Authentication
OAuth 2.1 with dynamic client registration, and what each advertising scope grants.
46 rows
How a client connectsLink to this section
The endpoint speaks OAuth 2.1. Given only the URL, a client bootstraps itself: it receives a 401 carrying a WWW-Authenticate header, reads the protected resource metadata, registers itself, and walks the authorisation flow with PKCE.
| Document | URL |
|---|---|
| Protected resource metadata (RFC 9728) | https:/ |
| Authorization server metadata (RFC 8414) | https:/ |
| Dynamic client registration (RFC 7591) | Advertised in the metadata above |
| MCP manifest | https:/ |
What the gateway asks each platformLink to this section
A scope is what the platform grants. It is not what the gateway does with it. Where a platform publishes no read-only scope, the restriction is enforced here instead: on the Free plan no write tool is announced, and calling one is refused before it reaches the platform.
Requested scopes, by source
| Source | Scope | Grants | Writes |
|---|---|---|---|
| Adjust | none in the authorization URL | TikTok attaches permissions to the app in Business Center. | n/a |
| Amazon Ads | advertising::campaign_ | Read Amazon Ads profiles, sponsored ads inventory, reports and visual assets; create and manage Sponsored Products campaigns, groups, ads, keywords, targets, budgets and bids with confirmation. Amazon grants campaign management access; selected-account and paid-plan restrictions are enforced by this gateway. | Yes |
| Apple Ads | searchads | Read Apple Ads accounts and reports, and manage campaigns with the role and accounts approved in Apple. Paid-plan writes require explicit confirmation; the gateway controls which selected accounts are reachable. | Yes |
| LinkedIn Ads | r_ads | Read authorized LinkedIn advertising accounts, campaigns and creatives. | No |
| LinkedIn Ads | r_ads_reporting | Read native LinkedIn advertising performance reports. | No |
| LinkedIn Ads | rw_ads | Manage advertising campaigns, creatives and media. This preview restricts writes to test accounts and requires confirmation and a paid plan. | Yes |
| LinkedIn Ads | r_ | Read organization information needed for advertising identities. | No |
| LinkedIn Ads | r_ | Read organization posts and media used in advertising. | No |
| LinkedIn Ads | w_ | Create sponsored organization content. This connector creates dark ads only, without publishing to the organic feed. | Yes |
| Reddit Ads | adsread | Read authorized Reddit Ads accounts and reporting. | No |
| Reddit Ads | adsedit | Manage Reddit campaigns, ad groups, ads, assets and supported audience/catalog configuration. Changes require confirmation and the appropriate account permissions. | Yes |
| Microsoft Advertising | https:/ | Read and write on Microsoft Advertising. No read-only scope is published by Microsoft. | Yes |
| Microsoft Advertising | offline_access | Keep the connection alive without asking you to sign in again. | No |
| Snapchat Ads | snapchat-marketing-api | Read and manage Snapchat campaigns, ad squads, ads, creatives, media and audiences within the user’s permissions. Writes require a paid plan and explicit confirmation. | Yes |
| X Ads | ads.read | Read authorized X Ads accounts, campaigns, creatives, targeting and performance. | No |
| X Ads | ads.write | Create and manage X Ads campaigns, ad groups, targeting and promoted posts. | Yes |
| X Ads | media.write | Upload images and videos for X Ads creatives. | Yes |
| X Ads | offline.access | Renew the X authorization without another sign-in. | No |
| RTB House | none in the authorization URL | TikTok attaches permissions to the app in Business Center. | n/a |
| Meta Ads | ads_read | Read Meta campaigns, insights, creatives and audiences. | No |
| Meta Ads | ads_management | Create and manage Meta campaigns, ad sets, ads, creatives and audiences, including budgets and status. Writes require a paid plan and explicit confirmation. | Yes |
| Meta Ads | business_ | Access Business Manager assets, including owned and shared ad accounts, Pages and catalogs. This permission also permits Business Manager changes. | Yes |
| Meta Ads | pages_show_list | List the Facebook Pages you manage and discover linked Instagram professional accounts. | No |
| Meta Ads | pages_ | Read Page posts, media and engagement metadata used by your ads and content reports. | No |
| Meta Ads | pages_manage_ads | Create and manage ads associated with your Facebook Pages. | Yes |
| Meta Ads | read_insights | Read insights for Facebook Page content you can access. | No |
| Meta Ads | instagram_basic | Read your linked Instagram professional account profile and media. | No |
| Meta Ads | instagram_ | Read insights for your Instagram professional account and media. | No |
| Meta Ads | catalog_ | Read product catalogs and create or update products and product sets. Writes require a paid plan and explicit confirmation. | Yes |
| Pinterest Ads | ads:read | Read Pinterest campaigns, ad groups, ads and analytics. | No |
| Pinterest Ads | ads:write | Create and update campaigns, ad groups and ads. Writes require a paid plan and explicit confirmation. | Yes |
| Pinterest Ads | pins:read | Read Pins and accessible creative images and videos. | No |
| Pinterest Ads | pins:write | Create and update Pins used as ad creatives. | Yes |
| Pinterest Ads | boards:read | Read boards that contain creative Pins. | No |
| Pinterest Ads | boards:write | Create and update boards for creative Pins. | Yes |
| Pinterest Ads | catalogs:read | Read catalogs, feeds, product groups and item processing results. | No |
| Pinterest Ads | catalogs:write | Create and update catalogs, feeds, product groups and catalog items. | Yes |
| Pinterest Ads | user_ | Identify the Pinterest account granting access. | No |
| Google Ads | https:/ | Read and write on Google Ads. Google publishes no read-only alternative, so read-only enforcement is done by this gateway, not by Google. | Yes |
| TikTok Ads | none in the authorization URL | TikTok attaches permissions to the app in Business Center. | n/a |
| Search Console | https:/ | Read Search Console performance, index coverage and sitemaps. Cannot modify anything. | No |
| Google Analytics 4 | https:/ | Read GA4 reports, metadata and property configuration. Cannot modify anything. | No |