Meta Ads (mattyu-dev) MCP Server
meta-ads-mcp-server
PyPI
v0.1.0
Published by mattyu-dev — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([meta.leads.export]) co-exist with external-action tools ([meta.leads.test_submit]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [meta.leads.export] → sinks [meta.leads.test_submit]
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow meta.leads.export → meta.leads.test_submit
Tools 200
Each tool and what it can reach — statically extracted from the published source.
meta.leads.exportingests untrusted inputmeta.leads.test_submitnetwork egressmeta.advantage.check_v24_readinessno sensitive capabilitymeta.advantage.create_app_campaignno sensitive capabilitymeta.advantage.create_catalog_adsno sensitive capabilitymeta.advantage.create_shopping_campaignno sensitive capabilitymeta.advantage.enable_audienceno sensitive capabilitymeta.advantage.enable_budgetno sensitive capabilitymeta.advantage.enable_creativeno sensitive capabilitymeta.advantage.enable_placementsno sensitive capability
Show 190 more tools ↓
meta.advantage.migrate_to_advantage_plusno sensitive capabilitymeta.advantage.monitor_performanceno sensitive capabilitymeta.aggregate.bottom_performersno sensitive capabilitymeta.aggregate.by_objectiveno sensitive capabilitymeta.aggregate.by_statusno sensitive capabilitymeta.aggregate.performance_summaryno sensitive capabilitymeta.aggregate.spending_distributionno sensitive capabilitymeta.aggregate.top_performersno sensitive capabilitymeta.analyze_cannibalizationno sensitive capabilitymeta.analyze_contribution_marginsno sensitive capabilitymeta.analyze_efficiency_frontierno sensitive capabilitymeta.analyze_incrementalityno sensitive capabilitymeta.analyze_performance_cohortno sensitive capabilitymeta.analyze_saturation_pointsno sensitive capabilitymeta.analyze_time_decayno sensitive capabilitymeta.ar_vr.create_3d_showcaseno sensitive capabilitymeta.ar_vr.create_ar_shoppingno sensitive capabilitymeta.ar_vr.create_horizon_adno sensitive capabilitymeta.ar_vr.create_spark_arno sensitive capabilitymeta.ar_vr.create_virtual_tryonno sensitive capabilitymeta.ar_vr.get_analyticsno sensitive capabilitymeta.attribution.cross_deviceno sensitive capabilitymeta.attribution.cross_platform_journeyno sensitive capabilitymeta.attribution.data_drivenno sensitive capabilitymeta.attribution.first_touchno sensitive capabilitymeta.attribution.incrementality_testno sensitive capabilitymeta.attribution.last_touchno sensitive capabilitymeta.attribution.position_basedno sensitive capabilitymeta.attribution.time_decayno sensitive capabilitymeta.audience_overlapno sensitive capabilitymeta.audience.check_flaggedno sensitive capabilitymeta.brand_safety.analyze_suitabilityno sensitive capabilitymeta.brand_safety.check_complianceno sensitive capabilitymeta.brand_safety.manage_block_listsno sensitive capabilitymeta.brand_safety.predict_approvalno sensitive capabilitymeta.bulk_status_updateno sensitive capabilitymeta.business.getno sensitive capabilitymeta.business.listno sensitive capabilitymeta.business.list_ad_accountsno sensitive capabilitymeta.business.list_pagesno sensitive capabilitymeta.business.list_usersno sensitive capabilitymeta.calculate_correlationno sensitive capabilitymeta.calculate_efficiency_scoreno sensitive capabilitymeta.calculate_pacingno sensitive capabilitymeta.calculate_percentilesno sensitive capabilitymeta.calculate_roasno sensitive capabilitymeta.calculate_roino sensitive capabilitymeta.calculate_trendno sensitive capabilitymeta.calculate_varianceno sensitive capabilitymeta.campaign_healthno sensitive capabilitymeta.catalog.analyze_performanceno sensitive capabilitymeta.catalog.automate_retargetingno sensitive capabilitymeta.catalog.build_product_setsno sensitive capabilitymeta.catalog.cross_sell_recommendationsno sensitive capabilitymeta.catalog.monitor_healthno sensitive capabilitymeta.catalog.optimize_feedno sensitive capabilitymeta.catalog.setup_abandoned_cartno sensitive capabilitymeta.catalog.syncno sensitive capabilitymeta.ccco.create_adsetno sensitive capabilitymeta.ccco.create_campaignno sensitive capabilitymeta.ccco.get_insightsno sensitive capabilitymeta.ccco.validateno sensitive capabilitymeta.commerce.build_collectionsno sensitive capabilitymeta.commerce.create_ad_campaignno sensitive capabilitymeta.commerce.create_instagram_shopno sensitive capabilitymeta.commerce.create_story_templatesno sensitive capabilitymeta.commerce.get_analyticsno sensitive capabilitymeta.commerce.optimize_checkoutno sensitive capabilitymeta.commerce.schedule_liveno sensitive capabilitymeta.commerce.tag_productsno sensitive capabilitymeta.compare_adsetsno sensitive capabilitymeta.compare_campaignsno sensitive capabilitymeta.compare_creativesno sensitive capabilitymeta.compare_time_periodsno sensitive capabilitymeta.compare_to_account_averageno sensitive capabilitymeta.competitive.share_of_voiceno sensitive capabilitymeta.conversion.analyze_formsno sensitive capabilitymeta.conversion.analyze_funnelno sensitive capabilitymeta.conversion.analyze_micro_conversionsno sensitive capabilitymeta.conversion.analyze_pathsno sensitive capabilitymeta.conversion.check_flaggedno sensitive capabilitymeta.conversion.compare_devicesno sensitive capabilitymeta.conversion.detect_cart_abandonmentno sensitive capabilitymeta.conversion.optimize_checkoutno sensitive capabilitymeta.conversion.optimize_landing_pagesno sensitive capabilitymeta.conversion.optimize_windowsno sensitive capabilitymeta.conversion.track_post_clickno sensitive capabilitymeta.cost_efficiency.analyze_auctionno sensitive capabilitymeta.cost_efficiency.calculate_marginal_cpano sensitive capabilitymeta.cost_efficiency.diagnose_pacingno sensitive capabilitymeta.cost_efficiency.identify_wasteno sensitive capabilitymeta.createno sensitive capabilitymeta.create_custom_audienceno sensitive capabilitymeta.create_custom_conversionno sensitive capabilitymeta.create_lookalike_audienceno sensitive capabilitymeta.create_pixelno sensitive capabilitymeta.creative_analysisno sensitive capabilitymeta.creative.analyze_copyno sensitive capabilitymeta.creative.analyze_dcono sensitive capabilitymeta.creative.analyze_emotional_appealno sensitive capabilitymeta.creative.analyze_testingno sensitive capabilitymeta.creative.benchmarkno sensitive capabilitymeta.creative.compare_formatsno sensitive capabilitymeta.creative.score_message_matchno sensitive capabilitymeta.creative.score_visualsno sensitive capabilitymeta.cross_account_insightsno sensitive capabilitymeta.cross_account_operationno sensitive capabilitymeta.diagnostics.analyze_fatigueno sensitive capabilitymeta.diagnostics.analyze_funnelno sensitive capabilitymeta.diagnostics.audit_biddingno sensitive capabilitymeta.diagnostics.detect_degradationno sensitive capabilitymeta.diagnostics.detect_interferenceno sensitive capabilitymeta.diagnostics.diagnose_learningno sensitive capabilitymeta.diagnostics.score_audienceno sensitive capabilitymeta.experiments.adaptiveno sensitive capabilitymeta.experiments.designno sensitive capabilitymeta.experiments.multi_cellno sensitive capabilitymeta.experiments.sequentialno sensitive capabilitymeta.fraud.analyze_click_patternsno sensitive capabilitymeta.fraud.detect_conversion_fraudno sensitive capabilitymeta.fraud.filter_invalid_trafficno sensitive capabilitymeta.fraud.monitor_account_securityno sensitive capabilitymeta.fraud.score_placement_qualityno sensitive capabilitymeta.get_auction_insightsno sensitive capabilitymeta.get_audience_insightsno sensitive capabilitymeta.get_audit_logsno sensitive capabilitymeta.get_business_hierarchyno sensitive capabilitymeta.get_creative_assetsno sensitive capabilitymeta.get_metricsno sensitive capabilitymeta.get_performance_metricsno sensitive capabilitymeta.get_pixelno sensitive capabilitymeta.get_pixel_statsno sensitive capabilitymeta.graph.requestno sensitive capabilitymeta.insights.getno sensitive capabilitymeta.leads.create_formno sensitive capabilitymeta.leads.delete_formno sensitive capabilitymeta.leads.get_formno sensitive capabilitymeta.leads.list_leadsno sensitive capabilitymeta.leads.preview_formno sensitive capabilitymeta.leads.update_formno sensitive capabilitymeta.list_conversionsno sensitive capabilitymeta.lookalike.validate_specno sensitive capabilitymeta.messaging.build_chatbotno sensitive capabilitymeta.messaging.get_analyticsno sensitive capabilitymeta.messaging.setupno sensitive capabilitymeta.messaging.sync_catalogno sensitive capabilitymeta.monitor.budget_healthno sensitive capabilitymeta.multi_platform.compare_performanceno sensitive capabilitymeta.multi_platform.create_instagram_directno sensitive capabilitymeta.multi_platform.create_messenger_leadno sensitive capabilitymeta.multi_platform.create_multi_advertiserno sensitive capabilitymeta.multi_platform.create_whatsappno sensitive capabilitymeta.multi_platform.orchestrateno sensitive capabilitymeta.optimization_suggestionsno sensitive capabilitymeta.optimize.audience_prioritizationno sensitive capabilitymeta.optimize.bidsno sensitive capabilitymeta.optimize.budget_allocationno sensitive capabilitymeta.optimize.campaign_mixno sensitive capabilitymeta.optimize.daypartingno sensitive capabilitymeta.partnerships.create_adno sensitive capabilitymeta.partnerships.discoverno sensitive capabilitymeta.partnerships.license_ugcno sensitive capabilitymeta.partnerships.manageno sensitive capabilitymeta.partnerships.track_roino sensitive capabilitymeta.portfolio.allocate_budget_across_brandsno sensitive capabilitymeta.portfolio.benchmark_by_industryno sensitive capabilitymeta.portfolio.compare_brandsno sensitive capabilitymeta.portfolio.health_scorecardno sensitive capabilitymeta.portfolio.identify_outliersno sensitive capabilitymeta.predict_audience_expansionno sensitive capabilitymeta.predict_budget_outcomeno sensitive capabilitymeta.predict_competitive_pressureno sensitive capabilitymeta.predict_creative_lifespanno sensitive capabilitymeta.predict_optimal_timingno sensitive capabilitymeta.predict_seasonalityno sensitive capabilitymeta.realtime.enable_autopilotno sensitive capabilitymeta.realtime.launch_war_roomno sensitive capabilitymeta.realtime.monitor_competitionno sensitive capabilitymeta.realtime.predict_performanceno sensitive capabilitymeta.send_server_side_eventno sensitive capabilitymeta.set_bid_capno sensitive capabilitymeta.set_bid_strategyno sensitive capabilitymeta.set_target_costno sensitive capabilitymeta.setup_observabilityno sensitive capabilitymeta.simulate_bid_changeno sensitive capabilitymeta.track_changesno sensitive capabilitymeta.updateno sensitive capabilitymeta.update_pixelno sensitive capabilitymeta.upload_creative_assetno sensitive capabilitymeta.validate_account_accessno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.1.0 latest |
A 96/100 | 1 | 1.9.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan meta-ads-mcp-server --online --registry pypiOther implementations of Meta Ads 5
Independent packages implementing the same tool, scanned with the same engine. Compare all 6 side by side →
Security scan results for the Meta Ads (getscaleforge) MCP server.
Security scan results for the Meta Ads (mikusnuz) MCP server.
Security scan results for the Meta Ads (pipeboard-co) MCP server.
Security scan results for the Meta Ads (npm) MCP server.
Security scan results for the Meta Ads (npm) MCP server.
More in Developer Tools
Security scan results for the 1stay MCP server.
Security scan results for the Adguard Home MCP server.
Security scan results for the Ado Browser MCP server.
Security scan results for the Adobe Experience Dev MCP server.
Security scan results for the Aemet MCP server.
Security scan results for the Affinity Mcp Bridge MCP server.