{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-18","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage Shopify subscriptions through Progus Subscriptions. Review analytics and contracts, change plans or billing schedules, and contact customers about failed payments. Actions are limited to the store you authorize, with confirmation for cancellation or deletion.","did":"0f7acac6-e149-4ee6-8816-6ee846b7c736","documentation_url":"https://progus.com/subscriptions-mcp/","editorial_description":{"extended_description":"Tools can pause, resume or cancel subscriptions, skip billing cycles, change quantities and send payment-update links. Bulk plan creation, updates and removal use your product catalog. The Progus Subscriptions Shopify app must be connected.","schema_version":1,"summary":"Manage Shopify subscriptions through Progus Subscriptions.\nReview analytics and contracts, change plans or billing schedules, and contact customers about failed payments.\nActions are limited to the store you authorize, with confirmation for cancellation or deletion."},"homepage_url":"","icon":"https://subscriptions.mcp.progus.com/icon.png","id":"0f7acac6-e149-4ee6-8816-6ee846b7c736","installs":0,"last_scanned":"","license":"","long_description":"Tools can pause, resume or cancel subscriptions, skip billing cycles, change quantities and send payment-update links. Bulk plan creation, updates and removal use your product catalog. The Progus Subscriptions Shopify app must be connected.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete declared inventory explicitly includes cancellation of subscription contracts and deletion of plans; the listing says irreversible cancel and delete actions request confirmation.","reasoning":"These actions can destroy meaningful customer subscription state.","risk_type":"data_deletion","severity":"high","title":"Cancels subscriptions and deletes subscription plans","triggering_tools_or_skills":["cancel_subscription","delete_plans"]},{"evidence":"The declared tool explicitly sends a payment-update email to a customer.","reasoning":"It transmits external content as the merchant.","risk_type":"messaging_as_user","severity":"high","title":"Emails payment-update links to customers","triggering_tools_or_skills":["send_payment_update_email"]},{"evidence":"The named tools create and update plans and alter ongoing subscription and billing-cycle state.","reasoning":"They persist meaningful commerce changes even when they do not directly charge money.","risk_type":"data_modification","severity":"medium","title":"Changes contracts, billing schedules and plans","triggering_tools_or_skills":["create_plans","pause_subscription","reschedule_billing_cycle","resume_subscription","skip_billing_cycle","update_plans","update_subscription_quantity"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication binds actions to the authorized Shopify store; exact Shopify scopes and confirmation enforcement are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/0f7acac6-e149-4ee6-8816-6ee846b7c736.json","what_it_proves":"Candidate PR #125 record identity (name \"Progus Subscriptions\", publisher, type web_connector) and 19 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/0f7acac6-e149-4ee6-8816-6ee846b7c736: complete tool_names inventory (19 tools), remote streamable-http endpoint https://subscriptions.mcp.progus.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Declared tools unambiguously cancel and delete subscription resources and send customer emails.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:0f7acac6-e149-4ee6-8816-6ee846b7c736","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 19 tool names. Runtime verification should confirm confirmation gates, Shopify scopes and whether schedule changes can cause immediate charges.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":19,"tools_or_skills_total":19},"name":"Progus Subscriptions","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=0f7acac6-e149-4ee6-8816-6ee846b7c736&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://progus.com/subscriptions-mcp-privacy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"Progus","publisher_url":"https://progus.com/","remote_url":"https://subscriptions.mcp.progus.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These actions can destroy meaningful customer subscription state.","evidence":"Cancels subscriptions and deletes subscription plans: The complete declared inventory explicitly includes cancellation of subscription contracts and deletion of plans; the listing says irreversible cancel and delete actions request confirmation.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Cancels subscriptions and deletes subscription plans","triggering_tools":["cancel_subscription","delete_plans"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It transmits external content as the merchant.","evidence":"Emails payment-update links to customers: The declared tool explicitly sends a payment-update email to a customer.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Emails payment-update links to customers","triggering_tools":["send_payment_update_email"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money.","evidence":"Changes contracts, billing schedules and plans: The named tools create and update plans and alter ongoing subscription and billing-cycle state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Changes contracts, billing schedules and plans","triggering_tools":["create_plans","pause_subscription","reschedule_billing_cycle","resume_subscription","skip_billing_cycle","update_plans","update_subscription_quantity"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@progus.com","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"cancel_subscription","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy meaningful customer subscription state."}},{"description":"","name":"create_plans","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money."}},{"description":"","name":"delete_plans","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These actions can destroy meaningful customer subscription state."}},{"description":"","name":"get_analytics"},{"description":"","name":"get_analytics_summary"},{"description":"","name":"get_subscriber"},{"description":"","name":"get_subscription"},{"description":"","name":"list_plans"},{"description":"","name":"list_subscribers"},{"description":"","name":"list_subscriptions"},{"description":"","name":"list_upcoming_orders"},{"description":"","name":"pause_subscription","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money."}},{"description":"","name":"reschedule_billing_cycle","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money."}},{"description":"","name":"resume_subscription","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money."}},{"description":"","name":"search_products"},{"description":"","name":"send_payment_update_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It transmits external content as the merchant."}},{"description":"","name":"skip_billing_cycle","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money."}},{"description":"","name":"update_plans","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money."}},{"description":"","name":"update_subscription_quantity","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist meaningful commerce changes even when they do not directly charge money."}}],"tools_count":19,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/0f7acac6-e149-4ee6-8816-6ee846b7c736","uuid":"82ff0494-eb8b-5d2f-a0eb-5e30af989f58","verification_tier":"community","version":""},"query_key":"progus subscriptions","schema_version":1,"status":"match"}