"https://www.omneky.com/","remote_url":"https://mcp.omneky.com/mcp-claude","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Launching ads deploys externally visible production campaigns.","evidence":"Launches live ads across five advertising platforms: The inventory contains campaign-launch tools for Facebook, Google, LinkedIn, Reddit and TikTok.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Launches live ads across five advertising platforms","triggering_tools":["launch_facebook_sales_ad","launch_google_performance_max_ad","launch_linkedin_conversions_ad","launch_reddit_traffic_ad","launch_tiktok_conversions_ad"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Advertising budgets authorize paid spend.","evidence":"Sets live advertising budgets: This tool controls channel campaign budget.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Sets live advertising budgets","triggering_tools":["set_ad_budget"]},{"description":"This connector can permanently remove data or resources. Review findings: These are irreversible high-impact business actions.","evidence":"Deletes campaigns, ad groups and ads: Explicit delete tools remove live advertising assets.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes campaigns, ad groups and ads","triggering_tools":["delete_campaign","delete_ad_group","delete_ads"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: Untrusted web content enters the model context.","evidence":"Scrapes products from caller-provided URLs: The connector retrieves external product pages selected by URL.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Scrapes products from caller-provided URLs","triggering_tools":["scrape_product_from_url","identify_product_from_url"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://www.omneky.com/support","tags":["accesses_messaging","code_deployment","deletes_data","forwards_data_to_third_party","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"ask_user"},{"description":"","name":"create_product"},{"description":"","name":"data_available"},{"description":"","name":"delete_ad_group","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are irreversible high-impact business actions."}},{"description":"","name":"delete_ads","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are irreversible high-impact business actions."}},{"description":"","name":"delete_campaign","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These are irreversible high-impact business actions."}},{"description":"","name":"fetch_product_details"},{"description":"","name":"finalize_scraped_product"},{"description":"","name":"get_ad_groups"},{"description":"","name":"get_ads"},{"description":"","name":"get_brand"},{"description":"","name":"get_brand_details"},{"description":"","name":"get_campaign_ad_group_names"},{"description":"","name":"get_campaigns"},{"description":"","name":"get_channel_budget"},{"description":"","name":"get_channel_connection_status"},{"description":"","name":"get_current_user"},{"description":"","name":"get_custom_properties"},{"description":"","name":"get_daily_metrics"},{"description":"","name":"get_dimension_summary"},{"description":"","name":"get_generation_status"},{"description":"","name":"get_recommendations"},{"description":"","name":"get_tiktok_location_ids"},{"description":"","name":"get_trending"},{"description":"","name":"google_country_search"},{"description":"","name":"health_check"},{"description":"","name":"identify_product_from_url"},{"description":"","name":"launch_facebook_awareness_ad"},{"description":"","name":"launch_facebook_leads_ad"},{"description":"","name":"launch_facebook_sales_ad","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Launching ads deploys externally visible production campaigns."}},{"description":"","name":"launch_facebook_traffic_ad"},{"description":"","name":"launch_facebook_video_views_ad"},{"description":"","name":"launch_google_demand_gen_ad"},{"description":"","name":"launch_google_performance_max_ad","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Launching ads deploys externally visible production campaigns."}},{"description":"","name":"launch_linkedin_brand_awareness_ad"},{"description":"","name":"launch_linkedin_conversions_ad","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Launching ads deploys externally visible production campaigns."}},{"description":"","name":"launch_linkedin_engagement_ad"},{"description":"","name":"launch_linkedin_website_visits_ad"},{"description":"","name":"launch_reddit_awareness_ad"},{"description":"","name":"launch_reddit_conversions_ad"},{"description":"","name":"launch_reddit_leads_ad"},{"description":"","name":"launch_reddit_traffic_ad","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Launching ads deploys externally visible production campaigns."}},{"description":"","name":"launch_reddit_video_views_ad"},{"description":"","name":"launch_tiktok_conversions_ad","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Launching ads deploys externally visible production campaigns."}},{"description":"","name":"launch_tiktok_leads_ad"},{"description":"","name":"launch_tiktok_traffic_ad"},{"description":"","name":"launch_tiktok_video_views_ad"},{"description":"","name":"list_brand_products"},{"description":"","name":"list_brands"},{"description":"","name":"minimum_budget_for_objective"},{"description":"","name":"reach_estimate"},{"description":"","name":"scrape_product_from_url"},{"description":"","name":"search_dimension_values"},{"description":"","name":"set_ad_budget","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Advertising budgets authorize paid spend."}},{"description":"","name":"set_ad_entity_status"},{"description":"","name":"targeting_search"},{"description":"","name":"update_ad_targeting"},{"description":"","name":"update_product_url"},{"description":"","name":"upsert_brand_product"}],"tools_count":59,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/67889b48-2c7f-424c-9453-d85fe8dfda8a","uuid":"dc6c250a-f822-5c1e-bf91-da27fc6b9e3a","verification_tier":"community","version":""},"query_key":"omneky inc omneky","schema_version":1,"status":"match"}