{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-09","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"HYPD analyzes Google Ads, Meta Ads, GA4, and Merchant Center data. Research keywords or competitors, inspect shopping feeds, and audit landing pages or tracking. Access is read-only; campaigns, budgets, and ads are not changed.","did":"f375224a-fc28-49a1-a173-450dd3339a4e","documentation_url":"https://docs.hypd.ai/","editorial_description":{"extended_description":"Use Keyword Planner, public ad libraries, search rankings, Lighthouse audits, and pixel or Tag Manager checks. Other advertising-channel traffic can be analyzed through GA4.","schema_version":1,"summary":"HYPD analyzes Google Ads, Meta Ads, GA4, and Merchant Center data.\nResearch keywords or competitors, inspect shopping feeds, and audit landing pages or tracking.\nAccess is read-only; campaigns, budgets, and ads are not changed."},"homepage_url":"","icon":"https://app.hypd.ai/favicon.ico","id":"f375224a-fc28-49a1-a173-450dd3339a4e","installs":0,"last_scanned":"","license":"","long_description":"Use Keyword Planner, public ad libraries, search rankings, Lighthouse audits, and pixel or Tag Manager checks. Other advertising-channel traffic can be analyzed through GA4.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The inventory includes direct Google Ads Query Language execution and configurable GA4/Meta report tools over connected account data.","reasoning":"User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.","risk_type":"query_execution","severity":"high","title":"GAQL and configurable analytics reports can be executed","triggering_tools_or_skills":["google_ads_run_gaql","google_analytics_run_report","google_analytics_run_funnel_report","meta_insights_async"]},{"evidence":"The tools retrieve real ad accounts, lead-form submissions, ecommerce performance, product diagnostics, audiences, pixels, pages, and campaigns.","reasoning":"This combines personal lead data with confidential campaign and commerce performance.","risk_type":"private_data_read","severity":"medium","title":"Advertising, ecommerce, lead, and audience data is exposed","triggering_tools_or_skills":["meta_get_lead_form_submissions","google_analytics_get_ecommerce_performance","merchant_center_get_product_performance","meta_audience_insights"]},{"evidence":"Landing-page audit tools fetch resources, run Lighthouse-like analysis, and capture a screenshot for a target page.","reasoning":"User-selected destinations may be contacted by the service, so internal-address and redirect controls should be verified.","risk_type":"arbitrary_network_access","severity":"low","title":"Landing pages can be fetched and audited","triggering_tools_or_skills":["lp_audit_instant","lp_audit_lighthouse","lp_audit_resources","lp_audit_screenshot"]},{"evidence":"The server exposes list_skills and load_skill alongside 78 stored actions.","reasoning":"Runtime-loaded skills can change behavior without changing the static inventory and should be monitored.","risk_type":"generic_gateway","severity":"low","title":"Skills can be listed and loaded dynamically","triggering_tools_or_skills":["list_skills","load_skill","prompt_templates_run"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants access to connected Google Ads, GA4, Merchant Center, and Meta advertising accounts; exact OAuth scopes are not stated.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/f375224a-fc28-49a1-a173-450dd3339a4e.json","what_it_proves":"Candidate PR #125 record identity (name \"HYPD AI for Google Ads, Google Analytics, Meta Ads/Facebook Ads, Keyword Planner & Merchant Center\", publisher, type web_connector) and 78 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/f375224a-fc28-49a1-a173-450dd3339a4e: complete tool_names inventory (78 tools), remote streamable-http endpoint https://mcp.hypd.ai/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"HYPD executes GAQL and analytics queries over sensitive advertising accounts and dynamically loads server skills.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:f375224a-fc28-49a1-a173-450dd3339a4e","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 78 visible tools; names are read/audit oriented and no campaign write is declared, but runtime skill inventory is required.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"false","browser_control":"false","credential_or_admin_actions":"false","deletes_data":"false","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"false","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"false","spends_or_moves_money":"false"},"tools_or_skills_reviewed":78,"tools_or_skills_total":78},"name":"HYPD AI for Google Ads, Google Analytics, Meta Ads/Facebook Ads, Keyword Planner & Merchant Center","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=f375224a-fc28-49a1-a173-450dd3339a4e&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.hypd.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"HYPD AI","publisher_url":"https://www.hypd.ai/","remote_url":"https://mcp.hypd.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored.","evidence":"GAQL and configurable analytics reports can be executed: The inventory includes direct Google Ads Query Language execution and configurable GA4/Meta report tools over connected account data. | Skills can be listed and loaded dynamically: The server exposes list_skills and load_skill alongside 78 stored actions.","manual_risk_type":"query_execution,generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["google_ads_run_gaql","google_analytics_run_report","google_analytics_run_funnel_report","meta_insights_async","list_skills","load_skill","prompt_templates_run"]},{"description":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal lead data with confidential campaign and commerce performance.","evidence":"Advertising, ecommerce, lead, and audience data is exposed: The tools retrieve real ad accounts, lead-form submissions, ecommerce performance, product diagnostics, audiences, pixels, pages, and campaigns.","manual_risk_type":"private_data_read","remediation":{"block_tool_categories":["data_exfiltration"],"steps":["Use a least-privilege account limited to the information required by the workflow.","Restrict folders, projects, tenants, and other data scopes wherever the provider allows it.","Review access logs for unexpected reads or bulk retrieval."]},"risk_type":"reads_private_data","severity":"medium","title":"Advertising, ecommerce, lead, and audience data is exposed","triggering_tools":["meta_get_lead_form_submissions","google_analytics_get_ecommerce_performance","merchant_center_get_product_performance","meta_audience_insights"]},{"description":"This connector can send caller-provided data to an external service or publisher. Review findings: User-selected destinations may be contacted by the service, so internal-address and redirect controls should be verified.","evidence":"Landing pages can be fetched and audited: Landing-page audit tools fetch resources, run Lighthouse-like analysis, and capture a screenshot for a target page.","manual_risk_type":"arbitrary_network_access","remediation":{"block_tool_categories":["sends_externally"],"steps":["Do not include secrets, regulated data, or customer information unless the destination is approved.","Review the recipient's retention and deletion policy before enabling the connector."]},"risk_type":"forwards_data_to_third_party","severity":"low","title":"Landing pages can be fetched and audited","triggering_tools":["lp_audit_instant","lp_audit_lighthouse","lp_audit_resources","lp_audit_screenshot"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"contact@hypd.ai","tags":["forwards_data_to_third_party","network_access","oauth_required","reads_private_data","runs_code","web_connector"],"tools":[{"description":"","name":"ads_search_live"},{"description":"","name":"ads_transparency_advertiser"},{"description":"","name":"competitors_for_domain"},{"description":"","name":"google_ads_get_account_overview"},{"description":"","name":"google_ads_list_accounts"},{"description":"","name":"google_ads_list_merchant_center_links"},{"description":"","name":"google_ads_run_gaql","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored."}},{"description":"","name":"google_analytics_check_compatibility"},{"description":"","name":"google_analytics_compare_attribution"},{"description":"","name":"google_analytics_describe_server"},{"description":"","name":"google_analytics_estimate_report_rows"},{"description":"","name":"google_analytics_get_campaign_performance"},{"description":"","name":"google_analytics_get_conversion_paths"},{"description":"","name":"google_analytics_get_custom_dimensions_and_metrics"},{"description":"","name":"google_analytics_get_ecommerce_performance","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal lead data with confidential campaign and commerce performance."}},{"description":"","name":"google_analytics_get_landing_page_performance"},{"description":"","name":"google_analytics_get_metadata"},{"description":"","name":"google_analytics_get_property_details"},{"description":"","name":"google_analytics_list_account_summaries"},{"description":"","name":"google_analytics_list_google_ads_links"},{"description":"","name":"google_analytics_run_funnel_report","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored."}},{"description":"","name":"google_analytics_run_realtime_report"},{"description":"","name":"google_analytics_run_report","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored."}},{"description":"","name":"init"},{"description":"","name":"list_skills","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored."}},{"description":"","name":"load_skill","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored."}},{"description":"","name":"lp_audit_instant"},{"description":"","name":"lp_audit_lighthouse"},{"description":"","name":"lp_audit_resources"},{"description":"","name":"lp_audit_screenshot"},{"description":"","name":"merchant_center_get_product"},{"description":"","name":"merchant_center_get_product_status"},{"description":"","name":"merchant_center_list_account_issues"},{"description":"","name":"merchant_center_list_accounts"},{"description":"","name":"merchant_center_list_ads_links"},{"description":"","name":"merchant_center_list_products"},{"description":"","name":"meta_ad_library_ad_detail"},{"description":"","name":"meta_ad_library_advertiser_ads"},{"description":"","name":"meta_ad_library_advertisers"},{"description":"","name":"meta_ad_library_search"},{"description":"","name":"prompt_templates_list"},{"description":"","name":"prompt_templates_run","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored."}},{"description":"","name":"research_estimate_ad_traffic"},{"description":"","name":"research_find_keywords"},{"description":"","name":"research_get_search_volume"},{"description":"","name":"serp_results"},{"description":"","name":"shopping_sellers"},{"description":"","name":"shopping_top_products"},{"description":"","name":"merchant_center_summarize_issues"},{"description":"","name":"merchant_center_list_disapproved_products"},{"description":"","name":"merchant_center_get_product_performance","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal lead data with confidential campaign and commerce performance."}},{"description":"","name":"merchant_center_get_price_competitiveness"},{"description":"","name":"merchant_center_get_competitive_visibility"},{"description":"","name":"meta_activities"},{"description":"","name":"meta_audience_insights","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal lead data with confidential campaign and commerce performance."}},{"description":"","name":"meta_catalog_diagnostics"},{"description":"","name":"meta_get_ads"},{"description":"","name":"meta_get_adsets"},{"description":"","name":"meta_get_campaigns"},{"description":"","name":"meta_get_creative"},{"description":"","name":"meta_get_lead_form_submissions","risk":{"category":"data_exfiltration","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can read information available to the connected account and return it to the AI. Review findings: This combines personal lead data with confidential campaign and commerce performance."}},{"description":"","name":"meta_get_metric_definition"},{"description":"","name":"meta_get_object"},{"description":"","name":"meta_get_policy"},{"description":"","name":"meta_get_product"},{"description":"","name":"meta_get_recommendations"},{"description":"","name":"meta_insights"},{"description":"","name":"meta_insights_async","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: User-configured queries can retrieve broad advertising, conversion, lead, and ecommerce datasets and require strict account/row limits.; Runtime-loaded skills can change behavior without changing the static inventory and should be monitored."}},{"description":"","name":"meta_list_ad_accounts"},{"description":"","name":"meta_list_catalog_products"},{"description":"","name":"meta_list_catalogs"},{"description":"","name":"meta_list_feed_rules"},{"description":"","name":"meta_list_lead_forms"},{"description":"","name":"meta_list_pages"},{"description":"","name":"meta_list_pixels"},{"description":"","name":"meta_list_product_sets"},{"description":"","name":"meta_resolve_catalogs"},{"description":"","name":"meta_search_targeting"}],"tools_count":78,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/f375224a-fc28-49a1-a173-450dd3339a4e","uuid":"65c9ec77-34e7-547b-9c2d-c1c27f06f9fd","verification_tier":"community","version":""},"query_key":"hypd ai hypd ai for google ads google analytics meta ads facebook ads keyword planner merchant center","schema_version":1,"status":"match"}