{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-24","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Analyze your SaaSify business across AWS, Microsoft, and Google Cloud marketplaces. Inspect revenue, subscriptions, private offers, pricing, customers, and co-sell opportunities. Access is read-only and limited to your authorized seller accounts, tenants, and roles.","did":"d2939ed1-9ebf-4974-b9f6-065290d40e2b","documentation_url":"https://docs.saasify.ai/","editorial_description":{"extended_description":"Compare earned and settled revenue, identify pending activations or expiring renewals, and inspect deal terms, usage, publish errors, and audit trails. Sign in with your existing SaaSify account and select the seller account to query when you have several.","schema_version":1,"summary":"Analyze your SaaSify business across AWS, Microsoft, and Google Cloud marketplaces.\nInspect revenue, subscriptions, private offers, pricing, customers, and co-sell opportunities.\nAccess is read-only and limited to your authorized seller accounts, tenants, and roles."},"homepage_url":"","icon":"","id":"d2939ed1-9ebf-4974-b9f6-065290d40e2b","installs":0,"last_scanned":"","license":"","long_description":"Compare earned and settled revenue, identify pending activations or expiring renewals, and inspect deal terms, usage, publish errors, and audit trails. Sign in with your existing SaaSify account and select the seller account to query when you have several.","manual_assessment":"low","manual_review":{"all_findings":[{"evidence":"All 29 declared tools are get/list/context-selection operations and the Directory description explicitly says the connector never creates, changes or deletes data.","reasoning":"The connector reads commercially sensitive marketplace and customer information.","risk_type":"private_data_read","severity":"low","title":"Marketplace revenue, subscriptions, offers, customers and audit data are readable","triggering_tools_or_skills":["get_earned_revenue_report","get_subscription_details","list_customers","list_offers","list_cosell_opportunities","get_entity_audit_log"]},{"evidence":"The connector returns third-party/customer-authored marketplace records.","reasoning":"Returned business text can influence downstream model behavior and should be treated as untrusted.","risk_type":"prompt_injection_exposure","severity":"low","title":"Marketplace lead and audit text enters model context","triggering_tools_or_skills":["list_leads","get_entity_audit_log","get_deal_details"]},{"evidence":"The connector runs at https://mcp.saasify.ai/mcp without a pinned server implementation in the review packet.","reasoning":"The hosted implementation can change independently of this snapshot, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"SaaSify - Cloud Marketplaces GTM Platform is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth uses the user's SaaSify tenant/role entitlements, and users with multiple seller accounts select the account context to query.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"low","evidence_completeness":"partial","manual_overall_risk":"low","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/d2939ed1-9ebf-4974-b9f6-065290d40e2b.json","what_it_proves":"Candidate PR #125 record identity (name \"SaaSify - Cloud Marketplaces GTM Platform\", publisher, type web_connector) and 29 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/d2939ed1-9ebf-4974-b9f6-065290d40e2b: complete tool_names inventory (29 tools), remote streamable-http endpoint https://mcp.saasify.ai/mcp, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:14:44Z","url_or_path":"https://docs.saasify.ai/","what_it_proves":"Official documentation establishes SaaSify's cloud-marketplace integrations and product identity; it does not provide a connector action reference."}],"primary_reason":"SaaSify's complete declared inventory is read-only over marketplace revenue and operations data.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:d2939ed1-9ebf-4974-b9f6-065290d40e2b","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 29 tools. The official docs landing page confirmed product identity but not MCP actions, so the rating remains medium-confidence despite the consistent names and Directory statement.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":29,"tools_or_skills_total":29},"name":"SaaSify - Cloud Marketplaces GTM Platform","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=d2939ed1-9ebf-4974-b9f6-065290d40e2b&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://spektrasystems.com/privacy-policy/","provisional_risk":null,"publication_recommendation":"accept","publisher":"SaaSify by Spektra Systems","publisher_url":"https://saasify.ai/","remote_url":"https://mcp.saasify.ai/mcp","repository_url":"","risk":"low","risk_severity":"low","security_risks":[{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: The connector reads commercially sensitive marketplace and customer information.","evidence":"Marketplace revenue, subscriptions, offers, customers and audit data are readable: All 29 declared tools are get/list/context-selection operations and the Directory description explicitly says the connector never creates, changes or deletes data.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"low","title":"Marketplace revenue, subscriptions, offers, customers and audit data are readable","triggering_tools":["get_earned_revenue_report","get_subscription_details","list_customers","list_offers","list_cosell_opportunities","get_entity_audit_log"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://saasify.ai/contact-saasify/","tags":["network_access","oauth_required","reads_private_data","web_connector"],"tools":[{"description":"","name":"get_awaiting_activation"},{"description":"","name":"get_deal_details"},{"description":"","name":"get_earned_revenue_report"},{"description":"","name":"get_entity_audit_log"},{"description":"","name":"get_expiring_customers"},{"description":"","name":"get_invoice_revenue_by_month"},{"description":"","name":"get_marketplace_revenue_summary"},{"description":"","name":"get_my_profile"},{"description":"","name":"get_plan_pricing"},{"description":"","name":"get_revenue_by_cloud"},{"description":"","name":"get_subscription_details"},{"description":"","name":"get_subscription_usage"},{"description":"","name":"get_subscriptions_count_by_provider"},{"description":"","name":"get_subscriptions_count_by_provider_by_month"},{"description":"","name":"get_top_selling_plans"},{"description":"","name":"get_total_purchases"},{"description":"","name":"get_total_revenue"},{"description":"","name":"list_account_contexts"},{"description":"","name":"list_cosell_opportunities"},{"description":"","name":"list_customers"},{"description":"","name":"list_deals"},{"description":"","name":"list_enabled_cloud_providers"},{"description":"","name":"list_leads"},{"description":"","name":"list_offer_plans"},{"description":"","name":"list_offers"},{"description":"","name":"list_seller_accounts"},{"description":"","name":"list_subscription_statuses"},{"description":"","name":"list_subscriptions"},{"description":"","name":"switch_account_context"}],"tools_count":29,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/d2939ed1-9ebf-4974-b9f6-065290d40e2b","uuid":"b464ac28-22fd-5ff7-8b1a-6f8507d5fb02","verification_tier":"community","version":""},"query_key":"saasify by spektra systems saasify cloud marketplaces gtm platform","schema_version":1,"status":"match"}