{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-17","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Replo connects Claude to ecommerce projects, products, assets, and analytics. Use Replo Agent to build or update storefront experiences and inspect its progress. Manage products, custom domains, and recurring tasks through authenticated access.","did":"8df10fa4-e661-48c3-81ea-6f9e612d3198","documentation_url":"https://beta.docs.replo.app/","editorial_description":{"extended_description":"Tools retrieve orders, upload assets, verify domains, resolve agent interactions, and abort agent sessions. The workflow can use catalog and performance data to prepare pages or experiments.","schema_version":1,"summary":"Replo connects Claude to ecommerce projects, products, assets, and analytics.\nUse Replo Agent to build or update storefront experiences and inspect its progress.\nManage products, custom domains, and recurring tasks through authenticated access."},"homepage_url":"","icon":"https://www.replo.app/apple-icon.png","id":"8df10fa4-e661-48c3-81ea-6f9e612d3198","installs":0,"last_scanned":"","license":"","long_description":"Tools retrieve orders, upload assets, verify domains, resolve agent interactions, and abort agent sessions. The workflow can use catalog and performance data to prepare pages or experiments.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools change production storefront/domain configuration.","reasoning":"They can alter live ecommerce delivery.","risk_type":"deployment_infrastructure","severity":"high","title":"Connects/verifies custom domains and updates ecommerce sites","triggering_tools_or_skills":["connect_custom_domain","verify_custom_domain","update_site"]},{"evidence":"Domain attachment is privileged site ownership/routing administration.","reasoning":"It changes which domain serves the workspace site.","risk_type":"credential_admin","severity":"high","title":"Connects a custom domain","triggering_tools_or_skills":["connect_custom_domain"]},{"evidence":"The description says the agent can build/update storefronts and publish, while its runtime action schemas are not enumerated.","reasoning":"The wrapper can hide publishing, code/content changes or other consequential actions.","risk_type":"generic_gateway","severity":"high","title":"Runs an opaque Replo Agent session","triggering_tools_or_skills":["start_agent_session","send_agent_message","resolve_agent_interaction"]},{"evidence":"These tools persist ecommerce/work-management state.","reasoning":"They materially alter the workspace.","risk_type":"data_modification","severity":"medium","title":"Creates/updates products, projects and tasks","triggering_tools_or_skills":["create_product","update_product","create_project","create_task","update_task"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; Replo workspace/site/product/domain/agent permissions follow undocumented user roles.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/8df10fa4-e661-48c3-81ea-6f9e612d3198.json","what_it_proves":"Candidate PR #125 record identity (name \"Replo\", publisher, type web_connector) and 26 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/8df10fa4-e661-48c3-81ea-6f9e612d3198: complete tool_names inventory (26 tools), remote streamable-http endpoint https://api.replo.app/v1/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Replo controls live site/domain infrastructure and exposes an opaque storefront agent.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:8df10fa4-e661-48c3-81ea-6f9e612d3198","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 26 tools. The description promises publishing/scheduling but no fixed publish/schedule tool is listed; agent capabilities need an exhaustive action inventory.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"false"},"tools_or_skills_reviewed":26,"tools_or_skills_total":26},"name":"Replo","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=8df10fa4-e661-48c3-81ea-6f9e612d3198&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.replo.app/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Replo","publisher_url":"https://replo.app/","remote_url":"https://api.replo.app/v1/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They can alter live ecommerce delivery.","evidence":"Connects/verifies custom domains and updates ecommerce sites: These tools change production storefront/domain configuration.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Connects/verifies custom domains and updates ecommerce sites","triggering_tools":["connect_custom_domain","verify_custom_domain","update_site"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes which domain serves the workspace site.; They materially alter the workspace.","evidence":"Connects a custom domain: Domain attachment is privileged site ownership/routing administration. | Creates/updates products, projects and tasks: These tools persist ecommerce/work-management state.","manual_risk_type":"credential_admin,data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Can change connected resources","triggering_tools":["connect_custom_domain","create_product","update_product","create_project","create_task","update_task"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The wrapper can hide publishing, code/content changes or other consequential actions.","evidence":"Runs an opaque Replo Agent session: The description says the agent can build/update storefronts and publish, while its runtime action schemas are not enumerated.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Runs an opaque Replo Agent session","triggering_tools":["start_agent_session","send_agent_message","resolve_agent_interaction"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://support.replo.app/","tags":["accesses_messaging","code_deployment","modifies_data","network_access","oauth_required","runs_code","web_connector"],"tools":[{"description":"","name":"abort_agent_session"},{"description":"","name":"connect_custom_domain","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes which domain serves the workspace site.; They materially alter the workspace."}},{"description":"","name":"create_product","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes which domain serves the workspace site.; They materially alter the workspace."}},{"description":"","name":"create_project","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes which domain serves the workspace site.; They materially alter the workspace."}},{"description":"","name":"create_task","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes which domain serves the workspace site.; They materially alter the workspace."}},{"description":"","name":"delete_task"},{"description":"","name":"find_assets"},{"description":"","name":"find_orders"},{"description":"","name":"find_products"},{"description":"","name":"get_agent_session"},{"description":"","name":"get_custom_domain_status"},{"description":"","name":"get_order"},{"description":"","name":"get_product"},{"description":"","name":"get_task"},{"description":"","name":"list_projects"},{"description":"","name":"list_sites"},{"description":"","name":"list_tasks"},{"description":"","name":"query_replo_analytics"},{"description":"","name":"resolve_agent_interaction","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The wrapper can hide publishing, code/content changes or other consequential actions."}},{"description":"","name":"send_agent_message","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The wrapper can hide publishing, code/content changes or other consequential actions."}},{"description":"","name":"start_agent_session","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The wrapper can hide publishing, code/content changes or other consequential actions."}},{"description":"","name":"update_product","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes which domain serves the workspace site.; They materially alter the workspace."}},{"description":"","name":"update_site","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can alter live ecommerce delivery."}},{"description":"","name":"update_task","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It changes which domain serves the workspace site.; They materially alter the workspace."}},{"description":"","name":"upload_asset"},{"description":"","name":"verify_custom_domain","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They can alter live ecommerce delivery."}}],"tools_count":26,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/8df10fa4-e661-48c3-81ea-6f9e612d3198","uuid":"dd639a4c-4d6f-5876-9471-8c77fbc44477","verification_tier":"community","version":""},"query_key":"replo","schema_version":1,"status":"match"}