Meta Ads — the complete, unedited output of the deterministic mcptrustchecker engine v1.9.0, scanned . Every finding, capability tag and score component below is exactly what the engine produced — no AI, no post-processing.
{
"tool": {
"name": "mcptrustchecker",
"version": "1.9.0",
"methodologyVersion": "mcptrustchecker-1.9"
},
"target": {
"id": "meta-ads-mcp-server",
"source": {
"kind": "package",
"origin": "meta-ads-mcp-server"
},
"server": {
"name": "meta-ads-mcp-server"
}
},
"grade": "A",
"score": {
"score": 96,
"threatScore": 100,
"grade": "A",
"band": "A",
"categorySubtotals": {
"injection": 0,
"exfiltration": 0,
"permissions": 0,
"supply-chain": 0,
"network": 0,
"hygiene": 0
},
"vector": [
{
"kind": "client",
"term": "capability-exposure",
"level": "moderate",
"label": "capability blast radius (moderate) — client exposure if the model is manipulated",
"appliedPenalty": 3
},
{
"kind": "client",
"term": "verification-discount",
"level": "repo",
"label": "publisher verification (public source) — no provenance, but the source is public and inspectable",
"appliedPenalty": 1
},
{
"kind": "client",
"term": "coverage-honesty",
"level": "source",
"label": "inspection depth (source) — how much of the target the scan could see",
"appliedPenalty": 0
}
],
"gatesFired": [],
"methodologyVersion": "mcptrustchecker-1.9"
},
"capability": {
"level": "moderate",
"reasons": [
"ingests untrusted external content (a prompt-injection entry point)",
"can send data / act on an external service"
],
"tags": [
"untrusted-input",
"external-sink"
]
},
"coverage": {
"level": "source",
"inputs": {
"toolSurface": true,
"implementationSource": true,
"packageMetadata": true,
"liveTransport": false
},
"caveats": [
"Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command \"npx -y <package>\"."
]
},
"findings": [
{
"ruleId": "MTC-FLOW-005",
"title": "Untrusted input can drive an external action",
"category": "exfiltration",
"severity": "medium",
"confidence": "strong",
"description": "Untrusted-input tools ([meta.leads.export]) co-exist with external-action tools ([meta.leads.test_submit]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.",
"remediation": "Require confirmation for state-changing/egress actions triggered after processing untrusted content.",
"location": {
"kind": "flow",
"name": "meta.leads.export → meta.leads.test_submit"
},
"evidence": "untrusted [meta.leads.export] → sinks [meta.leads.test_submit]",
"owasp": "LLM06:2025 Excessive Agency",
"references": [],
"data": {
"untrusted": [
"meta.leads.export"
],
"sinks": [
"meta.leads.test_submit"
]
}
}
],
"toxicFlows": [
{
"id": "flow-1",
"severity": "medium",
"confidence": "strong",
"untrustedInput": [
"meta.leads.export"
],
"sensitiveSource": [],
"externalSink": [
"meta.leads.test_submit"
],
"selfContained": false,
"description": "Untrusted input can drive an external action even though no sensitive source is exposed."
}
],
"capabilities": [
{
"tool": "meta.create",
"tags": [],
"reasons": {}
},
{
"tool": "meta.update",
"tags": [],
"reasons": {}
},
{
"tool": "meta.bulk_status_update",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.create_shopping_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.create_app_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.enable_creative",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.enable_placements",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.enable_audience",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.enable_budget",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.create_catalog_ads",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.monitor_performance",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.migrate_to_advantage_plus",
"tags": [],
"reasons": {}
},
{
"tool": "meta.advantage.check_v24_readiness",
"tags": [],
"reasons": {}
},
{
"tool": "meta.aggregate.by_objective",
"tags": [],
"reasons": {}
},
{
"tool": "meta.aggregate.by_status",
"tags": [],
"reasons": {}
},
{
"tool": "meta.aggregate.spending_distribution",
"tags": [],
"reasons": {}
},
{
"tool": "meta.aggregate.performance_summary",
"tags": [],
"reasons": {}
},
{
"tool": "meta.aggregate.top_performers",
"tags": [],
"reasons": {}
},
{
"tool": "meta.aggregate.bottom_performers",
"tags": [],
"reasons": {}
},
{
"tool": "meta.campaign_health",
"tags": [],
"reasons": {}
},
{
"tool": "meta.optimization_suggestions",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative_analysis",
"tags": [],
"reasons": {}
},
{
"tool": "meta.audience_overlap",
"tags": [],
"reasons": {}
},
{
"tool": "meta.analyze_performance_cohort",
"tags": [],
"reasons": {}
},
{
"tool": "meta.analyze_efficiency_frontier",
"tags": [],
"reasons": {}
},
{
"tool": "meta.analyze_cannibalization",
"tags": [],
"reasons": {}
},
{
"tool": "meta.analyze_time_decay",
"tags": [],
"reasons": {}
},
{
"tool": "meta.analyze_incrementality",
"tags": [],
"reasons": {}
},
{
"tool": "meta.analyze_contribution_margins",
"tags": [],
"reasons": {}
},
{
"tool": "meta.analyze_saturation_points",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ar_vr.create_spark_ar",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ar_vr.create_virtual_tryon",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ar_vr.create_3d_showcase",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ar_vr.create_ar_shopping",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ar_vr.create_horizon_ad",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ar_vr.get_analytics",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.cross_platform_journey",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.first_touch",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.last_touch",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.time_decay",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.position_based",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.data_driven",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.incrementality_test",
"tags": [],
"reasons": {}
},
{
"tool": "meta.attribution.cross_device",
"tags": [],
"reasons": {}
},
{
"tool": "meta.create_custom_audience",
"tags": [],
"reasons": {}
},
{
"tool": "meta.create_lookalike_audience",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_audience_insights",
"tags": [],
"reasons": {}
},
{
"tool": "meta.audience.check_flagged",
"tags": [],
"reasons": {}
},
{
"tool": "meta.lookalike.validate_spec",
"tags": [],
"reasons": {}
},
{
"tool": "meta.graph.request",
"tags": [],
"reasons": {}
},
{
"tool": "meta.set_bid_strategy",
"tags": [],
"reasons": {}
},
{
"tool": "meta.set_bid_cap",
"tags": [],
"reasons": {}
},
{
"tool": "meta.set_target_cost",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_auction_insights",
"tags": [],
"reasons": {}
},
{
"tool": "meta.simulate_bid_change",
"tags": [],
"reasons": {}
},
{
"tool": "meta.brand_safety.manage_block_lists",
"tags": [],
"reasons": {}
},
{
"tool": "meta.brand_safety.check_compliance",
"tags": [],
"reasons": {}
},
{
"tool": "meta.brand_safety.analyze_suitability",
"tags": [],
"reasons": {}
},
{
"tool": "meta.brand_safety.predict_approval",
"tags": [],
"reasons": {}
},
{
"tool": "meta.business.list",
"tags": [],
"reasons": {}
},
{
"tool": "meta.business.get",
"tags": [],
"reasons": {}
},
{
"tool": "meta.business.list_users",
"tags": [],
"reasons": {}
},
{
"tool": "meta.business.list_pages",
"tags": [],
"reasons": {}
},
{
"tool": "meta.business.list_ad_accounts",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.sync",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.build_product_sets",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.optimize_feed",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.analyze_performance",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.setup_abandoned_cart",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.automate_retargeting",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.monitor_health",
"tags": [],
"reasons": {}
},
{
"tool": "meta.catalog.cross_sell_recommendations",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ccco.create_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ccco.create_adset",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ccco.get_insights",
"tags": [],
"reasons": {}
},
{
"tool": "meta.ccco.validate",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.create_instagram_shop",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.tag_products",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.get_analytics",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.schedule_live",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.build_collections",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.create_ad_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.optimize_checkout",
"tags": [],
"reasons": {}
},
{
"tool": "meta.commerce.create_story_templates",
"tags": [],
"reasons": {}
},
{
"tool": "meta.compare_campaigns",
"tags": [],
"reasons": {}
},
{
"tool": "meta.compare_adsets",
"tags": [],
"reasons": {}
},
{
"tool": "meta.compare_creatives",
"tags": [],
"reasons": {}
},
{
"tool": "meta.compare_time_periods",
"tags": [],
"reasons": {}
},
{
"tool": "meta.compare_to_account_average",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_percentiles",
"tags": [],
"reasons": {}
},
{
"tool": "meta.competitive.share_of_voice",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.analyze_funnel",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.optimize_landing_pages",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.track_post_click",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.analyze_paths",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.detect_cart_abandonment",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.optimize_checkout",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.analyze_forms",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.compare_devices",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.optimize_windows",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.analyze_micro_conversions",
"tags": [],
"reasons": {}
},
{
"tool": "meta.conversion.check_flagged",
"tags": [],
"reasons": {}
},
{
"tool": "meta.cost_efficiency.calculate_marginal_cpa",
"tags": [],
"reasons": {}
},
{
"tool": "meta.cost_efficiency.identify_waste",
"tags": [],
"reasons": {}
},
{
"tool": "meta.cost_efficiency.diagnose_pacing",
"tags": [],
"reasons": {}
},
{
"tool": "meta.cost_efficiency.analyze_auction",
"tags": [],
"reasons": {}
},
{
"tool": "meta.upload_creative_asset",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_creative_assets",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.analyze_copy",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.score_visuals",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.analyze_dco",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.analyze_testing",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.score_message_match",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.analyze_emotional_appeal",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.benchmark",
"tags": [],
"reasons": {}
},
{
"tool": "meta.creative.compare_formats",
"tags": [],
"reasons": {}
},
{
"tool": "meta.diagnostics.detect_degradation",
"tags": [],
"reasons": {}
},
{
"tool": "meta.diagnostics.analyze_funnel",
"tags": [],
"reasons": {}
},
{
"tool": "meta.diagnostics.score_audience",
"tags": [],
"reasons": {}
},
{
"tool": "meta.diagnostics.analyze_fatigue",
"tags": [],
"reasons": {}
},
{
"tool": "meta.diagnostics.audit_bidding",
"tags": [],
"reasons": {}
},
{
"tool": "meta.diagnostics.diagnose_learning",
"tags": [],
"reasons": {}
},
{
"tool": "meta.diagnostics.detect_interference",
"tags": [],
"reasons": {}
},
{
"tool": "meta.experiments.multi_cell",
"tags": [],
"reasons": {}
},
{
"tool": "meta.experiments.sequential",
"tags": [],
"reasons": {}
},
{
"tool": "meta.experiments.adaptive",
"tags": [],
"reasons": {}
},
{
"tool": "meta.experiments.design",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_roi",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_roas",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_efficiency_score",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_trend",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_variance",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_correlation",
"tags": [],
"reasons": {}
},
{
"tool": "meta.calculate_pacing",
"tags": [],
"reasons": {}
},
{
"tool": "meta.fraud.analyze_click_patterns",
"tags": [],
"reasons": {}
},
{
"tool": "meta.fraud.detect_conversion_fraud",
"tags": [],
"reasons": {}
},
{
"tool": "meta.fraud.score_placement_quality",
"tags": [],
"reasons": {}
},
{
"tool": "meta.fraud.filter_invalid_traffic",
"tags": [],
"reasons": {}
},
{
"tool": "meta.fraud.monitor_account_security",
"tags": [],
"reasons": {}
},
{
"tool": "meta.insights.get",
"tags": [],
"reasons": {}
},
{
"tool": "meta.leads.create_form",
"tags": [],
"reasons": {}
},
{
"tool": "meta.leads.get_form",
"tags": [],
"reasons": {}
},
{
"tool": "meta.leads.update_form",
"tags": [],
"reasons": {}
},
{
"tool": "meta.leads.delete_form",
"tags": [],
"reasons": {}
},
{
"tool": "meta.leads.list_leads",
"tags": [],
"reasons": {}
},
{
"tool": "meta.leads.export",
"tags": [
"untrusted-input"
],
"reasons": {
"untrusted-input": [
"keyword \"download\""
]
}
},
{
"tool": "meta.leads.preview_form",
"tags": [],
"reasons": {}
},
{
"tool": "meta.leads.test_submit",
"tags": [
"external-sink"
],
"reasons": {
"external-sink": [
"keyword \"webhook\""
]
}
},
{
"tool": "meta.messaging.setup",
"tags": [],
"reasons": {}
},
{
"tool": "meta.messaging.sync_catalog",
"tags": [],
"reasons": {}
},
{
"tool": "meta.messaging.build_chatbot",
"tags": [],
"reasons": {}
},
{
"tool": "meta.messaging.get_analytics",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_audit_logs",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_performance_metrics",
"tags": [],
"reasons": {}
},
{
"tool": "meta.track_changes",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_metrics",
"tags": [],
"reasons": {}
},
{
"tool": "meta.setup_observability",
"tags": [],
"reasons": {}
},
{
"tool": "meta.monitor.budget_health",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_business_hierarchy",
"tags": [],
"reasons": {}
},
{
"tool": "meta.cross_account_insights",
"tags": [],
"reasons": {}
},
{
"tool": "meta.cross_account_operation",
"tags": [],
"reasons": {}
},
{
"tool": "meta.validate_account_access",
"tags": [],
"reasons": {}
},
{
"tool": "meta.multi_platform.create_whatsapp",
"tags": [],
"reasons": {}
},
{
"tool": "meta.multi_platform.create_messenger_lead",
"tags": [],
"reasons": {}
},
{
"tool": "meta.multi_platform.create_instagram_direct",
"tags": [],
"reasons": {}
},
{
"tool": "meta.multi_platform.orchestrate",
"tags": [],
"reasons": {}
},
{
"tool": "meta.multi_platform.create_multi_advertiser",
"tags": [],
"reasons": {}
},
{
"tool": "meta.multi_platform.compare_performance",
"tags": [],
"reasons": {}
},
{
"tool": "meta.optimize.budget_allocation",
"tags": [],
"reasons": {}
},
{
"tool": "meta.optimize.bids",
"tags": [],
"reasons": {}
},
{
"tool": "meta.optimize.campaign_mix",
"tags": [],
"reasons": {}
},
{
"tool": "meta.optimize.dayparting",
"tags": [],
"reasons": {}
},
{
"tool": "meta.optimize.audience_prioritization",
"tags": [],
"reasons": {}
},
{
"tool": "meta.partnerships.create_ad",
"tags": [],
"reasons": {}
},
{
"tool": "meta.partnerships.manage",
"tags": [],
"reasons": {}
},
{
"tool": "meta.partnerships.license_ugc",
"tags": [],
"reasons": {}
},
{
"tool": "meta.partnerships.track_roi",
"tags": [],
"reasons": {}
},
{
"tool": "meta.partnerships.discover",
"tags": [],
"reasons": {}
},
{
"tool": "meta.create_pixel",
"tags": [],
"reasons": {}
},
{
"tool": "meta.update_pixel",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_pixel",
"tags": [],
"reasons": {}
},
{
"tool": "meta.get_pixel_stats",
"tags": [],
"reasons": {}
},
{
"tool": "meta.create_custom_conversion",
"tags": [],
"reasons": {}
},
{
"tool": "meta.list_conversions",
"tags": [],
"reasons": {}
},
{
"tool": "meta.send_server_side_event",
"tags": [],
"reasons": {}
},
{
"tool": "meta.portfolio.compare_brands",
"tags": [],
"reasons": {}
},
{
"tool": "meta.portfolio.identify_outliers",
"tags": [],
"reasons": {}
},
{
"tool": "meta.portfolio.allocate_budget_across_brands",
"tags": [],
"reasons": {}
},
{
"tool": "meta.portfolio.benchmark_by_industry",
"tags": [],
"reasons": {}
},
{
"tool": "meta.portfolio.health_scorecard",
"tags": [],
"reasons": {}
},
{
"tool": "meta.predict_budget_outcome",
"tags": [],
"reasons": {}
},
{
"tool": "meta.predict_creative_lifespan",
"tags": [],
"reasons": {}
},
{
"tool": "meta.predict_optimal_timing",
"tags": [],
"reasons": {}
},
{
"tool": "meta.predict_audience_expansion",
"tags": [],
"reasons": {}
},
{
"tool": "meta.predict_seasonality",
"tags": [],
"reasons": {}
},
{
"tool": "meta.predict_competitive_pressure",
"tags": [],
"reasons": {}
},
{
"tool": "meta.realtime.launch_war_room",
"tags": [],
"reasons": {}
},
{
"tool": "meta.realtime.monitor_competition",
"tags": [],
"reasons": {}
},
{
"tool": "meta.realtime.predict_performance",
"tags": [],
"reasons": {}
},
{
"tool": "meta.realtime.enable_autopilot",
"tags": [],
"reasons": {}
}
],
"surfaceDigest": "823b72c504792e79cdb76f8c13adcabf7ca57b1cbb68c33a778c15d931b4ccc5",
"stats": {
"tools": 200,
"prompts": 0,
"resources": 0,
"findingsBySeverity": {
"critical": 0,
"high": 0,
"medium": 1,
"low": 0,
"info": 0
}
}
}