{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-15","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Ad Superpowers connects advertising and analytics accounts for supervised operations. Inspect performance, plan or adjust campaigns, and maintain client profiles and workflows. New ads are paused; writes are account-scoped and plan-limited, with no MCP deletion.","did":"9d49e2ba-d177-4568-ad74-6eb4c1888c92","documentation_url":"https://adsuperpowers.ai/docs","editorial_description":{"extended_description":"Supported services include Meta, Google Ads, GA4, Search Console, Tag Manager, Merchant Center, LinkedIn, and TikTok. Actions are logged, client profiles can be restored, and tool annotations let clients prompt before state changes. The service manages owned accounts rather than serving ad inventory.","schema_version":1,"summary":"Ad Superpowers connects advertising and analytics accounts for supervised operations.\nInspect performance, plan or adjust campaigns, and maintain client profiles and workflows.\nNew ads are paused; writes are account-scoped and plan-limited, with no MCP deletion."},"homepage_url":"","icon":"","id":"9d49e2ba-d177-4568-ad74-6eb4c1888c92","installs":0,"last_scanned":"","license":"","long_description":"Supported services include Meta, Google Ads, GA4, Search Console, Tag Manager, Merchant Center, LinkedIn, and TikTok. Actions are logged, client profiles can be restored, and tool annotations let clients prompt before state changes. The service manages owned accounts rather than serving ad inventory.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The connector is an ad-operations control plane and exposes generic platform mutation tools.","reasoning":"Changing live paid-media configuration can spend or redirect advertising budget.","risk_type":"financial_transaction","severity":"high","title":"Mutates paid-ad campaign configuration and budgets","triggering_tools_or_skills":["google_ads_mutate","meta_ad_execute","meta_update","linkedin_manage","tiktok_manage"]},{"evidence":"These tools alter tag/container or Search Console-related configuration.","reasoning":"They are privileged marketing/web administration.","risk_type":"credential_admin","severity":"high","title":"Manages Google Tag Manager and account-level ad integrations","triggering_tools_or_skills":["gtm_manage","gsc_manage_url"]},{"evidence":"Generic manage/execute/workflow tools hide their full runtime action enums.","reasoning":"The stored inventory cannot prove the complete destructive/financial surface.","risk_type":"generic_gateway","severity":"high","title":"Executes opaque platform management actions","triggering_tools_or_skills":["meta_ad_execute","linkedin_manage","tiktok_manage","workflow"]},{"evidence":"The tools persist creative media in advertising platforms.","reasoning":"They materially add external assets.","risk_type":"file_write","severity":"medium","title":"Uploads advertising images and videos","triggering_tools_or_skills":["meta_upload_image","meta_upload_video","tiktok_upload"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication links multiple advertising/analytics platforms with revocable per-platform credentials.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/9d49e2ba-d177-4568-ad74-6eb4c1888c92.json","what_it_proves":"Candidate PR #125 record identity (name \"Ad Superpowers\", publisher, type web_connector) and 51 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/9d49e2ba-d177-4568-ad74-6eb4c1888c92: complete tool_names inventory (51 tools), remote streamable-http endpoint https://mcp.adsuperpowers.ai/v1, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"Ad Superpowers can mutate live paid-ad operations and privileged web-marketing configuration.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:9d49e2ba-d177-4568-ad74-6eb4c1888c92","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 51 tools. The description claims no deletion, but generic mutation schemas and budget fields need exhaustive verification.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":51,"tools_or_skills_total":51},"name":"Ad Superpowers","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=9d49e2ba-d177-4568-ad74-6eb4c1888c92&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://adsuperpowers.ai/privacy-policy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Ad Superpowers","publisher_url":"https://adsuperpowers.ai/","remote_url":"https://mcp.adsuperpowers.ai/v1","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live paid-media configuration can spend or redirect advertising budget.","evidence":"Mutates paid-ad campaign configuration and budgets: The connector is an ad-operations control plane and exposes generic platform mutation tools.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Mutates paid-ad campaign configuration and budgets","triggering_tools":["google_ads_mutate","meta_ad_execute","meta_update","linkedin_manage","tiktok_manage"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged marketing/web administration.","evidence":"Manages Google Tag Manager and account-level ad integrations: These tools alter tag/container or Search Console-related configuration.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Manages Google Tag Manager and account-level ad integrations","triggering_tools":["gtm_manage","gsc_manage_url"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The stored inventory cannot prove the complete destructive/financial surface.","evidence":"Executes opaque platform management actions: Generic manage/execute/workflow tools hide their full runtime action enums.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Executes opaque platform management actions","triggering_tools":["meta_ad_execute","linkedin_manage","tiktok_manage","workflow"]},{"description":"This connector can create, change, export, or otherwise write files. Review findings: They materially add external assets.","evidence":"Uploads advertising images and videos: The tools persist creative media in advertising platforms.","manual_risk_type":"file_write","remediation":{"block_tool_categories":["state_change"],"steps":["Limit file access to a dedicated working directory.","Review generated or modified files before they are shared or executed."]},"risk_type":"filesystem_access","severity":"medium","title":"Uploads advertising images and videos","triggering_tools":["meta_upload_image","meta_upload_video","tiktok_upload"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@adsuperpowers.ai","tags":["filesystem_access","modifies_data","network_access","oauth_required","runs_code","spends_money","web_connector"],"tools":[{"description":"","name":"clients"},{"description":"","name":"clients_update"},{"description":"","name":"ga4_list_properties"},{"description":"","name":"ga4_run_report"},{"description":"","name":"google_ads_list_accounts"},{"description":"","name":"google_ads_mutate","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live paid-media configuration can spend or redirect advertising budget."}},{"description":"","name":"google_ads_run_gaql"},{"description":"","name":"google_ads_run_keyword_planner"},{"description":"","name":"gsc_list_sites"},{"description":"","name":"gsc_manage_url","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged marketing/web administration."}},{"description":"","name":"gsc_search_analytics"},{"description":"","name":"gtm_audit"},{"description":"","name":"gtm_list_containers"},{"description":"","name":"gtm_list_entities"},{"description":"","name":"gtm_manage","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged marketing/web administration."}},{"description":"","name":"linkedin_get_analytics"},{"description":"","name":"linkedin_get_creatives_with_images"},{"description":"","name":"linkedin_list_ad_accounts"},{"description":"","name":"linkedin_manage","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The stored inventory cannot prove the complete destructive/financial surface."}},{"description":"","name":"linkedin_query"},{"description":"","name":"merchant_get_report"},{"description":"","name":"merchant_list_accounts"},{"description":"","name":"merchant_query"},{"description":"","name":"meta_ad_execute","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The stored inventory cannot prove the complete destructive/financial surface."}},{"description":"","name":"meta_ad_plan"},{"description":"","name":"meta_create"},{"description":"","name":"meta_create_ad"},{"description":"","name":"meta_duplicate"},{"description":"","name":"meta_get_creatives"},{"description":"","name":"meta_get_insights"},{"description":"","name":"meta_get_video_status"},{"description":"","name":"meta_list_ad_accounts"},{"description":"","name":"meta_query"},{"description":"","name":"meta_update","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live paid-media configuration can spend or redirect advertising budget."}},{"description":"","name":"meta_upload_image","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially add external assets."}},{"description":"","name":"meta_upload_video","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially add external assets."}},{"description":"","name":"meta_wire_pages"},{"description":"","name":"skill"},{"description":"","name":"skill_update"},{"description":"","name":"tiktok_get_ads_with_creatives"},{"description":"","name":"tiktok_get_advertiser_info"},{"description":"","name":"tiktok_get_asset_info"},{"description":"","name":"tiktok_get_audiences"},{"description":"","name":"tiktok_get_report"},{"description":"","name":"tiktok_list_advertisers"},{"description":"","name":"tiktok_manage","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The stored inventory cannot prove the complete destructive/financial surface."}},{"description":"","name":"tiktok_query"},{"description":"","name":"tiktok_upload","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, change, export, or otherwise write files. Review findings: They materially add external assets."}},{"description":"","name":"workflow","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The stored inventory cannot prove the complete destructive/financial surface."}},{"description":"","name":"workflow_update"},{"description":"","name":"workspace_info"}],"tools_count":51,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/9d49e2ba-d177-4568-ad74-6eb4c1888c92","uuid":"9a2e6ca4-7e87-5133-ace5-ac78fdd239dd","verification_tier":"community","version":""},"query_key":"ad superpowers","schema_version":1,"status":"match"}