{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-09-01","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Work with business accounting records in ReInvestWealth. Create and categorize transactions, maintain receipts and review financial reports. Create and email invoices across the businesses connected to your account.","did":"c827ec7e-b2c7-41b2-a8cb-4e22475b59fb","documentation_url":"https://www.reinvestwealth.com/helpdesk","editorial_description":{"extended_description":"Tools cover accounts, tags, transaction audit history, sales-tax details, profit-and-loss reports and automation rules. Transactions can be edited, deleted or restored, and receipts can be retrieved or updated. Invoice tools include customer and item lookup, status changes and sending by email.","schema_version":1,"summary":"Work with business accounting records in ReInvestWealth.\nCreate and categorize transactions, maintain receipts and review financial reports.\nCreate and email invoices across the businesses connected to your account."},"homepage_url":"","icon":"","id":"c827ec7e-b2c7-41b2-a8cb-4e22475b59fb","installs":0,"last_scanned":"","license":"","long_description":"Tools cover accounts, tags, transaction audit history, sales-tax details, profit-and-loss reports and automation rules. Transactions can be edited, deleted or restored, and receipts can be retrieved or updated. Invoice tools include customer and item lookup, status changes and sending by email.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The full Directory inventory explicitly declares three deletion tools and a transaction restore tool.","reasoning":"Removing accounting accounts, rules or transactions is destructive business-data action.","risk_type":"data_deletion","severity":"high","title":"Accounts, automation rules and transactions can be deleted","triggering_tools_or_skills":["riw_accounts_delete","riw_automation_delete_rule","riw_transactions_delete"]},{"evidence":"The declared tool name explicitly sends an invoice email; the listing also says invoices and drafted client emails can be auto-sent through connected Gmail or Outlook.","reasoning":"Sending financial communications externally as the user is High impact.","risk_type":"messaging_as_user","severity":"high","title":"Invoices can be emailed","triggering_tools_or_skills":["riw_invoices_send_email"]},{"evidence":"Multiple declared tools create or edit financial records.","reasoning":"These actions materially modify bookkeeping data.","risk_type":"data_modification","severity":"medium","title":"Accounting transactions, receipts, invoices and tax state can be changed","triggering_tools_or_skills":["riw_transactions_create","riw_transactions_edit","riw_receipts_edit","riw_invoices_create","riw_transactions_set_sales_tax"]},{"evidence":"The connector runs at https://api.reinvestwealth.com/mcp and no pinned server implementation was available in the review packet.","reasoning":"The hosted implementation and action semantics can change independently of this catalog snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"ReInvestWealth is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required for accounting businesses and connected mail/bank data; exact scopes are not published in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/c827ec7e-b2c7-41b2-a8cb-4e22475b59fb.json","what_it_proves":"Candidate PR #125 record identity (name \"ReInvestWealth\", publisher, type web_connector) and 49 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/c827ec7e-b2c7-41b2-a8cb-4e22475b59fb: complete tool_names inventory (49 tools), remote streamable-http endpoint https://api.reinvestwealth.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"ReInvestWealth can delete accounting records and send invoices by email.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:c827ec7e-b2c7-41b2-a8cb-4e22475b59fb","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 49 tools. High actions are explicit from names and listing text; tool schemas, recipient controls and confirmation behavior are not available.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":49,"tools_or_skills_total":49},"name":"ReInvestWealth","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=c827ec7e-b2c7-41b2-a8cb-4e22475b59fb&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.reinvestwealth.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"ReInvestWealth inc","publisher_url":"https://www.reinvestwealth.com/","remote_url":"https://api.reinvestwealth.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: Removing accounting accounts, rules or transactions is destructive business-data action.","evidence":"Accounts, automation rules and transactions can be deleted: The full Directory inventory explicitly declares three deletion tools and a transaction restore tool.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Accounts, automation rules and transactions can be deleted","triggering_tools":["riw_accounts_delete","riw_automation_delete_rule","riw_transactions_delete"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Sending financial communications externally as the user is High impact.","evidence":"Invoices can be emailed: The declared tool name explicitly sends an invoice email; the listing also says invoices and drafted client emails can be auto-sent through connected Gmail or Outlook.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Invoices can be emailed","triggering_tools":["riw_invoices_send_email"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially modify bookkeeping data.","evidence":"Accounting transactions, receipts, invoices and tax state can be changed: Multiple declared tools create or edit financial records.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Accounting transactions, receipts, invoices and tax state can be changed","triggering_tools":["riw_transactions_create","riw_transactions_edit","riw_receipts_edit","riw_invoices_create","riw_transactions_set_sales_tax"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@reinvestwealth.com","tags":["deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","web_connector"],"tools":[{"description":"","name":"riw_accounts_create"},{"description":"","name":"riw_accounts_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing accounting accounts, rules or transactions is destructive business-data action."}},{"description":"","name":"riw_accounts_list"},{"description":"","name":"riw_aibookkeeper_status_get"},{"description":"","name":"riw_aibookkeeper_update_context"},{"description":"","name":"riw_automation_create_rule"},{"description":"","name":"riw_automation_delete_rule","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing accounting accounts, rules or transactions is destructive business-data action."}},{"description":"","name":"riw_automation_list_rules"},{"description":"","name":"riw_automation_preview_rule_matches"},{"description":"","name":"riw_automation_statistics"},{"description":"","name":"riw_bank_connections_list"},{"description":"","name":"riw_billing_subscription_status"},{"description":"","name":"riw_companies_get"},{"description":"","name":"riw_companies_list"},{"description":"","name":"riw_dashboard_get_summary"},{"description":"","name":"riw_fx_rate_lookup"},{"description":"","name":"riw_gifi_lookup"},{"description":"","name":"riw_invoice_customers_list"},{"description":"","name":"riw_invoice_items_list"},{"description":"","name":"riw_invoices_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially modify bookkeeping data."}},{"description":"","name":"riw_invoices_get"},{"description":"","name":"riw_invoices_list"},{"description":"","name":"riw_invoices_send_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Sending financial communications externally as the user is High impact."}},{"description":"","name":"riw_invoices_set_status"},{"description":"","name":"riw_me_get_profile"},{"description":"","name":"riw_members_list"},{"description":"","name":"riw_onboarding_get_status"},{"description":"","name":"riw_receipts_edit","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially modify bookkeeping data."}},{"description":"","name":"riw_receipts_get"},{"description":"","name":"riw_receipts_get_upload_address"},{"description":"","name":"riw_receipts_list"},{"description":"","name":"riw_reference_categories"},{"description":"","name":"riw_reports_profit_and_loss"},{"description":"","name":"riw_reports_taxes"},{"description":"","name":"riw_sales_tax_get_registration"},{"description":"","name":"riw_sales_tax_get_return_details"},{"description":"","name":"riw_sales_tax_list_returns"},{"description":"","name":"riw_tags_create"},{"description":"","name":"riw_tags_edit"},{"description":"","name":"riw_tags_list"},{"description":"","name":"riw_transactions_audit_log"},{"description":"","name":"riw_transactions_create","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially modify bookkeeping data."}},{"description":"","name":"riw_transactions_delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: Removing accounting accounts, rules or transactions is destructive business-data action."}},{"description":"","name":"riw_transactions_edit","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially modify bookkeeping data."}},{"description":"","name":"riw_transactions_get"},{"description":"","name":"riw_transactions_list"},{"description":"","name":"riw_transactions_restore"},{"description":"","name":"riw_transactions_search"},{"description":"","name":"riw_transactions_set_sales_tax","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These actions materially modify bookkeeping data."}}],"tools_count":49,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/c827ec7e-b2c7-41b2-a8cb-4e22475b59fb","uuid":"786ec8d0-77cd-531a-a851-b6238c0dd7e6","verification_tier":"community","version":""},"query_key":"reinvestwealth inc reinvestwealth","schema_version":1,"status":"match"}