{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-08-19","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Manage advertising, search visibility and marketing data through Ryze AI. Review performance and update supported campaigns, commerce or CRM records. Available tools depend on the platforms connected to your workspace.","did":"051284f8-652d-4b6b-ad98-edf23a44bf21","documentation_url":"https://www.get-ryze.ai/how-to-connect-claude-to-google-meta-ads-mcp","editorial_description":{"extended_description":"Workflows include keyword research, budget and bid changes, negative keywords, competitor ad research, indexation checks, sitemap submission and AI-referral analysis. Supported integrations also include Merchant Center, Shopify, HubSpot, PostHog and Webflow. Actions use the permissions of the connected accounts; the source describes item-by-item confirmation for destructive operations. At least one platform connection is required.","schema_version":1,"summary":"Manage advertising, search visibility and marketing data through Ryze AI.\nReview performance and update supported campaigns, commerce or CRM records.\nAvailable tools depend on the platforms connected to your workspace."},"homepage_url":"","icon":"","id":"051284f8-652d-4b6b-ad98-edf23a44bf21","installs":0,"last_scanned":"","license":"","long_description":"Workflows include keyword research, budget and bid changes, negative keywords, competitor ad research, indexation checks, sitemap submission and AI-referral analysis. Supported integrations also include Merchant Center, Shopify, HubSpot, PostHog and Webflow. Actions use the permissions of the connected accounts; the source describes item-by-item confirmation for destructive operations. At least one platform connection is required.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"The complete inventory explicitly declares delete operations across seven connected services.","reasoning":"These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources.","risk_type":"data_deletion","severity":"high","title":"Multiple providers expose raw deletion","triggering_tools_or_skills":["google_ads__runRawMutateDelete","hubspot__delete","meta_ads__runGraphDelete","openai_ads__delete","posthog__delete","shopify__delete","webflow__delete"]},{"evidence":"Raw GAQL, graph, reporting, and mutation interfaces accept caller-selected operations against authenticated APIs.","reasoning":"Broad query and mutation gateways can access or change data beyond narrowly typed actions.","risk_type":"query_execution","severity":"high","title":"Raw provider queries and mutations execute","triggering_tools_or_skills":["google_ads__runRawGaql","google_ads__runRawMutate","google_analytics__runRawReport","meta_ads__runGraphWrite","meta_ads__runRawInsights"]},{"evidence":"The connector can change live ad configuration and automation schedules across paid advertising providers.","reasoning":"Budget, bid, campaign, or schedule changes can cause consequential advertising expenditure.","risk_type":"financial_transaction","severity":"high","title":"Ad mutations and schedules can affect paid spend","triggering_tools_or_skills":["google_ads__runRawMutate","google_ads__applyRecommendation","meta_ads__runGraphWrite","native__patch_schedule"]},{"evidence":"The Directory description states schedules deliver reports by email or Slack and the tool can patch those schedules.","reasoning":"Changing an enabled delivery schedule can cause future messages under the user's integration.","risk_type":"messaging_as_user","severity":"high","title":"Scheduled reports can deliver to external channels","triggering_tools_or_skills":["native__patch_schedule"]},{"evidence":"Generic write and raw mutation tools operate across authenticated business platforms with provider-dependent authorization.","reasoning":"They can modify sensitive account configuration and audiences, with ambiguous sub-action limits.","risk_type":"credential_admin","severity":"high","title":"Broad raw gateways act with connected-account authority","triggering_tools_or_skills":["google_ads__runRawCustomAudienceMutate","meta_ads__runGraphWrite","hubspot__write","shopify__write"]},{"evidence":"The Directory description says tools shown depend on which provider connections are enabled.","reasoning":"Runtime action surface is dynamic and authorization differs across providers.","risk_type":"generic_gateway","severity":"low","title":"Capabilities vary by connected services","triggering_tools_or_skills":["native__list_connections","native__get_provider_docs"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication required across connected Google, Meta, HubSpot, OpenAI Ads, PostHog, Shopify, Slack, and Webflow accounts; scopes vary by enabled connection.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/051284f8-652d-4b6b-ad98-edf23a44bf21.json","what_it_proves":"Candidate PR #125 record identity (name \"Ryze AI — Google Ads, Meta Ads, SEO & GEO\", publisher, type web_connector) and 73 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/051284f8-652d-4b6b-ad98-edf23a44bf21: complete tool_names inventory (73 tools), remote streamable-http endpoint https://connector.get-ryze.ai/mcp, auth_posture auth_required, directory tier community"}],"primary_reason":"Explicit multi-provider delete, raw mutation, paid-ad, and scheduled-delivery actions establish broad high-impact capability.","provisional_risk":null,"publication_recommendation":"accept","requires_runtime_verification":true,"review_key":"claude:051284f8-652d-4b6b-ad98-edf23a44bf21","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 73 names. Runtime validation is needed for provider-specific scopes, confirmation gates, schedule delivery behavior, URL-fetch restrictions, and raw mutation allowlists.","risk_domains":{"arbitrary_network_access":"true","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"false","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"true","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":73,"tools_or_skills_total":73},"name":"Ryze AI — Google Ads, Meta Ads, SEO & GEO","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=051284f8-652d-4b6b-ad98-edf23a44bf21&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.get-ryze.ai/privacy","provisional_risk":null,"publication_recommendation":"accept","publisher":"Ryze AI","publisher_url":"https://www.get-ryze.ai/","remote_url":"https://connector.get-ryze.ai/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources.","evidence":"Multiple providers expose raw deletion: The complete inventory explicitly declares delete operations across seven connected services.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Multiple providers expose raw deletion","triggering_tools":["google_ads__runRawMutateDelete","hubspot__delete","meta_ads__runGraphDelete","openai_ads__delete","posthog__delete","shopify__delete","webflow__delete"]},{"description":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Broad query and mutation gateways can access or change data beyond narrowly typed actions.; Runtime action surface is dynamic and authorization differs across providers.","evidence":"Raw provider queries and mutations execute: Raw GAQL, graph, reporting, and mutation interfaces accept caller-selected operations against authenticated APIs. | Capabilities vary by connected services: The Directory description says tools shown depend on which provider connections are enabled.","manual_risk_type":"query_execution,generic_gateway","remediation":{"block_tool_categories":["code_execution"],"steps":["Run only in a sandbox with least-privilege credentials and strict resource limits.","Disable generic execution gateways unless their reachable action set is fully understood.","Require approval before execution against production systems or sensitive data."]},"risk_type":"runs_code","severity":"high","title":"Can execute code, queries, or dynamic actions","triggering_tools":["google_ads__runRawGaql","google_ads__runRawMutate","google_analytics__runRawReport","meta_ads__runGraphWrite","meta_ads__runRawInsights","native__list_connections","native__get_provider_docs"]},{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Budget, bid, campaign, or schedule changes can cause consequential advertising expenditure.","evidence":"Ad mutations and schedules can affect paid spend: The connector can change live ad configuration and automation schedules across paid advertising providers.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Ad mutations and schedules can affect paid spend","triggering_tools":["google_ads__runRawMutate","google_ads__applyRecommendation","meta_ads__runGraphWrite","native__patch_schedule"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: Changing an enabled delivery schedule can cause future messages under the user's integration.","evidence":"Scheduled reports can deliver to external channels: The Directory description states schedules deliver reports by email or Slack and the tool can patch those schedules.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Scheduled reports can deliver to external channels","triggering_tools":["native__patch_schedule"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They can modify sensitive account configuration and audiences, with ambiguous sub-action limits.","evidence":"Broad raw gateways act with connected-account authority: Generic write and raw mutation tools operate across authenticated business platforms with provider-dependent authorization.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Broad raw gateways act with connected-account authority","triggering_tools":["google_ads__runRawCustomAudienceMutate","meta_ads__runGraphWrite","hubspot__write","shopify__write"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"hello@get-ryze.ai","tags":["deletes_data","modifies_data","network_access","oauth_required","runs_code","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"google_ads__applyRecommendation","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Budget, bid, campaign, or schedule changes can cause consequential advertising expenditure."}},{"description":"","name":"google_ads__dismissRecommendation"},{"description":"","name":"google_ads__generateKeywordHistoricalMetrics"},{"description":"","name":"google_ads__generateKeywordIdeas"},{"description":"","name":"google_ads__getAccountHierarchy"},{"description":"","name":"google_ads__getAccountSummary"},{"description":"","name":"google_ads__listAccessibleCustomers"},{"description":"","name":"google_ads__listConversionActions"},{"description":"","name":"google_ads__listRecommendations"},{"description":"","name":"google_ads__runRawCustomAudienceMutate","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They can modify sensitive account configuration and audiences, with ambiguous sub-action limits."}},{"description":"","name":"google_ads__runRawGaql","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Broad query and mutation gateways can access or change data beyond narrowly typed actions.; Runtime action surface is dynamic and authorization differs across providers."}},{"description":"","name":"google_ads__runRawMutate","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: Budget, bid, campaign, or schedule changes can cause consequential advertising expenditure."}},{"description":"","name":"google_ads__runRawMutateDelete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources."}},{"description":"","name":"google_ads__uploadImageAsset"},{"description":"","name":"google_analytics__getAIReferrals"},{"description":"","name":"google_analytics__getAiLandingPages"},{"description":"","name":"google_analytics__getAiTrafficByEngine"},{"description":"","name":"google_analytics__getAiTrafficDaily"},{"description":"","name":"google_analytics__listAccountSummaries"},{"description":"","name":"google_analytics__runAdminRead"},{"description":"","name":"google_analytics__runPivotReport"},{"description":"","name":"google_analytics__runRawReport","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Broad query and mutation gateways can access or change data beyond narrowly typed actions.; Runtime action surface is dynamic and authorization differs across providers."}},{"description":"","name":"google_analytics__runRealtimeReport"},{"description":"","name":"google_merchant_center__getAccountIssues"},{"description":"","name":"google_merchant_center__getAggregateProductStatuses"},{"description":"","name":"google_merchant_center__getProduct"},{"description":"","name":"google_merchant_center__listMerchantAccounts"},{"description":"","name":"google_merchant_center__listProducts"},{"description":"","name":"google_merchant_center__runRawReport"},{"description":"","name":"google_search_console__getIndexationSummary"},{"description":"","name":"google_search_console__inspectUrl"},{"description":"","name":"google_search_console__listSites"},{"description":"","name":"google_search_console__runRawSearchAnalytics"},{"description":"","name":"google_search_console__submitSitemap"},{"description":"","name":"hubspot__delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources."}},{"description":"","name":"hubspot__listObjects"},{"description":"","name":"hubspot__read"},{"description":"","name":"hubspot__search"},{"description":"","name":"hubspot__write","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They can modify sensitive account configuration and audiences, with ambiguous sub-action limits."}},{"description":"","name":"meta_ads__getAccountSummary"},{"description":"","name":"meta_ads__getCreative"},{"description":"","name":"meta_ads__listAdAccounts"},{"description":"","name":"meta_ads__listCreatives"},{"description":"","name":"meta_ads__listLeadForms"},{"description":"","name":"meta_ads__listLeads"},{"description":"","name":"meta_ads__runGraphDelete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources."}},{"description":"","name":"meta_ads__runGraphRead"},{"description":"","name":"meta_ads__runGraphWrite","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They can modify sensitive account configuration and audiences, with ambiguous sub-action limits."}},{"description":"","name":"meta_ads__runRawInsights","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Broad query and mutation gateways can access or change data beyond narrowly typed actions.; Runtime action surface is dynamic and authorization differs across providers."}},{"description":"","name":"meta_ads__searchAdLibrary"},{"description":"","name":"meta_ads__uploadImageFromUrl"},{"description":"","name":"native__get_provider_docs","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Broad query and mutation gateways can access or change data beyond narrowly typed actions.; Runtime action surface is dynamic and authorization differs across providers."}},{"description":"","name":"native__give_feedback"},{"description":"","name":"native__list_connections","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can execute code, commands, queries, or dynamically selected actions. Review findings: Broad query and mutation gateways can access or change data beyond narrowly typed actions.; Runtime action surface is dynamic and authorization differs across providers."}},{"description":"","name":"native__list_schedules"},{"description":"","name":"native__patch_schedule","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: Changing an enabled delivery schedule can cause future messages under the user's integration."}},{"description":"","name":"openai_ads__delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources."}},{"description":"","name":"openai_ads__insights"},{"description":"","name":"openai_ads__read"},{"description":"","name":"openai_ads__uploadFromUrl"},{"description":"","name":"openai_ads__write"},{"description":"","name":"posthog__delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources."}},{"description":"","name":"posthog__read"},{"description":"","name":"posthog__write"},{"description":"","name":"shopify__delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources."}},{"description":"","name":"shopify__edit_content"},{"description":"","name":"shopify__read"},{"description":"","name":"shopify__search_content"},{"description":"","name":"shopify__write","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They can modify sensitive account configuration and audiences, with ambiguous sub-action limits."}},{"description":"","name":"slack__list_channels"},{"description":"","name":"webflow__delete","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: These tools can irreversibly remove advertising, CRM, analytics, commerce, or site resources."}},{"description":"","name":"webflow__read"},{"description":"","name":"webflow__write"}],"tools_count":73,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/051284f8-652d-4b6b-ad98-edf23a44bf21","uuid":"9d323d12-9e2f-56ee-8ee7-cc298b8fdd23","verification_tier":"community","version":""},"query_key":"ryze ai ryze ai google ads meta ads seo geo","schema_version":1,"status":"match"}