Google Ads Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Google Ads Mcp (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server that lets any LLM (Claude, Cursor, etc.) manage Google Ads campaigns from the terminal. Supports read and write operations.
pip install google-ads-mcp
google-ads-mcp authThe auth command walks you through getting credentials, opens your browser for Google sign-in, and saves everything to ~/.config/google-ads-mcp/credentials.json.
Then add to your .mcp.json:
{
"mcpServers": {
"google-ads": {
"command": "google-ads-mcp",
"args": ["serve"]
}
}
}No environment variables needed — the server auto-loads saved credentials.
{
"mcpServers": {
"google-ads": {
"command": "uvx",
"args": ["google-ads-mcp", "serve"]
}
}
}Run uvx google-ads-mcp auth first to set up credentials.
If you prefer env vars over saved credentials:
{
"mcpServers": {
"google-ads": {
"command": "google-ads-mcp",
"args": ["serve"],
"env": {
"GOOGLE_ADS_DEVELOPER_TOKEN": "your-token",
"GOOGLE_ADS_CLIENT_ID": "your-client-id",
"GOOGLE_ADS_CLIENT_SECRET": "your-secret",
"GOOGLE_ADS_REFRESH_TOKEN": "your-refresh-token"
}
}
}
}Env vars take priority over saved credentials when both are present.
list_accounts — List accessible customer accountslist_campaigns — List campaigns with status & budgetget_campaign_performance — Impressions, clicks, cost, conversions, CTR, CPCcreate_campaign — Create a search campaign (PAUSED by default)update_campaign_budget — Change daily budgetpause_campaign / enable_campaign — Toggle campaign statuscreate_ad_group — Create ad group in a campaignadd_keywords — Add keywords to an ad group (EXACT, PHRASE, BROAD)create_ad — Create responsive search adcd google_ads_mcp
python3.12 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"pytest tests/ -vAll tests use mocked Google Ads client — no credentials needed.
~/.config/google-ads-mcp/credentials.json)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.