{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Find and organize financial documents in Receiptor AI. Inspect receipts, bills, invoices, extraction results, vendors, and duplicate records. Update or delete documents, manage approvals, and export or send data through integrations.","did":"e39044ef-46d9-492d-9e98-4be46822ff75","documentation_url":"https://docs.receiptor.ai/","editorial_description":{"extended_description":"Maintain entities and merchants, resolve duplicates, configure document views or rules, and control connected email or mobile-scanner sources. Workspace context and structured data support tailored reports and expense analysis.","schema_version":1,"summary":"Find and organize financial documents in Receiptor AI.\nInspect receipts, bills, invoices, extraction results, vendors, and duplicate records.\nUpdate or delete documents, manage approvals, and export or send data through integrations."},"homepage_url":"","icon":"","id":"e39044ef-46d9-492d-9e98-4be46822ff75","installs":0,"last_scanned":"","license":"","long_description":"Maintain entities and merchants, resolve duplicates, configure document views or rules, and control connected email or mobile-scanner sources. Workspace context and structured data support tailored reports and expense analysis.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory exposes broad destructive finance/workspace actions.","reasoning":"These can erase records and integrations.","risk_type":"data_deletion","severity":"high","title":"Documents, entities, rules, views and source connections can be deleted","triggering_tools_or_skills":["documents_delete","entities_delete","rules_delete","views_delete","sources_email_delete","sources_mobile-scanners_delete"]},{"evidence":"The explicit send/export tools forward accounting data outward.","reasoning":"This communicates/transfers records as the workspace.","risk_type":"messaging_as_user","severity":"high","title":"Documents can be sent to connected integrations","triggering_tools_or_skills":["integrations_send","exports_create"]},{"evidence":"These tools administer data-source access and connections.","reasoning":"They are sensitive security/integration actions.","risk_type":"credential_admin","severity":"high","title":"Email/scanner sources and integrations can be enabled, disabled or unlinked","triggering_tools_or_skills":["sources_email_enable-monitoring","sources_email_disable-monitoring","integrations_unlink"]},{"evidence":"These control live document-ingestion automation.","reasoning":"Changes affect production finance workflows.","risk_type":"deployment_infrastructure","severity":"high","title":"Extraction rules and monitoring sources can be executed/configured","triggering_tools_or_skills":["rules_execute","sources_email_enable-monitoring"]},{"evidence":"Externally authored financial content is returned.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Invoices, emails and WhatsApp/uploaded documents enter model context","triggering_tools_or_skills":["documents_inspect","documents_search","activity_search"]},{"evidence":"The connector runs at https://mcp.receiptor.ai/ without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"Receiptor AI is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth scopes financial documents, sources, approvals and integrations to the selected workspace; exact downstream accounting-system permissions are not documented.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e39044ef-46d9-492d-9e98-4be46822ff75.json","what_it_proves":"Candidate PR #125 record identity (name \"Receiptor AI\", publisher, type web_connector) and 62 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e39044ef-46d9-492d-9e98-4be46822ff75: complete tool_names inventory (62 tools), remote streamable-http endpoint https://mcp.receiptor.ai/, auth_posture auth_required, directory tier community"}],"primary_reason":"Receiptor AI can delete financial records, send data to integrations and administer live sources/rules.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e39044ef-46d9-492d-9e98-4be46822ff75","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 62 tools.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":62,"tools_or_skills_total":62},"name":"Receiptor AI","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e39044ef-46d9-492d-9e98-4be46822ff75&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://receiptor.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Receiptor AI","publisher_url":"https://receiptor.ai/","remote_url":"https://mcp.receiptor.ai/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These can erase records and integrations.","evidence":"Documents, entities, rules, views and source connections can be deleted: The inventory exposes broad destructive finance/workspace actions.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Documents, entities, rules, views and source connections can be deleted","triggering_tools":["documents_delete","entities_delete","rules_delete","views_delete","sources_email_delete","sources_mobile-scanners_delete"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates/transfers records as the workspace.","evidence":"Documents can be sent to connected integrations: The explicit send/export tools forward accounting data outward.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Documents can be sent to connected integrations","triggering_tools":["integrations_send","exports_create"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are sensitive security/integration actions.","evidence":"Email/scanner sources and integrations can be enabled, disabled or unlinked: These tools administer data-source access and connections.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Email/scanner sources and integrations can be enabled, disabled or unlinked","triggering_tools":["sources_email_enable-monitoring","sources_email_disable-monitoring","integrations_unlink"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Changes affect production finance workflows.","evidence":"Extraction rules and monitoring sources can be executed/configured: These control live document-ingestion automation.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Extraction rules and monitoring sources can be executed/configured","triggering_tools":["rules_execute","sources_email_enable-monitoring"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"info@receiptor.ai","tags":["code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"activity_search"},{"description":"","name":"approvals_approve"},{"description":"","name":"approvals_get"},{"description":"","name":"approvals_reject"},{"description":"","name":"chartOfAccounts_listAccounts"},{"description":"","name":"context_readiness"},{"description":"","name":"currency_convert"},{"description":"","name":"documents_bulk-edit"},{"description":"","name":"documents_count"},{"description":"","name":"documents_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can erase records and integrations."}},{"description":"","name":"documents_get"},{"description":"","name":"documents_inspect"},{"description":"","name":"documents_list-duplicates"},{"description":"","name":"documents_repair-relationships"},{"description":"","name":"documents_resolve-duplicates"},{"description":"","name":"documents_scan-duplicates"},{"description":"","name":"documents_search"},{"description":"","name":"documents_unarchive"},{"description":"","name":"documents_update"},{"description":"","name":"entities_cleanup"},{"description":"","name":"entities_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can erase records and integrations."}},{"description":"","name":"entities_list"},{"description":"","name":"entities_merge"},{"description":"","name":"entities_upsert"},{"description":"","name":"exports_create","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates/transfers records as the workspace."}},{"description":"","name":"exports_get"},{"description":"","name":"exports_list"},{"description":"","name":"get_server_info"},{"description":"","name":"help-center_search"},{"description":"","name":"integrations_list"},{"description":"","name":"integrations_reconcile"},{"description":"","name":"integrations_send","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: This communicates/transfers records as the workspace."}},{"description":"","name":"integrations_unlink","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are sensitive security/integration actions."}},{"description":"","name":"memories_archive"},{"description":"","name":"memories_list"},{"description":"","name":"memories_save"},{"description":"","name":"merchants_list"},{"description":"","name":"merchants_merge"},{"description":"","name":"merchants_rename"},{"description":"","name":"onboarding_status"},{"description":"","name":"retroactiveExtractions_estimate"},{"description":"","name":"retroactiveExtractions_getEstimate"},{"description":"","name":"rules_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can erase records and integrations."}},{"description":"","name":"rules_disable"},{"description":"","name":"rules_execute","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Changes affect production finance workflows."}},{"description":"","name":"rules_list"},{"description":"","name":"sources_email_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can erase records and integrations."}},{"description":"","name":"sources_email_disable-monitoring","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are sensitive security/integration actions."}},{"description":"","name":"sources_email_enable-monitoring","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Changes affect production finance workflows."}},{"description":"","name":"sources_mobile-scanners_activate"},{"description":"","name":"sources_mobile-scanners_deactivate"},{"description":"","name":"sources_mobile-scanners_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can erase records and integrations."}},{"description":"","name":"sources_mobile-scanners_disable-ai"},{"description":"","name":"sources_mobile-scanners_enable-ai"},{"description":"","name":"views_create"},{"description":"","name":"views_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These can erase records and integrations."}},{"description":"","name":"views_list"},{"description":"","name":"workspace_context_patch"},{"description":"","name":"workspace_get_context"},{"description":"","name":"workspace_switch"},{"description":"","name":"workspaces_list"},{"description":"","name":"workspaces_list-members"}],"tools_count":62,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e39044ef-46d9-492d-9e98-4be46822ff75","uuid":"88988359-1fcf-51c3-80c5-0387e63ab387","verification_tier":"community","version":""},"query_key":"receiptor ai","schema_version":1,"status":"match"}