{
  "description": "The OAuth scopes this gateway requests from each advertising platform, and what each one allows. Requesting an account owner's advertising access should be legible before they click, not after.",
  "documentation": "https://www.getmcpads.com/scopes.md",
  "platforms": [
    {
      "platform": "adjust",
      "name": "Adjust",
      "provider": "adjust",
      "authentication": "api_token",
      "authentication_methods": [
        "api_token"
      ],
      "connection_url": "https://app.getmcpads.com/dashboard/sources/adjust",
      "scopes_supported": [],
      "scope_details": [],
      "enforced_by_gateway": "Read only. Only selected applications are accessible.",
      "note": "Copy your reporting API token from Adjust Account settings → My profile. The token is encrypted. This connection does not use an OAuth redirect."
    },
    {
      "platform": "amazon_ads",
      "name": "Amazon Ads",
      "availability": "live",
      "access_note": "Connect Amazon and explicitly select the profiles your assistant may access. Tested with an Amazon test account. Product, brand and format eligibility are enforced by Amazon; DSP and AMC are separate products.",
      "provider": "amazon",
      "authorization_endpoint": "https://www.amazon.com/ap/oa",
      "scopes_supported": [
        "advertising::campaign_management"
      ],
      "scope_details": [
        {
          "scope": "advertising::campaign_management",
          "grants": "Read Amazon Ads profiles, sponsored ads inventory, reports and visual assets; create and manage Sponsored Products campaigns, groups, ads, keywords, targets, budgets and bids with confirmation. Amazon grants campaign management access; selected-account and paid-plan restrictions are enforced by this gateway.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "apple_ads",
      "name": "Apple Ads",
      "availability": "live",
      "access_note": "Connect Apple Ads and select the organizations your assistant may access. Apple account roles apply.",
      "provider": "apple",
      "authorization_endpoint": "https://appleid.apple.com/auth/oauth2/v2/authorize",
      "scopes_supported": [
        "searchads"
      ],
      "scope_details": [
        {
          "scope": "searchads",
          "grants": "Read Apple Ads accounts and reports, and manage campaigns with the role and accounts approved in Apple. Paid-plan writes require explicit confirmation; the gateway controls which selected accounts are reachable.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "linkedin_ads",
      "name": "LinkedIn Ads",
      "availability": "live",
      "access_note": "Advertising API Development tier. Test-account writes only; Standard access is not yet approved.",
      "provider": "linkedin",
      "authorization_endpoint": "https://www.linkedin.com/oauth/v2/authorization",
      "scopes_supported": [
        "r_ads",
        "r_ads_reporting",
        "rw_ads",
        "r_organization_admin",
        "r_organization_social",
        "w_organization_social"
      ],
      "scope_details": [
        {
          "scope": "r_ads",
          "grants": "Read authorized LinkedIn advertising accounts, campaigns and creatives.",
          "allows_write": false
        },
        {
          "scope": "r_ads_reporting",
          "grants": "Read native LinkedIn advertising performance reports.",
          "allows_write": false
        },
        {
          "scope": "rw_ads",
          "grants": "Manage advertising campaigns, creatives and media. This preview restricts writes to test accounts and requires confirmation and a paid plan.",
          "allows_write": true
        },
        {
          "scope": "r_organization_admin",
          "grants": "Read organization information needed for advertising identities.",
          "allows_write": false
        },
        {
          "scope": "r_organization_social",
          "grants": "Read organization posts and media used in advertising.",
          "allows_write": false
        },
        {
          "scope": "w_organization_social",
          "grants": "Create sponsored organization content. This connector creates dark ads only, without publishing to the organic feed.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "reddit_ads",
      "name": "Reddit Ads",
      "availability": "live",
      "access_note": "Connect Reddit and select the ad accounts your assistant may access. Native account eligibility and permissions apply.",
      "provider": "reddit",
      "authorization_endpoint": "https://www.reddit.com/api/v1/authorize",
      "scopes_supported": [
        "adsread",
        "adsedit"
      ],
      "scope_details": [
        {
          "scope": "adsread",
          "grants": "Read authorized Reddit Ads accounts and reporting.",
          "allows_write": false
        },
        {
          "scope": "adsedit",
          "grants": "Manage Reddit campaigns, ad groups, ads, assets and supported audience/catalog configuration. Changes require confirmation and the appropriate account permissions.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "bing_ads",
      "name": "Microsoft Advertising",
      "availability": "live",
      "access_note": "Connect through Microsoft, then explicitly select the advertising accounts your assistant may access. Reads are available on Free; writes require an eligible paid plan.",
      "provider": "microsoft",
      "authorization_endpoint": "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
      "scopes_supported": [
        "https://ads.microsoft.com/msads.manage",
        "offline_access"
      ],
      "scope_details": [
        {
          "scope": "https://ads.microsoft.com/msads.manage",
          "grants": "Read and write on Microsoft Advertising. No read-only scope is published by Microsoft.",
          "allows_write": true
        },
        {
          "scope": "offline_access",
          "grants": "Keep the connection alive without asking you to sign in again.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "snapchat_ads",
      "name": "Snapchat Ads",
      "availability": "live",
      "provider": "snapchat",
      "authorization_endpoint": "https://accounts.snapchat.com/login/oauth2/authorize",
      "scopes_supported": [
        "snapchat-marketing-api"
      ],
      "scope_details": [
        {
          "scope": "snapchat-marketing-api",
          "grants": "Read and manage Snapchat campaigns, ad squads, ads, creatives, media and audiences within the user’s permissions. Writes require a paid plan and explicit confirmation.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "x_ads",
      "name": "X Ads",
      "availability": "live",
      "access_note": "Connect your own X Ads account and select the advertisers to expose. Free permits reads; Pro, Team and Enterprise permit writes. Reconnect older connections for media.write. X controls account verification and delivery eligibility.",
      "provider": "x",
      "authorization_endpoint": "https://x.com/i/oauth2/authorize",
      "scopes_supported": [
        "ads.read",
        "ads.write",
        "media.write",
        "offline.access"
      ],
      "scope_details": [
        {
          "scope": "ads.read",
          "grants": "Read authorized X Ads accounts, campaigns, creatives, targeting and performance.",
          "allows_write": false
        },
        {
          "scope": "ads.write",
          "grants": "Create and manage X Ads campaigns, ad groups, targeting and promoted posts.",
          "allows_write": true
        },
        {
          "scope": "media.write",
          "grants": "Upload images and videos for X Ads creatives.",
          "allows_write": true
        },
        {
          "scope": "offline.access",
          "grants": "Renew the X authorization without another sign-in.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "rtb_house",
      "name": "RTB House",
      "provider": "rtb_house",
      "authentication": "basic",
      "authentication_methods": [
        "basic",
        "api_token"
      ],
      "connection_url": "https://app.getmcpads.com/dashboard/sources/rtb-house",
      "scopes_supported": [],
      "scope_details": [],
      "enforced_by_gateway": "Only selected advertisers are accessible. Writes require a paid plan, a preview and confirmation. Supported writes: campaign and advertiser activation or pause.",
      "note": "Sign in with your RTB House email and password. API token authentication is also available for accounts with two-factor authentication. Credentials are encrypted; API tokens are renewed automatically. Permissions are enforced by RTB House, without OAuth scopes."
    },
    {
      "platform": "meta_ads",
      "name": "Meta Ads",
      "availability": "live",
      "provider": "meta",
      "authorization_endpoint": "https://www.facebook.com/v21.0/dialog/oauth",
      "scopes_supported": [
        "ads_read",
        "ads_management",
        "business_management",
        "pages_show_list",
        "pages_read_engagement",
        "pages_manage_ads",
        "read_insights",
        "instagram_basic",
        "instagram_manage_insights",
        "catalog_management"
      ],
      "scope_details": [
        {
          "scope": "ads_read",
          "grants": "Read Meta campaigns, insights, creatives and audiences.",
          "allows_write": false
        },
        {
          "scope": "ads_management",
          "grants": "Create and manage Meta campaigns, ad sets, ads, creatives and audiences, including budgets and status. Writes require a paid plan and explicit confirmation.",
          "allows_write": true
        },
        {
          "scope": "business_management",
          "grants": "Access Business Manager assets, including owned and shared ad accounts, Pages and catalogs. This permission also permits Business Manager changes.",
          "allows_write": true
        },
        {
          "scope": "pages_show_list",
          "grants": "List the Facebook Pages you manage and discover linked Instagram professional accounts.",
          "allows_write": false
        },
        {
          "scope": "pages_read_engagement",
          "grants": "Read Page posts, media and engagement metadata used by your ads and content reports.",
          "allows_write": false
        },
        {
          "scope": "pages_manage_ads",
          "grants": "Create and manage ads associated with your Facebook Pages.",
          "allows_write": true
        },
        {
          "scope": "read_insights",
          "grants": "Read insights for Facebook Page content you can access.",
          "allows_write": false
        },
        {
          "scope": "instagram_basic",
          "grants": "Read your linked Instagram professional account profile and media.",
          "allows_write": false
        },
        {
          "scope": "instagram_manage_insights",
          "grants": "Read insights for your Instagram professional account and media.",
          "allows_write": false
        },
        {
          "scope": "catalog_management",
          "grants": "Read product catalogs and create or update products and product sets. Writes require a paid plan and explicit confirmation.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "pinterest_ads",
      "name": "Pinterest Ads",
      "availability": "live",
      "provider": "pinterest",
      "authorization_endpoint": "https://www.pinterest.com/oauth/",
      "scopes_supported": [
        "ads:read",
        "ads:write",
        "pins:read",
        "pins:write",
        "boards:read",
        "boards:write",
        "catalogs:read",
        "catalogs:write",
        "user_accounts:read"
      ],
      "scope_details": [
        {
          "scope": "ads:read",
          "grants": "Read Pinterest campaigns, ad groups, ads and analytics.",
          "allows_write": false
        },
        {
          "scope": "ads:write",
          "grants": "Create and update campaigns, ad groups and ads. Writes require a paid plan and explicit confirmation.",
          "allows_write": true
        },
        {
          "scope": "pins:read",
          "grants": "Read Pins and accessible creative images and videos.",
          "allows_write": false
        },
        {
          "scope": "pins:write",
          "grants": "Create and update Pins used as ad creatives.",
          "allows_write": true
        },
        {
          "scope": "boards:read",
          "grants": "Read boards that contain creative Pins.",
          "allows_write": false
        },
        {
          "scope": "boards:write",
          "grants": "Create and update boards for creative Pins.",
          "allows_write": true
        },
        {
          "scope": "catalogs:read",
          "grants": "Read catalogs, feeds, product groups and item processing results.",
          "allows_write": false
        },
        {
          "scope": "catalogs:write",
          "grants": "Create and update catalogs, feeds, product groups and catalog items.",
          "allows_write": true
        },
        {
          "scope": "user_accounts:read",
          "grants": "Identify the Pinterest account granting access.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "google_ads",
      "name": "Google Ads",
      "availability": "live",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/adwords"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/adwords",
          "grants": "Read and write on Google Ads. Google publishes no read-only alternative, so read-only enforcement is done by this gateway, not by Google.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "tiktok_ads",
      "name": "TikTok Ads",
      "availability": "live",
      "provider": "tiktok",
      "authorization_endpoint": "https://business-api.tiktok.com/portal/auth",
      "scopes_supported": [],
      "scope_details": [],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED.",
      "note": "TikTok does not pass permissions through the authorization URL. They are attached to the app in TikTok Business Center and shown to the advertiser when access is granted."
    },
    {
      "platform": "search_console",
      "name": "Search Console",
      "availability": "live",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/webmasters.readonly"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/webmasters.readonly",
          "grants": "Read Search Console performance, index coverage and sitemaps. Cannot modify anything.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Read only. This gateway exposes no write tool for this platform."
    },
    {
      "platform": "ga4",
      "name": "Google Analytics 4",
      "availability": "live",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/analytics.readonly"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/analytics.readonly",
          "grants": "Read GA4 reports, metadata and property configuration. Cannot modify anything.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Read only. This gateway exposes no write tool for this platform."
    }
  ]
}
