{
  "description": "The OAuth scopes this gateway requests from each advertising platform, and what each one allows. Requesting an account owner's advertising access should be legible before they click, not after.",
  "documentation": "https://www.getmcpads.com/scopes.md",
  "platforms": [
    {
      "platform": "meta_ads",
      "name": "Meta Ads",
      "provider": "meta",
      "authorization_endpoint": "https://www.facebook.com/v21.0/dialog/oauth",
      "scopes_supported": [
        "ads_read",
        "ads_management"
      ],
      "scope_details": [
        {
          "scope": "ads_read",
          "grants": "Read Meta campaigns, insights, creatives and audiences.",
          "allows_write": false
        },
        {
          "scope": "ads_management",
          "grants": "Pause, resume and change budgets on Meta campaigns, ad sets and ads. Only reachable on a paid plan.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "pinterest_ads",
      "name": "Pinterest Ads",
      "provider": "pinterest",
      "authorization_endpoint": "https://www.pinterest.com/oauth/",
      "scopes_supported": [
        "ads:read",
        "ads:write"
      ],
      "scope_details": [
        {
          "scope": "ads:read",
          "grants": "Read Pinterest campaigns, ad groups, ads and analytics.",
          "allows_write": false
        },
        {
          "scope": "ads:write",
          "grants": "Pause, resume and change budgets on Pinterest campaigns. Only reachable on a paid plan.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "google_ads",
      "name": "Google Ads",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/adwords"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/adwords",
          "grants": "Read and write on Google Ads. Google publishes no read-only alternative, so read-only enforcement is done by this gateway, not by Google.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "tiktok_ads",
      "name": "TikTok Ads",
      "provider": "tiktok",
      "authorization_endpoint": "https://business-api.tiktok.com/portal/auth",
      "scopes_supported": [],
      "scope_details": [],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED.",
      "note": "TikTok does not pass permissions through the authorization URL. They are attached to the app in TikTok Business Center and shown to the advertiser when access is granted."
    },
    {
      "platform": "search_console",
      "name": "Search Console",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/webmasters.readonly"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/webmasters.readonly",
          "grants": "Read Search Console performance, index coverage and sitemaps. Cannot modify anything.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Read only. This gateway exposes no write tool for this platform."
    },
    {
      "platform": "ga4",
      "name": "Google Analytics 4",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/analytics.readonly"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/analytics.readonly",
          "grants": "Read GA4 reports, metadata and property configuration. Cannot modify anything.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Read only. This gateway exposes no write tool for this platform."
    }
  ]
}