{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-31","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Interactive Connector","confidence":"medium","description":"Plan and manage paid advertising with Adspirer. Build campaigns and monitor performance across connected platforms such as Google, Meta, LinkedIn and TikTok. New campaigns start paused, and you approve moves before they go live.","did":"cd33c38a-66e7-41a4-8777-bec24d4bba3a","documentation_url":"https://www.adspirer.com/docs/introduction","editorial_description":{"extended_description":"The platform supports ongoing budget pacing, keyword and negative-keyword management, creative-performance monitoring and multi-brand account workflows. Connection-status, performance and conversion-tracking tools provide operational context, with available actions discovered through the connector's tool catalog.","schema_version":1,"summary":"Plan and manage paid advertising with Adspirer.\nBuild campaigns and monitor performance across connected platforms such as Google, Meta, LinkedIn and TikTok.\nNew campaigns start paused, and you approve moves before they go live."},"homepage_url":"","icon":"https://storage.googleapis.com/adspirer-images-v1/brand/adspirer-logo-square.png","id":"cd33c38a-66e7-41a4-8777-bec24d4bba3a","installs":0,"last_scanned":"","license":"","long_description":"The platform supports ongoing budget pacing, keyword and negative-keyword management, creative-performance monitoring and multi-brand account workflows. Connection-status, performance and conversion-tracking tools provide operational context, with available actions discovered through the connector's tool catalog.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The listing says Adspirer builds campaigns, paces spend and shifts money toward conversions across paid-ad platforms.","reasoning":"Creating ads and changing budgets/bids commits paid media spend.","risk_type":"financial_transaction","severity":"high","title":"The agent can create and rebalance paid campaigns","triggering_tools_or_skills":["google_ads","meta_ads","linkedin_ads","tiktok_ads"]},{"evidence":"The description explicitly says campaigns are created and run across public ad platforms.","reasoning":"Publishing paid advertising content acts externally as the user.","risk_type":"messaging_as_user","severity":"high","title":"Ads can be created and launched externally","triggering_tools_or_skills":["google_ads","meta_ads","linkedin_ads","tiktok_ads"]},{"evidence":"Provider-level names plus schema discovery indicate dynamically selected sub-actions not listed in the packet.","reasoning":"The exact send, budget, delete and configuration actions are hidden, so publication needs a complete operation inventory.","risk_type":"generic_gateway","severity":"high","title":"Provider tools hide broad action catalogs","triggering_tools_or_skills":["google_ads","meta_ads","klaviyo","search_tools","get_tool_schema"]},{"evidence":"The connector runs at https://mcp.adspirer.com/mcp without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this catalog snapshot, requiring runtime verification and change monitoring.","risk_type":"provenance_uncertainty","severity":"low","title":"Adspirer Ads & Performance Marketing Agent is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication connects paid-media and analytics accounts; provider-specific scopes are not enumerated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/cd33c38a-66e7-41a4-8777-bec24d4bba3a.json","what_it_proves":"Candidate PR #125 record identity (name \"Adspirer Ads & Performance Marketing Agent\", publisher, type interactive_connector) and 18 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/cd33c38a-66e7-41a4-8777-bec24d4bba3a: complete tool_names inventory (18 tools), remote streamable-http endpoint https://mcp.adspirer.com/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Adspirer can launch paid campaigns and autonomously adjust their spend through hidden provider action sets.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:cd33c38a-66e7-41a4-8777-bec24d4bba3a","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 18 top-level tools. The exact operation schemas/tools discovered at runtime are required; recommendation is fix so the dynamic High surface is explicit.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":18,"tools_or_skills_total":18},"name":"Adspirer Ads & Performance Marketing Agent","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=cd33c38a-66e7-41a4-8777-bec24d4bba3a&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.adspirer.com/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Adspirer","publisher_url":"https://www.adspirer.com/","remote_url":"https://mcp.adspirer.com/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Creating ads and changing budgets/bids commits paid media spend.","evidence":"The agent can create and rebalance paid campaigns: The listing says Adspirer builds campaigns, paces spend and shifts money toward conversions across paid-ad platforms.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"The agent can create and rebalance paid campaigns","triggering_tools":["google_ads","meta_ads","linkedin_ads","tiktok_ads"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing paid advertising content acts externally as the user.","evidence":"Ads can be created and launched externally: The description explicitly says campaigns are created and run across public ad platforms.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Ads can be created and launched externally","triggering_tools":["google_ads","meta_ads","linkedin_ads","tiktok_ads"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The exact send, budget, delete and configuration actions are hidden, so publication needs a complete operation inventory.","evidence":"Provider tools hide broad action catalogs: Provider-level names plus schema discovery indicate dynamically selected sub-actions not listed in the packet.","manual_risk_type":"generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Provider tools hide broad action catalogs","triggering_tools":["google_ads","meta_ads","klaviyo","search_tools","get_tool_schema"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@adspirer.com","tags":["interactive_connector","network_access","oauth_required","runs_code","sends_messages_as_you","spends_money"],"tools":[{"description":"","name":"amazon_ads"},{"description":"","name":"audit_conversion_tracking"},{"description":"","name":"chatgpt_ads"},{"description":"","name":"get_campaign_performance"},{"description":"","name":"get_connections_status"},{"description":"","name":"get_meta_campaign_performance"},{"description":"","name":"get_tool_schema","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The exact send, budget, delete and configuration actions are hidden, so publication needs a complete operation inventory."}},{"description":"","name":"get_usage_status"},{"description":"","name":"google_ads","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The exact send, budget, delete and configuration actions are hidden, so publication needs a complete operation inventory."}},{"description":"","name":"google_analytics"},{"description":"","name":"klaviyo","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The exact send, budget, delete and configuration actions are hidden, so publication needs a complete operation inventory."}},{"description":"","name":"linkedin_ads","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing paid advertising content acts externally as the user."}},{"description":"","name":"meta_ads","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The exact send, budget, delete and configuration actions are hidden, so publication needs a complete operation inventory."}},{"description":"","name":"monitoring_and_reporting"},{"description":"","name":"search_tools","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: The exact send, budget, delete and configuration actions are hidden, so publication needs a complete operation inventory."}},{"description":"","name":"start_here"},{"description":"","name":"switch_primary_account"},{"description":"","name":"tiktok_ads","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Publishing paid advertising content acts externally as the user."}}],"tools_count":18,"transport":"streamable-http","type":"interactive_connector","url":"https://claude.ai/directory/cd33c38a-66e7-41a4-8777-bec24d4bba3a","uuid":"1378bb9d-7511-5450-b158-86284614ad65","verification_tier":"community","version":""},"query_key":"adspirer adspirer ads performance marketing agent","schema_version":1,"status":"match"}