{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-10","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"PageFly builds and edits pages for one authorized Shopify store. Create unpublished pages, revise sections, preview the live theme, and publish after merchant approval. Customer, order, and payment data are not accessed.","did":"f50eace2-56da-445e-a9cd-e7ac81e9b5ea","documentation_url":"https://help.pagefly.io/integrations/ai-assistant-connector","editorial_description":{"extended_description":"Use store media or templates and inspect page-health, conversion, or A/B-test findings. Tools also unpublish pages; deleting a page moves it to PageFly's trash.","schema_version":1,"summary":"PageFly builds and edits pages for one authorized Shopify store.\nCreate unpublished pages, revise sections, preview the live theme, and publish after merchant approval.\nCustomer, order, and payment data are not accessed."},"homepage_url":"","icon":"","id":"f50eace2-56da-445e-a9cd-e7ac81e9b5ea","installs":0,"last_scanned":"","license":"","long_description":"Use store media or templates and inspect page-health, conversion, or A/B-test findings. Tools also unpublish pages; deleting a page moves it to PageFly's trash.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector explicitly publishes and unpublishes PageFly pages in the connected store.","reasoning":"These actions deploy or withdraw production storefront content and can affect customers and conversion.","risk_type":"deployment_infrastructure","severity":"high","title":"Shopify pages can be published or unpublished","triggering_tools_or_skills":["publish_page","unpublish_page","create_page"]},{"evidence":"The inventory exposes deletion of entire pages and individual PageFly sections.","reasoning":"Deletion can remove storefront experiences or authored content.","risk_type":"data_deletion","severity":"high","title":"Pages and sections can be deleted","triggering_tools_or_skills":["delete_page","delete_section"]},{"evidence":"Named tools author new sections, apply edits, update pages/sections, and reorder them.","reasoning":"These writes change production-bound storefront content.","risk_type":"data_modification","severity":"medium","title":"Page structure and content can be created or edited","triggering_tools_or_skills":["add_section","apply_section_edit","update_page","update_section","move_section"]},{"evidence":"The connector retrieves uploaded store media, PageFly templates, and help content.","reasoning":"Store filenames/content and remote templates are untrusted model input.","risk_type":"prompt_injection_exposure","severity":"low","title":"Store media and templates enter context","triggering_tools_or_skills":["list_shop_media","search_templates","search_help"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants PageFly access to connected Shopify store pages and media; exact store roles are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f50eace2-56da-445e-a9cd-e7ac81e9b5ea.json","what_it_proves":"Candidate PR #125 record identity (name \"PageFly\", publisher, type web_connector) and 23 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f50eace2-56da-445e-a9cd-e7ac81e9b5ea: complete tool_names inventory (23 tools), remote streamable-http endpoint https://apps.pagefly.io/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"PageFly can publish, unpublish, delete, and rewrite Shopify storefront pages.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f50eace2-56da-445e-a9cd-e7ac81e9b5ea","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 23 tools; publication confirmation and rollback behavior require runtime verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":23,"tools_or_skills_total":23},"name":"PageFly","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f50eace2-56da-445e-a9cd-e7ac81e9b5ea&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://pagefly.io/pages/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"PageFly","publisher_url":"https://pagefly.io/","remote_url":"https://apps.pagefly.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions deploy or withdraw production storefront content and can affect customers and conversion.","evidence":"Shopify pages can be published or unpublished: The connector explicitly publishes and unpublishes PageFly pages in the connected store.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Shopify pages can be published or unpublished","triggering_tools":["publish_page","unpublish_page","create_page"]},{"description":"This connector can permanently remove data or resources. Review findings: Deletion can remove storefront experiences or authored content.","evidence":"Pages and sections can be deleted: The inventory exposes deletion of entire pages and individual PageFly sections.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Pages and sections can be deleted","triggering_tools":["delete_page","delete_section"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change production-bound storefront content.","evidence":"Page structure and content can be created or edited: Named tools author new sections, apply edits, update pages/sections, and reorder them.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Page structure and content can be created or edited","triggering_tools":["add_section","apply_section_edit","update_page","update_section","move_section"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"happytohelp@pagefly.io","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","web_connector"],"tools":[{"description":"","name":"add_section","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change production-bound storefront content."}},{"description":"","name":"apply_section_edit","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change production-bound storefront content."}},{"description":"","name":"create_page","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions deploy or withdraw production storefront content and can affect customers and conversion."}},{"description":"","name":"create_upgrade_link"},{"description":"","name":"delete_page","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can remove storefront experiences or authored content."}},{"description":"","name":"delete_section","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Deletion can remove storefront experiences or authored content."}},{"description":"","name":"get_ab_test_results"},{"description":"","name":"get_cro_findings"},{"description":"","name":"get_page"},{"description":"","name":"get_page_authoring_guide"},{"description":"","name":"get_page_health"},{"description":"","name":"get_plan_status"},{"description":"","name":"get_section"},{"description":"","name":"list_pages"},{"description":"","name":"list_shop_media"},{"description":"","name":"move_section","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change production-bound storefront content."}},{"description":"","name":"preview_page"},{"description":"","name":"publish_page","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions deploy or withdraw production storefront content and can affect customers and conversion."}},{"description":"","name":"search_help"},{"description":"","name":"search_templates"},{"description":"","name":"unpublish_page","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: These actions deploy or withdraw production storefront content and can affect customers and conversion."}},{"description":"","name":"update_page","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change production-bound storefront content."}},{"description":"","name":"update_section","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These writes change production-bound storefront content."}}],"tools_count":23,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f50eace2-56da-445e-a9cd-e7ac81e9b5ea","uuid":"9b875e1d-ccb2-5305-a4c9-3bacf8cc33fd","verification_tier":"community","version":""},"query_key":"pagefly pagefly","schema_version":1,"status":"match"}