{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Pyplan connects Claude to planning and analytics applications in your tenant. Open permitted apps, read model results, and run simulations or other tools exposed by each app's author. Create or save application versions while respecting existing role, team, and department permissions.","did":"58cc1a7c-cfc3-410c-b5b4-ed9fbeb18ad9","documentation_url":"https://docs.pyplan.com/","editorial_description":{"extended_description":"Applications can provide tables, cubes, KPIs, financial views, forecasts, and what-if scenarios. Versioning preserves scenario work alongside a baseline, and domain guidance supplies context for the selected application area.","schema_version":1,"summary":"Pyplan connects Claude to planning and analytics applications in your tenant.\nOpen permitted apps, read model results, and run simulations or other tools exposed by each app's author.\nCreate or save application versions while respecting existing role, team, and department permissions."},"homepage_url":"","icon":"","id":"58cc1a7c-cfc3-410c-b5b4-ed9fbeb18ad9","installs":0,"last_scanned":"","license":"","long_description":"Applications can provide tables, cubes, KPIs, financial views, forecasts, and what-if scenarios. Versioning preserves scenario work alongside a baseline, and domain guidance supplies context for the selected application area.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The operation set is defined inside each Pyplan application and is not enumerated.","reasoning":"Hidden tools may contain High actions.","risk_type":"generic_gateway","severity":"high","title":"Calls app-defined tools","triggering_tools_or_skills":["call_tool","get_skill"]},{"evidence":"Tools persist planning application changes.","reasoning":"Meaningful workspace changes are Medium.","risk_type":"data_modification","severity":"medium","title":"Saves and versions applications","triggering_tools_or_skills":["save_application","create_app_version","save_as_new_app_version"]},{"evidence":"Remote hosted implementation is unpinned.","reasoning":"Runtime capability can drift.","risk_type":"provenance_uncertainty","severity":"low","title":"Hosted implementation is mutable","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth/account authorization required; exact scopes are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/58cc1a7c-cfc3-410c-b5b4-ed9fbeb18ad9.json","what_it_proves":"Candidate PR #125 record identity (name \"Pyplan\", publisher, type web_connector) and 9 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/58cc1a7c-cfc3-410c-b5b4-ed9fbeb18ad9: complete tool_names inventory (9 tools), remote streamable-http endpoint https://dev.pyplan.com/ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Pyplan invokes dynamically exposed app tools and saves/version-controls planning applications.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:58cc1a7c-cfc3-410c-b5b4-ed9fbeb18ad9","reviewed_at":"2026-10-10","reviewer_notes":"All declared tool names were reviewed; schemas were unavailable.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":9,"tools_or_skills_total":9},"name":"Pyplan","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=58cc1a7c-cfc3-410c-b5b4-ed9fbeb18ad9&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://docs.pyplan.com/user-guide/mcp-privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Pyplan","publisher_url":"https://pyplan.com/","remote_url":"https://dev.pyplan.com/ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Hidden tools may contain High actions.","evidence":"Calls app-defined tools: The operation set is defined inside each Pyplan application and is not enumerated.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Calls app-defined tools","triggering_tools":["call_tool","get_skill"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium.","evidence":"Saves and versions applications: Tools persist planning application changes.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Saves and versions applications","triggering_tools":["save_application","create_app_version","save_as_new_app_version"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://pyplan.com","tags":["modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"call_tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Hidden tools may contain High actions."}},{"description":"","name":"close_application"},{"description":"","name":"create_app_version","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium."}},{"description":"","name":"get_skill","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Hidden tools may contain High actions."}},{"description":"","name":"list_app_versions"},{"description":"","name":"list_applications"},{"description":"","name":"open_application"},{"description":"","name":"save_application","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium."}},{"description":"","name":"save_as_new_app_version","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: Meaningful workspace changes are Medium."}}],"tools_count":9,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/58cc1a7c-cfc3-410c-b5b4-ed9fbeb18ad9","uuid":"2fde6d42-0561-53ff-835f-56e44a027ba8","verification_tier":"community","version":""},"query_key":"pyplan pyplan","schema_version":1,"status":"match"}