MCP servers › io.github.MoonEyes › google-ecommerce-mcp

MCP server · registry snapshot 2026-10-23 · last tested 2026-10-23

io.github.MoonEyes/google-ecommerce-mcp

Multi-client read and controlled write (off by default): GA4, GSC, Merchant, GTM, ad platforms. — the publisher's description

8 of 8 record checks metRead-only · tools listed 2026-10-23Topic: commerce-and-marketing · AI-classifiedversion 0.6.0PythonMITstandard input/output82 tools

Summary

io.github.MoonEyes/google-ecommerce-mcp is a local MCP server listed in the official MCP registry at version 0.6.0. On 2026-10-23 ProtocolProbe started its published package in an isolated sandbox in read-only mode and read its inventory: 82 tools, 0 resources and 0 prompts.

Record checks

8 of 8 record checks met · 1 does not apply

met: Registry entry is active and says how to run it
met: Source repository link opens
met: Repository is not archived
met: Code pushed to the repository in the 90 days before our check
met: Repository publishes a security policy (SECURITY.md)
met: Package names its licence with a standard (SPDX) identifier
met: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
met: No known critical or high advisory in the package or its dependencies

#3,888 of 15,112 packages by monthly downloads, tied with 8 others
Not ranked by stars: 3 stars (ranked from 10)

From public records, not a safety rating. Each check with its reason · Is it safe to install?

Key facts

Runs: local package
Transport: standard input/output
Package: PyPI · listed version current
License: MIT
Dependencies: no known high or critical advisories
Repository: public
Tools: 82
Described as changing data: 26 of 82 toolsAI-classified
Mainly works on: accounts and data in outside web servicesAI-classified
Topic: commerce-and-marketingAI-classified
Last tested: 2026-10-23

Add to your client

Worth knowing before you connect it

26 tools are described as changing something (ga4_plan_key_event_create, ga4_plan_custom_dimension_create, gtm_plan_workspace_create, …): our AI model's reading of the descriptions, not something we tested. We did not call them.

Each line comes from a section below, with its source and date.

How fresh this is

Live-tested

yes, a real session (not a text-only review)

Last tested

2026-10-23

Mode

read-only (no tool calls)

Latest version

0.6.0, published 2026-10-21 (registry, as of the 2026-10-23 snapshot)

First listed version

2026-10-04 (earliest version still in the registry; older removed versions would be earlier)

Version history

11 versions listed, 2026-10-04 to 2026-10-21; 11 in the 90 days before the 2026-10-23 snapshot.

Most recent 11 versions

0.6.0 · 2026-10-21
0.5.0 · 2026-10-18
0.4.1 · 2026-10-17
0.4.0 · 2026-10-16
0.3.1 · 2026-10-05
0.3.0 · 2026-10-05
0.2.0 · 2026-10-04
0.1.4 · 2026-10-04
0.1.2 · 2026-10-04
0.1.1 · 2026-10-04
0.1.0 · 2026-10-04

(versions still listed in the registry only)

Registry data

snapshot 2026-10-23

Package and repository

checked 2026-10-23

Engine

mcp-runtime-engine@0.1.0 · sdk@1.32.0

Changes since the last refresh

New in the registry: not in the list of 2026-10-04, listed on 2026-10-23 with version 0.6.0 (published 2026-10-21).

Source: the official MCP Registry list on 2026-10-04 and on 2026-10-23.

What it is

What does this server offer?

Observed inventory

82tools

0resources

0prompts

What it mainly works on, as our AI model read its tool descriptions: accounts and data in outside web services.

26 of 82 tools are described as changing something (creating, editing, deleting, sending or running). For 2 the reading was uncertain, so no mark is shown.

server_statuson 13 other serversreads or searches
“Which Google services are configured for this server (or for one client), and whether the stored OAuth token works.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list.”
ga4_reporton 3 other serversreads or searches
“Run a Google Analytics 4 report (Data API runReport): traffic, conversions or revenue split by any dimensions over a date range.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
8 inputs
- dimensionsarray“GA4 API dimension names, e.g.”
- metricsarray“GA4 API metric names, e.g.”
- start_datestring“YYYY-MM-DD, NdaysAgo, yesterday or today”
- end_datestring“YYYY-MM-DD, NdaysAgo, yesterday or today”
- limitinteger“Maximum rows returned (1 to 1000); totals always cover every row”
- channel_groupstring“Optional exact filter on sessionDefaultChannelGroup, e.g.”
- property_idstring“Numeric GA4 property id, as listed by ga4_properties; empty uses the configured GA4_PROPERTY_ID (or the client's property)”
- client_idstring or null“Client id from clients_list.”
ga4_comparereads or searches
“Compare a GA4 period with an earlier one in ONE call (Data API runReport with two date ranges): this month against last month, the last 7 days against the 7 before, a month against the same month las…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
7 inputs
- metricsarray“GA4 API metric names, e.g.”
- dimensionsarray“GA4 API dimension names that split the rows, e.g.”
- periodstring“last_7_days, last_14_days, last_28_days, last_30_days, last_90_days, this_month (month to date, up to yesterday), last_month (whole previous month) or YYYY-MM-…”
- compare_tostring“previous_period: the range of the same length just before (this_month is set against the same number of days of the month before); previous_year: the same date…”
- limitinteger“Maximum rows returned (1 to 1000); totals and biggest_moves always cover every fetched row”
- property_idstring“Numeric GA4 property id, as listed by ga4_properties; empty uses the configured GA4_PROPERTY_ID (or the client's property)”
- client_idstring or null“Client id from clients_list.”
ga4_key_event_auditreads or searches
“Which GA4 events are marked as key events (conversions), and do they inflate conversions: more key events than sessions, page_view or other engagement events marked as key, contact clicks (phone, e-m…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs
- start_datestring“YYYY-MM-DD, NdaysAgo, yesterday or today”
- end_datestring“YYYY-MM-DD, NdaysAgo, yesterday or today”
- property_idstring“Numeric GA4 property id, as listed by ga4_properties; empty uses the configured GA4_PROPERTY_ID (or the client's property)”
- client_idstring or null“Client id from clients_list.”
ga4_realtimeon 1 other serverreads or searches
“GA4 realtime report for the last 30 minutes.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs
- dimensionsarray“GA4 realtime dimensions, e.g.”
- metricsarray“GA4 realtime metrics, e.g.”
- property_idstring“Numeric GA4 property id, as listed by ga4_properties; empty uses the configured GA4_PROPERTY_ID (or the client's property)”
- client_idstring or null“Client id from clients_list.”
ga4_propertieson 2 other serversreads or searches
“GA4 accounts and properties the authorized Google account can read (Admin API accountSummaries), so the assistant can find a property id itself and pass it as property_id to ga4_report or ga4_realtim…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- max_pagesinteger“Pages of 200 accounts to read at most”
- client_idstring or null“Client id from clients_list.”
gsc_performanceon 1 other serverreads or searches
“Google Search Console search performance for the configured property: clicks, impressions, CTR and average position, split by query, page, country, device or date.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
8 inputs
- dimensionsarray“How to split the results”
- start_datestring“YYYY-MM-DD; empty means 30 days ago (Pacific Time)”
- end_datestring“YYYY-MM-DD; empty means 2 days ago (Search Console data lag)”
- limitinteger“Maximum rows returned (1 to 1000); totals always cover the whole property”
- page_containsstring“Optional: keep only pages whose URL contains this text”
- search_typestring“Search type (sent to Google as `type`): web, image, video, news, discover or googleNews”
- site_urlstring“Search Console property, e.g.”
- client_idstring or null“Client id from clients_list.”
gsc_movesreads or searches
“Search Console week-over-week moves: the queries (or pages) that lost and gained the most clicks, last N days against the N days before, with clicks, impressions, CTR and position for both periods, p…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs
- site_urlstring“Search Console property, e.g.”
- daysinteger“Length of each period in days (1 to 90): the last N days, ending 2 days ago, against the N days before”
- dimensionstring“What to compare: query or page”
- limitinteger“Losers and gainers returned, each (1 to 100)”
- client_idstring or null“Client id from clients_list.”
gsc_opportunitieson 1 other serverreads or searches
“Search Console opportunities: the queries (or pages) ranking between min_position and max_position with at least min_impressions ("striking_distance"), and the ones with impressions but zero clicks (…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
8 inputs
- site_urlstring“Search Console property, e.g.”
- daysinteger“Length of the period in days (7 to 90): the last N days, ending 2 days ago”
- dimensionstring“What to list: query or page”
- min_impressionsinteger“Minimum impressions in the period for a row to count (1 to 100000)”
- min_positionnumber“Best average position kept in striking_distance (1 to 100)”
- max_positionnumber“Worst average position kept in striking_distance (1 to 100)”
- limitinteger“Rows returned in each list (1 to 200)”
- client_idstring or null“Client id from clients_list.”
gsc_inspect_urlon 8 other serversreads or searches
“Google index status of one URL (URL Inspection API): verdict, coverage state, user and Google-selected canonical, robots.txt state, page fetch state and last crawl time.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 1 required
- urlstringrequired“Full URL to inspect; must belong to the configured Search Console property”
- site_urlstring“Search Console property, e.g.”
- client_idstring or null“Client id from clients_list.”
gsc_sitemapson 2 other serversreads or searches
“Sitemaps declared in Search Console, with last submission, last download, errors and warnings.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- site_urlstring“Search Console property, e.g.”
- client_idstring or null“Client id from clients_list.”
merchant_data_sourcesreads or searches
“Merchant Center data sources (feeds): labels, countries, languages, fetch URLs.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list.”

Show 70 more tools

merchant_product_issuesreads or searches
“Merchant Center products with their item-level issues (disapprovals, demotions, warnings) per destination, with the attribute to fix.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs
- limitinteger“Maximum products returned (1 to 1000)”
- only_with_issuesboolean“True: only products with at least one issue; False: every product”
- max_pagesinteger“Pages of 250 products to scan at most”
- client_idstring or null“Client id from clients_list.”
merchant_report_query
“Run a Merchant Center report (Merchant API reports:search) with an MCQL query, for example product status or free-listing performance.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- querystring“Merchant Center Query Language (MCQL) statement.”
- client_idstring or null“Client id from clients_list.”
gtm_inventoryreads or searches
“Tags (type, paused, firing triggers, parameters), triggers and variables of the configured Google Tag Manager container's default workspace, plus the id of the live published version.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list.”
indexing_statuson 2 other serversreads or searches
“Latest Indexing API notifications (URL_UPDATED / URL_DELETED) Google holds for a URL.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- urlstringrequired“Full URL to look up”
- client_idstring or null“Client id from clients_list.”
pagespeedon 3 other serversreads or searches
“Lighthouse performance and SEO scores (0 to 100) plus LCP, CLS and TBT for a URL, and the Chrome UX Report field category when Google has real-user data.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 1 required
- urlstringrequired“Full public URL to test”
- strategystring“Device profile Lighthouse emulates”
- client_idstring or null“Client id from clients_list.”
gads_accountsreads or searches
“Google Ads customer accounts the Google Ads token can read directly (customers:listAccessibleCustomers), with the configured customer (GADS_CUSTOMER_ID, or the client's) and login customer (manager a…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list; empty uses the only client”
gads_performanceon 1 other serverreads or searches
“Google Ads performance by account, campaign or ad group over a date range: spend, impressions, clicks, conversions, conversion value, CTR, CPC, CPA and ROAS, optionally split by date, device or netwo…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
7 inputs
- levelstring“Row level: account, campaign or ad_group”
- start_datestring“Required: first day, YYYY-MM-DD (account timezone)”
- end_datestring“Required: last day, YYYY-MM-DD (account timezone)”
- segmentstring“Optional split of each row: none, date, device or network”
- limitinteger“Maximum rows returned (1 to 1000), highest spend first; totals cover up to 10,000 rows (see totals_complete)”
- customer_idstring“Google Ads customer id (digits, dashes allowed), as listed by gads_accounts; empty uses the client's (or GADS_CUSTOMER_ID)”
- client_idstring or null“Client id from clients_list; empty uses the only client”
gads_queryruns code or commands
“Run a free read-only Google Ads Query Language (GAQL) SELECT on one customer (searchStream), for fields the fixed gads_performance templates do not cover.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs, 1 required
- gaqlstringrequired“One read-only GAQL statement starting with SELECT, e.g.”
- customer_idstring“Google Ads customer id (digits, dashes allowed), as listed by gads_accounts; empty uses the client's (or GADS_CUSTOMER_ID)”
- limitinteger“Maximum rows returned (1 to 1000); Google is asked for at most 10,001 rows (LIMIT added or lowered)”
- client_idstring or null“Client id from clients_list; empty uses the only client”
gads_conversion_actionsreads or searches
“Google Ads conversion actions of one customer and the settings that decide what metrics.conversions counts: name, status, type, category, origin, primary_for_goal, include_in_conversions_metric, coun…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs
- include_removedboolean“Also list REMOVED conversion actions”
- limitinteger“Maximum actions returned (1 to 1000), by name”
- customer_idstring“Google Ads customer id (digits, dashes allowed), as listed by gads_accounts; empty uses the client's (or GADS_CUSTOMER_ID)”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_ad_accountsreads or searches
“List the Meta ad accounts the access token can read (id act_..., name, status, currency, timezone).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_insightsreads or searches
“Meta Ads performance (spend, impressions, clicks, reach, purchases, purchase value, ROAS) by level.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
10 inputs
- levelstring“Row level: account (one row per period), campaign, adset or ad”
- start_datestring“YYYY-MM-DD, first day in the ad account's timezone; leave empty with end_date to use date_preset”
- end_datestring“YYYY-MM-DD, last day included; leave empty with start_date to use date_preset”
- date_presetstring“Meta relative period (e.g.”
- breakdownsarray“Optional extra split of each row, from a fixed list: age, gender, country, region, publisher_platform, platform_position, device_platform, impression_device”
- attribution_windowsarray“Optional attribution windows for purchases (e.g.”
- time_incrementstring“all_days: one row for the whole period; 1: one row per day”
- limitinteger“Maximum rows returned (1 to 500), highest spend first (daily rows too); totals cover up to 5 pages of 500 rows”
- account_idstring“Ad account id (digits or act_<digits>); empty means META_AD_ACCOUNT_ID”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_campaignsreads or searches
“List the campaigns of a Meta ad account: id, name, status, effective_status, objective, daily and lifetime budget (minor units and currency units), special_ad_categories, dates.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs
- statusesarray“Optional effective_status filter (ACTIVE, PAUSED, ARCHIVED, CAMPAIGN_PAUSED, ADSET_PAUSED, WITH_ISSUES...); empty = Meta's default (not deleted)”
- limitinteger“Maximum rows returned (1 to 500, at most 5 pages read)”
- account_idstring“Ad account id (digits or act_<digits>); empty means the client's account”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_adsetsreads or searches
“List the ad sets of a Meta ad account (optionally of one campaign): id, name, campaign_id, status, effective_status, daily and lifetime budget (minor units and currency units), optimization goal, bil…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs
- campaign_idstring“Optional campaign id: only its ad sets”
- statusesarray“Optional effective_status filter (ACTIVE, PAUSED, ARCHIVED, CAMPAIGN_PAUSED, ADSET_PAUSED, WITH_ISSUES...); empty = Meta's default (not deleted)”
- limitinteger“Maximum rows returned (1 to 500, at most 5 pages read)”
- account_idstring“Ad account id (digits or act_<digits>); empty means the client's account”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_ads_listreads or searches
“List the ads of a Meta ad account (optionally of one ad set or campaign): id, name, campaign_id, adset_id, status, effective_status, creative_id, dates.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
6 inputs
- adset_idstring“Optional ad set id: only its ads”
- campaign_idstring“Optional campaign id: only its ads”
- statusesarray“Optional effective_status filter (ACTIVE, PAUSED, ARCHIVED, CAMPAIGN_PAUSED, ADSET_PAUSED, WITH_ISSUES...); empty = Meta's default (not deleted)”
- limitinteger“Maximum rows returned (1 to 500, at most 5 pages read)”
- account_idstring“Ad account id (digits or act_<digits>); empty means the client's account”
- client_idstring or null“Client id from clients_list; empty uses the only client”
openai_ads_accountreads or searches
“OpenAI Ads (ChatGPT ads) ad account of the client's key (GET /v1/ad_account): only id, name, status, currency_code (the account currency), timezone when present; every other key is dropped and listed…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list; empty uses the only client (or the environment variables without a registry)”
openai_ads_insightsreads or searches
“OpenAI Ads (ChatGPT ads) performance over a date range: impressions, clicks, spend, ctr, conversions and attributed sales for the ad account or one campaign, ad group or ad.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
20 inputs, 2 required
- start_datestringrequired“First day, YYYY-MM-DD”
- end_datestringrequired“Last day, YYYY-MM-DD (inclusive)”
- levelstring“Which endpoint: account = the whole ad account; campaign, ad_group or ad = one entity given by entity_id”
- entity_idstring“Id of the campaign, ad group or ad (letters, digits, _ and -); empty for level account”
- timezonestring“Optional IANA timezone of the day boundaries; empty uses the ad account timezone (keep empty for conversion or sales metrics, which require whole days in the a…”
- time_granularitystring“none: one row per entity for the period; daily, monthly or hourly (hourly: about 30 days of history, not with a segment)”
- aggregation_levelstring“Row entity inside the endpoint scope: ad_account, campaign, ad_group or ad; empty uses the endpoint level”
- fieldsarray or null“Canonical field names, e.g.”
- segmentstring“Optional single segment: product, country, device or platform (request segment fields such as country.clicks)”
- filtersarray or null“Optional filters, combined with AND: {"field": "campaign.id", "operator": "IN", "value": ["cmpn_1"]} or {"field": "ad.clicks", "operator": "GREATER_THAN" or "L…”
- sortarray or null“Optional sort criteria in order: [{"field": "spend", "direction": "desc"}] (at most 5)”
- include_zero_impression_itemsboolean“True: also return entities with zero impressions (only without a segment)”
- attribution_window_daysinteger“Click attribution window in days: 7, 14 or 30”
- view_through_attribution_window_daysinteger“View-through attribution window in days: 0 or 1”
- attribution_time_basisstring“ad_event_time (API default) or conversion_time; empty sends nothing”
- page_sizeinteger“Rows per API page (1 to 2000)”
- max_rowsinteger“Maximum rows returned by this call (1 to 6000), over at most 5 pages”
- afterstring“next_after (last_id) of a previous call to read the next rows; empty to start”
- beforestring“first_id of a previous call to read the rows before it (one page); not with after”
- client_idstring or null“Client id from clients_list; empty uses the only client (or the environment variables without a registry)”
openai_ads_conversionsreads or searches
“OpenAI Ads (ChatGPT ads) conversion insights (POST /v1/conversions/insights, a read query): goal conversions (click-through and view-through) and attributed order value per campaign, ad group or ad (…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
15 inputs, 4 required
- start_datestringrequired“First day, YYYY-MM-DD (whole days, 365 days at most)”
- end_datestringrequired“Last day, YYYY-MM-DD (inclusive)”
- account_timezonestringrequired“IANA timezone of the ad account, e.g.”
- aggregation_levelstringrequired“Required row entity: campaign, ad_group or ad”
- entity_idsarray or null“Ids of the entities of aggregation_level (1 to 100).”
- group_by_entityboolean“True (API default): one row per entity of entity_ids; false: one row for the whole ad account (no entity_ids)”
- time_granularitystring“none: period totals; daily: one row per day”
- breakdownstring“Optional breakdown: country or device; empty for none”
- attribution_window_daysinteger“Click attribution window in days: 7, 14 or 30”
- view_through_attribution_window_daysinteger“View-through attribution window in days: 0 or 1”
- attribution_time_basisstring“ad_event_time (API default) or conversion_time; empty sends nothing”
- include_attributed_eventsboolean“True: add per-event aggregates (event_name, counts, value); may expose order or user identifiers, so only aggregate fields are kept”
- event_namesarray or null“Optional exact event names for the event details (requires include_attributed_events; here at most 20 names of 64 characters among letters, digits, _ .”
- include_zero_rowsboolean“True (API default): keep rows without conversions”
- client_idstring or null“Client id from clients_list; empty uses the only client (or the environment variables without a registry)”
openai_ads_campaignsreads or searches
“List the OpenAI Ads (ChatGPT ads) campaigns of the client's ad account (GET /v1/campaigns): id, name, status (active, paused, archived), bidding_type, budget (daily_spend_limit_micros or lifetime_spe…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client (or the environment variables without a registry)”
- limitinteger“Maximum rows returned (1 to 2500), over at most 5 pages of 500”
- afterstring“next_after (last_id) of a previous call to read the next rows; empty to start”
- beforestring“first_id of a previous call to read the rows before it (one page); not with after”
- orderstring“Creation order: asc or desc; empty uses the API default”
openai_ads_ad_groupsreads or searches
“List the ad groups of one OpenAI Ads (ChatGPT ads) campaign (GET /v1/ad_groups?campaign_id=...): id, name, status, bidding_config (billing_event_type, max_bid_micros in micros of the account currency…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
6 inputs, 1 required
- campaign_idstringrequired“Parent campaign id (from openai_ads_campaigns)”
- client_idstring or null“Client id from clients_list; empty uses the only client (or the environment variables without a registry)”
- limitinteger“Maximum rows returned (1 to 2500), over at most 5 pages of 500”
- afterstring“next_after (last_id) of a previous call to read the next rows; empty to start”
- beforestring“first_id of a previous call to read the rows before it (one page); not with after”
- orderstring“Creation order: asc or desc; empty uses the API default”
openai_ads_adsreads or searches
“List the ads of one OpenAI Ads (ChatGPT ads) ad group (GET /v1/ads?ad_group_id=...): id, name, status, review_status (in_review, rejected, approved), creative (type, title, body, price, target_url, f…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
6 inputs, 1 required
- ad_group_idstringrequired“Parent ad group id (from openai_ads_ad_groups)”
- client_idstring or null“Client id from clients_list; empty uses the only client (or the environment variables without a registry)”
- limitinteger“Maximum rows returned (1 to 2500), over at most 5 pages of 500”
- afterstring“next_after (last_id) of a previous call to read the next rows; empty to start”
- beforestring“first_id of a previous call to read the rows before it (one page); not with after”
- orderstring“Creation order: asc or desc; empty uses the API default”
ads_overviewreads or searches
“Google Ads, Meta and OpenAI Ads totals side by side for one period: spend, impressions, clicks, conversions and conversion value as reported by each platform, the platform's own ROAS, currency, attri…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
- start_datestringrequired“First day, YYYY-MM-DD (each platform counts in its own account timezone)”
- end_datestringrequired“Last day, YYYY-MM-DD, on or after start_date”
- client_idstring or null“Client id from clients_list; empty uses the only client.”
ga4_custom_definitionsreads or searches
“Custom dimensions and custom metrics of a GA4 property (parameter name, display name, scope, unit) and how many slots each scope uses against the standard quotas (50 event, 25 user, 10 item dimension…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- property_idstring“Numeric GA4 property id of the client (empty: the configured one)”
- client_idstring or null“Client id from clients_list.”
ga4_key_eventsreads or searches
“Key events (formerly conversions) of a GA4 property: event name, counting method, default value, whether it is custom and deletable.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- property_idstring“Numeric GA4 property id of the client (empty: the configured one)”
- client_idstring or null“Client id from clients_list.”
ga4_plan_key_event_createcreates or changes datadescribed as changing data
“PLAN (nothing is written): mark an event as a key event of the client's GA4 property.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 1 required
- event_namestringrequired“GA4 event name to mark as a key event, e.g.”
- counting_methodstring“Count every event, or once per session”
- property_idstring“Numeric GA4 property id of the client (empty: the configured one)”
- client_idstring or null“Client id from clients_list.”
ga4_plan_custom_dimension_createcreates or changes datadescribed as changing data
“PLAN (nothing is written): register a custom dimension on the client's GA4 property.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
7 inputs, 2 required
- parameter_namestringrequired“Event or user parameter to register, e.g.”
- display_namestringrequired“Name shown in GA4 reports”
- scopestring“Scope (can never be changed later)”
- descriptionstring“Optional description, 150 characters at most”
- disallow_ads_personalizationboolean“USER scope only: exclude it from ads personalization”
- property_idstring“Numeric GA4 property id of the client (empty: the configured one)”
- client_idstring or null“Client id from clients_list.”
gsc_siteson 3 other serversreads or searches
“Search Console properties the client's Google token can see: address (sc-domain:example.com or a URL prefix), permission level (siteOwner, siteFullUser, siteRestrictedUser, siteUnverifiedUser), wheth…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list.”
merchant_productson 1 other serverreads or searches
“One page of the client's Merchant Center products (processed view): full product id contentLanguage~feedLabel~offerId (the id merchant_plan_product_patch takes), title, link, availability, price, pri…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs
- limitinteger“Products in this page (1 to 250)”
- page_tokenstring“next_page_token of the previous page; empty = first page”
- account_idstring“Merchant Center account id of the client (empty: the configured one)”
- client_idstring or null“Client id from clients_list.”
merchant_account_issuesreads or searches
“Account-level issues of the client's Merchant Center account (suspensions, policy, shipping, tax, website claim...): title, severity (CRITICAL, ERROR, SUGGESTION), detail, documentation link and impa…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs
- language_codestring“Language of the issue texts (BCP-47, e.g.”
- account_idstring“Merchant Center account id of the client (empty: the configured one)”
- client_idstring or null“Client id from clients_list.”
gtm_workspace_statusreads or searches
“Workspaces of the client's GTM container (id, name, whether it is the Default Workspace, whether this server created it) and, for each one, its pending changes (added / updated / deleted tags, trigge…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- workspace_idstring“Numeric workspace id; empty lists every workspace (5 at most)”
- client_idstring or null“Client id from clients_list.”
gtm_get_tagreads or searches
“One tag of a workspace in full (type, parameters, triggers, paused) with its fingerprint, which gtm_plan_tag_upsert needs to update it.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
- tag_idstringrequired“Numeric tag id”
- workspace_idstringrequired“Numeric GTM workspace id (gtm_workspace_status lists them); never the Default Workspace for a change”
- client_idstring or null“Client id from clients_list.”
gtm_get_triggerreads or searches
“One trigger of a workspace in full (type, filters) with its fingerprint (needed to update it).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
- trigger_idstringrequired“Numeric trigger id”
- workspace_idstringrequired“Numeric GTM workspace id (gtm_workspace_status lists them); never the Default Workspace for a change”
- client_idstring or null“Client id from clients_list.”
gtm_get_variablereads or searches
“One variable of a workspace in full (type, parameters) with its fingerprint (needed to update it).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
- variable_idstringrequired“Numeric variable id”
- workspace_idstringrequired“Numeric GTM workspace id (gtm_workspace_status lists them); never the Default Workspace for a change”
- client_idstring or null“Client id from clients_list.”
gtm_versionsreads or searches
“Container versions of the client's GTM container, newest first (id, name, number of tags, triggers and variables) and which one is live.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- limitinteger“Maximum number of versions to return”
- client_idstring or null“Client id from clients_list.”
gtm_plan_workspace_createcreates or changes datadescribed as changing data
“PLAN (nothing is written): create a dedicated workspace in the client's GTM container, where the tag, trigger and variable plans can then work (the Default Workspace is never written).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- namestringrequired“Name of the new workspace (unique in the container)”
- descriptionstring“Optional description; [gem-managed] is appended”
- client_idstring or null“Client id from clients_list.”
gtm_plan_tag_upsertcreates or changes datadescribed as changing data
“PLAN (nothing is written): create or update a tag in a non-default workspace of the client's GTM container.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
5 inputs, 2 required
- workspace_idstringrequired“Numeric GTM workspace id (gtm_workspace_status lists them); never the Default Workspace for a change”
- tagobjectrequired“The tag as a GTM API object: name, type, parameter [{type, key, value}], firingTriggerId, blockingTriggerId, paused, notes.”
- tag_idstring“Numeric id of the tag to update; empty creates a new tag”
- fingerprintstring“Update only: the fingerprint returned by gtm_get_tag / gtm_get_trigger / gtm_get_variable (required; refused when stale)”
- client_idstring or null“Client id from clients_list.”
gtm_plan_trigger_upsertcreates or changes datadescribed as changing data
“PLAN (nothing is written): create or update a trigger in a non-default workspace of the client's GTM container (fingerprint from gtm_get_trigger for an update).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
5 inputs, 2 required
- workspace_idstringrequired“Numeric GTM workspace id (gtm_workspace_status lists them); never the Default Workspace for a change”
- triggerobjectrequired“The trigger as a GTM API object: name, type, parameter [{type, key, value}], filter, customEventFilter, autoEventFilter.”
- trigger_idstring“Numeric id of the trigger to update; empty creates one”
- fingerprintstring“Update only: the fingerprint returned by gtm_get_tag / gtm_get_trigger / gtm_get_variable (required; refused when stale)”
- client_idstring or null“Client id from clients_list.”
gtm_plan_variable_upsertcreates or changes datadescribed as changing data
“PLAN (nothing is written): create or update a variable in a non-default workspace of the client's GTM container (fingerprint from gtm_get_variable for an update).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
5 inputs, 2 required
- workspace_idstringrequired“Numeric GTM workspace id (gtm_workspace_status lists them); never the Default Workspace for a change”
- variableobjectrequired“The variable as a GTM API object: name, type, parameter [{type, key, value}], notes.”
- variable_idstring“Numeric id of the variable to update; empty creates one”
- fingerprintstring“Update only: the fingerprint returned by gtm_get_tag / gtm_get_trigger / gtm_get_variable (required; refused when stale)”
- client_idstring or null“Client id from clients_list.”
gtm_plan_quick_previewreads or searches
“Preview step of a GTM plan: compile a workspace into a throw-away preview version and report compiler errors, merge conflicts and what it holds.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- workspace_idstringrequired“Numeric GTM workspace id (gtm_workspace_status lists them); never the Default Workspace for a change”
- client_idstring or null“Client id from clients_list.”
gsc_plan_sitemap_submitcreates or changes datadescribed as changing data
“PLAN (nothing is written): submit a sitemap to the client's Search Console property.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- sitemap_urlstringrequired“Full URL of the sitemap, inside the client's property, e.g.”
- site_urlstring“Search Console property of the client (empty: the configured one), e.g.”
- client_idstring or null“Client id from clients_list.”
merchant_plan_product_patchcreates or changes datadescribed as changing data
“PLAN (nothing is written): change some attributes of one product of the client's Merchant Center account, with an explicit update mask (an attribute listed without a value is refused: Google would de…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
6 inputs, 3 required
- product_idstringrequired“Product id contentLanguage~feedLabel~offerId, as merchant_products returns it (e.g.”
- update_maskarrayrequired“Attributes to change, each also given in product_attributes: title, description, link, availability, price”
- product_attributesobjectrequired“New values, e.g.”
- data_source_idstring“Numeric id of the API data source to patch (empty: the product's primary data source)”
- account_idstring“Merchant Center account id of the client (empty: the configured one)”
- client_idstring or null“Client id from clients_list.”
gads_plan_pause_entitiescreates or changes datadescribed as changing data
“Plan pausing Google Ads campaigns, ad groups or ads (status PAUSED, nothing else).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 2 required
- levelstringrequired“What to pause”
- idsarrayrequired“Ids to pause (1 to 25): campaign ids, ad group ids, or '<ad_group_id>~<ad_id>' for ads”
- customer_idstring“Google Ads customer id (10 digits, dashes allowed); empty uses the client's own customer”
- client_idstring or null“Client id from clients_list; empty uses the only client”
gads_plan_budget_changecreates or changes datadescribed as changing data
“Plan a new daily amount for one Google Ads campaign budget (amountMicros, in micros of the ACCOUNT currency: 12.50 EUR = 12500000).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
5 inputs, 1 required
- daily_budget_microsintegerrequired“New daily budget in micros of the account currency (12.50 = 12500000)”
- budget_idstring“Campaign budget id (campaign_budget.id); or give campaign_id”
- campaign_idstring“Campaign id”
- customer_idstring“Google Ads customer id (10 digits, dashes allowed); empty uses the client's own customer”
- client_idstring or null“Client id from clients_list; empty uses the only client”
gads_plan_add_negativescreates or changes datadescribed as changing data
“Plan adding negative keywords (1 to 50 texts given by you, match type EXACT, PHRASE or BROAD) to one campaign (campaign_id) or to one shared negative keyword list (shared_set_id), in one atomic reque…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
6 inputs, 1 required
- keywordsarrayrequired“Negative keyword texts (1 to 50, at most 10 words each)”
- match_typestring“Match type of every negative”
- campaign_idstring“Campaign id”
- shared_set_idstring“Shared negative keyword list id (shared_set.id); or give campaign_id”
- customer_idstring“Google Ads customer id (10 digits, dashes allowed); empty uses the client's own customer”
- client_idstring or null“Client id from clients_list; empty uses the only client”
gads_plan_create_campaigncreates or changes datadescribed as changing data
“Plan creating one Google Ads Search campaign, PAUSED, with its own daily budget (amountMicros in micros of the account currency; not shared), Google Search network only, in one atomic request dry-run…”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 2 required
- namestringrequired“Campaign name (1 to 200 characters)”
- daily_budget_microsintegerrequired“New daily budget in micros of the account currency (12.50 = 12500000)”
- customer_idstring“Google Ads customer id (10 digits, dashes allowed); empty uses the client's own customer”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_plan_pausecreates or changes datadescribed as changing data
“PLAN (nothing is written): pause Meta campaigns, ad sets or ads (status PAUSED).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 2 required
- levelstringrequired“Entity level: campaign, adset or ad”
- entity_idsarrayrequired“1 to 25 numeric ids of that level (from meta_campaigns / meta_adsets / meta_ads_list)”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_plan_budget_changecreates or changes datadescribed as changing data
“PLAN (nothing is written): change the daily budget of a Meta campaign or ad set.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 3 required
- levelstringrequired“campaign (Advantage campaign budget) or adset”
- entity_idstringrequired“Numeric id of the campaign or ad set”
- daily_budget_minorintegerrequired“New daily budget in MINOR units of the account currency: 5000 = 50.00 EUR, 5000 = 5000 JPY (0 decimals)”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_plan_create_campaigncreates or changes datadescribed as changing data
“PLAN (nothing is written): create a Meta campaign, always PAUSED.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
7 inputs, 3 required
- namestringrequired“Name of the new entity (plain text)”
- objectivestringrequired“Campaign objective (ODAX), e.g.”
- special_ad_categoriesarrayrequired“Explicit special ad categories: [] or ["NONE"] when none apply; HOUSING, EMPLOYMENT, FINANCIAL_PRODUCTS_SERVICES, ISSUES_ELECTIONS_POLITICS otherwise”
- special_ad_category_countryarray“ISO countries of the special ad categories (only when categories are declared)”
- daily_budget_minorinteger or null“Optional daily budget in MINOR units of the account currency (5000 = 50.00 EUR; 5000 = 5000 JPY); capped by the client's write policy”
- adset_budget_sharingboolean or null“Optional is_adset_budget_sharing_enabled flag (campaigns without a campaign budget)”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_plan_create_adsetcreates or changes datadescribed as changing data
“PLAN (nothing is written): create a Meta ad set, always PAUSED, in a campaign of the client's account (checked).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
13 inputs, 6 required
- namestringrequired“Name of the new entity (plain text)”
- campaign_idstringrequired“Numeric id of the parent campaign (same ad account)”
- optimization_goalstringrequired“Optimization goal, e.g.”
- billing_eventstringrequired“Billing event, usually IMPRESSIONS”
- countriesarrayrequired“Target countries, ISO alpha-2 (FR, BE...)”
- advantage_audienceintegerrequired“targeting_automation.advantage_audience, explicit: 0 (your targeting only) or 1 (Advantage+ audience)”
- age_mininteger“Minimum age (13-65)”
- age_maxinteger“Maximum age (13-65)”
- daily_budget_minorinteger or null“Optional daily budget in MINOR units of the account currency (5000 = 50.00 EUR; 5000 = 5000 JPY); capped by the client's write policy”
- start_timestring“Optional ISO 8601 start with offset; empty = Meta default”
- pixel_idstring“Optional pixel id of the client (promoted_object)”
- custom_event_typestring“Conversion event with pixel_id, e.g.”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_plan_create_adcreates or changes datadescribed as changing data
“PLAN (nothing is written): create a Meta ad, always PAUSED, from an existing creative, in an ad set of the client's account (both checked).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
4 inputs, 3 required
- namestringrequired“Name of the new entity (plain text)”
- adset_idstringrequired“Numeric id of the parent ad set (same ad account)”
- creative_idstringrequired“Numeric id of an existing ad creative of the account”
- client_idstring or null“Client id from clients_list; empty uses the only client”
openai_ads_plan_pausecreates or changes datadescribed as changing data
“PLAN (nothing is written): pause OpenAI Ads (ChatGPT ads) campaigns, ad groups or ads.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 2 required
- levelstringrequired“What to pause: campaign, ad_group or ad”
- entity_idsarrayrequired“Ids of the entities to pause (1 to 25), from openai_ads_campaigns / openai_ads_ad_groups / openai_ads_ads”
- client_idstring or null“Client id from clients_list; empty uses the only client”
openai_ads_plan_budget_changecreates or changes datadescribed as changing data
“PLAN (nothing is written): set the daily budget (daily_spend_limit_micros) of one OpenAI Ads campaign.”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
3 inputs, 2 required
- campaign_idstringrequired“Campaign id (from openai_ads_campaigns); it must have a daily budget”
- daily_budget_microsintegerrequired“New daily budget in micros of the account currency (1000000 = 1 unit); capped by the client's policy”
- client_idstring or null“Client id from clients_list; empty uses the only client”
openai_ads_plan_create_campaigncreates or changes datadescribed as changing data
“PLAN (nothing is written): create one OpenAI Ads campaign, always with an explicit status "paused" and an explicit start_time, and a daily budget (no targeting, no bidding, no product feed).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
6 inputs, 3 required
- namestringrequired“Campaign name, 3 to 1000 characters”
- daily_budget_microsintegerrequired“Daily budget in micros of the account currency (1000000 = 1 unit); capped by the client's policy”
- start_timeintegerrequired“Explicit start, unix seconds (required: without it a campaign delivers as soon as it is active)”
- end_timeinteger or null“Optional end, unix seconds after start_time”
- descriptionstring“Optional description (1000 characters at most)”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_pixel_healthreads or searches
“Meta pixel health: last fire time, availability, automatic matching, and the events received per name over the last `days` days (PageView, ViewContent, AddToCart, Purchase...), with plain warnings (n…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- daysinteger“Days of event counts to read (1 to 30), ending now”
- pixel_idstring“Pixel / dataset id; empty uses the client's meta.pixel_id”
meta_dataset_qualityreads or searches
“Conversions API / pixel dataset quality per web event: event match quality (composite score, match key feedback), event coverage, dedup feedback, data freshness and additional conversions reported (A…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
2 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- pixel_idstring“Dataset (pixel) id; empty uses the client's meta.pixel_id”
meta_catalog_diagnosticsreads or searches
“Meta catalog diagnostics: issues by type and severity (MUST_FIX, WARNING), e.g.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
3 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- typesarray“Optional diagnostic types (e.g.”
- catalog_idstring“Catalog id; empty uses the client's meta.catalog_id”
meta_catalog_productsreads or searches
“Products of the client's Meta catalog (bounded list): product item id, retailer_id, name, price, sale_price, currency, availability, inventory, review status, visibility.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
4 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- limitinteger“Maximum products returned (1 to 500)”
- retailer_idstring“Optional: only the product with this retailer_id (your SKU / content id)”
- catalog_idstring“Catalog id; empty uses the client's meta.catalog_id”
meta_ig_insightsreads or searches
“Instagram professional account insights, total over the period: reach, views, accounts engaged, interactions (likes, comments, shares, saves, replies), follows and profile link taps.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- metricsarray“Metrics (non-deprecated only); empty: reach, views, accounts_engaged, total_interactions”
- start_datestring“YYYY-MM-DD (UTC); empty with end_date: the 28 days ending yesterday”
- end_datestring“YYYY-MM-DD (UTC), included; at most 30 days per request”
- ig_user_idstring“Instagram professional account id; empty uses the client's meta.ig_user_id”
meta_page_insightsreads or searches
“Facebook Page insights per day and in total: media views (page_media_view replaces the deprecated impressions), post engagements, follows and unfollows, total actions.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
5 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- metricsarray“Metrics (non-deprecated only); empty: page_media_view, page_post_engagements, page_daily_follows_unique”
- start_datestring“YYYY-MM-DD (UTC); empty with end_date: the 28 days ending yesterday”
- end_datestring“YYYY-MM-DD (UTC), included; at most 90 days per request”
- page_idstring“Facebook Page id; empty uses the client's meta.page_id”
meta_eco_plan_catalog_item_updatecreates or changes datadescribed as changing data
“PLAN (writes nothing): update one Meta catalog product item (price, sale price, availability, stock).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
7 inputs, 1 required
- product_item_idstringrequired“Product item id (the id column of meta_catalog_products)”
- priceinteger or null“New price in MINOR units of the item currency (cents: 1299 = 12.99 EUR); empty keeps it”
- sale_priceinteger or null“New sale price in minor units; empty keeps it”
- availabilitystring or null“New availability; empty keeps it”
- inventoryinteger or null“New stock quantity (0 or more); empty keeps it”
- client_idstring or null“Client id from clients_list; empty uses the only client”
- titlestring“Short title of the change (shown in the plan)”
gads_applydescribed as changing data
“WRITE: apply a signed plan for Google Ads, after the user approved it.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- plan_idstringrequired“Plan id returned by the plan_* tool”
- confirmation_tokenstringrequired“confirmation_token returned by the plan_* tool, unchanged”
- confirmstringrequired“Confirmation string '<client_id>:<plan_id>:<digest8>' returned with the plan”
- client_idstring or null“Client id from clients_list; empty uses the only client”
meta_applydescribed as changing data
“WRITE: apply a signed plan for Meta (ads, pixel, catalog, Instagram, Page), after the user approved it.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- plan_idstringrequired“Plan id returned by the plan_* tool”
- confirmation_tokenstringrequired“confirmation_token returned by the plan_* tool, unchanged”
- confirmstringrequired“Confirmation string '<client_id>:<plan_id>:<digest8>' returned with the plan”
- client_idstring or null“Client id from clients_list; empty uses the only client”
openai_ads_applydescribed as changing data
“WRITE: apply a signed plan for ChatGPT Ads (OpenAI), after the user approved it.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- plan_idstringrequired“Plan id returned by the plan_* tool”
- confirmation_tokenstringrequired“confirmation_token returned by the plan_* tool, unchanged”
- confirmstringrequired“Confirmation string '<client_id>:<plan_id>:<digest8>' returned with the plan”
- client_idstring or null“Client id from clients_list; empty uses the only client”
google_applydescribed as changing data
“WRITE: apply a signed plan for GA4, Search Console, Merchant, GTM, after the user approved it.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- plan_idstringrequired“Plan id returned by the plan_* tool”
- confirmation_tokenstringrequired“confirmation_token returned by the plan_* tool, unchanged”
- confirmstringrequired“Confirmation string '<client_id>:<plan_id>:<digest8>' returned with the plan”
- client_idstring or null“Client id from clients_list; empty uses the only client”
plan_geton 1 other serverreads or searches
“Show a stored write plan (ops, risk, changes, requests masked, status).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- plan_idstringrequired“Plan id returned by the plan_* tool”
- client_idstring or null“Client id from clients_list; empty uses the only client”
plan_listreads or searches
“List the newest write plans of a client (id, platform, title, status, expiry).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- limitinteger“Maximum number of entries to return”
audit_logon 6 other serversreads or searches
“Read the write journal of a client (plans, apply intents and results, rollbacks), secrets masked.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs
- client_idstring or null“Client id from clients_list; empty uses the only client”
- plan_idstring or null“Only entries of this plan id”
- limitinteger“Maximum number of entries to return”
rollback_planon 2 other serverscreates or changes datadescribed as changing data
“Build a NEW plan undoing what plan_id applied (nothing is written; apply it like any plan).”
Publisher declares: read-only yes · destructive no · idempotent no · open-world yes
2 inputs, 1 required
- plan_idstringrequired“Plan id returned by the plan_* tool”
- client_idstring or null“Client id from clients_list; empty uses the only client”
clients_listreads or searches
“Clients this server can work on, from the client registry (clients.json): client_id, label, sandbox and which platforms are configured.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
Takes no inputs.
client_profile
“One client's profile: label, sandbox flag, the account ids of each platform (GA4 property, Search Console site, Merchant account, GTM container, Google Ads customer, Meta ad account...) and its write…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list; empty uses the only client”
client_check
“Health of one client: which services are configured, whether its Google token works and which scopes it holds (like server_status), plus whether each of its secrets is stored ("secrets": {kind: true/…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes
1 input
- client_idstring or null“Client id from clients_list; empty uses the only client”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

Says what the tool does: 100% of 80 tools
Says what it returns: 74% of 78 tools
States limits, defaults or errors: 51% of 45 tools
Says when to use it: 15% of 61 tools
Items covered per tool: 2.7 of 4 on average

Counted from the listing

Parameters with a description: 100% of 346
Tools with a description: 100% of 82
Typical description length: 336 characters

The tool set

Counted from the listing

Tools: 82
Size of the list: about 28,812 tokens for an agent to load (characters ÷ 4)
Naming: 81 of 82 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 80 of 82 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the PyPI package google-ecommerce-mcp

Our sandbox started this package on 2026-10-23 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below. The command runs the publisher’s code on your machine.

Claude Desktop · claude_desktop_config.json (Settings → Developer → Edit Config)

{
  "mcpServers": {
    "google-ecommerce-mcp": {
      "command": "uvx",
      "args": [
        "google-ecommerce-mcp==0.6.0"
      ]
    }
  }
}

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "google-ecommerce-mcp": {
      "command": "uvx",
      "args": [
        "google-ecommerce-mcp==0.6.0"
      ]
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "google-ecommerce-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "google-ecommerce-mcp==0.6.0"
      ]
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"google-ecommerce-mcp","type":"stdio","command":"uvx","args":["google-ecommerce-mcp==0.6.0"]}'

Claude Code

claude mcp add --transport stdio google-ecommerce-mcp -- uvx google-ecommerce-mcp==0.6.0

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 -- uvx google-ecommerce-mcp==0.6.0

Optional settings the entry also lists (left out above): GA4_PROPERTY_ID, GSC_SITE_URL, MERCHANT_ACCOUNT_ID, GTM_CONTAINER_ID, PAGESPEED_API_KEY, GEM_CLIENT, GEM_WRITE, GOOGLE_TOKEN_FILE.
This runs the publisher's code on your machine (uvx). Read its README first.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Can it be installed, and is it up to date?

Version pin · advisories

Listed version

Registry lists: 0.6.0
Latest stable: 0.6.0
Status: current
Withdrawn: no

Source: pypi.org · 2026-10-23. About the version the registry lists; a manual install may resolve to a different one.

Dependency advisories

Counted in the full dependency tree as resolved on 2026-10-23 (OSV.dev). Bars share one scale. The package itself has no known vulnerability (OSV.dev).

Integrity, provenance, license

Integrity: sha256-79a192ff24a2a9fd3…
License: MIT

Source: the package registry · 2026-10-23.

Usage

Downloads: 692 in the last month

Source: pypistats.org · 2026-10-23.

Does the registry listing match what we found?

Feature #6

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Published package can be started	Started and answered	matches	our test · 2026-10-23
Version 0.6.0 on PyPI	Exists and can be installed	matches	PyPI · 2026-10-23
Repository github.com/MoonEyes/google-ecommerce-mcp	Opens publicly	matches	api.github.com · 2026-10-23

Who made it?

Feature #7 · lineage

Facts about the publisher. We do not turn them into a trust score.

Namespace: io.github.MoonEyes
GitHub owner: a personal account (MoonEyes)

Repository: github.com/MoonEyes/google-ecommerce-mcp
Stars: 3
Repository age: 0–30 days
Last push: 0–30 days ago
Archived: no
Security policy: SECURITY.md

Source: the registry entry and api.github.com · 2026-10-23; security policy read from GitHub · 2026-10-23.

Publish this server? Run these checks against it yourself before release, from your own machine: a server the command starts, or your own server at its URL after a one-time proof that you control it: npx protocolprobe-selftest.

Choosing

Record checks

Public records · not a safety rating

8 of 8 record checks met · 1 does not apply

#3,888 of 15,112 packages by monthly downloads, tied with 8 others
Not ranked by stars: 3 stars (ranked from 10)

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
MetSource repository link opensThe linked GitHub repository is public.
MetRepository is not archivedNot archived.
MetCode pushed to the repository in the 90 days before our checkLast push 0-30 days before our check.
MetRepository publishes a security policy (SECURITY.md)SECURITY.md found.
MetPackage names its licence with a standard (SPDX) identifierMIT
MetThe version the registry lists can be installed and is not withdrawnThe listed version exists and is current.
Does not applynpm package carries build provenance (attestation)PyPI packages have no npm-style attestation.
MetNo known critical or high advisory in the package or its dependenciesNone known in the package or its dependency tree.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-10-23. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating. How each check works · Leaderboards

Common questions about io.github.MoonEyes/google-ecommerce-mcp

Answered from the data above

Is io.github.MoonEyes/google-ecommerce-mcp safe to install?

We do not rate servers as safe or unsafe. 8 of its 8 applicable record checks are met (facts from public records, each listed on this page). What the records show: Its source repository opens publicly. Its repository had a push in the last 90 days. The listed version is the latest stable release. The package itself has no known vulnerability (OSV.dev). Its full dependency tree has no known advisory. 26 of its tools describe changing data (our AI model's reading of the descriptions). These are facts with their sources on this page, not a safety guarantee, and we did not run its tools.

Has io.github.MoonEyes/google-ecommerce-mcp been security tested?

Partly. 2 of the 12 checks that apply to it were exercised. We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security verdict is published before verification.

What can io.github.MoonEyes/google-ecommerce-mcp do?

It lists 82 tools. In our AI model's reading of their descriptions (two runs had to agree, nobody checked it by hand), they include tools that read or search, create or change data and run code or commands. We did not call any tool, so this describes the text, not the behaviour.

Can io.github.MoonEyes/google-ecommerce-mcp change or delete data?

26 of its tools say in their description that they create, edit, delete, send or run something (our AI model's reading). We did not call any tool, so we cannot say what actually happens.

Does io.github.MoonEyes/google-ecommerce-mcp publish a security policy?

Yes: its repository has a public security policy (github.com/mooneyes/google-ecommerce-mcp/blob/HEAD/SECURITY.md). That is the publisher's statement, not permission for us to test the server, and we call none of its tools.

Is the listed version current?

Yes. The registry lists 0.6.0, the latest stable release on PyPI.

Where is the source code of io.github.MoonEyes/google-ecommerce-mcp?

In github.com/MoonEyes/google-ecommerce-mcp, which opens publicly.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Similar servers

Same topic · AI-read

com.getadloop/adloopAdLoopalso has tools that creates or changes data, runs code or commands, reads or searchescompare with this one
com.mcparmory/google-analyticsalso has tools that creates or changes data, runs code or commands, reads or searchescompare with this one
io.github.adwarp-dev/adwarpAdwarpalso has tools that creates or changes data, runs code or commands, reads or searchescompare with this one
io.github.alex-brecher/shopify-multi-storealso has tools that creates or changes data, runs code or commands, reads or searchescompare with this one
io.github.hermoso-ai/hermosoHermosoalso has tools that creates or changes data, runs code or commands, reads or searchescompare with this one
com.gtmotto/linkedinGTM Ottoalso has tools that creates or changes data, runs code or commands, reads or searchescompare with this one

Active servers whose topic is also “commerce-and-marketing” and that have at least one tool of the same kind; most kinds in common first, then most GitHub stars. The topic and the tool kinds are an AI model's reading of the publishers' descriptions, not checked by hand. Similar is not a recommendation.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Not probed (read-only run)

We started the package in an isolated sandbox and read what it declares, but this test round was read-only, so its tools were not called. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-10-23

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not applicable
Consent handling: not applicable
Sign-in metadata: not applicable

2 exercised10 not run (reason given)6 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 2 of the 12 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 2

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised

Not run, with the reason · 10

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the package's tools. This test round was read-only, so no tool was called; tools can act on outside services with the publisher's or a user's account.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against

Does not apply to this server · 6

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
17Consent handling
confused-deputyChecks consent handling when one service acts for another.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.The server runs locally over standard input/output, so there is no sign-in flow to check.not applicable

Source: our own test in an isolated sandbox, 2026-10-23, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted the published package in an isolated sandbox (read-only mode)
10,789 msConnected after 0 redirects.
Read the inventory: 82 tools, 0 resources, 0 prompts.
11,470 msFinished: 2 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

commerce-and-marketing

AI-classified · 2026-10-23

Pricing modelAI-classified

no value

The website listed in the registry is a code-hosting, package or marketplace page, not the product's own site.

Programming language

Python

api.github.com · 2026-10-23

Hosting type

local package

registry · 2026-10-23

MCP capability

experimental, prompts, resources, tools

our test · 2026-10-23

Transport

standard input/output

registry · 2026-10-23

Required credentials

none declared

registry · no declaration is not a guarantee

Package registry

pypi

registry · 2026-10-23

Freshness

0–30 days

registry updatedAt · 2026-10-23

Lifecycle status

active

registry · 2026-10-23

License class

permissive

package registry · 2026-10-23

Integrity hash

declared (sha256)

package registry · 2026-10-23

Signature / provenance

does not apply

PyPI publishes no registry signature or attestation equivalent to npm dist.signatures

Dependency advisories

none known

OSV.dev · 2026-10-23

Popularity

692 downloads a month

package registry · 2026-10-23

Publisher signals

owner: a personal account · repository age: 0–30 days · stars: 0–9

api.github.com · 2026-10-23

Maintenance

active

api.github.com · 2026-10-23

Environment

your machine

where it runs, from the hosting type

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “io.github.MoonEyes/google-ecommerce-mcp: MCP server record.” Data checked 2026-10-23. https://protocolprobe.com/mcp/servers/io.github.MoonEyes/google-ecommerce-mcp

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/io.github.MoonEyes/google-ecommerce-mcp)](https://protocolprobe.com/mcp/servers/io.github.MoonEyes/google-ecommerce-mcp)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology