{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"high","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"ec150023cc282aea82983bca5a2f8353a4ac536d7270ebb9dc3e9957723ecb24","risk":"high"},"proposal_file":"claude-tail-proposals.json","rationale":"Low-confidence entry; High is confirmed. The live directory now lists 42 tools, including update_campaign_budget, create_search_campaign, enable_campaign and pause_campaign. The stored inventory of 39 is stale. The docs say 'Increase the budget on Campaign D by 20%' immediately adjusts the daily budget and that campaigns are created live. The README says GTM workspaces are published on confirm. Changing live ad budgets is financially consequential => High, so the spends_money card is right. Presentation fixes: runs_code mislabels the paidsync_exec dispatcher. The High modifies_data 'Connects and switches many advertising accounts' covers OAuth linking and active-account selection, which is not a High operation. The High deletes_data covers only PaidSync's own saved workflow definitions (Medium at most). A High card for publishing GTM tags to production sites is missing.","review_key":"claudesec:9f9cc23d-337e-4547-b740-9cb90c5d3e60","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community","https://paidsync.ai/docs","https://github.com/PaidSync/paidsync-mcp/blob/40c28fb031085a144308fb060cf126cc50835821/README.md","https://mcp.paidsync.ai/.well-known/oauth-protected-resource/mcp"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"PaidSync connects paid-media, analytics, and tracking accounts to Claude. Audit campaigns, compare performance, research keywords, and prepare advertising changes. Every write requires draft review and confirmation; billing remains with each ad platform.","did":"9f9cc23d-337e-4547-b740-9cb90c5d3e60","documentation_url":"https://paidsync.ai/docs","editorial_description":{"extended_description":"Work across connected services such as Google Ads, Meta, TikTok, LinkedIn, Microsoft, Pinterest, Reddit, Snapchat, GA4, and Tag Manager. Campaign-setting changes do not move money or process payments. Saved workflows support repeatable account analysis.","schema_version":1,"summary":"PaidSync connects paid-media, analytics, and tracking accounts to Claude.\nAudit campaigns, compare performance, research keywords, and prepare advertising changes.\nEvery write requires draft review and confirmation; billing remains with each ad platform."},"homepage_url":"","icon":"https://paidsync.ai/icon-512.png","id":"9f9cc23d-337e-4547-b740-9cb90c5d3e60","installs":0,"last_scanned":"","license":"","long_description":"Work across connected services such as Google Ads, Meta, TikTok, LinkedIn, Microsoft, Pinterest, Reddit, Snapchat, GA4, and Tag Manager. Campaign-setting changes do not move money or process payments. Saved workflows support repeatable account analysis.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"Generic execution tools resolve actions at runtime.","reasoning":"The complete financial/destructive action surface is hidden.","risk_type":"generic_gateway","severity":"high","title":"Executes opaque paid-media actions/workflows","triggering_tools_or_skills":["paidsync_exec","paidsync_workflows_run"]},{"evidence":"The description explicitly says the connector can apply PPC changes.","reasoning":"Campaign mutation can spend or redirect advertising budget.","risk_type":"financial_transaction","severity":"high","title":"Applies changes to paid-media campaigns","triggering_tools_or_skills":["paidsync_exec"]},{"evidence":"These tools create persistent account integrations and change active privileged context.","reasoning":"They administer advertising credentials/access.","risk_type":"credential_admin","severity":"high","title":"Connects and switches many advertising accounts","triggering_tools_or_skills":["connect_google_ads","connect_facebook_ads","connect_gtm","set_active_account"]},{"evidence":"The explicit tool removes automation definitions.","reasoning":"It can destroy durable operational configuration.","risk_type":"data_deletion","severity":"high","title":"Deletes saved workflows","triggering_tools_or_skills":["paidsync_workflows_delete"]},{"evidence":"The execution dispatcher may issue live queries or mutations.","reasoning":"Generic execution is High.","risk_type":"query_execution","severity":"high","title":"Runs generic paid-media operations","triggering_tools_or_skills":["paidsync_exec"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication links many ad/analytics accounts with persistent credentials.","blocked_missing_evidence":null,"confidence":"low","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9f9cc23d-337e-4547-b740-9cb90c5d3e60.json","what_it_proves":"Candidate PR #125 record identity (name \"PaidSync.ai\", publisher, type web_connector) and 39 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9f9cc23d-337e-4547-b740-9cb90c5d3e60: complete tool_names inventory (39 tools), remote streamable-http endpoint https://mcp.paidsync.ai/mcp, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"PaidSync exposes dynamic paid-ad execution, credential connections and workflow deletion.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:9f9cc23d-337e-4547-b740-9cb90c5d3e60","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 39 tools; exhaustive paidsync_exec/action schemas are required.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":39,"tools_or_skills_total":39},"name":"PaidSync.ai","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9f9cc23d-337e-4547-b740-9cb90c5d3e60&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://paidsync.ai/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"PaidSync.ai","publisher_url":"https://paidsync.ai/","remote_url":"https://mcp.paidsync.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"Changes advertising budgets and bids and creates or enables live campaigns across connected ad accounts.","evidence":"Actions: update_campaign_budget, create_search_campaign, enable_campaign, paidsync_exec. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — id 9f9cc23d tool_names incl. update_campaign_budget, create_search_campaign, enable_campaign; https://paidsync.ai/docs — Example Commands: 'Increase the budget on Campaign D by 20% - Immediately adjusts the daily budget'; 'Creates a live Google Ads Search campaign'","risk_type":"spends_money","severity":"high","title":"Changes live advertising spend"},{"description":"Publishes Google Tag Manager workspace changes after confirmation, changing the tags that run on production websites.","evidence":"Actions: paidsync_exec. https://github.com/PaidSync/paidsync-mcp/blob/40c28fb031085a144308fb060cf126cc50835821/README.md — platform table: 'Google Tag Manager | 39 | Reads and changes tags... publishes only when you confirm'","risk_type":"code_deployment","severity":"high","title":"Publishes tags to live websites"},{"description":"Edits campaigns, keywords and ads, manages saved PaidSync workflows, and links or selects connected advertising accounts.","evidence":"Actions: pause_campaign, add_keywords, add_negative_keywords, create_responsive_search_ad. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — tool_names\nActions: paidsync_workflows_delete, paidsync_workflows_save, connect_platform, set_active_account. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — tool_names","risk_type":"modifies_data","severity":"medium","title":"Changes campaign and workflow settings"},{"description":"Retrieves private campaign performance, analytics, Search Console and Merchant Center information.","evidence":"Actions: get_campaign_performance, run_gaql_query, paidsync_read, run_account_audit. https://paidsync.ai/docs — Google Ads Tools: Analytics & Reporting","risk_type":"reads_private_data","severity":"medium","title":"Reads advertising and analytics data"},{"description":"Deletes saved workflow definitions within PaidSync.","evidence":"Actions: paidsync_workflows_delete, paidsync_workflows_save, connect_platform, set_active_account. https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community — tool_names","risk_type":"deletes_data","severity":"medium","title":"Deletes saved PaidSync workflows"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@paidsync.ai","tags":["spends_money","code_deployment","modifies_data","reads_private_data","deletes_data"],"tools":[{"description":"","name":"clear_active_account"},{"description":"","name":"connect_facebook_ads","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They administer advertising credentials/access."}},{"description":"","name":"connect_ga4"},{"description":"","name":"connect_google_ads","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They administer advertising credentials/access."}},{"description":"","name":"connect_google_search_console"},{"description":"","name":"connect_gtm","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They administer advertising credentials/access."}},{"description":"","name":"connect_linkedin_ads"},{"description":"","name":"connect_merchant_center"},{"description":"","name":"connect_microsoft_ads"},{"description":"","name":"connect_openai_ads"},{"description":"","name":"connect_pinterest_ads"},{"description":"","name":"connect_reddit_ads"},{"description":"","name":"connect_snapchat_ads"},{"description":"","name":"connect_tiktok_ads"},{"description":"","name":"get_account_summary"},{"description":"","name":"get_campaign_performance"},{"description":"","name":"get_keyword_performance"},{"description":"","name":"get_search_terms_report"},{"description":"","name":"get_wasted_spend_report"},{"description":"","name":"paidsync_context"},{"description":"","name":"paidsync_exec","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Campaign mutation can spend or redirect advertising budget."}},{"description":"","name":"paidsync_recent_runs"},{"description":"","name":"paidsync_tool_detail"},{"description":"","name":"paidsync_workflows_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: It can destroy durable operational configuration."}},{"description":"","name":"paidsync_workflows_describe"},{"description":"","name":"paidsync_workflows_list"},{"description":"","name":"paidsync_workflows_run","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The complete financial/destructive action surface is hidden.; Generic execution is High."}},{"description":"","name":"paidsync_workflows_save"},{"description":"","name":"run_account_audit"},{"description":"","name":"set_active_account","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They administer advertising credentials/access."}},{"description":"","name":"set_active_merchant_account"},{"description":"","name":"set_active_microsoft_account"},{"description":"","name":"set_active_openai_account"},{"description":"","name":"set_active_pinterest_account"},{"description":"","name":"set_active_reddit_account"},{"description":"","name":"set_active_snapchat_account"},{"description":"","name":"set_active_tiktok_advertiser"},{"description":"","name":"set_fb_ad_account"},{"description":"","name":"set_linkedin_ad_account"}],"tools_count":39,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9f9cc23d-337e-4547-b740-9cb90c5d3e60","uuid":"357b7adb-aa73-55fc-a188-8309d7f1d56a","verification_tier":"community","version":""},"query_key":"paidsync ai","schema_version":1,"status":"match"}