{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-27","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"AdKit manages advertising across Meta, Google, TikTok, LinkedIn, Reddit, Microsoft, and X. Analyze performance or spend, research competitor ads, and prepare campaign changes. Changes start as drafts and publish only after your approval.","did":"e757d2c5-56d7-4e0b-b63c-9c6c9ba0db9f","documentation_url":"https://adkit.so/docs","editorial_description":{"extended_description":"Reporting includes returns on ad spend and date, placement, or demographic breakdowns. Connected projects and account setup support agency and in-house marketing workflows.","schema_version":1,"summary":"AdKit manages advertising across Meta, Google, TikTok, LinkedIn, Reddit, Microsoft, and X.\nAnalyze performance or spend, research competitor ads, and prepare campaign changes.\nChanges start as drafts and publish only after your approval."},"homepage_url":"","icon":"","id":"e757d2c5-56d7-4e0b-b63c-9c6c9ba0db9f","installs":0,"last_scanned":"","license":"","long_description":"Reporting includes returns on ad spend and date, placement, or demographic breakdowns. Connected projects and account setup support agency and in-house marketing workflows.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The description explicitly says drafts publish after approval across major ad networks.","reasoning":"Publishing activates spend-capable campaigns.","risk_type":"financial_transaction","severity":"high","title":"Approved advertising campaigns/budgets can be published","triggering_tools_or_skills":["adkit_manage"]},{"evidence":"The generic manager creates/edits and publishes campaigns.","reasoning":"It changes production marketing infrastructure.","risk_type":"deployment_infrastructure","severity":"high","title":"Live multi-network campaign configuration can be managed","triggering_tools_or_skills":["adkit_manage","adkit_setup"]},{"evidence":"Only a generic manager is declared for seven ad platforms.","reasoning":"Delete/admin/confirmation details require runtime inspection.","risk_type":"generic_gateway","severity":"medium","title":"adkit_manage hides the per-network action schemas","triggering_tools_or_skills":["adkit_manage"]},{"evidence":"External content is returned.","reasoning":"It may contain prompt injection.","risk_type":"prompt_injection_exposure","severity":"low","title":"Competitor ads and account data enter model context","triggering_tools_or_skills":["adkit_library","adkit_status"]},{"evidence":"The connector runs at https://mcp.adkit.so/api/mcp/core without a pinned server implementation in the packet.","reasoning":"The implementation can change independently, so runtime verification and change monitoring remain necessary.","risk_type":"provenance_uncertainty","severity":"low","title":"AdKit - Ads Manager is a mutable hosted service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"OAuth connects multi-platform ad accounts; changes start as drafts and publish only after explicit approval.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/e757d2c5-56d7-4e0b-b63c-9c6c9ba0db9f.json","what_it_proves":"Candidate PR #125 record identity (name \"AdKit - Ads Manager\", publisher, type web_connector) and 7 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/e757d2c5-56d7-4e0b-b63c-9c6c9ba0db9f: complete tool_names inventory (7 tools), remote streamable-http endpoint https://mcp.adkit.so/api/mcp/core, auth_posture auth_required, directory tier community"}],"primary_reason":"AdKit can publish spend-capable campaigns after approval through a generic multi-network manager.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:e757d2c5-56d7-4e0b-b63c-9c6c9ba0db9f","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 7 wrappers; approval is a safeguard.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":7,"tools_or_skills_total":7},"name":"AdKit - Ads Manager","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=e757d2c5-56d7-4e0b-b63c-9c6c9ba0db9f&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://adkit.so/legal/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AdKit","publisher_url":"https://adkit.so/","remote_url":"https://mcp.adkit.so/api/mcp/core","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Publishing activates spend-capable campaigns.","evidence":"Approved advertising campaigns/budgets can be published: The description explicitly says drafts publish after approval across major ad networks.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Approved advertising campaigns/budgets can be published","triggering_tools":["adkit_manage"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: It changes production marketing infrastructure.","evidence":"Live multi-network campaign configuration can be managed: The generic manager creates/edits and publishes campaigns.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Live multi-network campaign configuration can be managed","triggering_tools":["adkit_manage","adkit_setup"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Delete/admin/confirmation details require runtime inspection.","evidence":"adkit_manage hides the per-network action schemas: Only a generic manager is declared for seven ad platforms.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"medium","title":"adkit_manage hides the per-network action schemas","triggering_tools":["adkit_manage"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://adkit.so/support","tags":["code_deployment","network_access","oauth_required","runs_code","spends_money","web_connector"],"tools":[{"description":"","name":"adkit_checkin"},{"description":"","name":"adkit_feedback"},{"description":"","name":"adkit_library"},{"description":"","name":"adkit_manage","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: It changes production marketing infrastructure."}},{"description":"","name":"adkit_projects"},{"description":"","name":"adkit_setup","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: It changes production marketing infrastructure."}},{"description":"","name":"adkit_status"}],"tools_count":7,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/e757d2c5-56d7-4e0b-b63c-9c6c9ba0db9f","uuid":"3371e677-92d6-5cc4-9213-d63bc27dbbaf","verification_tier":"community","version":""},"query_key":"adkit ads manager","schema_version":1,"status":"match"}