LeashIndex Get the report

Index / other

Meta Ads

com-getmcpads-meta-ads declares 41 capabilities across 41 tools, with 1 critical issue.

54/100 exposureElevated

Manifest recorded 2026-10-11 from tools/list answered by the npm package @getmcpads/meta-ads-mcp-server@2.0.1 (published to npm as @getmcpads/meta-ads-mcp-server, listed in the official MCP registry as com.getmcpads/meta-ads 2.0.1), run in an isolated container with no network access and placeholder credentials. The date changes only when the manifest does. Not verified by a maintainer.

Issues

These describe what this server's manifest declares. A product can provide controls that MCP has no way to express — token revocation, an admin console, audit logs — and this page cannot see them. The absence of a declaration is not evidence that a control is absent.

critical · no-revocation · All 41 tools

41 of 41 tools declare no way for the customer to switch them off once granted. This applies to every tool because MCP has no field in which to declare a revocation mechanism; the product may provide one outside MCP that a manifest cannot show.

high · no-expiry · All 41 tools

41 of 41 tools declare no expiry. This applies to every tool because MCP has no field in which to declare an expiry; the product may provide one outside MCP that a manifest cannot show.

high · no-audit-trail · All 41 tools

41 of 41 tools declare no record of their actions that the customer can read. This applies to every tool because MCP has no field in which to declare an audit requirement; the product may provide one outside MCP that a manifest cannot show.

low · uncapped-read · All 41 tools

41 tools can read data and declare no limit.

Declared capabilities

How each tool was read. declared means the server's own annotation said so — self-reported and unverified. inferred is from the tool's name. assumed means nothing indicated either way.

ToolRead asBasis
meta_health_checkread declared
meta_get_business_assetsread declared
meta_get_pagesread declared
meta_get_instagram_accountsread declared
meta_get_pixelsread declared
meta_get_ad_activityread declared
meta_get_delivery_diagnosticsread declared
meta_get_creative_assetsread declared
meta_get_audience_detailsread declared
meta_get_catalog_productsread declared
meta_join_product_insightsread declared
meta_get_brand_safety_controlsread declared
meta_interpret_experiment_resultsread declared
meta_get_organic_content_enrichmentread declared
meta_list_ad_accountsread declared
meta_get_account_detailsread declared
meta_get_campaignsread declared
meta_get_adsetsread declared
meta_get_adsread declared
meta_get_insightsread declared
meta_get_campaign_structureread declared
meta_get_creativesread declared
meta_get_audiencesread declared
meta_get_ad_studiesread declared
meta_get_study_resultsread declared
meta_validate_queryread declared
meta_get_page_postsread declared
meta_debug_tokenread declared
meta_search_entitiesread declared
meta_get_node_fieldsread declared
meta_list_edge_rawread declared
meta_get_insights_rawread declared
meta_search_targeting_optionsread declared
meta_get_ad_previewread declared
meta_list_ad_imagesread declared
meta_list_ad_videosread declared
meta_get_video_sourcesread declared
meta_get_entity_configurationread declared
meta_get_uploaded_videoread declared
meta_get_adset_configurationread declared
meta_get_catalog_batch_statusread declared
Answering this question about your own agent? The self-serve stack report applies the same reading to your own stack or server and gives you a dated document you can hand to a customer's security review. It is generated in your browser, with nobody to wait for. Buying one does not change this page, its score or its place in the index — see Independence.
Maintain this server? If this page misreads your manifest, or your server has changed, submit its current tools/list response and it will be re-scored and dated. Corrections are published alongside the original, not in place of it.