{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-03","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Connect authorized Google marketing accounts to Claude with AdvisorPPC. Analyze Ads, Analytics, Tag Manager, Search Console and YouTube data. Limited writes return previews by default and change state only after explicit confirmation.","did":"ccfd0bad-ffd8-4d0d-abe4-57d720d8ffff","documentation_url":"https://mcp.advisorppc.com/","editorial_description":{"extended_description":"Supported changes include ad-group bids and negative keywords, Analytics key events, Tag Manager workspace or tag creation, sitemap or indexing requests, and selected YouTube metadata or playlist operations. The connector excludes uploads, public publishing, general API proxies and money movement; account access remains tenant-isolated.","schema_version":1,"summary":"Connect authorized Google marketing accounts to Claude with AdvisorPPC.\nAnalyze Ads, Analytics, Tag Manager, Search Console and YouTube data.\nLimited writes return previews by default and change state only after explicit confirmation."},"homepage_url":"","icon":"https://mcp.advisorppc.com/static/icon.png","id":"ccfd0bad-ffd8-4d0d-abe4-57d720d8ffff","installs":0,"last_scanned":"","license":"","long_description":"Supported changes include ad-group bids and negative keywords, Analytics key events, Tag Manager workspace or tag creation, sitemap or indexing requests, and selected YouTube metadata or playlist operations. The connector excludes uploads, public publishing, general API proxies and money movement; account access remains tenant-isolated.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The declared actions change bids and traffic controls on live ad groups.","reasoning":"Changing CPC bids and exclusions materially controls paid ad spend, a High financial capability.","risk_type":"financial_transaction","severity":"high","title":"Google Ads CPC bids and negative-keyword controls can change spend","triggering_tools_or_skills":["ga_update_ad_group_cpc_bid_tool","ga_add_ad_group_negative_keyword_tool","ga_remove_ad_group_negative_keyword_tool"]},{"evidence":"The inventory explicitly creates GTM configuration artifacts.","reasoning":"Tags can deploy tracking/behavior to production sites, making this High production configuration.","risk_type":"deployment_infrastructure","severity":"high","title":"Google Tag Manager tags and workspaces can be created","triggering_tools_or_skills":["gtm_create_workspace_tool","gtm_create_tag_tool"]},{"evidence":"The tools explicitly write provider state and the listing says confirm=true is required.","reasoning":"These persist external platform changes; confirmation is a safeguard, not a lower inherent capability.","risk_type":"data_modification","severity":"medium","title":"GA4 events, indexing, sitemaps and YouTube metadata/playlists can be changed","triggering_tools_or_skills":["ga4_create_key_event_tool","sc_request_indexing_tool","sc_submit_sitemap_tool","yt_update_video_metadata_tool","yt_create_playlist_tool"]},{"evidence":"The connector runs at https://mcp.advisorppc.com/claude without a pinned server implementation in the packet.","reasoning":"The hosted implementation can change independently of this catalog snapshot, requiring runtime verification and change monitoring.","risk_type":"provenance_uncertainty","severity":"low","title":"AdvisorPPC - Google Ads, Analytics, Tag Manager, Search Console and YouTube Connector is a mutable remote service","triggering_tools_or_skills":[]}],"assessment_status":"provisional","auth_and_scopes":"Authentication is tenant-isolated to explicitly authorized Google properties/accounts; write calls require confirm=true according to the listing.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/ccfd0bad-ffd8-4d0d-abe4-57d720d8ffff.json","what_it_proves":"Candidate PR #125 record identity (name \"AdvisorPPC - Google Ads, Analytics, Tag Manager, Search Console and YouTube Connector\", publisher, type web_connector) and 46 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/ccfd0bad-ffd8-4d0d-abe4-57d720d8ffff: complete tool_names inventory (46 tools), remote streamable-http endpoint https://mcp.advisorppc.com/claude, auth_posture auth_required, directory tier community"}],"primary_reason":"AdvisorPPC can alter live ad bids and production tracking configuration.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:ccfd0bad-ffd8-4d0d-abe4-57d720d8ffff","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 46 tools. The directory description excludes public publishing and direct money movement, but bid changes still control paid-credit spend under the rubric.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"false","spends_or_moves_money":"true"},"tools_or_skills_reviewed":46,"tools_or_skills_total":46},"name":"AdvisorPPC - Google Ads, Analytics, Tag Manager, Search Console and YouTube Connector","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=ccfd0bad-ffd8-4d0d-abe4-57d720d8ffff&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://mcp.advisorppc.com/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"AdvisorPPC","publisher_url":"https://advisorppc.com/","remote_url":"https://mcp.advisorppc.com/claude","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing CPC bids and exclusions materially controls paid ad spend, a High financial capability.","evidence":"Google Ads CPC bids and negative-keyword controls can change spend: The declared actions change bids and traffic controls on live ad groups.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Google Ads CPC bids and negative-keyword controls can change spend","triggering_tools":["ga_update_ad_group_cpc_bid_tool","ga_add_ad_group_negative_keyword_tool","ga_remove_ad_group_negative_keyword_tool"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: Tags can deploy tracking/behavior to production sites, making this High production configuration.","evidence":"Google Tag Manager tags and workspaces can be created: The inventory explicitly creates GTM configuration artifacts.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Google Tag Manager tags and workspaces can be created","triggering_tools":["gtm_create_workspace_tool","gtm_create_tag_tool"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist external platform changes; confirmation is a safeguard, not a lower inherent capability.","evidence":"GA4 events, indexing, sitemaps and YouTube metadata/playlists can be changed: The tools explicitly write provider state and the listing says confirm=true is required.","manual_risk_type":"data_modification","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"medium","title":"GA4 events, indexing, sitemaps and YouTube metadata/playlists can be changed","triggering_tools":["ga4_create_key_event_tool","sc_request_indexing_tool","sc_submit_sitemap_tool","yt_update_video_metadata_tool","yt_create_playlist_tool"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"https://advisorppc.com/support","tags":["accesses_calendar","accesses_messaging","code_deployment","modifies_data","network_access","oauth_required","spends_money","web_connector"],"tools":[{"description":"","name":"ga_account_performance_tool"},{"description":"","name":"ga_campaign_performance_tool"},{"description":"","name":"ga_keyword_performance_tool"},{"description":"","name":"ga_list_accessible_customers_tool"},{"description":"","name":"ga_list_ad_groups_tool"},{"description":"","name":"ga_list_ads_tool"},{"description":"","name":"ga_list_campaigns_tool"},{"description":"","name":"ga_list_change_events_tool"},{"description":"","name":"ga_list_customer_clients_tool"},{"description":"","name":"ga_list_keywords_tool"},{"description":"","name":"ga_list_recommendations_tool"},{"description":"","name":"ga_search_terms_report_tool"},{"description":"","name":"ga_add_ad_group_negative_keyword_tool","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing CPC bids and exclusions materially controls paid ad spend, a High financial capability."}},{"description":"","name":"ga_remove_ad_group_negative_keyword_tool","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing CPC bids and exclusions materially controls paid ad spend, a High financial capability."}},{"description":"","name":"ga_update_ad_group_cpc_bid_tool","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Changing CPC bids and exclusions materially controls paid ad spend, a High financial capability."}},{"description":"","name":"ga4_list_properties_tool"},{"description":"","name":"ga4_run_report_tool"},{"description":"","name":"ga4_traffic_by_source_tool"},{"description":"","name":"ga4_realtime_tool"},{"description":"","name":"ga4_list_key_events_tool"},{"description":"","name":"ga4_create_key_event_tool","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist external platform changes; confirmation is a safeguard, not a lower inherent capability."}},{"description":"","name":"ga4_update_key_event_tool"},{"description":"","name":"gtm_list_accounts_tool"},{"description":"","name":"gtm_list_containers_tool"},{"description":"","name":"gtm_list_workspaces_tool"},{"description":"","name":"gtm_list_tags_tool"},{"description":"","name":"gtm_list_triggers_tool"},{"description":"","name":"gtm_create_workspace_tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Tags can deploy tracking/behavior to production sites, making this High production configuration."}},{"description":"","name":"gtm_create_tag_tool","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: Tags can deploy tracking/behavior to production sites, making this High production configuration."}},{"description":"","name":"sc_list_sites_tool"},{"description":"","name":"sc_query_performance_tool"},{"description":"","name":"sc_top_queries_tool"},{"description":"","name":"sc_top_pages_tool"},{"description":"","name":"sc_compare_periods_tool"},{"description":"","name":"sc_inspect_url_tool"},{"description":"","name":"sc_request_indexing_tool","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist external platform changes; confirmation is a safeguard, not a lower inherent capability."}},{"description":"","name":"sc_submit_sitemap_tool","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist external platform changes; confirmation is a safeguard, not a lower inherent capability."}},{"description":"","name":"yt_list_my_channels_tool"},{"description":"","name":"yt_channel_stats_tool"},{"description":"","name":"yt_list_channel_videos_tool"},{"description":"","name":"yt_top_videos_tool"},{"description":"","name":"yt_traffic_sources_tool"},{"description":"","name":"yt_update_video_metadata_tool","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist external platform changes; confirmation is a safeguard, not a lower inherent capability."}},{"description":"","name":"yt_create_playlist_tool","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: These persist external platform changes; confirmation is a safeguard, not a lower inherent capability."}},{"description":"","name":"yt_add_to_playlist_tool"},{"description":"","name":"yt_remove_from_playlist_tool"}],"tools_count":46,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/ccfd0bad-ffd8-4d0d-abe4-57d720d8ffff","uuid":"78f6ee5c-f1fb-535f-8c47-0d25883fcbbb","verification_tier":"community","version":""},"query_key":"advisorppc advisorppc google ads analytics tag manager search console and youtube connector","schema_version":1,"status":"match"}