{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Sendd manages storefront and marketplace commerce from Claude. Create listings, organize catalogs, update orders, and inspect sales or inventory. Event tools can issue tickets, resend confirmations, export attendees, and refund purchases.","did":"69d5e1e1-9b88-4c97-afe8-5f39bbc4c964","documentation_url":"https://www.sendd.store/help","editorial_description":{"extended_description":"Supported listings include physical and digital products, subscriptions, rentals, events, menu items, and enquiry forms. Authenticated tools also manage coupons, categories, collections, store details, and listing deletion or restoration.","schema_version":1,"summary":"Sendd manages storefront and marketplace commerce from Claude.\nCreate listings, organize catalogs, update orders, and inspect sales or inventory.\nEvent tools can issue tickets, resend confirmations, export attendees, and refund purchases."},"homepage_url":"","icon":"https://sendd.store/icon.svg?v=2","id":"69d5e1e1-9b88-4c97-afe8-5f39bbc4c964","installs":0,"last_scanned":"","license":"","long_description":"Supported listings include physical and digital products, subscriptions, rentals, events, menu items, and enquiry forms. Authenticated tools also manage coupons, categories, collections, store details, and listing deletion or restoration.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory contains refund and complimentary-ticket issuance actions.","reasoning":"These move money or paid commercial value.","risk_type":"financial_transaction","severity":"high","title":"Refunds ticket purchases and issues complimentary tickets","triggering_tools_or_skills":["refund_ticket_purchase","issue_event_comps"]},{"evidence":"The tool sends an external transactional communication to an attendee.","reasoning":"It communicates as the store/event operator.","risk_type":"messaging_as_user","severity":"high","title":"Resends ticket confirmations","triggering_tools_or_skills":["resend_ticket_confirmation"]},{"evidence":"Explicit delete actions remove live store configuration/content.","reasoning":"These may irreversibly disrupt commerce operations.","risk_type":"data_deletion","severity":"high","title":"Deletes listings, coupons, categories and collections","triggering_tools_or_skills":["delete_listing","delete_coupon","delete_category","delete_collection"]},{"evidence":"These tools persist broad commerce and event-workflow state.","reasoning":"They materially change shared business data.","risk_type":"data_modification","severity":"medium","title":"Creates and updates products, events, orders and store settings","triggering_tools_or_skills":["create_product","create_event","create_coupon","update_order_status","update_store"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is required; store, refund and customer-messaging roles are not documented in the packet.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/69d5e1e1-9b88-4c97-afe8-5f39bbc4c964.json","what_it_proves":"Candidate PR #125 record identity (name \"Sendd MCP\", publisher, type web_connector) and 58 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/69d5e1e1-9b88-4c97-afe8-5f39bbc4c964: complete tool_names inventory (58 tools), remote streamable-http endpoint https://sendd.dev/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Sendd can refund purchases, send ticket confirmations and delete commerce assets.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:69d5e1e1-9b88-4c97-afe8-5f39bbc4c964","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 58 tools. Exported attendees and customer/order data are sensitive; no direct new charge/payment capture is listed.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":58,"tools_or_skills_total":58},"name":"Sendd MCP","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=69d5e1e1-9b88-4c97-afe8-5f39bbc4c964&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.sendd.store/privacy-policy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Sendd, Inc.","publisher_url":"https://www.sendd.store/","remote_url":"https://sendd.dev/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These move money or paid commercial value.","evidence":"Refunds ticket purchases and issues complimentary tickets: The inventory contains refund and complimentary-ticket issuance actions.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Refunds ticket purchases and issues complimentary tickets","triggering_tools":["refund_ticket_purchase","issue_event_comps"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates as the store/event operator.","evidence":"Resends ticket confirmations: The tool sends an external transactional communication to an attendee.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Resends ticket confirmations","triggering_tools":["resend_ticket_confirmation"]},{"description":"This connector can permanently remove data or resources. Review findings: These may irreversibly disrupt commerce operations.","evidence":"Deletes listings, coupons, categories and collections: Explicit delete actions remove live store configuration/content.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes listings, coupons, categories and collections","triggering_tools":["delete_listing","delete_coupon","delete_category","delete_collection"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change shared business data.","evidence":"Creates and updates products, events, orders and store settings: These tools persist broad commerce and event-workflow state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Creates and updates products, events, orders and store settings","triggering_tools":["create_product","create_event","create_coupon","update_order_status","update_store"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@sendd.store","tags":["accesses_calendar","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"add_category_items"},{"description":"","name":"add_collection_items"},{"description":"","name":"create_category"},{"description":"","name":"create_collection"},{"description":"","name":"create_coupon","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change shared business data."}},{"description":"","name":"create_digital_product"},{"description":"","name":"create_enquiry"},{"description":"","name":"create_event","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change shared business data."}},{"description":"","name":"create_flexible_price_product"},{"description":"","name":"create_link_product"},{"description":"","name":"create_menu_item"},{"description":"","name":"create_product","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change shared business data."}},{"description":"","name":"create_rental_product"},{"description":"","name":"create_subscription"},{"description":"","name":"delete_category","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These may irreversibly disrupt commerce operations."}},{"description":"","name":"delete_collection","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These may irreversibly disrupt commerce operations."}},{"description":"","name":"delete_coupon","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These may irreversibly disrupt commerce operations."}},{"description":"","name":"delete_listing","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These may irreversibly disrupt commerce operations."}},{"description":"","name":"export_event_attendees"},{"description":"","name":"get_analytics"},{"description":"","name":"get_category"},{"description":"","name":"get_collection"},{"description":"","name":"get_coupon"},{"description":"","name":"get_event_analytics"},{"description":"","name":"get_inventory_report"},{"description":"","name":"get_listing"},{"description":"","name":"get_order"},{"description":"","name":"get_store"},{"description":"","name":"issue_event_comps","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These move money or paid commercial value."}},{"description":"","name":"list_categories"},{"description":"","name":"list_collections"},{"description":"","name":"list_coupons"},{"description":"","name":"list_customers"},{"description":"","name":"list_enquiry_submissions"},{"description":"","name":"list_event_attendees"},{"description":"","name":"list_listings"},{"description":"","name":"list_orders"},{"description":"","name":"list_subscribers"},{"description":"","name":"refund_ticket_purchase","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: These move money or paid commercial value."}},{"description":"","name":"remove_category_items"},{"description":"","name":"remove_collection_items"},{"description":"","name":"resend_ticket_confirmation","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: It communicates as the store/event operator."}},{"description":"","name":"restore_listing"},{"description":"","name":"update_category"},{"description":"","name":"update_collection"},{"description":"","name":"update_coupon"},{"description":"","name":"update_digital_product"},{"description":"","name":"update_enquiry"},{"description":"","name":"update_event"},{"description":"","name":"update_flexible_price_product"},{"description":"","name":"update_link_product"},{"description":"","name":"update_menu_item"},{"description":"","name":"update_order_customer_details"},{"description":"","name":"update_order_status","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change shared business data."}},{"description":"","name":"update_product"},{"description":"","name":"update_rental_product"},{"description":"","name":"update_store","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They materially change shared business data."}},{"description":"","name":"update_subscription"}],"tools_count":58,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/69d5e1e1-9b88-4c97-afe8-5f39bbc4c964","uuid":"c55f9db5-402e-5de7-884f-f9679e0f3f08","verification_tier":"community","version":""},"query_key":"sendd mcp","schema_version":1,"status":"match"}