{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-26","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"high","description":"Analyzes and manages Amazon PPC and DSP advertising through AdLabs. Audit performance, optimize bids and schedules, and preview bulk campaign changes. Requires an AdLabs account with an Amazon Advertising profile connected.","did":"1e75f0ef-aa70-4d92-905b-9065a253d534","documentation_url":"https://help.adlabs.app/en/articles/85-how-to-connect-the-adlabs-mcp-to-claude","editorial_description":{"extended_description":"Reporting spans sponsored ads and DSP at campaign, keyword, target, search-term and product levels, with CSV export. Tools support negative keywords, search-term harvesting, budgets, tags and dashboards. Writes are previewed and logged. Amazon Marketing Cloud queries and audiences require AMC to be connected to the profile.","schema_version":1,"summary":"Analyzes and manages Amazon PPC and DSP advertising through AdLabs.\nAudit performance, optimize bids and schedules, and preview bulk campaign changes.\nRequires an AdLabs account with an Amazon Advertising profile connected."},"homepage_url":"","icon":"https://adlabs.app/favicon.ico","id":"1e75f0ef-aa70-4d92-905b-9065a253d534","installs":0,"last_scanned":"","license":"","long_description":"Reporting spans sponsored ads and DSP at campaign, keyword, target, search-term and product levels, with CSV export. Tools support negative keywords, search-term harvesting, budgets, tags and dashboards. Writes are previewed and logged. Amazon Marketing Cloud queries and audiences require AMC to be connected to the profile.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The Directory description says these tools create/pause targets, adjust bids and budgets and apply hourly bid multipliers after preview.","reasoning":"Changing live advertising bids and budgets controls real monetary spend.","risk_type":"financial_transaction","severity":"high","title":"Changes Amazon Ads bids and budgets","triggering_tools_or_skills":["create_entities","optimizer","update_entities","dayparting","harvesting"]},{"evidence":"The description explicitly says the connector can run and schedule AMC SQL queries.","reasoning":"Arbitrary SQL-like analytics execution meets the High query threshold.","risk_type":"query_execution","severity":"high","title":"Runs Amazon Marketing Cloud SQL queries","triggering_tools_or_skills":["amc","query"]},{"evidence":"These actions create or update keywords, product targets, negatives, tags and other Amazon Ads state.","reasoning":"They persist broad advertising-account changes.","risk_type":"data_modification","severity":"medium","title":"Bulk-modifies advertising entities","triggering_tools_or_skills":["create_entities","update_entities","tags"]}],"assessment_status":"provisional","auth_and_scopes":"OAuth inherits AdLabs team/account permissions for connected Amazon Advertising profiles; AMC query grammar, entity write scope and confirmation enforcement are undocumented.","blocked_missing_evidence":null,"confidence":"high","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/1e75f0ef-aa70-4d92-905b-9065a253d534.json","what_it_proves":"Candidate PR #125 record identity (name \"AdLabs - Amazon Ads\", publisher, type web_connector) and 22 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/1e75f0ef-aa70-4d92-905b-9065a253d534: complete tool_names inventory (22 tools), remote streamable-http endpoint https://mcp.adlabs.app/, auth_posture auth_required, directory tier community"},{"accessed_at":"2026-10-10T21:19:34Z","url_or_path":"https://help.adlabs.app/en/articles/85-how-to-connect-the-adlabs-mcp-to-claude","what_it_proves":"Official setup confirms OAuth access to connected AdLabs data; detailed capability evidence comes from the Directory inventory and description."}],"primary_reason":"AdLabs executes AMC SQL and changes live advertising bids, budgets and entities.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:1e75f0ef-aa70-4d92-905b-9065a253d534","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 22 names, Directory description and official OAuth setup. Verify reversible-write claims, preview enforcement, schedule creation and exact AMC SQL restrictions.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":22,"tools_or_skills_total":22},"name":"AdLabs - Amazon Ads","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=1e75f0ef-aa70-4d92-905b-9065a253d534&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://adlabs.app/terms-and-conditions/","provisional_risk":null,"publication_recommendation":"accept","publisher":"AdLabs","publisher_url":"https://adlabs.app/","remote_url":"https://mcp.adlabs.app/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live advertising bids and budgets controls real monetary spend.","evidence":"Changes Amazon Ads bids and budgets: The Directory description says these tools create/pause targets, adjust bids and budgets and apply hourly bid multipliers after preview.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Changes Amazon Ads bids and budgets","triggering_tools":["create_entities","optimizer","update_entities","dayparting","harvesting"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL-like analytics execution meets the High query threshold.","evidence":"Runs Amazon Marketing Cloud SQL queries: The description explicitly says the connector can run and schedule AMC SQL queries.","manual_risk_type":"query_execution","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Runs Amazon Marketing Cloud SQL queries","triggering_tools":["amc","query"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad advertising-account changes.","evidence":"Bulk-modifies advertising entities: These actions create or update keywords, product targets, negatives, tags and other Amazon Ads state.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"Bulk-modifies advertising entities","triggering_tools":["create_entities","update_entities","tags"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"stephen@adlabs.app","tags":["accesses_messaging","modifies_data","network_access","oauth_required","runs_code","spends_money","web_connector"],"tools":[{"description":"","name":"amc","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL-like analytics execution meets the High query threshold."}},{"description":"","name":"analyze"},{"description":"","name":"campaign_mapping"},{"description":"","name":"context_and_prompts"},{"description":"","name":"create_entities","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live advertising bids and budgets controls real monetary spend."}},{"description":"","name":"create_goto_link"},{"description":"","name":"dashboards"},{"description":"","name":"dayparting","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live advertising bids and budgets controls real monetary spend."}},{"description":"","name":"download_data"},{"description":"","name":"get_entity_data"},{"description":"","name":"group_by_column"},{"description":"","name":"harvesting","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live advertising bids and budgets controls real monetary spend."}},{"description":"","name":"list_active_references"},{"description":"","name":"logs"},{"description":"","name":"optimizer","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live advertising bids and budgets controls real monetary spend."}},{"description":"","name":"query","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Arbitrary SQL-like analytics execution meets the High query threshold."}},{"description":"","name":"read"},{"description":"","name":"read_resource"},{"description":"","name":"start_chat_session"},{"description":"","name":"submit_bug_report"},{"description":"","name":"tags","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They persist broad advertising-account changes."}},{"description":"","name":"update_entities","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing live advertising bids and budgets controls real monetary spend."}}],"tools_count":22,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/1e75f0ef-aa70-4d92-905b-9065a253d534","uuid":"eb77e7a5-df4a-577a-ad62-7cf2294ae0e3","verification_tier":"community","version":""},"query_key":"adlabs adlabs amazon ads","schema_version":1,"status":"match"}