# MegaMCP: full reference > MegaMCP is a hosted MCP server, dashboard and built-in AI agent that connects Claude, ChatGPT, Cursor, Claude Code and VS Code to 42 marketing, analytics, website, CRM and workspace platforms, including Google Ads, Meta Ads, Microsoft Ads, GA4, Search Console, Tag Manager, WordPress and HubSpot. Reads run immediately. Every write is shown as a diff, approved by a person, checked against budget caps, and can be undone. Flat monthly pricing, no credits. This document is generated from the MegaMCP product and website content (last content update 2026-10-16). The short index is https://megamcp.com/llms.txt. Canonical facts: https://megamcp.com/about. ## Key facts - Website: https://megamcp.com - Operated by: QC DEVWORKS, LLC d/b/a MegaMCP - What it is: a hosted MCP (Model Context Protocol) server, a web dashboard and a built-in AI agent for marketing accounts. - MCP endpoint: https://megamcp.com/api/mcp (Streamable HTTP transport, OAuth 2.1 sign-in with PKCE). - AI clients with setup guides: Claude (https://megamcp.com/docs/connect-claude), ChatGPT (https://megamcp.com/docs/connect-chatgpt), Cursor (https://megamcp.com/docs/connect-cursor), Claude Code (https://megamcp.com/docs/claude-code), VS Code (https://megamcp.com/docs/vscode). Any app that supports remote MCP servers works. - Integrations: 42 in the catalog (16 live, 26 rolling out, 0 coming soon). - Tools: 377 MCP tools (42 core MegaMCP tools plus the integration tools). Reference: https://megamcp.com/docs/tools. - Pricing: Free: $0, read-only, 100 reads a day; Solo: $19/month or $15.83/month billed yearly (1 seat); Crew: $149/month or $124/month billed yearly (10 seats included); Legion: custom pricing. - Free trial: 5 days of everything, no credit card, plus a sandbox ad account. - Contact: hello@megamcp.com (support and sales), security@megamcp.com (security), privacy@megamcp.com (privacy). ## What MegaMCP is MegaMCP plugs your AI assistant into your marketing stack through one MCP connection. Ask in plain English for reports, audits and fixes across ad platforms, analytics, websites, CRM and more. Reads run immediately. Anything that would change an account becomes a plan with a line-by-line diff that a person approves, budget caps ("budget bumpers") are enforced before anything is applied, and supported changes can be undone. There are three ways to use it: from your own AI app over MCP; from the built-in agent in the dashboard, with your own OpenAI, Anthropic, Gemini, DeepSeek or xAI key; and with scheduled workflows that report and propose changes (7 available today). ## How approvals, undo and guardrails work ### Approvals and undo Source: https://megamcp.com/docs/approvals-and-undo Your AI proposes. A human disposes. Here's exactly how a change travels from a sentence to your ad account, and back again. #### The life of a change 1. **Proposed.** Your AI (or a scheduled workflow) calls a write tool. MegaMCP reads the live state, builds a plan with one line per change and the before and after values, and checks your budget bumpers. Nothing has changed. 2. **Reviewed.** You see the diff in chat and on the plan's page in the dashboard (**Changes**). 3. **Approved or rejected.** A member, admin or owner approves or rejects it. Pending plans expire after 24 hours. 4. **Applied.** Budget bumpers are checked again, then changes apply in order. If one fails, the rest are skipped and the plan is marked partially applied. 5. **Undone, if you like.** Undo builds a new plan that reverses the applied changes. It gets its own diff and its own approval. **Add 3 negative keywords**Emergency Plumber – Denver · Example plan3 changes - Add: Negative [plumbing school denver] - Add: Negative [free plumbing advice] - Add: Negative [plumber salary colorado] - Check passed: Budget bumper: no spend increase ApproveReject Nothing has changed yet. A member, admin or owner approves or rejects it. #### Where you can approve - **In the dashboard.** **Changes** lists pending plans. Open one, read the diff, click Approve or Reject. Always available. - **In chat (opt-in).** Off by default. When an admin turns on **Approve in chat** under **Settings**, your AI may apply a plan after you clearly say yes in the conversation, with limits: only plans that same AI connection proposed, never plans from a workflow or a teammate, and a spend increase only on an account with a max daily budget guardrail. Everything else still goes to the dashboard. Heads up Approving in chat trusts the conversation. MegaMCP tells the AI to show the full diff, wait for an explicit yes, and treat platform data (search terms, page titles) as untrusted, and budget bumpers still apply. If you want a hard gate, leave approvals in chat off. #### Who can do what - Owner: Everything, including managing other owners. - Admin: Manage the team, connections, budget bumpers, settings and billing. Plus everything a member can do. - Member: Use the AI, propose changes, approve, reject and undo them. - Viewer: Read-only. Can use read tools and review plans, can't propose or approve changes. #### Undo Supported applied changes store what they need for reversal: the old budget, the old status, or the id of the thing created. Irreversible operations are marked before approval and excluded from undo; a mixed plan can only reverse its supported operations. On the plan's page, click **Undo** to get a reverse plan with its own diff, then approve it. From chat, ask your AI to undo it; it calls `megamcp_undo_change`, which also creates a plan that needs approval. Budget bumpers apply to undo too: if undoing would push a budget over the cap, the undo plan is blocked until an admin raises the cap. #### The flight recorder Every tool call, plan, approval, rejection, change, undo, connection and billing event is recorded with who did it and from which AI app. Search and filter it under **Flight recorder** in the dashboard; admins can export it as CSV. How far back you can see depends on your plan: 90 days on Solo, 365 days on Crew. #### FAQ **Can the AI apply a change without me?** No. Write tools only create plans. Applying a plan needs a person with the member role or above: in the dashboard, or, if an admin opted the workspace into approving in chat, by saying yes in the conversation that proposed it. **What happens if one change in a plan fails?** Changes apply in order. The first failure stops the plan; the rest are skipped and the plan is marked partially applied. You can undo the parts that were applied. **Can every change be undone?** Most can. Each change records what it needs to reverse itself. If a platform doesn't allow a reversal, the diff says so before you approve. **How long does a plan wait for approval?** 24 hours. After that it expires, because the live account may have moved on. Ask for a fresh plan. ### Budget bumpers Source: https://megamcp.com/docs/guardrails Spend caps your AI can't argue with. Checked when a plan is proposed and again right before it's applied. #### What a budget bumper is A per-account spend cap that the change engine enforces on every plan. Two limits, both optional: - **Max daily budget per campaign.** No plan can set a daily budget above this number (in the account's currency). - **Max increase per change.** A percentage. For example, 20 blocks any single change that raises a budget by more than 20%. Enabling a paused campaign counts as raising its budget from zero, so it answers to the caps too. #### When they're checked Twice: when a plan is proposed, and again right before it's applied, in case a cap changed in between. A plan that breaks a cap is marked **blocked**. Blocked plans can't be applied by anyone. Propose a smaller change, or have an admin raise the cap. **Set a daily budget**Prospecting – UGC Video · Example plan2 changes - Change: Daily budget$120.00$400.00 - Flagged: Above the $250.00 max daily budget cap **Plan blocked**This change sets a daily budget of $400.00, above your cap of $250.00. Raise the cap in MegaMCP or change the plan.Budget bumper · checked before approvalBlocked by budget bumper #### Set them up 1. In the dashboard, open **Guardrails**. You'll see every enabled ad account. 2. Enter a max daily budget, a max increase percentage, or both. Leave a field blank for no limit. 3. Click **Save caps**. The change lands in the flight recorder with your name on it. Only admins and owners can change caps. Everyone can see them, and your AI can read them with `megamcp_whoami`. #### The other guardrails - **Approvals.** Nothing changes without a human. [How approvals work](https://megamcp.com/docs/approvals-and-undo). - **Roles.** Viewers can't propose or approve anything. - **Reads on, changes approved.** A first Google, Meta, Microsoft or HubSpot sign-in switches on every account it finds so your AI can read them. Switch off any it shouldn't see. Accounts found later, and key-based or beta integrations, start switched off. - **Safe defaults in the tools.** New Google Ads campaigns, ad groups and ads, and new Meta ads, are created paused. New Google Ads keywords are paused unless the request says otherwise. New conversion actions are secondary (not used for bidding) unless the request says primary. Tag Manager publishing is its own plan. - **Undo** for anything that slips through. #### FAQ **Which accounts can have budget bumpers?** Ad accounts: Google Ads, Meta Ads, Microsoft Ads and the sandbox. Analytics, Search Console, Tag Manager, WordPress and HubSpot changes don't move spend, so they rely on approvals alone. **Can the AI raise a cap?** No. Caps are set by admins in the dashboard. There's no tool for changing them. **Do caps apply to scheduled workflows?** Yes. Workflows create plans through the same change engine, so the same caps apply. ### Scheduled workflows Source: https://megamcp.com/docs/workflows Chores on a timer. They check, they email, they propose. They never press the button themselves. #### What a workflow is A template that runs on a schedule, checks your accounts, and tells you what it found by email. Workflows are plain, predictable code, not an AI improvising at 3am, so they don't use your AI app or cost anything extra. Note Workflows never apply changes on their own. If one wants to change something, like adding negative keywords, it creates a plan that waits for approval, exactly like a plan from chat. Budget bumpers apply. #### Templates - [Search Term Sweeper](https://megamcp.com/workflows/search-term-sweeper): Finds search terms that spent money without a single conversion and queues them as negatives in one plan for your approval.: Google Ads, Microsoft Ads, Sandbox - [Weekly Performance Report](https://megamcp.com/workflows/weekly-performance-report): Spend, conversions, CPA and ROAS for every ad account with the top campaigns, plus GA4 traffic, in an email your team will actually open.: Google Ads, Meta Ads, GA4, Sandbox - [Spend Anomaly Alert](https://megamcp.com/workflows/spend-anomaly-alert): Compares yesterday's spend with the 30-day daily average for every account and campaign, and emails you when something spikes or drops.: Google Ads, Meta Ads - [Creative Fatigue Alarm](https://megamcp.com/workflows/creative-fatigue-alarm): Checks every Meta ad for fatigue, like falling CTR with high frequency or rising CPM, and warns you before a winning ad goes stale.: Meta Ads - [Tracking Health Check](https://megamcp.com/workflows/tracking-health-check): Audits your Tag Manager containers and checks that GA4 key events are still firing, before your reports start lying.: Google Tag Manager, GA4 - [Morning Pacing and Anomaly Alert](https://megamcp.com/workflows/morning-pacing-anomaly-alert): Checks month-to-date budget pacing and yesterday's numbers against a 28-day baseline for every Google Ads, Meta Ads and Microsoft Ads account, and emails you only when something is off.: Google Ads, Meta Ads, Microsoft Ads - [Landing Page Check](https://megamcp.com/workflows/landing-page-check): Fetches the landing pages behind your Google Ads ads and keywords, and emails you when one is broken or drops the gclid on redirect.: Google Ads More are on the [roadmap](https://megamcp.com/workflows). #### Set one up 1. In the dashboard, open **Workflows** and pick a template. 2. Choose the account and the settings (for example, the minimum wasted spend for the search term sweeper). Every setting is validated before it's saved. 3. Pick a schedule: hourly, daily, weekly or monthly, in your workspace's time zone (change it under **Settings**). 4. Save. Click **Run now** to see what it does without waiting for the schedule. Emails go to the workspace's owners and admins. Each run is kept in the workflow's run history, and anything it proposes shows up under **Changes**. #### Limits by plan - Free trial: 3 scheduled workflows - Solo: 5 - Crew: 50 - Legion: custom Workflows pause when a workspace has no active plan, and pick up again when it does. ## Integrations Rolling out means the code is built and the platform is still approving MegaMCP's app: Google, Meta, Microsoft and the one-click ad-platform sign-ins switch on as each approval lands. Anything you connect with your own key, token or app password (WordPress, HubSpot, Shopify, Klaviyo, Mailchimp, Apollo, ZoomInfo, Clay, Instantly, research and SEO tools, SMTP email and Slack) works today, and the sandbox is always on. ### Elementor (Rolling out) Page: https://megamcp.com/mcp/elementor. Category: Websites. Build Elementor sites with reviewed changes. Connect Elementor's official MCP server through MegaMCP. Inspect page structure, validate compositions and review every edit, with client scopes and separate publishing controls. What your AI can read: - Structure, content, widget schemas and dynamic tags - Assets, components, resources, default styles and guides What it can change (every change is a plan a person approves): - Draft pages, compositions, elements and page settings - Classes, variables, default styles and components - Separately gated publishing and temporary preview links Guardrail: Every mutation requires approval. Fixed site/client binding, optional document allowlist and separate admin gates for global changes, publishing and anonymous previews. Uncertain writes cannot replay; no automatic undo. Global snapshots have partial CSS coverage. How it connects: Enable official Elementor MCP on a supported WordPress and Elementor installation. Connect the same user's WordPress application password, configure Elementor's exact MCP endpoint in MegaMCP, select scope, verify and enable its separate account. Elementor V4 support, user permissions and Pro license apply. Example prompts: - "Show this Elementor site's available tools and document scope." - "Inspect the homepage structure and hero content." - "Validate this hero composition without saving it." - "Prepare a draft landing page for review." MCP tools (4, see https://megamcp.com/docs/tools#elementor): - `elementor_list_operations` (read): Elementor operations - `elementor_read` (read): Read Elementor - `elementor_preview_composition` (read): Validate Elementor composition - `elementor_propose` (write): Propose Elementor change ### Apollo.io (Live) Page: https://megamcp.com/mcp/apollo. Category: Commerce & CRM. Your sales stack, through MegaMCP Discover supported official API operations, read live data and prepare exact actions for human approval. Reporting uses the same encrypted, client-bound connection. What your AI can read: - Operation discovery and request schemas - Bounded provider reads and supported analytics What it can change (every change is a plan a person approves): - Reviewed mutations and credit-consuming operations Guardrail: Fixed vendor-workspace client scope. Exact proposals, provider quota and no replay of uncertain writes. Credential administration, billing, permanent deletion and binary transfers remain in the vendor dashboard. How it connects: Customer API key and verified vendor workspace identity. Vendor plan and permission scopes apply. Example prompts: - "Show the apollo operations available to this client." - "Review apollo performance and propose the next action." MCP tools (3, see https://megamcp.com/docs/tools#apollo): - `apollo_list_operations` (read): Apollo.io operations - `apollo_read` (read): Read Apollo.io - `apollo_propose` (write): Propose Apollo.io action ### ZoomInfo (Live) Page: https://megamcp.com/mcp/zoominfo. Category: Commerce & CRM. Your sales stack, through MegaMCP Discover supported official API operations, read live data and prepare exact actions for human approval. Reporting uses the same encrypted, client-bound connection. What your AI can read: - Operation discovery and request schemas - Bounded provider reads and supported analytics What it can change (every change is a plan a person approves): - Reviewed mutations and credit-consuming operations Guardrail: Fixed vendor-workspace client scope. Exact proposals, provider quota and no replay of uncertain writes. Credential administration, billing, permanent deletion and binary transfers remain in the vendor dashboard. How it connects: Customer Standard App credentials for internal use. Public partner distribution needs ZoomInfo approval and PKCE onboarding. Example prompts: - "Show the zoominfo operations available to this client." - "Review zoominfo performance and propose the next action." MCP tools (3, see https://megamcp.com/docs/tools#zoominfo): - `zoominfo_list_operations` (read): ZoomInfo operations - `zoominfo_read` (read): Read ZoomInfo - `zoominfo_propose` (write): Propose ZoomInfo action ### Clay (Live) Page: https://megamcp.com/mcp/clay. Category: Commerce & CRM. Your sales stack, through MegaMCP Discover supported official API operations, read live data and prepare exact actions for human approval. Reporting uses the same encrypted, client-bound connection. What your AI can read: - Operation discovery and request schemas - Bounded provider reads and supported analytics What it can change (every change is a plan a person approves): - Reviewed mutations and credit-consuming operations Guardrail: Fixed vendor-workspace client scope. Exact proposals, provider quota and no replay of uncertain writes. Credential administration, billing, permanent deletion and binary transfers remain in the vendor dashboard. How it connects: Customer API key and authorized table IDs. Structured tables require Enterprise access. Example prompts: - "Show the clay operations available to this client." - "Review clay performance and propose the next action." MCP tools (3, see https://megamcp.com/docs/tools#clay): - `clay_list_operations` (read): Clay operations - `clay_read` (read): Read Clay - `clay_propose` (write): Propose Clay action ### Instantly.ai (Live) Page: https://megamcp.com/mcp/instantly. Category: Commerce & CRM. Your sales stack, through MegaMCP Discover supported official API operations, read live data and prepare exact actions for human approval. Reporting uses the same encrypted, client-bound connection. What your AI can read: - Operation discovery and request schemas - Bounded provider reads and supported analytics What it can change (every change is a plan a person approves): - Reviewed mutations and credit-consuming operations Guardrail: Fixed vendor-workspace client scope. Exact proposals, provider quota and no replay of uncertain writes. Credential administration, billing, permanent deletion and binary transfers remain in the vendor dashboard. How it connects: Customer API key and verified vendor workspace identity. Vendor plan and permission scopes apply. Example prompts: - "Show the instantly operations available to this client." - "Review instantly performance and propose the next action." MCP tools (3, see https://megamcp.com/docs/tools#instantly): - `instantly_list_operations` (read): Instantly.ai operations - `instantly_read` (read): Read Instantly.ai - `instantly_propose` (write): Propose Instantly.ai action ### Google Ads (Rolling out) Page: https://megamcp.com/mcp/google-ads. Category: Ads. Run Google Ads from one sentence. Connect Google Ads to Claude, ChatGPT or Cursor. Pull performance, find wasted spend, and build Search campaigns, with a diff of every change before it goes live. What your AI can read: - Account overview and campaign performance - Keyword and responsive search ad performance - Search terms report - Any GAQL report query - Change history - Month-to-date budget pacing and daily anomaly checks - Performance by day, device, location, ad group, audience, conversion action, hour or weekday - Ad groups with bids - Keyword Planner ideas with search volumes and bid ranges - Google's recommendations with estimated impact - One-call account health check and wasted spend sweep with n-grams - Landing page QA: broken pages, redirects and gclid loss - Conversion actions: primary or secondary, counting, attribution, recent conversions - Performance Max asset groups, asset status and placements - AI Max for Search terms, landing pages and headlines - Bid strategies with tCPA and tROAS targets vs actuals - Campaign targeting: locations, radius, languages, audiences, ad schedule, device bids and labels - Audiences (user lists, interests, custom audiences) and shared negative keyword lists What it can change (every change is a plan a person approves): - Create Search campaigns - Add negative keywords - Change campaign daily budgets - Pause and enable campaigns, ad groups, keywords and ads - Add keywords (paused unless you say otherwise) - Change keyword max CPC bids - Create ad groups and responsive search ads (always paused) - Add sitelinks, callouts and call assets - Create conversion actions (secondary unless you say primary) - Upload offline conversions by GCLID - Apply Google's keyword and budget recommendations - Change location targets and exclusions - Replace ad schedules and set device bid adjustments - Add audiences in observation or targeting mode - Create and apply labels; manage shared negative keyword lists Guardrail: Budget bumpers block any change that pushes a daily budget past your cap until an admin raises it. Example prompts: - "Which search terms spent over $50 last month with zero conversions? Add them as negatives." - "Build a Search campaign for 'emergency plumber Denver' at $80/day." - "Compare CPA by device for the last 30 days and tell me where to shift budget." - "Pause every ad with CTR under 1% that has more than 2,000 impressions." MCP tools (44, see https://megamcp.com/docs/tools#google_ads): - `google_ads_account_overview` (read): Google Ads account overview - `google_ads_list_campaigns` (read): List Google Ads campaigns - `google_ads_search_terms` (read): Google Ads search terms report - `google_ads_keywords` (read): Google Ads keywords - `google_ads_ads` (read): Google Ads responsive search ads - `google_ads_query` (read): Run a Google Ads (GAQL) report query - `google_ads_change_history` (read): Google Ads change history - `google_ads_report` (read): Google Ads performance report - `google_ads_list_ad_groups` (read): List Google Ads ad groups - `google_ads_keyword_ideas` (read): Google Ads keyword ideas - `google_ads_recommendations` (read): Google Ads recommendations - `google_ads_budget_pacing` (read): Google Ads budget pacing - `google_ads_anomalies` (read): Google Ads anomaly check - `ads_account_health` (read): Google Ads account health check - `ads_waste_sweep` (read): Google Ads wasted spend sweep - `ads_landing_page_qa` (read): Google Ads landing page QA - `google_ads_set_campaign_status` (write): Pause or enable Google Ads campaigns - `google_ads_set_campaign_budget` (write): Change a Google Ads campaign's daily budget - `google_ads_add_negative_keywords` (write): Add Google Ads negative keywords - `google_ads_set_ad_group_status` (write): Pause or enable Google Ads ad groups - `google_ads_set_keyword_status` (write): Pause or enable Google Ads keywords - `google_ads_set_ad_status` (write): Pause or enable Google Ads ads - `google_ads_create_search_campaign` (write): Create a Google Ads search campaign - `google_ads_add_keywords` (write): Add Google Ads keywords - `google_ads_set_keyword_bid` (write): Change a Google Ads keyword's max CPC bid - `google_ads_create_ad_group` (write): Create a Google Ads ad group - `google_ads_create_rsa` (write): Create a Google Ads responsive search ad - `google_ads_add_assets` (write): Add Google Ads sitelinks, callouts and call assets - `google_ads_conversions` (read): Google Ads conversion actions - `google_ads_pmax_report` (read): Google Ads Performance Max report - `google_ads_ai_max_search_terms` (read): Google Ads AI Max search terms - `google_ads_bidding_strategies` (read): Google Ads bid strategies - `google_ads_create_conversion_action` (write): Create a Google Ads conversion action - `google_ads_upload_offline_conversions` (write): Upload offline conversions to Google Ads - `google_ads_apply_recommendation` (write): Apply a Google Ads recommendation - `google_ads_targeting` (read): Google Ads campaign targeting - `google_ads_list_audiences` (read): List Google Ads audiences - `google_ads_list_negative_lists` (read): List Google Ads negative keyword lists - `google_ads_set_locations` (write): Change Google Ads location targeting - `google_ads_set_ad_schedule` (write): Replace a Google Ads campaign's ad schedule - `google_ads_set_device_bids` (write): Set Google Ads device bid adjustments - `google_ads_add_audiences` (write): Add audiences to a Google Ads campaign or ad group - `google_ads_labels` (write): Create and apply Google Ads labels - `google_ads_negative_lists` (write): Manage Google Ads negative keyword lists ### Meta Ads (Rolling out) Page: https://megamcp.com/mcp/meta-ads. Category: Ads. Meta Ads, minus the Ads Manager maze. Ask about any campaign across Facebook and Instagram, catch tired creatives, and launch new ads, with a diff of every change before it ships. What your AI can read: - Account overview - Campaigns, ad sets and ads - Insights with breakdowns (placement, age, region...) - Creative fatigue signals - Month-to-date budget pacing What it can change (every change is a plan a person approves): - Pause and activate campaigns, ad sets and ads - Change daily budgets - Duplicate ad sets - Create new ads (always paused) Guardrail: New ads are created paused. You flip them live. Budget changes still answer to your budget bumpers. Example prompts: - "Which ads have frequency above 4 and a falling CTR? Summarize and suggest fixes." - "Duplicate my best prospecting ad set so I can test a new audience." - "Show ROAS by placement for the last 14 days, worst first." - "Turn off every ad that spent $100+ this week without a purchase." MCP tools (11, see https://megamcp.com/docs/tools#meta_ads): - `meta_ads_account_overview` (read): Meta Ads account overview - `meta_ads_list_campaigns` (read): List Meta campaigns - `meta_ads_list_ad_sets` (read): List Meta ad sets - `meta_ads_list_ads` (read): List Meta ads - `meta_ads_insights` (read): Meta Ads insights (flexible) - `meta_ads_creative_fatigue` (read): Find fatigued Meta creatives - `meta_ads_budget_pacing` (read): Meta Ads budget pacing - `meta_ads_set_status` (write): Pause or activate Meta campaigns, ad sets or ads - `meta_ads_set_budget` (write): Change a Meta daily budget - `meta_ads_duplicate_ad_set` (write): Duplicate a Meta ad set - `meta_ads_create_ad` (write): Create a paused Meta ad ### Google Analytics 4 (Rolling out) Page: https://megamcp.com/mcp/google-analytics. Category: Analytics. Ask GA4 questions in plain English. No more building explorations by hand. Ask what changed, why, and where, and get an answer with the numbers behind it. What your AI can read: - Reports with any dimension and metric (Data API) - Traffic summaries and period comparisons - Top pages, and landing pages by source / medium - Funnels and pivot tables - Audience breakdowns and audience exports - Property setup audit - Property settings, data retention and data sharing - Data streams (web, Android and iOS) - Change history: who changed what, and when - Realtime - Key events - Audience and custom-dimension/metric configuration What it can change (every change is a plan a person approves): - Create, update and remove key events (counting method, default value) - Change display name, time zone, currency and industry category - Create web data streams; rename streams or change a web stream's address; delete a stream - Change data retention - Switch enhanced measurement events on or off - Create bounded event audiences; edit descriptions or archive after review - Create and edit typed custom dimensions and metrics Guardrail: Every write waits for approval like everything else, with before and after values. Plans that delete a data stream or shorten data retention say plainly that it can't be undone. Example prompts: - "Why did conversions drop 18% last week? Break it down by channel and landing page." - "Which landing pages have high traffic but a conversion rate under 1%?" - "Give me a weekly traffic summary I can paste into Slack." - "How many people are on the site right now, and from where?" MCP tools (36, see https://megamcp.com/docs/tools#ga4): - `ga4_run_report` (read): GA4: run a report - `ga4_traffic_summary` (read): GA4: traffic summary - `ga4_compare_periods` (read): GA4: what changed and where - `ga4_top_pages` (read): GA4: top pages - `ga4_realtime` (read): GA4: realtime - `ga4_list_key_events` (read): GA4: list key events - `ga4_create_key_event` (write): GA4: mark an event as a key event - `ga4_update_key_event` (write): GA4: update a key event - `ga4_delete_key_event` (write): GA4: remove a key event - `ga4_funnel_report` (read): GA4: funnel report - `ga4_pivot_report` (read): GA4: pivot report - `ga4_landing_pages` (read): GA4: landing pages by source - `ga4_audience_breakdown` (read): GA4: audience breakdown - `ga4_property_audit` (read): GA4: property audit - `ga4_audience_exports` (read): GA4: audiences and audience exports - `ga4_create_audience_export` (read): GA4: create an audience export - `ga4_query_audience_export` (read): GA4: read an audience export - `ga4_set_data_retention` (write): GA4: set data retention - `ga4_set_enhanced_measurement` (write): GA4: set enhanced measurement - `ga4_get_property_settings` (read): GA4: property settings - `ga4_update_property_settings` (write): GA4: update property settings - `ga4_list_data_streams` (read): GA4: list data streams - `ga4_create_web_data_stream` (write): GA4: create a web data stream - `ga4_update_data_stream` (write): GA4: update a data stream - `ga4_delete_data_stream` (write): GA4: delete a data stream - `ga4_change_history` (read): GA4: change history - `ga4_list_admin_definitions` (read): GA4: list audience/custom definitions - `ga4_get_admin_definition` (read): GA4: inspect exact audience/custom definition - `ga4_create_audience` (write): GA4: review audience creation - `ga4_create_custom_dimension` (write): GA4: review custom dimension creation - `ga4_create_custom_metric` (write): GA4: review custom metric creation - `ga4_update_audience` (write): GA4: review audience labels - `ga4_update_custom_dimension` (write): GA4: review custom dimension changes - `ga4_update_custom_metric` (write): GA4: review custom metric changes - `ga4_archive_admin_definition` (write): GA4: review irreversible definition archive - `ga4_admin_definition_attempt` (read): GA4: inspect definition submission receipt ### Google Tag Manager (Rolling out) Page: https://megamcp.com/mcp/google-tag-manager. Category: Analytics. Fix tracking without spelunking GTM. Audit containers, find broken or duplicate tags, and stage tag changes. Publishing is its own step, and it always waits for a human. What your AI can read: - Containers and workspaces - Container audits (tags, triggers, variables) - Exact workspace variables, triggers and tags with current fingerprints - Version history What it can change (every change is a plan a person approves): - Create GA4 event tags - Review constant variables, custom-event triggers and paused GA4 event-tag drafts - Pause and unpause tags - Publish a workspace (a separate approval) Guardrail: Tag edits and publishing are separate plans. Nothing reaches your live site until someone approves the publish. Example prompts: - "Audit this container: list tags with no firing trigger and duplicate GA4 events." - "Add a GA4 event tag for clicks on any 'Book a call' button." - "Which tags changed in the last 3 published versions?" - "Pause the old Universal Analytics tags in this container." MCP tools (15, see https://megamcp.com/docs/tools#gtm): - `gtm_list_containers` (read): Tag Manager: containers and workspaces - `gtm_audit_container` (read): Tag Manager: audit a container - `gtm_list_versions` (read): Tag Manager: versions - `gtm_create_ga4_event_tag` (write): Tag Manager: create a GA4 event tag - `gtm_set_tag_paused` (write): Tag Manager: pause or unpause a tag - `gtm_publish_workspace` (write): Tag Manager: publish a workspace - `gtm_list_workspace_entities` (read): Tag Manager: list workspace entities - `gtm_get_workspace_entity` (read): Tag Manager: inspect exact entity - `gtm_create_constant_variable` (write): Tag Manager: propose constant variable - `gtm_update_constant_variable` (write): Tag Manager: propose constant update - `gtm_create_custom_event_trigger` (write): Tag Manager: propose exact custom-event trigger - `gtm_update_custom_event_trigger` (write): Tag Manager: propose exact custom-event trigger update - `gtm_create_paused_ga4_tag` (write): Tag Manager: propose paused GA4 tag - `gtm_update_paused_ga4_tag` (write): Tag Manager: propose bounded GA4 tag update - `gtm_reconcile_created_entity` (read): Tag Manager: inspect uncertain creation ### Search Console (Rolling out) Page: https://megamcp.com/mcp/google-search-console. Category: Analytics. Your SEO data, finally conversational. Find the queries you almost rank for, spot pages that are slipping, and turn it into a to-do list your team will actually read. What your AI can read: - Search performance by query, page, country, device - Quick wins, cannibalization, low-CTR and content-decay finders - Ranked SEO opportunities and internal link suggestions - Core Web Vitals sweep - URL inspection - Sitemaps What it can change (every change is a plan a person approves): - Submit sitemaps - Notify search engines of changed URLs through IndexNow, once your key file is live Guardrail: Read-mostly by design. Submitting a sitemap and sending an IndexNow notice are the only writes, and each needs approval. An IndexNow notice can't be recalled once sent. Example prompts: - "List queries where we rank 8–20 with 500+ impressions. Those are my quick wins." - "Which pages lost the most clicks month over month, and for which queries?" - "Find cannibalization: queries where 2+ of our URLs rank." - "Is /pricing indexed, and when did Google last crawl it?" MCP tools (13, see https://megamcp.com/docs/tools#gsc): - `gsc_search_analytics` (read): Search Console: search performance - `gsc_quick_wins` (read): Search Console: quick wins - `gsc_cannibalization` (read): Search Console: keyword cannibalization - `gsc_inspect_url` (read): Search Console: inspect a URL - `gsc_list_sitemaps` (read): Search Console: sitemaps - `gsc_submit_sitemap` (write): Search Console: submit a sitemap - `gsc_ctr_opportunities` (read): Search Console: low-CTR opportunities - `gsc_content_decay` (read): Search Console: content decay - `gsc_seo_opportunities` (read): Search Console: ranked SEO opportunities - `gsc_internal_link_suggestions` (read): Search Console: internal link suggestions - `gsc_cwv_sweep` (read): Search Console: Core Web Vitals sweep - `gsc_indexnow_setup` (read): IndexNow: key file setup - `gsc_indexnow_submit` (write): IndexNow: submit changed URLs ### WordPress (Live) Page: https://megamcp.com/mcp/wordpress. Category: Websites. Fix your WordPress site by asking. Connect a WordPress site to Claude, ChatGPT or Cursor. Audit on-page SEO, find images without alt text, edit titles and copy, and draft new posts, with a diff of every change before it goes live. What your AI can read: - Site overview, your role and detected plugins (Yoast, WooCommerce...) - Posts and pages - One post or page with outline, links and images - On-page SEO audit - Media library and missing alt text - Plugins (administrators) What it can change (every change is a plan a person approves): - Edit titles, content, excerpts and slugs - Publish, unpublish or make private - Create drafts (never published) - Set image alt text in bulk - With the MegaMCP Connector plugin: SEO titles and descriptions (Yoast SEO, Rank Math or its own), JSON-LD, redirects, cache purges and the IndexNow key file Guardrail: Edits wait for approval, and an approved edit stops if someone changed that page in WordPress in the meantime. New posts are always drafts. How it connects: Start a MegaMCP trial, then on the Connections page enter the site's https address, a WordPress username and an application password (WordPress → Users → Profile → Application Passwords). Then add MegaMCP to your AI app with one URL. No plugin or code needed for posts, pages and media; the optional MegaMCP Connector plugin adds SEO fields, JSON-LD, redirects, cache purges and IndexNow. Example prompts: - "Audit my 10 latest blog posts for SEO problems and list the fixes by impact." - "Which images in the media library have no alt text? Write alt text for them." - "Rewrite the excerpt on the pricing page so it's under 155 characters." - "Draft a post from these notes, but don't publish it." MCP tools (16, see https://megamcp.com/docs/tools#wordpress): - `wordpress_site_info` (read): WordPress site overview - `wordpress_list_content` (read): List WordPress posts or pages - `wordpress_get_content` (read): Read a WordPress post or page - `wordpress_seo_audit` (read): WordPress on-page SEO audit - `wordpress_list_plugins` (read): List WordPress plugins - `wordpress_list_media` (read): List WordPress images - `wordpress_redirects` (read): List WordPress redirects - `wordpress_update_content` (write): Edit a WordPress post or page - `wordpress_set_content_status` (write): Publish or unpublish WordPress content - `wordpress_create_draft` (write): Create a WordPress draft - `wordpress_set_image_alt` (write): Set WordPress image alt text - `wordpress_set_seo_meta` (write): Set WordPress SEO titles and descriptions - `wordpress_set_schema` (write): Set JSON-LD on a WordPress post or page - `wordpress_set_redirects` (write): Add or remove WordPress redirects - `wordpress_purge_cache` (write): Clear WordPress page caches - `wordpress_set_indexnow_key` (write): Serve the IndexNow key file from WordPress ### TikTok Ads (Rolling out) Page: https://megamcp.com/mcp/tiktok-ads. Category: Ads. Review TikTok campaign changes before they run. Read campaign performance and prepare status or daily-budget changes for supported standard campaigns. What your AI can read: - Campaign list and details - Bounded campaign performance reports What it can change (every change is a plan a person approves): - Reviewed campaign status changes - Reviewed standard-campaign daily budgets - Supported reversals after drift checks Guardrail: Budget caps, account ownership, drift checks and confirmed after-values apply. Unsupported campaign types fail closed. How it connects: One-click TikTok sign-in is built and appears in your dashboard once TikTok approves MegaMCP's app; it finds every advertiser you can reach. Until then, the beta accepts a dedicated authorized access token for one advertiser account, expiring locally within one hour. Provider app approval and permissions still apply; automatic refresh is unavailable. Example prompts: - "List campaigns in this advertiser account." - "Show campaign spend and conversions for last week." - "Prepare a daily budget of $50 for this standard campaign." - "Prepare to pause this campaign for my review." MCP tools (5, see https://megamcp.com/docs/tools#tiktok_ads): - `tiktok_ads_get_account` (read): tiktok: verify advertising account - `tiktok_ads_list_campaigns` (read): tiktok: list campaigns - `tiktok_ads_list_ad_groups` (read): tiktok: list ad groups - `tiktok_ads_performance` (read): tiktok: account performance - `tiktok_ads_update_campaign` (write): tiktok: propose campaign status or daily budget ### LinkedIn Ads (Rolling out) Page: https://megamcp.com/mcp/linkedin-ads. Category: Ads. Review LinkedIn campaign changes before approval. Read one enabled ad account's campaign metadata and daily aggregate performance, then prepare supported status or daily-budget updates for human review. What your AI can read: - Selected account and campaign metadata - Daily account totals: impressions, clicks and spend, up to 31 days What it can change (every change is a plan a person approves): - Reviewed ACTIVE/PAUSED status for eligible campaigns - Reviewed supported campaign daily budgets - Separate reviewed inverse after confirmed readback Guardrail: Fresh account, grant, client and drift checks apply. Unsupported formats, shared/lifetime budgets and targeting edits are refused. Vendor changes can race an update; unknown outcomes are never retried automatically. How it connects: One-click LinkedIn sign-in is built and appears in your dashboard once LinkedIn approves MegaMCP's Advertising API access; it finds every ad account you hold a role on. Until then, the controlled beta requires an approved LinkedIn Advertising app and a dedicated member token. Client ID and secret are used transiently for token introspection; only the token is saved encrypted, for at most one hour. r_ads or rw_ads permits reads, r_ads_reporting permits reports, and privileged rw_ads is needed for updates. Vendor account roles and access tiers still apply. Manual reconnect, explicit account enablement and client assignment are required; credentialed acceptance remains pending. Example prompts: - "List campaigns in this enabled LinkedIn account." - "Show this account's daily spend and impressions for last week." - "Check whether this campaign supports daily-budget updates." - "Prepare to pause this eligible campaign for my approval." MCP tools (5, see https://megamcp.com/docs/tools#linkedin_ads): - `linkedin_ads_get_account` (read): LinkedIn Ads: account metadata - `linkedin_ads_list_campaigns` (read): LinkedIn Ads: campaign metadata - `linkedin_ads_get_campaign` (read): LinkedIn Ads: inspect campaign budgeting - `linkedin_ads_performance` (read): LinkedIn Ads: daily aggregate performance - `linkedin_ads_update_campaign` (write): LinkedIn Ads: propose status or daily budget ### Microsoft Ads (Rolling out) Page: https://megamcp.com/mcp/microsoft-ads. Category: Ads. Microsoft Ads, handled. Connect Microsoft Ads (Bing) to Claude, ChatGPT or Cursor. Report on campaigns, keywords and search terms, catch pacing problems, pause, budget and add negatives, and build keywords, ad groups, responsive search ads, extensions and targeting, with a diff of every change before it goes live. What your AI can read: - Campaigns with budgets, bid strategies and performance - Ad groups, keywords with bids and quality scores, and ads - Performance by day, device, location, ad group, keyword or campaign - Search terms report with wasted-spend filters - Month-to-date budget pacing and daily anomaly checks What it can change (every change is a plan a person approves): - Pause and enable campaigns - Change campaign daily budgets - Pause and enable keywords - Add campaign negative keywords - Add keywords and change keyword bids - Create paused ad groups and responsive search ads - Add sitelinks, callouts and call extensions - Set locations, device bid adjustments and the ad schedule Guardrail: Budget bumpers cap daily budgets and treat enabling a campaign as new spend. Approved changes stop if someone changed them in Microsoft Ads meanwhile, and undo restores the previous state. Example prompts: - "Which Microsoft Ads search terms spent over $30 last month with zero conversions? Add them as negatives." - "Compare Google Ads and Microsoft Ads CPA for the last 30 days." - "Is any Microsoft Ads campaign over-pacing its budget this month?" - "Pause the Microsoft Ads keywords with a CPA over $150 in the Brand campaign." MCP tools (21, see https://megamcp.com/docs/tools#microsoft_ads): - `microsoft_ads_list_campaigns` (read): List Microsoft Ads campaigns - `microsoft_ads_list_ad_groups` (read): List Microsoft Ads ad groups - `microsoft_ads_keywords` (read): Microsoft Ads keywords - `microsoft_ads_ads` (read): Microsoft Ads ads - `microsoft_ads_report` (read): Microsoft Ads performance report - `microsoft_ads_search_terms` (read): Microsoft Ads search terms report - `microsoft_ads_budget_pacing` (read): Microsoft Ads budget pacing - `microsoft_ads_anomalies` (read): Microsoft Ads anomaly check - `microsoft_ads_set_campaign_status` (write): Pause or enable Microsoft Ads campaigns - `microsoft_ads_set_campaign_budget` (write): Change a Microsoft Ads campaign's daily budget - `microsoft_ads_set_keyword_status` (write): Pause or enable Microsoft Ads keywords - `microsoft_ads_add_negative_keywords` (write): Add Microsoft Ads negative keywords - `microsoft_ads_add_keywords` (write): Add Microsoft Ads keywords - `microsoft_ads_set_keyword_bid` (write): Change a Microsoft Ads keyword's max CPC bid - `microsoft_ads_create_ad_group` (write): Create a Microsoft Ads ad group - `microsoft_ads_create_rsa` (write): Create a Microsoft Ads responsive search ad - `microsoft_ads_add_assets` (write): Add Microsoft Ads sitelinks, callouts and call extensions - `microsoft_ads_targeting` (read): Microsoft Ads campaign targeting - `microsoft_ads_set_locations` (write): Change Microsoft Ads location targeting - `microsoft_ads_set_device_bids` (write): Set Microsoft Ads device bid adjustments - `microsoft_ads_set_ad_schedule` (write): Replace a Microsoft Ads campaign's ad schedule ### Shopify (Live) Page: https://megamcp.com/mcp/shopify. Category: Commerce & CRM. Ask your store how it's doing. Inspect products, recent order totals and inventory. Propose content, price and inventory edits with current-value checks and a diff before approval. What your AI can read: - Products and variant prices - Recent order totals and status, excluding customer contact and address fields - Inventory quantities and locations What it can change (every change is a plan a person approves): - Edit product content - Change variant prices - Set inventory with compare-and-set protection Guardrail: Every edit requires human review and stops if its current value changed. Supported reversals also check live values. No checkout, discount or customer-management tools are included. How it connects: One-click install is built and appears in your dashboard once MegaMCP's Shopify app is approved. You can always connect a dedicated Shopify custom app token and your exact shop-name.myshopify.com domain in Connections. Choose read_products and only the optional order, location, inventory or write scopes you need. Example prompts: - "List my active products and current variant prices." - "Summarize recent order totals and fulfillment status." - "Inspect this inventory item at the selected location." - "Propose updating this product description, then let me review it." MCP tools (8, see https://megamcp.com/docs/tools#shopify): - `shopify_list_products` (read): Shopify: list products - `shopify_get_product` (read): Shopify: inspect product - `shopify_recent_orders` (read): Shopify: recent order totals - `shopify_update_product` (write): Shopify: propose product content update - `shopify_update_variant_price` (write): Shopify: propose variant price - `shopify_get_inventory` (read): Shopify: inspect inventory at location - `shopify_list_locations` (read): Shopify: list inventory locations - `shopify_set_inventory` (write): Shopify: propose exact inventory quantity ### HubSpot (Live) Page: https://megamcp.com/mcp/hubspot. Category: Commerce & CRM. Close the loop between ads and pipeline. Connect HubSpot CRM to Claude, ChatGPT or Cursor. Find contacts, companies and deals by any property, see where leads came from, and log notes, tasks and deals, with a diff of every change before it goes live. What your AI can read: - Search contacts, companies and deals with filters and paging - One record with its associated contacts, companies and deals - Deal pipelines and stages with win probabilities - Owners - Recent notes, tasks, calls, emails and meetings on a record - Properties, including traffic-source and click-id fields - Bounded static contact lists and exact membership IDs - Private company-creation attempt receipts What it can change (every change is a plan a person approves): - Update contact, company and deal properties - Create contacts (never duplicates an email) - Create deals with their contacts and companies - Add notes and tasks to records - Reviewed company creation with exact fields - Reviewed changes to up to 25 exact static-list memberships Guardrail: Edits require approval and fresh drift checks. Supported field edits have reviewed restoration; company creation has no undo. Static-list changes may trigger your configured HubSpot workflows or messages, and restoring membership cannot reverse those effects. Unknown creation attempts are never automatically replayed. How it connects: Use a HubSpot private-app access token from your account's Development → Legacy apps settings. Contacts, companies and deals read scopes are required; add write scopes for the operations you want to approve. The token is encrypted. Example prompts: - "Which deals over $10k closed this quarter, and what was each contact's original traffic source?" - "Show me every contact created this week with a Google click id and no deal yet." - "What's happened on the Acme Corp deal in the last 30 days?" - "Move the Acme renewal to Contract sent and add a follow-up task for Friday." MCP tools (16, see https://megamcp.com/docs/tools#hubspot): - `hubspot_search` (read): Search HubSpot contacts, companies or deals - `hubspot_get_record` (read): Get a HubSpot record with its associations - `hubspot_pipelines` (read): HubSpot deal pipelines and stages - `hubspot_owners` (read): HubSpot owners - `hubspot_recent_activity` (read): Recent HubSpot activity - `hubspot_properties` (read): HubSpot properties - `hubspot_update_record` (write): Update HubSpot record properties - `hubspot_create_contact` (write): Create a HubSpot contact - `hubspot_create_deal` (write): Create a HubSpot deal - `hubspot_create_note` (write): Add a note to a HubSpot record - `hubspot_create_task` (write): Create a HubSpot task on a record - `hubspot_search_static_contact_lists` (read): HubSpot: find manual contact lists - `hubspot_static_contact_list_members` (read): HubSpot: inspect manual contact-list members - `hubspot_update_static_contact_list_membership` (write): HubSpot: review static contact-list membership changes - `hubspot_create_company` (write): HubSpot: review company creation - `hubspot_company_creation_attempt` (read): HubSpot: inspect company creation receipt ### Klaviyo (Live) Page: https://megamcp.com/mcp/klaviyo. Category: Commerce & CRM. Email drafts with a human in control. Inspect email campaign, list, metric and template metadata. Propose templates and campaign drafts for review; delivery stays in Klaviyo. What your AI can read: - Email campaign metadata and message IDs - Audience list metadata and metric definitions - Reusable template metadata What it can change (every change is a plan a person approves): - Create templates and email campaign drafts - Assign a template to a draft campaign Guardrail: MegaMCP will never send email or SMS. Sending stays in Klaviyo. How it connects: One-click Klaviyo sign-in is built and appears in your dashboard once MegaMCP's Klaviyo app is approved. You can always connect a dedicated Klaviyo private API key in Connections. Read-only metadata scopes are enough for reporting; add matching template/campaign write scopes only for draft operations. Example prompts: - "List the status of my email campaigns." - "Show this campaign's message IDs." - "List reusable email templates and audience list metadata." - "Propose an email campaign draft using this template." MCP tools (8, see https://megamcp.com/docs/tools#klaviyo): - `klaviyo_list_campaigns` (read): Klaviyo: list email campaign drafts/status - `klaviyo_get_campaign` (read): Klaviyo: inspect campaign and message IDs - `klaviyo_list_lists` (read): Klaviyo: list audience list metadata - `klaviyo_list_metrics` (read): Klaviyo: list metric definitions - `klaviyo_list_templates` (read): Klaviyo: list reusable template metadata - `klaviyo_create_email_template` (write): Klaviyo: propose reusable email template - `klaviyo_create_email_campaign_draft` (write): Klaviyo: propose email campaign draft - `klaviyo_assign_draft_template` (write): Klaviyo: propose draft message template ### Merchant Center (Rolling out) Page: https://megamcp.com/mcp/google-merchant-center. Category: Commerce & CRM. Inspect your catalog and review product copy changes. Read processed products and data sources through Merchant API, then prepare supported account-name or product-copy changes. What your AI can read: - Account details - Processed products and individual product inspection - Data sources What it can change (every change is a plan a person approves): - Reviewed account-name changes with supported undo - Reviewed product title and description updates for a primary API source Guardrail: Product-input updates cannot be undone because the API does not expose the required input preimage. Processing is asynchronous; an API receipt does not prove public catalog publication. How it connects: Google consent plus Merchant API developer registration and access to a verified production Merchant account are required. Public OAuth verification remains pending. Example prompts: - "Show this Merchant Center account and its data sources." - "List processed products and inspect this product." - "Prepare a clearer title and description for this API-source product." MCP tools (5, see https://megamcp.com/docs/tools#merchant_center): - `merchant_center_list_products` (read): Merchant Center: product status and catalog - `merchant_center_list_data_sources` (read): Merchant Center: list data sources - `merchant_center_get_account` (read): Merchant Center: inspect account - `merchant_center_update_account_name` (write): Merchant Center: propose account name - `merchant_center_update_product_copy` (write): Merchant Center: propose source product copy ### Google Drive (Rolling out) Page: https://megamcp.com/mcp/google-drive. Category: Workspace. Authorize the files your team needs. Inspect enabled files, search their metadata, export supported document text and spreadsheet CSV, and propose metadata edits. What your AI can read: - Enabled-file metadata and client-bound search - Document text or first spreadsheet tab CSV What it can change (every change is a plan a person approves): - Reviewed file metadata updates Guardrail: Only explicitly enabled files are available to tools. Existing-file Picker uses a separate file-only token; broader Drive access is excluded. How it connects: Optional Google Workspace drive.file consent, then enable and assign authorized file accounts. Picker requires operator API-key and project setup. Live acceptance remains pending. Example prompts: - "Inspect this enabled file." - "Search the files assigned to this client." - "Propose a new file name for review." MCP tools (4, see https://megamcp.com/docs/tools#google_drive): - `google_drive_get_file` (read): Drive: inspect enabled file - `google_drive_search_files` (read): Drive: search enabled files - `google_drive_export_text` (read): Drive: export document text or spreadsheet CSV - `google_drive_update_metadata` (write): Drive: propose filename and description ### Google Sheets (Rolling out) Page: https://megamcp.com/mcp/google-sheets. Category: Workspace. Turn report data into reviewed sheet edits. Read bounded ranges and tab metadata, propose rectangular cell updates, and create a spreadsheet from explicit supplied data. What your AI can read: - Typed bounded ranges and sheet metadata What it can change (every change is a plan a person approves): - Reviewed rectangular updates preserving formulas for undo - Review formatting for at most 100 existing, unmerged cells - Create spreadsheets with explicit data Guardrail: Updates stop on observed range drift. Formatting preserves values but has no atomic row/column race guarantee. Creations are non-reversible; they never grant automatic account access. How it connects: Connect optional Google Workspace, authorize a file or use a creation account, assign a client and explicitly enable it. Example prompts: - "Read 'Report'!A1:D12." - "Propose updating this report range with these values." - "Create a spreadsheet draft from this supplied table." MCP tools (6, see https://megamcp.com/docs/tools#google_sheets): - `google_sheets_read_range` (read): Sheets: read range - `google_sheets_get_spreadsheet` (read): Sheets: list tabs - `google_sheets_update_range` (write): Sheets: propose range update - `google_sheets_create_spreadsheet` (write): Sheets: propose report spreadsheet - `google_sheets_inspect_range_format` (read): Sheets: inspect exact bounded range formatting - `google_sheets_format_range` (write): Sheets: review bounded range formatting ### Google Docs (Rolling out) Page: https://megamcp.com/mcp/google-docs. Category: Workspace. Draft reports with a traceable source. Read enabled documents and propose revision-checked text append operations or new documents. What your AI can read: - Enabled-document text and revision What it can change (every change is a plan a person approves): - Append text with exact tab and revision checks - Replace exact literal text in a supported selected tab with revision checks - Create documents from explicit text Guardrail: Append reversal removes only the inserted text range. Document creation is non-reversible and never happens while planning. How it connects: Connect optional Google Workspace and explicitly enable the authorized document or creation account. Example prompts: - "Read this client document." - "Propose appending this supplied evidence summary." - "Create a document from this approved draft text." MCP tools (5, see https://megamcp.com/docs/tools#google_docs): - `google_docs_read_document` (read): Docs: read document - `google_docs_append_text` (write): Docs: propose appended report text - `google_docs_create_document` (write): Docs: propose report document - `google_docs_inspect_text_tab` (read): Docs: inspect selected tab and exact text - `google_docs_replace_literal_text` (write): Docs: review exact literal substring replacement ### Google Slides (Rolling out) Page: https://megamcp.com/mcp/google-slides. Category: Workspace. Build a deck from supplied evidence. Read enabled presentations and propose a report slide or new deck using explicit facts, charts as text and evidence footers. What your AI can read: - Enabled-deck slide text and revision What it can change (every change is a plan a person approves): - Append styled report slides - Review exact literal text replacements or text-box composition on an existing slide - Create decks from explicit report text Guardrail: Appends use revision checks and selective slide removal for supported undo. Creations are non-reversible. Native chart generation is not included. How it connects: Connect optional Google Workspace and enable an authorized deck or creation account. Example prompts: - "Read the text in this enabled deck." - "Propose a report slide from these sourced figures." - "Create a new deck from this supplied report." MCP tools (7, see https://megamcp.com/docs/tools#google_slides): - `google_slides_read_presentation` (read): Slides: read deck text - `google_slides_append_report` (write): Slides: propose report slides - `google_slides_create_report_deck` (write): Slides: propose client report deck - `google_slides_inspect_text_targets` (read): Slides: inspect exact selected slide text - `google_slides_replace_literal_text` (write): Slides: review exact literal text replacement - `google_slides_compose_text_boxes` (write): Slides: review text-box report composition - `google_slides_composition_attempt` (read): Slides: inspect composition receipt and actual objects ### YouTube (Rolling out) Page: https://megamcp.com/mcp/youtube. Category: Social. Inspect your channel and review metadata edits. Read channel/video metadata and propose title and description updates with atomic ETag checks. What your AI can read: - Channel metadata - Channel-owned videos and video details What it can change (every change is a plan a person approves): - Reviewed title and description updates Guardrail: Channel ownership is checked for every video. Updates preserve tags, category and languages, and undo checks the live ETag. How it connects: Optional YouTube readonly consent and enabled Data API. Management requires separate force-ssl consent; public verification and live acceptance remain pending. Example prompts: - "List videos on my enabled channel." - "Inspect this video metadata." - "Propose a clearer title and description." MCP tools (4, see https://megamcp.com/docs/tools#youtube): - `youtube_channel_summary` (read): YouTube: channel statistics - `youtube_list_uploads` (read): YouTube: list channel uploads - `youtube_get_video` (read): YouTube: inspect video metadata - `youtube_update_video_copy` (write): YouTube: propose video title/description ### Google Business Profile (Rolling out) Page: https://megamcp.com/mcp/google-business-profile. Category: Social. Review your listing, replies and opening hours. Read an enabled location's metadata, bounded reviews and daily performance. Propose exact website, owner-reply and regular-hours changes for human review. What your AI can read: - Enabled-location metadata - Location reviews with bounded fields - Owned review details and reply moderation - Bounded daily Business Profile performance metrics What it can change (every change is a plan a person approves): - Reviewed website URI updates - Exact owner-reply changes and supported reviewed restoration - Regular weekly opening hours with supported reviewed restoration Guardrail: Location bindings and changed-value checks apply. An API response does not prove public display; verify the listing after apply. How it connects: Optional business.manage consent plus Google-approved Business Profile project access, enabled APIs and quota. Locations start disabled. Example prompts: - "Inspect this enabled location." - "Read its recent reviews." - "Propose correcting its website address." MCP tools (8, see https://megamcp.com/docs/tools#business_profile): - `business_profile_get_location` (read): Business Profile: inspect location - `business_profile_review_summary` (read): Business Profile: review counts and ratings - `business_profile_update_website` (write): Business Profile: propose website update - `business_profile_daily_performance` (read): Business Profile: daily location performance - `business_profile_list_reviews` (read): Business Profile: read owned review text - `business_profile_get_review` (read): Business Profile: inspect exact owned review - `business_profile_reply_to_review` (write): Business Profile: review owner reply publication/update - `business_profile_update_regular_hours` (write): Business Profile: review weekly opening hours ### Semrush (Live) Page: https://megamcp.com/mcp/semrush. Category: Analytics. Research a domain with bounded API credits. Read domain overview, organic keywords and backlink reports using your dedicated Semrush API credentials. What your AI can read: - Domain rank overview - Organic keywords - Backlink overview using the current API Guardrail: Customer API subscriptions and units apply. Admission bounds and explicit credit consent control calls; no automatic retries or pagination. How it connects: Save a dedicated Semrush API key, authorize vendor credit use, then enable and assign the account. Credential saving makes no vendor API call. Example prompts: - "Summarize this domain overview." - "List its top ten organic keywords." - "Inspect its backlink overview." MCP tools (3, see https://megamcp.com/docs/tools#semrush): - `semrush_domain_overview` (read): Semrush domain overview - `semrush_organic_keywords` (read): Semrush organic keywords - `semrush_backlinks` (read): Semrush backlinks ### Ahrefs (Live) Page: https://megamcp.com/mcp/ahrefs. Category: Analytics. Inspect search and backlinks with a clear allowance. Read domain rating, organic keyword positions and backlinks through Ahrefs API v3. What your AI can read: - Domain rating - Organic keyword positions - Backlinks Guardrail: API-unit admission is atomic. Actual usage headers settle estimates; unexpected higher usage pauses further calls. Provider billing still governs actual costs. How it connects: Save a dedicated Ahrefs API key and approve vendor API-unit use, then enable and assign the account. Example prompts: - "Inspect this domain rating." - "List ten organic keyword positions." - "Show a bounded backlink sample." MCP tools (3, see https://megamcp.com/docs/tools#ahrefs): - `ahrefs_domain_rating` (read): Ahrefs domain rating - `ahrefs_organic_keywords` (read): Ahrefs organic keywords - `ahrefs_backlinks` (read): Ahrefs backlinks ### DataForSEO (Live) Page: https://megamcp.com/mcp/dataforseo. Category: Analytics. Read your existing research receipts. Inspect account status and retrieve existing Google SERP task results without creating a new paid task. What your AI can read: - Free account status - Existing Google SERP task results Guardrail: New paid research task creation is unavailable. Credentials are encrypted and query/task inputs are bounded. How it connects: Use dedicated API access credentials, approve data use, then enable and assign the account. Example prompts: - "Inspect my DataForSEO API account status." - "Read this existing Google SERP task result." MCP tools (2, see https://megamcp.com/docs/tools#dataforseo): - `dataforseo_account_status` (read): DataForSEO account status - `dataforseo_serp_result` (read): Read an existing DataForSEO SERP task ### Reddit Ads (Rolling out) Page: https://megamcp.com/mcp/reddit-ads. Category: Ads. Review Reddit campaign changes. Inspect campaigns and bounded reports, and propose supported status or daily CBO budget changes. What your AI can read: - Campaign list and detail - Bounded account reports What it can change (every change is a plan a person approves): - Supported campaign status updates - Verified daily CBO budget updates Guardrail: Budget caps, drift checks and live after-write readback apply. Unsupported campaign/budget modes are rejected. How it connects: One-click Reddit sign-in is built and appears in your dashboard once MegaMCP's Reddit app is approved; it finds every ad account you can reach and refreshes itself. Until then, the beta accepts a dedicated vendor-authorized token for one account, expiring locally within one hour. Automatic OAuth refresh is not configured; live acceptance remains pending. Example prompts: - "List my campaigns." - "Read this campaign report." - "Propose pausing this campaign." MCP tools (5, see https://megamcp.com/docs/tools#reddit_ads): - `reddit_ads_get_account` (read): reddit: verify advertising account - `reddit_ads_list_campaigns` (read): reddit: list campaigns - `reddit_ads_list_ad_groups` (read): reddit: list ad groups - `reddit_ads_performance` (read): reddit: account performance - `reddit_ads_update_campaign` (write): reddit: propose campaign status or daily budget ### Pinterest Ads (Rolling out) Page: https://megamcp.com/mcp/pinterest-ads. Category: Ads. Review Pinterest campaign changes. Read campaigns and bounded reports, and propose supported status or daily CBO spend-cap changes. What your AI can read: - Campaign list and detail - Bounded reports What it can change (every change is a plan a person approves): - Supported campaign status updates - Verified daily CBO spend-cap updates Guardrail: Budget caps, drift checks and confirmed after-values apply. Unknown campaign types or spend modes fail closed. How it connects: One-click Pinterest sign-in is built and appears in your dashboard once Pinterest grants MegaMCP's app Standard access; it finds every ad account you can reach. Until then, the beta accepts a dedicated authorized access token for one account, expiring locally within one hour. Provider permissions and app access still apply; automatic refresh is unavailable. Example prompts: - "List enabled-account campaigns." - "Inspect this daily spend cap." - "Propose a reviewed campaign pause." MCP tools (5, see https://megamcp.com/docs/tools#pinterest_ads): - `pinterest_ads_get_account` (read): pinterest: verify advertising account - `pinterest_ads_list_campaigns` (read): pinterest: list campaigns - `pinterest_ads_list_ad_groups` (read): pinterest: list ad groups - `pinterest_ads_performance` (read): pinterest: account performance - `pinterest_ads_update_campaign` (write): pinterest: propose campaign status or daily budget ### Snapchat Ads (Rolling out) Page: https://megamcp.com/mcp/snapchat-ads. Category: Ads. Review Snapchat campaign caps before delivery. Inspect an enabled ad account, campaigns and ad squads, read bounded aggregate campaign reports, and prepare supported status or daily-cap changes. What your AI can read: - Exact account metadata - Bounded campaign and ad-squad listings - Aggregate campaign performance over up to 31 days What it can change (every change is a plan a person approves): - Reviewed ACTIVE/PAUSED campaign status - Reviewed eligible auction-campaign daily caps - Separate reviewed inverse after confirmed readback Guardrail: Existing published auction campaigns need a verified daily cap, pacing mode and revision. Reserved, draft and lifetime-only campaigns remain read-only. Vendor patch tests, fresh permissions, spend caps and actual readback apply; ACTIVE can resume charges. Creative creation and targeting are unavailable. How it connects: OAuth uses the broad snapchat-marketing-api grant and supports encrypted rotating refresh credentials when the operator app, callback and readiness are configured. Production OAuth defaults off. A dedicated authorized token can instead provide a one-hour maximum beta session without refresh. New accounts start disabled and require client assignment; live authorized-account acceptance remains pending. Example prompts: - "List campaigns in this enabled Snapchat account." - "Read aggregate campaign spend and swipes for last week." - "Prepare to pause this eligible auction campaign." - "Prepare this supported daily spend cap for review." MCP tools (5, see https://megamcp.com/docs/tools#snapchat_ads): - `snapchat_ads_get_account` (read): Snapchat Ads: verify enabled account - `snapchat_ads_list_campaigns` (read): Snapchat Ads: list campaigns - `snapchat_ads_list_ad_squads` (read): Snapchat Ads: list campaign ad squads - `snapchat_ads_campaign_performance` (read): Snapchat Ads: campaign aggregate performance - `snapchat_ads_update_campaign` (write): Snapchat Ads: review existing campaign status/daily cap ### X Ads (Rolling out) Page: https://megamcp.com/mcp/x-ads. Category: Ads. Keep X campaign changes within the chosen funding account. Read account and funding metadata, campaign and line-item settings, and bounded aggregate performance before reviewing supported campaign status or daily-cap changes. What your AI can read: - Verified account, funding currency and Ads permissions - Bounded funding-scoped campaigns and line items - Seven-day aggregate campaign engagement and billing metrics What it can change (every change is a plan a person approves): - Reviewed ACTIVE/PAUSED campaign status - Reviewed supported campaign daily caps - Separate reviewed inverse after confirmed readback Guardrail: Updates require current ad-manager/admin access, accepted account state and exact funding/currency binding. Daily caps respect existing total caps. Fresh drift checks and readback apply, but concurrent X edits can race a PUT. ACTIVE can resume charges; provisional billing data can change. Posts, targeting and new campaigns are unavailable. How it connects: One-click X sign-in is built and appears in your dashboard once X approves MegaMCP's app for Ads API access; each ad account and funding instrument becomes its own switch. Until then, the beta requires an application approved specifically for X Ads API access and a dedicated authorized user's OAuth1 consumer key/secret and token/secret. All four values are encrypted and locally expire after one hour, bound to one account and funding instrument. Public OAuth onboarding and automatic refresh are unavailable. A general X API subscription does not establish Ads approval; vendor terms and live acceptance still need confirmation. New accounts remain disabled until assigned and enabled. Example prompts: - "List campaigns using this enabled funding instrument." - "Read this campaign's aggregate clicks and billed spend for last week." - "Prepare to pause this eligible campaign." - "Prepare this daily cap in the verified account currency." MCP tools (5, see https://megamcp.com/docs/tools#x_ads): - `x_ads_get_account` (read): X Ads: inspect enabled account/funding - `x_ads_list_campaigns` (read): X Ads: list funding-bound campaigns - `x_ads_list_line_items` (read): X Ads: list campaign ad groups - `x_ads_campaign_performance` (read): X Ads: campaign aggregate performance - `x_ads_update_campaign` (write): X Ads: review existing campaign status/daily cap ### Facebook Pages (Rolling out) Page: https://megamcp.com/mcp/facebook-pages. Category: Social. Review the exact Page text before publication. Read owned Page posts and current follower counts, then prepare an unpublished text draft or a new public text post for human approval. What your AI can read: - Current Page profile and fan/follower counts - Bounded owned post list and details - Journaled publication-attempt reconciliation What it can change (every change is a plan a person approves): - Human-approved new unpublished text draft - Human-approved new public text post Guardrail: Draft and public post tools create separate posts. Fresh Page-task, account and client checks apply. Publication is irreversible, uncertain attempts are not retried automatically, and API confirmation does not prove public distribution. Media, scheduling and draft promotion are unavailable. How it connects: Separate organic Meta consent uses pages_show_list and pages_read_engagement, plus pages_manage_posts only when publishing is selected. Customer OAuth stays gated pending operator review evidence and workspace rollout. A dedicated authorized MegaMCP-app User token supports controlled beta access for at most one hour. New Pages start disabled and require client assignment; Meta App Review, Advanced Access and Business Verification still apply. Example prompts: - "List recent owned posts on this enabled Page." - "Read this Page's current follower count." - "Prepare this exact text as an unpublished draft." - "Prepare a new public text post for my approval." MCP tools (6, see https://megamcp.com/docs/tools#facebook_pages): - `facebook_pages_get_profile` (read): Facebook: inspect enabled Page - `facebook_pages_list_posts` (read): Facebook: read owned Page posts - `facebook_pages_get_post` (read): Facebook: inspect owned post - `facebook_pages_reconcile_publication` (read): Facebook: reconcile a publication attempt - `facebook_pages_create_text_draft` (write): Facebook: propose unpublished text draft - `facebook_pages_publish_text` (write): Facebook: propose public text post ### Instagram (Rolling out) Page: https://megamcp.com/mcp/instagram. Category: Social. Read your professional account's owned media. Inspect the linked professional Instagram profile, owned media and supported individual media metrics within an enabled client account. What your AI can read: - Professional profile and aggregate account counts - Bounded owned media metadata - One supported reach, views or total-interactions metric per request Guardrail: Only the verified professional account linked to an authorized Page is supported. Withheld metrics remain unavailable. Publishing, scheduling, private conversations, commenter exports and consumer profiles are unavailable. How it connects: Facebook Login organic consent needs pages_show_list, pages_read_engagement, instagram_basic and instagram_manage_insights. Explicit Business Manager access selection can also require privileged ads_read and ads_management; these tools perform no Ads operations. Customer OAuth remains review/rollout gated, with a dedicated authorized User-token beta path and manual reconnect. New destinations start disabled and need client assignment. Example prompts: - "Read this professional account's profile and follower count." - "List recent owned media and captions." - "Read the available reach metric for this owned media." MCP tools (4, see https://megamcp.com/docs/tools#instagram_organic): - `instagram_organic_get_profile` (read): Instagram: inspect linked professional account - `instagram_organic_list_media` (read): Instagram: list owned media - `instagram_organic_get_media` (read): Instagram: inspect owned media - `instagram_organic_media_insights` (read): Instagram: inspect owned media metrics ### Mailchimp (Live) Page: https://megamcp.com/mcp/mailchimp. Category: Commerce & CRM. Prepare email drafts without sending them. Read enabled audience totals and aggregate campaign reports, then review new plaintext drafts or supported unsent draft edits. What your AI can read: - Audience metadata and aggregate counts - Audience-scoped campaign metadata and plaintext drafts - Aggregate sent-campaign reports and draft-attempt reconciliation What it can change (every change is a plan a person approves): - Human-approved new unsent plaintext draft - Reviewed unsent draft title, subject and preview edits - Reviewed plaintext content replacement and supported inverse Guardrail: Sending, scheduling, subscriber exports and HTML content edits are unavailable. New draft creation is irreversible and journaled; unknown results are not retried automatically. Existing draft edits use fresh status/drift checks and readback, but concurrent vendor changes can race a write. How it connects: One-click Mailchimp sign-in is built and appears in your dashboard once MegaMCP's Mailchimp app is registered. You can always use a dedicated Mailchimp Marketing API key with explicit account-wide access consent. The key is encrypted; Mailchimp provides no audience-specific or read-only key scope. Record its actual vendor expiry, or attest to an older nonexpiring key. Imported audiences start disabled until assigned and enabled. Disconnect removes the local key; revoke the key in Mailchimp separately. Example prompts: - "Show aggregate counts for this enabled audience." - "Read this sent campaign's aggregate open and click totals." - "Prepare this plaintext email as an unsent draft." - "Prepare this draft subject change for review." MCP tools (9, see https://megamcp.com/docs/tools#mailchimp): - `mailchimp_get_audience` (read): Mailchimp: read audience totals - `mailchimp_list_campaigns` (read): Mailchimp: list audience campaigns - `mailchimp_get_campaign` (read): Mailchimp: inspect one audience campaign - `mailchimp_get_draft_content` (read): Mailchimp: read plaintext draft - `mailchimp_get_campaign_report` (read): Mailchimp: read aggregate campaign report - `mailchimp_reconcile_draft_creation` (read): Mailchimp: inspect uncertain draft creation - `mailchimp_create_plaintext_draft` (write): Mailchimp: review new plaintext draft - `mailchimp_update_draft_settings` (write): Mailchimp: review draft title/subject/preview - `mailchimp_replace_draft_content` (write): Mailchimp: review plaintext draft replacement ### OneDrive (Rolling out) Page: https://megamcp.com/mcp/onedrive. Category: Workspace. Read the client folder you choose. Inspect, search and read supported text files inside one explicitly enabled Microsoft drive folder. What your AI can read: - Verified descendant metadata - Bounded folder listings and searches - Bounded UTF-8 text files What it can change (every change is a plan a person approves): - Reviewed file rename with ETag checks - Supported conditional rename reversal Guardrail: Live parent checks enforce the chosen folder. Renames use atomic ETag checks; reads can race a concurrent file move. Uploads and sharing controls are unavailable. How it connects: Microsoft Graph uses a separate file authorization from Microsoft Ads. Delegated file grants are broad at Microsoft; MegaMCP restricts tools to enabled client folders. Operator app callback setup or a dedicated temporary token is required. Example prompts: - "List this client folder's files." - "Read this CSV's text." - "Prepare a clearer file name for review." MCP tools (5, see https://megamcp.com/docs/tools#onedrive): - `onedrive_get_file` (read): onedrive: inspect allowed file - `onedrive_list_files` (read): onedrive: list client folder - `onedrive_search_files` (read): onedrive: search client folder - `onedrive_read_text_file` (read): onedrive: read client text file - `onedrive_rename_file` (write): onedrive: propose file rename ### SharePoint (Rolling out) Page: https://megamcp.com/mcp/sharepoint. Category: Workspace. Keep client document libraries in scope. Use one chosen SharePoint drive folder for bounded file inspection, text reads and reviewed renames. What your AI can read: - Verified descendant metadata - Bounded folder listings and searches - Supported UTF-8 text content What it can change (every change is a plan a person approves): - Reviewed ETag-protected file rename - Supported conditional reversal Guardrail: Cross-drive files, shortcuts and files outside the selected folder are rejected. Office/PDF rendering, uploads, moves and permission management are unavailable. How it connects: Requires a separate Microsoft Graph grant and the selected drive/folder IDs. Tenant admin consent or publisher verification may apply. New folder accounts start disabled. Example prompts: - "Search the enabled client folder for reports." - "Inspect this file's metadata." - "Prepare this file rename for approval." MCP tools (5, see https://megamcp.com/docs/tools#sharepoint): - `sharepoint_get_file` (read): sharepoint: inspect allowed file - `sharepoint_list_files` (read): sharepoint: list client folder - `sharepoint_search_files` (read): sharepoint: search client folder - `sharepoint_read_text_file` (read): sharepoint: read client text file - `sharepoint_rename_file` (write): sharepoint: propose file rename ### Dropbox (Rolling out) Page: https://megamcp.com/mcp/dropbox. Category: Workspace. Read the Dropbox folder your client approves. Inspect and search one selected folder, then read supported text files using exact file revisions. What your AI can read: - Bounded metadata, listings and search - Revision-bound supported text downloads Guardrail: Tools stay inside the selected folder. File mutations are unavailable; Dropbox rename lacks the required atomic revision condition. How it connects: Operator-configured Dropbox OAuth supports real refresh tokens. An authorized temporary token can also be entered for a one-hour beta session. Prefer a dedicated App Folder application; new accounts start disabled. Example prompts: - "List files in this enabled folder." - "Search this client folder for the report." - "Read this Markdown document." MCP tools (4, see https://megamcp.com/docs/tools#dropbox): - `dropbox_get_file` (read): Dropbox: inspect client file - `dropbox_list_files` (read): Dropbox: list client folder - `dropbox_search_files` (read): Dropbox: search client filenames - `dropbox_read_text_file` (read): Dropbox: read client text file ### BigQuery (Rolling out) Page: https://megamcp.com/mcp/bigquery. Category: Analytics. Review query costs before execution. Inspect an enabled dataset, construct a bounded SELECT, and review its dry-run byte estimate before approving execution. What your AI can read: - Table metadata and schemas - Constructed SELECT dry runs - Status and bounded results for this account's admitted jobs What it can change (every change is a plan a person approves): - Human-approved constructed SELECT execution with explicit cost consent Guardrail: Reads never execute paid queries. Execution is irreversible and byte-limited, not dollar-limited. Raw SQL, joins, views, external tables, DDL and DML are unavailable. How it connects: Requires Google BigQuery consent, enabled API and dataset/table access plus query-job permission. The billing project is the chosen dataset project. Public OAuth verification and live acceptance remain pending. Example prompts: - "List native tables in this dataset." - "Dry-run these selected columns and filters." - "Prepare this query with an explicit maximum bytes billed." MCP tools (6, see https://megamcp.com/docs/tools#bigquery): - `bigquery_list_tables` (read): BigQuery: list client dataset tables - `bigquery_get_table_schema` (read): BigQuery: inspect allowed native table - `bigquery_dry_run_select` (read): BigQuery: estimate bounded SELECT cost - `bigquery_execute_select` (write): BigQuery: propose bounded query execution - `bigquery_get_query_job` (read): BigQuery: reconcile approved query job - `bigquery_get_query_results` (read): BigQuery: read approved query results ### PageSpeed Insights (Live) Page: https://megamcp.com/mcp/pagespeed-insights. Category: Analytics. Run Lighthouse checks on your public site. Request a bounded mobile or desktop audit for performance, SEO, accessibility or best practices using your project's API quota. What your AI can read: - One Lighthouse category per request - Compact audit findings and available field data Guardrail: Only paths on the enabled public HTTPS origin are accepted. Google controls its audit browser; reports redirected outside that public origin are rejected. Lab measurements vary between runs. How it connects: Use a dedicated PageSpeed API key restricted to that API, with explicit request-quota consent. Saving the public site checks DNS but does not run an audit. Example prompts: - "Run a mobile performance audit of this page." - "Check this public page's accessibility category." MCP tools (1, see https://megamcp.com/docs/tools#pagespeed): - `pagespeed_analyze` (read): Audit a public website with PageSpeed Insights ### Bing Webmaster (Live) Page: https://megamcp.com/mcp/bing-webmaster. Category: Analytics. Read Bing performance for enabled client sites. Discover verified sites, then retrieve bounded query, page and crawl statistics for the sites you explicitly enable. What your AI can read: - Verified-site discovery - Bounded query, page and crawl statistics Guardrail: The vendor key is user-wide and privileged. MegaMCP exposes only read methods and enabled client sites. Disconnect clears the local key; revoke it in Bing separately. How it connects: Create a dedicated Bing Webmaster API key after verifying your sites. Saving performs one discovery request; discovered sites start disabled. URL submission and site changes are unavailable. Example prompts: - "Show Bing query statistics for this site." - "Read this site's page and crawl statistics." MCP tools (3, see https://megamcp.com/docs/tools#bing_webmaster): - `bing_webmaster_query_stats` (read): Bing top query statistics - `bing_webmaster_page_stats` (read): Bing top page statistics - `bing_webmaster_crawl_stats` (read): Bing crawl statistics ### Customer SMTP email (Live) Page: https://megamcp.com/mcp/smtp-email. Category: Workspace. Review every email before it leaves. Prepare one exact plain-text client email with your private attachments, inspect the complete message in Changes, then approve it yourself. What your AI can read: - Private local send-attempt receipts; no inbox access What it can change (every change is a plan a person approves): - Authenticated dashboard approval of one exact plain-text message and owned attachments Guardrail: Complete sender, recipients, body and attachment hashes are shown. SMTP acceptance is not inbox delivery. Email has no undo; unknown outcomes are never automatically replayed. How it connects: Use a dedicated customer SMTP sender on verified TLS or mandatory STARTTLS, fixed client binding, and admin sender-authority/data/cost attestation. Saving performs no login or send and starts disabled. Sender verification and provider quotas/charges remain customer responsibilities. Example prompts: - "Prepare this exact client email for human review." - "Inspect my private SMTP attempt receipts." MCP tools (2, see https://megamcp.com/docs/tools#smtp_email): - `smtp_email_get_status` (read): Email: inspect private SMTP attempt receipts - `smtp_email_send_plaintext` (write): Email: propose exact plain-text send ### Slack (Live) Page: https://megamcp.com/mcp/slack. Category: Workspace. Review the report before it reaches the channel. Prepare an exact plain-text client report for an enabled channel, review its complete destination and message, and approve the send yourself. What your AI can read: - Eligible fixed-client channels and existing delivered agent threads - Your private report-attempt receipts - Inspection links for messages with provider-confirmed timestamps What it can change (every change is a plan a person approves): - Human-approved exact plain-text channel or existing-thread reports Guardrail: All current and future channel participants can read the report. Shared/Slack Connect channels, direct messages, links, mentions and files are excluded. Acceptance does not prove anyone read it. No automatic resend, deletion or undo. How it connects: Use an existing customer-installed Slack app, mapped MegaMCP members and a fixed-client agent profile. An admin must enable each report destination with audience consent and select the report tool in its profile. Eligible originating proposals can use verified native human approval. Example prompts: - "List my eligible report channels." - "Prepare this exact plain-text report for human review." - "Inspect my private report receipt and its confirmed message link." MCP tools (4, see https://megamcp.com/docs/tools#slack_messages): - `slack_messages_list_destinations` (read): Slack: list eligible report channels - `slack_messages_get_receipt` (read): Slack: inspect your private report receipt - `slack_messages_inspect_confirmed_message` (read): Slack: get a confirmed message inspection link - `slack_messages_propose_message` (write): Slack: propose a reviewed plain-text report ### Demo Ads (sandbox) tools See https://megamcp.com/docs/tools#demo_ads. - `demo_ads_list_campaigns` (read): List demo campaigns - `demo_ads_search_terms` (read): Demo search terms report - `demo_ads_set_campaign_status` (write): Pause or enable demo campaigns - `demo_ads_set_campaign_budget` (write): Change a demo campaign's daily budget - `demo_ads_add_negative_keywords` (write): Add demo negative keywords ### MegaMCP core tools Available in every workspace, whatever is connected. - `megamcp_report_templates` (read): Discover report templates - `megamcp_reporting_sources` (read): Available reporting sources - `megamcp_create_report` (write): Create a report draft - `megamcp_update_report` (write): Update a report draft - `megamcp_refresh_report` (write): Capture a report snapshot - `megamcp_duplicate_report` (write): Duplicate a report draft - `megamcp_report_history` (read): Report snapshot history - `megamcp_export_report` (read): Export an exact report snapshot - `megamcp_compare_reports` (read): Compare exact report snapshots - `megamcp_list_reports` (read): Saved performance reports - `megamcp_report_snapshot` (read): Read a report snapshot - `megamcp_reporting_metrics` (read): Reporting metric definitions - `megamcp_list_clients` (read): List clients - `megamcp_use_client` (write): Switch client - `megamcp_get_brand_guide` (read): Get the brand guide - `megamcp_get_brand_asset` (read): Get a logo or brand file - `megamcp_list_brand_guides` (read): List brand guides - `megamcp_check_copy` (read): Check copy against the brand guide - `megamcp_check_design` (read): Check design colors against the brand guide - `megamcp_scan_website` (read): Scan a website for a brand guide - `megamcp_save_brand_guide` (write): Save a brand guide - `megamcp_remember` (write): Save a memory - `megamcp_recall` (read): Recall memories - `megamcp_forget` (write): Archive a memory - `megamcp_save_handoff` (write): Save a session handoff - `megamcp_resume` (read): Resume from the latest handoffs - `megamcp_client_briefing` (read): Client briefing - `megamcp_get_outcomes` (read): Get results of applied changes - `megamcp_search_history` (read): Search change history - `megamcp_client_overview` (read): Client performance overview - `megamcp_list_integrations` (read): Integrations and what they add - `megamcp_cross_channel_summary` (read): Cross-channel ad summary - `megamcp_portfolio_pacing` (read): Portfolio budget pacing across clients - `megamcp_propose_client_rebalance` (write): Rebalance a client's budgets across platforms - `megamcp_lead_to_revenue` (read): Lead to revenue - `megamcp_request_client_approval` (write): Create client approval links - `megamcp_whoami` (read): Workspace, accounts and guardrails - `megamcp_list_changes` (read): List proposed and applied changes - `megamcp_get_change` (read): Show a change plan - `megamcp_apply_change` (write): Apply an approved change plan - `megamcp_reject_change` (write): Reject a pending change plan - `megamcp_undo_change` (write): Propose undoing an applied plan ## Scheduled workflows ### Search Term Sweeper Page: https://megamcp.com/workflows/search-term-sweeper. Platforms: Google Ads, Microsoft Ads, Sandbox. Cadence: Weekly (Mondays 8am by default). Saves about 1 hr per week. Finds search terms that spent money without a single conversion and queues them as negatives in one plan for your approval. 1. Pulls the last 30 days of search terms 2. Flags terms with spend over your threshold and zero conversions 3. Proposes them as exact-match negatives in a single change plan 4. Emails your owners and admins a link to review the diff Output: One change plan with every proposed negative, plus an email with the review link. Nothing changes until someone approves it. ### Weekly Performance Report Page: https://megamcp.com/workflows/weekly-performance-report. Platforms: Google Ads, Meta Ads, GA4, Sandbox. Cadence: Weekly (Mondays 7am by default). Saves about 1 hr per week. Spend, conversions, CPA and ROAS for every ad account with the top campaigns, plus GA4 traffic, in an email your team will actually open. 1. Pulls the last 7 days from each enabled ad account 2. Works out spend, conversions, CPA and ROAS per account 3. Lists the top campaigns 4. Adds GA4 sessions, users and key events if a property is enabled 5. Emails the summary to your owners and admins Output: A clean weekly email with the numbers per account and the campaigns that mattered. ### Spend Anomaly Alert Page: https://megamcp.com/workflows/spend-anomaly-alert. Platforms: Google Ads, Meta Ads. Cadence: Daily (9am by default). Saves No more month-end surprises. Compares yesterday's spend with the 30-day daily average for every account and campaign, and emails you when something spikes or drops. 1. Reads yesterday's spend per account and campaign 2. Compares it with the 30-day daily average 3. Flags spikes and drops past your threshold 4. Emails only when something needs a look Output: An email when spend looks wrong. Silence when it doesn't. ### Creative Fatigue Alarm Page: https://megamcp.com/workflows/creative-fatigue-alarm. Platforms: Meta Ads. Cadence: Daily (8:30am by default). Saves Catches decay days sooner. Checks every Meta ad for fatigue, like falling CTR with high frequency or rising CPM, and warns you before a winning ad goes stale. 1. Checks each Meta ad's frequency, CTR and CPM trends 2. Spots ads that are wearing out 3. Lists the ones that need fresh creative 4. Emails your owners and admins Output: An email listing tired ads, only when there's something to fix. ### Tracking Health Check Page: https://megamcp.com/workflows/tracking-health-check. Platforms: Google Tag Manager, GA4. Cadence: Daily (7:30am by default). Saves about 2 hrs per site. Audits your Tag Manager containers and checks that GA4 key events are still firing, before your reports start lying. 1. Audits each enabled Tag Manager container 2. Checks that GA4 key events are still coming in 3. Flags what broke and where 4. Emails only when tracking needs attention Output: A list of tracking issues in your inbox, with where to look. Silence when all is well. ### Morning Pacing and Anomaly Alert Page: https://megamcp.com/workflows/morning-pacing-anomaly-alert. Platforms: Google Ads, Meta Ads, Microsoft Ads. Cadence: Daily (8am by default). Saves about 15 min per morning. Checks month-to-date budget pacing and yesterday's numbers against a 28-day baseline for every Google Ads, Meta Ads and Microsoft Ads account, and emails you only when something is off. 1. Paces each budget month to date: over-pacing, under-pacing, limited by budget 2. Compares yesterday's cost, clicks, impressions, conversions, CPA and CTR with the 28 days before 3. Optionally limits the check to one client's accounts 4. Emails only when something is flagged Output: An email listing flagged budgets and anomalies per account. Silence on quiet mornings. ### Landing Page Check Page: https://megamcp.com/workflows/landing-page-check. Platforms: Google Ads. Cadence: Weekly (Mondays 7:30am by default). Saves Catches dead pages before the spend does. Fetches the landing pages behind your Google Ads ads and keywords, and emails you when one is broken or drops the gclid on redirect. 1. Collects the final URLs of enabled ads and keywords 2. Fetches each one with a test gclid, following every redirect 3. Flags broken pages, URLs it can't check, and redirects that drop the gclid 4. Emails only when something needs fixing Output: An email listing each problem page, its status and which ads use it. Silence when every page loads. ### Meta Ads Bulk Uploader (on the roadmap) Page: https://megamcp.com/workflows/meta-ads-bulk-uploader. Platforms: Google Sheets, Google Drive, Meta Ads. Cadence: On demand. Saves about 3 hrs per launch. Fill a sheet with headlines, copy and creative links. MegaMCP builds every ad, names it properly, and uploads it paused. 1. Reads rows from your launch sheet 2. Pulls matching images and videos from Drive 3. Checks copy length and naming convention 4. Shows a diff: every ad set and ad it's about to create 5. Uploads as paused drafts once you approve Output: Paused ads in Meta, plus a sheet column with each new ad ID. ### TikTok Ads Bulk Uploader (on the roadmap) Page: https://megamcp.com/workflows/tiktok-ads-bulk-uploader. Platforms: Google Sheets, Google Drive, TikTok Ads. Cadence: On demand. Saves about 2 hrs per launch. The same sheet-to-ads magic for TikTok. Dozens of variations, zero copy-paste. 1. Reads your variation sheet 2. Matches videos from Drive 3. Validates specs and captions 4. Diff preview 5. Uploads paused Output: Paused TikTok ads with IDs written back to the sheet. ### Google Ads Audit (on the roadmap) Page: https://megamcp.com/workflows/google-ads-audit. Platforms: Google Ads, Google Slides. Cadence: Monthly or on demand. Saves about 6 hrs per account. A 40-point account audit: structure, wasted spend, match types, conversion setup, ad strength, and a prioritized fix list. 1. Scans campaigns, keywords, search terms and conversions 2. Scores 40 checks from pass to fix-now 3. Estimates wasted spend per issue 4. Drafts fixes you can approve one by one 5. Exports a client-ready Slides deck Output: An audit deck and a queue of one-click fixes. ### Cross-Channel Monthly Report (on the roadmap) Page: https://megamcp.com/workflows/cross-channel-monthly-report. Platforms: Google Ads, Meta Ads, GA4, Google Slides. Cadence: 1st of every month. Saves about 4 hrs per client. Google, Meta and GA4 in one deck, with a written summary of what happened and why, not just charts. 1. Pulls last month from every connected channel 2. Normalizes spend, conversions and revenue 3. Writes the narrative: wins, losses, next moves 4. Builds the Slides deck from your template Output: A branded Slides deck in your Drive, and a Slack ping when it's ready. ### Budget Pacing Guard (on the roadmap) Page: https://megamcp.com/workflows/budget-pacing-guard. Platforms: Google Ads, Meta Ads, LinkedIn Ads, Slack. Cadence: Every 6 hours. Saves No more month-end surprises. Compares spend to plan across every account and proposes budget changes to land the month on target. 1. Reads monthly budgets from a sheet 2. Projects end-of-month spend per account 3. Proposes daily budget adjustments 4. Applies them after approval Output: A pacing table and a set of approvable budget moves. ### Offline Conversion Sync (on the roadmap) Page: https://megamcp.com/workflows/offline-conversion-sync. Platforms: HubSpot, Google Ads, Meta Ads. Cadence: Nightly. Saves Better bidding, zero CSVs. Sends closed-won deals back to Google and Meta so their algorithms optimize for revenue, not form fills. 1. Pulls newly closed deals 2. Matches click IDs and hashed emails 3. Uploads conversions with deal value 4. Logs match rates Output: Revenue-based conversions in both ad platforms. ### SEO Quick Wins (on the roadmap) Page: https://megamcp.com/workflows/seo-quick-wins. Platforms: Search Console, GA4, Google Docs. Cadence: Monthly. Saves about 3 hrs per site. Finds page-two rankings with real impressions and writes a short brief for each one. 1. Pulls queries ranking 8–20 2. Filters by impressions and intent 3. Maps each to its best URL 4. Writes an improvement brief per page Output: A Google Doc of prioritized briefs. ### Shopify Daily Brief (on the roadmap) Page: https://megamcp.com/workflows/shopify-daily-brief. Platforms: Shopify, Meta Ads, Google Ads, Email. Cadence: Every morning, 8am. Saves about 20 min per day. Yesterday's sales, top products, ad spend and blended ROAS in your inbox before coffee. 1. Pulls orders and top products 2. Pulls ad spend across channels 3. Calculates blended ROAS and MER 4. Flags anything unusual Output: A short email. Anomalies in bold. ### Feed Price Labeler (on the roadmap) Page: https://megamcp.com/workflows/feed-price-labeler. Platforms: Merchant Center, Google Ads. Cadence: Weekly. Saves about 2 hrs per week. Labels products by price competitiveness so Shopping campaigns can bid harder where you win. 1. Pulls price benchmarks 2. Buckets products: winning, even, losing 3. Writes custom labels to a supplemental feed 4. Suggests campaign splits Output: Custom labels in Merchant Center, ready for bidding. ## Pricing Source: https://megamcp.com/pricing ### Free: $0, free forever Read-only. Ask anything, change nothing. Forever. No card needed. - Every integration, every AI client - Multiple Google logins and connected accounts - 100 reads a day - Reports, audits and cross-channel summaries - Web audits for any page - Includes the 5-day trial of everything ### Solo: $19/month, or $15.83/month billed yearly For the one-person marketing department. We see you. 1 seat. - Unlimited MCP and BYOK runs; fair-use limits apply - Every integration, every AI client - Multiple Google logins in one workspace - Unlimited ad accounts - Diff previews and one-click undo - Budget bumpers on every ad account - 5 scheduled workflows - 90-day flight recorder - Human support by email ### Crew: $149/month, or $124/month billed yearly For teams and agencies juggling too many accounts. 10 seats included. - Everything in Solo - Shared workspaces with owner, admin, member and viewer roles - 50 scheduled workflows - 1-year flight recorder - Priority support ### Legion: custom pricing We build and run your workflows. You take the credit. Custom seats. - Done-for-you workflow setup - Custom integrations - Live onboarding and training - Dedicated support channel - Custom retention and security reviews ## Setting up each AI client ### Claude Source: https://megamcp.com/docs/connect-claude Add MegaMCP as a custom connector in Claude on the web or the desktop app. Two minutes, no API keys. #### Before you start - A MegaMCP account. MegaMCP is invite-only for now; [join the waiting list](https://megamcp.com/waitlist) if you don't have one. - The MegaMCP server URL: MCP server URL ``` https://megamcp.com/api/mcp ``` #### Set up Claude 1. In Claude (web or desktop), open **Customize → Connectors**. 2. Click **+**, then **Add custom connector**. 3. Name it **MegaMCP**, paste the server URL, and click **Add**. 4. Click **Connect**. Sign in to MegaMCP, pick your workspace, and approve access. 5. In a chat, make sure MegaMCP is switched on in the tools menu, then ask away. Note On Claude Team and Enterprise plans, an organization owner adds the connector first under **Organization settings → Connectors**. Members then click **Connect** to sign in as themselves. Which Claude plans can add custom connectors is up to Anthropic. Menu names change. If something moved, check [Anthropic's help center](https://support.claude.com), or email us and we'll update this page. #### Try it on the sandbox Every workspace comes with a sandbox ad account, **Acme Plumbing (demo)**. It uses fake money and behaves like the real thing. Ask: - “Which demo campaigns wasted the most money last month?” - “Show me search terms in the demo account that spent money without converting.” - “Add those junk search terms as negatives in the demo account.” - “Pause the Water Heater Install campaign in the demo account.” Reads answer straight away. Writes come back as a plan with a diff. Approve it on the **Changes** page of your dashboard (or in chat, if an admin turned that on), then undo it for fun. [How approvals work](https://megamcp.com/docs/approvals-and-undo). #### Approving changes from Claude When your AI proposes a change, MegaMCP returns the diff and a review link. By default you approve it on the **Changes** page of your dashboard. If an admin turns on **Approve in chat** under **Settings**, the AI must show you the diff and wait for a clear yes before it calls `megamcp_apply_change`, and only for plans that same connection proposed. Claude may also ask you to confirm the tool call itself. That's fine: two locks are better than one. #### Troubleshooting **The AI can't see any tools, or only MegaMCP's own tools.** Platform tools only appear for platforms that have at least one account switched on in your workspace. The sandbox is on by default. Check **Connections** in your dashboard, then start a new chat so the app reloads the tool list. **It says my trial ended or my plan isn't active.** Tools pause when a workspace has no active plan. Pick one under **Billing** in the dashboard. Nothing is deleted while you decide. **I connected the wrong workspace.** Revoke the app under **Connect AI** in your dashboard, then connect again and pick the right workspace when MegaMCP asks. **How do I disconnect an AI app?** Dashboard → **Connect AI** → **Revoke**. It loses access immediately. You can also remove MegaMCP from the app's own settings. ### ChatGPT Source: https://megamcp.com/docs/connect-chatgpt ChatGPT connects to remote MCP servers as apps (formerly connectors). Turn on developer mode, add one URL, sign in. #### Before you start - A MegaMCP account. MegaMCP is invite-only for now; [join the waiting list](https://megamcp.com/waitlist) if you don't have one. - The MegaMCP server URL: MCP server URL ``` https://megamcp.com/api/mcp ``` #### Set up ChatGPT 1. On chatgpt.com, open **Settings → Security and login** and turn on **Developer mode**. It's available on Plus, Pro, Business, Enterprise and Edu plans; on business plans an admin may need to allow it. 2. Open ChatGPT's apps (connectors) settings and click **+** to create an app. 3. Name it **MegaMCP**, paste the server URL, choose **OAuth** for authentication, and save. 4. Sign in to MegaMCP when prompted, pick your workspace, and approve access. 5. In a new chat, pick MegaMCP from the tools menu and ask away. Tip MegaMCP marks every read tool as read-only, so ChatGPT can tell a harmless report from a tool that proposes or applies a change. Menu names change. If something moved, check [OpenAI's help center](https://help.openai.com), or email us and we'll update this page. #### Try it on the sandbox Every workspace comes with a sandbox ad account, **Acme Plumbing (demo)**. It uses fake money and behaves like the real thing. Ask: - “Which demo campaigns wasted the most money last month?” - “Show me search terms in the demo account that spent money without converting.” - “Add those junk search terms as negatives in the demo account.” - “Pause the Water Heater Install campaign in the demo account.” Reads answer straight away. Writes come back as a plan with a diff. Approve it on the **Changes** page of your dashboard (or in chat, if an admin turned that on), then undo it for fun. [How approvals work](https://megamcp.com/docs/approvals-and-undo). #### Approving changes from ChatGPT When your AI proposes a change, MegaMCP returns the diff and a review link. By default you approve it on the **Changes** page of your dashboard. If an admin turns on **Approve in chat** under **Settings**, the AI must show you the diff and wait for a clear yes before it calls `megamcp_apply_change`, and only for plans that same connection proposed. ChatGPT may also ask you to confirm the tool call itself. That's fine: two locks are better than one. #### Troubleshooting **The AI can't see any tools, or only MegaMCP's own tools.** Platform tools only appear for platforms that have at least one account switched on in your workspace. The sandbox is on by default. Check **Connections** in your dashboard, then start a new chat so the app reloads the tool list. **It says my trial ended or my plan isn't active.** Tools pause when a workspace has no active plan. Pick one under **Billing** in the dashboard. Nothing is deleted while you decide. **I connected the wrong workspace.** Revoke the app under **Connect AI** in your dashboard, then connect again and pick the right workspace when MegaMCP asks. **How do I disconnect an AI app?** Dashboard → **Connect AI** → **Revoke**. It loses access immediately. You can also remove MegaMCP from the app's own settings. ### Cursor Source: https://megamcp.com/docs/connect-cursor One entry in mcp.json, one click to sign in. #### Before you start - A MegaMCP account. MegaMCP is invite-only for now; [join the waiting list](https://megamcp.com/waitlist) if you don't have one. - The MegaMCP server URL: MCP server URL ``` https://megamcp.com/api/mcp ``` #### Set up Cursor 1. Add this to `~/.cursor/mcp.json` (all projects) or `.cursor/mcp.json` (one project): Cursor mcp.json ``` { "mcpServers": { "megamcp": { "url": "https://megamcp.com/api/mcp" } } } ``` 2. Open **Cursor Settings → MCP** (Tools & MCP). MegaMCP shows a **Needs login** prompt. Click it. 3. Sign in to MegaMCP in the browser, pick your workspace, and approve access. 4. Ask Cursor's agent about your accounts. Tip Put it in the global file if you use MegaMCP across projects. Nothing secret goes in the file: sign-in happens in the browser and Cursor stores the token itself. Menu names change. If something moved, check [Cursor's docs](https://docs.cursor.com), or email us and we'll update this page. #### Try it on the sandbox Every workspace comes with a sandbox ad account, **Acme Plumbing (demo)**. It uses fake money and behaves like the real thing. Ask: - “Which demo campaigns wasted the most money last month?” - “Show me search terms in the demo account that spent money without converting.” - “Add those junk search terms as negatives in the demo account.” - “Pause the Water Heater Install campaign in the demo account.” Reads answer straight away. Writes come back as a plan with a diff. Approve it on the **Changes** page of your dashboard (or in chat, if an admin turned that on), then undo it for fun. [How approvals work](https://megamcp.com/docs/approvals-and-undo). #### Approving changes from Cursor When your AI proposes a change, MegaMCP returns the diff and a review link. By default you approve it on the **Changes** page of your dashboard. If an admin turns on **Approve in chat** under **Settings**, the AI must show you the diff and wait for a clear yes before it calls `megamcp_apply_change`, and only for plans that same connection proposed. Cursor may also ask you to confirm the tool call itself. That's fine: two locks are better than one. #### Troubleshooting **The AI can't see any tools, or only MegaMCP's own tools.** Platform tools only appear for platforms that have at least one account switched on in your workspace. The sandbox is on by default. Check **Connections** in your dashboard, then start a new chat so the app reloads the tool list. **It says my trial ended or my plan isn't active.** Tools pause when a workspace has no active plan. Pick one under **Billing** in the dashboard. Nothing is deleted while you decide. **I connected the wrong workspace.** Revoke the app under **Connect AI** in your dashboard, then connect again and pick the right workspace when MegaMCP asks. **How do I disconnect an AI app?** Dashboard → **Connect AI** → **Revoke**. It loses access immediately. You can also remove MegaMCP from the app's own settings. ### Claude Code Source: https://megamcp.com/docs/claude-code One terminal command, then sign in from inside Claude Code. #### Before you start - A MegaMCP account. MegaMCP is invite-only for now; [join the waiting list](https://megamcp.com/waitlist) if you don't have one. - The MegaMCP server URL: MCP server URL ``` https://megamcp.com/api/mcp ``` #### Set up Claude Code 1. Run this in your terminal: Claude Code command ``` claude mcp add --transport http megamcp https://megamcp.com/api/mcp ``` Add `--scope user` to make it available in every project, or `--scope project` to share it with your repo in `.mcp.json`. 2. Start Claude Code and run `/mcp`. Pick **megamcp** and choose to authenticate. 3. Sign in to MegaMCP in the browser, pick your workspace, and approve access. 4. Ask away. Claude Code asks before each tool call unless you allow it. Menu names change. If something moved, check [the Claude Code MCP docs](https://docs.claude.com/en/docs/claude-code/mcp), or email us and we'll update this page. #### Try it on the sandbox Every workspace comes with a sandbox ad account, **Acme Plumbing (demo)**. It uses fake money and behaves like the real thing. Ask: - “Which demo campaigns wasted the most money last month?” - “Show me search terms in the demo account that spent money without converting.” - “Add those junk search terms as negatives in the demo account.” - “Pause the Water Heater Install campaign in the demo account.” Reads answer straight away. Writes come back as a plan with a diff. Approve it on the **Changes** page of your dashboard (or in chat, if an admin turned that on), then undo it for fun. [How approvals work](https://megamcp.com/docs/approvals-and-undo). #### Approving changes from Claude Code When your AI proposes a change, MegaMCP returns the diff and a review link. By default you approve it on the **Changes** page of your dashboard. If an admin turns on **Approve in chat** under **Settings**, the AI must show you the diff and wait for a clear yes before it calls `megamcp_apply_change`, and only for plans that same connection proposed. Claude Code may also ask you to confirm the tool call itself. That's fine: two locks are better than one. #### Troubleshooting **claude mcp add says the server already exists.** Remove the old entry with `claude mcp remove megamcp`, then add it again. **The AI can't see any tools, or only MegaMCP's own tools.** Platform tools only appear for platforms that have at least one account switched on in your workspace. The sandbox is on by default. Check **Connections** in your dashboard, then start a new chat so the app reloads the tool list. **It says my trial ended or my plan isn't active.** Tools pause when a workspace has no active plan. Pick one under **Billing** in the dashboard. Nothing is deleted while you decide. **I connected the wrong workspace.** Revoke the app under **Connect AI** in your dashboard, then connect again and pick the right workspace when MegaMCP asks. **How do I disconnect an AI app?** Dashboard → **Connect AI** → **Revoke**. It loses access immediately. You can also remove MegaMCP from the app's own settings. ### VS Code Source: https://megamcp.com/docs/vscode Use MegaMCP from GitHub Copilot Chat in agent mode. #### Before you start - A MegaMCP account. MegaMCP is invite-only for now; [join the waiting list](https://megamcp.com/waitlist) if you don't have one. - The MegaMCP server URL: MCP server URL ``` https://megamcp.com/api/mcp ``` #### Set up VS Code 1. Add this to `.vscode/mcp.json` in your project, or run **MCP: Add Server** from the Command Palette and choose HTTP: VS Code mcp.json ``` { "servers": { "megamcp": { "type": "http", "url": "https://megamcp.com/api/mcp" } } } ``` 2. Click **Start** above the server entry in the file (or run **MCP: List Servers**). 3. VS Code asks to sign in. Sign in to MegaMCP in the browser, pick your workspace, and approve access. 4. Open Copilot Chat, switch to **Agent** mode, and check MegaMCP's tools are enabled in the tools picker. Menu names change. If something moved, check [VS Code's MCP docs](https://code.visualstudio.com/docs/copilot/chat/mcp-servers), or email us and we'll update this page. #### Try it on the sandbox Every workspace comes with a sandbox ad account, **Acme Plumbing (demo)**. It uses fake money and behaves like the real thing. Ask: - “Which demo campaigns wasted the most money last month?” - “Show me search terms in the demo account that spent money without converting.” - “Add those junk search terms as negatives in the demo account.” - “Pause the Water Heater Install campaign in the demo account.” Reads answer straight away. Writes come back as a plan with a diff. Approve it on the **Changes** page of your dashboard (or in chat, if an admin turned that on), then undo it for fun. [How approvals work](https://megamcp.com/docs/approvals-and-undo). #### Approving changes from VS Code When your AI proposes a change, MegaMCP returns the diff and a review link. By default you approve it on the **Changes** page of your dashboard. If an admin turns on **Approve in chat** under **Settings**, the AI must show you the diff and wait for a clear yes before it calls `megamcp_apply_change`, and only for plans that same connection proposed. VS Code may also ask you to confirm the tool call itself. That's fine: two locks are better than one. #### Troubleshooting **The AI can't see any tools, or only MegaMCP's own tools.** Platform tools only appear for platforms that have at least one account switched on in your workspace. The sandbox is on by default. Check **Connections** in your dashboard, then start a new chat so the app reloads the tool list. **It says my trial ended or my plan isn't active.** Tools pause when a workspace has no active plan. Pick one under **Billing** in the dashboard. Nothing is deleted while you decide. **I connected the wrong workspace.** Revoke the app under **Connect AI** in your dashboard, then connect again and pick the right workspace when MegaMCP asks. **How do I disconnect an AI app?** Dashboard → **Connect AI** → **Revoke**. It loses access immediately. You can also remove MegaMCP from the app's own settings. ## More documentation ### Overview and quickstart Source: https://megamcp.com/docs Everything you need to go from zero to “my AI just paused a campaign (after I said yes).” #### Pick your AI app Every app connects to the same URL and signs in through your browser. Choose yours for the exact menus and config. [ClaudeCustomize → Connectors](https://megamcp.com/docs/connect-claude)[ChatGPTDeveloper mode app](https://megamcp.com/docs/connect-chatgpt)[Cursormcp.json](https://megamcp.com/docs/connect-cursor)[Claude Codeclaude mcp add](https://megamcp.com/docs/claude-code)[VS Code.vscode/mcp.json](https://megamcp.com/docs/vscode) #### Quickstart 1. **Get an invite.** MegaMCP is invite-only for now: [join the waiting list](https://megamcp.com/waitlist) and we'll email you when your spot opens. Then sign in with your work email; no password needed. You get a workspace, a 5-day trial and a sandbox ad account. No credit card. 2. **Add MegaMCP to your AI app.** Every client uses the same URL: MCP server URL ``` https://megamcp.com/api/mcp ``` Pick your app: [Claude](https://megamcp.com/docs/connect-claude), [ChatGPT](https://megamcp.com/docs/connect-chatgpt), [Cursor](https://megamcp.com/docs/connect-cursor), [Claude Code](https://megamcp.com/docs/claude-code) or [VS Code](https://megamcp.com/docs/vscode). 3. **Sign in when the app asks.** MegaMCP opens a sign-in page, you choose a workspace and approve access. The app never sees a password or an API key, and each person signs in as themselves, so the flight recorder shows who asked for what. 4. **Try the sandbox.** Ask your AI about the demo account, ask it to change something, and approve the plan. Then undo it. 5. **Connect real accounts.** In the dashboard, open **Connections**, sign in with Google, Meta, Microsoft or HubSpot, and every account found is switched on for your AI to read. Switch off any it shouldn't see; changes still need your approval. Note Rolling out means the code is built and the platform is still approving MegaMCP's app: Google, Meta, Microsoft and the one-click ad-platform sign-ins switch on as each approval lands. Anything you connect with your own key, token or app password (WordPress, HubSpot, Shopify, Klaviyo, Mailchimp, Apollo, ZoomInfo, Clay, Instantly, research and SEO tools, SMTP email and Slack) works today, and the sandbox is always on. #### Connect multiple logins and accounts Use one MegaMCP workspace for separate Gmail and Google Workspace logins, multiple ad accounts and WordPress sites. Each Google login connects the supported services you authorize. Multiple connections are included on every plan and do not count as extra seats. 1. In **Connections**, connect your first Google account. Then click **Connect another Google account** and choose the next Google login. Repeat for each login you want to connect. 2. Review which discovered accounts your AI may use. Switch off any it should not see, and assign accounts to the right client. 3. Choose that client when asking your AI to work on its accounts. Client access restrictions still apply. Connecting the same Google login again refreshes its existing connection. To add another connection, select a different Google account on Google's sign-in screen. You can also add separate Microsoft logins or connect each WordPress site in Connections. #### How it works in one minute - **Reads run immediately.** “How did Brand – US do last week?” queries the platform API and returns the result to your AI. Ordinary connector reads do not create saved reports. When you capture a report snapshot, MegaMCP stores the selected data and source receipts so you can review, compare and export that exact version. - **Writes never touch a platform directly.** A write tool returns a **plan**: a list of changes with before and after values. Nothing has changed yet. - **A human approves.** In the dashboard, or in chat if your workspace allows it. [Budget bumpers](https://megamcp.com/docs/guardrails) can block a plan outright. - **Changes apply in order,** and if one fails the rest are skipped, so you never get a half-understood mess. - **Everything can be undone** where the platform allows it, and everything lands in the flight recorder. #### Core concepts **Reporting is part of your workspace.** Open [Reports & dashboards](https://megamcp.com/app/reports) to review saved dashboards, or start from [14 report templates](https://megamcp.com/app/reports/templates). Members can arrange blocks, select connected sources, add custom metrics and goals, import daily CSV rows, and capture snapshots. Admins can set workspace or client brand kits and approve an exact snapshot for a share link that expires after 30 days or can be revoked earlier. Download a structured PDF of any saved snapshot, with a branded cover, contents, selectable text, vector charts, paginated tables, source receipts and page numbers. CSV and JSON remain available for complete data exports. Scheduled reporting creates saved drafts; it does not automatically email or publish them. Reporting tools can save definitions and capture snapshots directly inside MegaMCP. Saved definitions include layouts, commentary and source selections; snapshots keep captured data and receipts for that version. Uploaded daily rows and brand kits are also stored. Archiving a report preserves its history, stops its schedule and revokes its share links. Link expiry does not delete a saved snapshot. See [Privacy](https://megamcp.com/privacy#collect) for how these records are handled. - [: Approvals and undo: How plans, diffs, approvals, roles and undo fit together.](https://megamcp.com/docs/approvals-and-undo) - [: Budget bumpers: Spend caps the change engine enforces before anything is applied.](https://megamcp.com/docs/guardrails) - [: Scheduled workflows: Templates that run on a schedule and never apply changes on their own.](https://megamcp.com/docs/workflows) #### Reference - [: WordPress plugin: The optional MegaMCP Connector plugin: SEO fields, JSON-LD, redirects, cache purges and IndexNow.](https://megamcp.com/docs/wordpress-plugin) - [: Tool reference: Every tool your AI can call, generated from the running product.](https://megamcp.com/docs/tools) #### Getting help Email hello@megamcp.com. A human answers. For security reports, use security@megamcp.com (see [Security](https://megamcp.com/security)). ### WordPress plugin Source: https://megamcp.com/docs/wordpress-plugin One small, optional plugin that lets MegaMCP set SEO titles and descriptions, JSON-LD, redirects, cache purges and the IndexNow key file. Every change still waits for a person to approve it. #### Download [Download megamcp-connector.zip](https://megamcp.com/downloads/megamcp-connector.zip) Version 1.0.0 · WordPress 6.0+ · PHP 7.4+ The WordPress connection works without it, using WordPress's own REST API and an application password. The plugin adds the few things that API doesn't expose. #### Install 1. Download [megamcp-connector.zip](https://megamcp.com/downloads/megamcp-connector.zip). Don't unzip it. 2. In WordPress, open **Plugins → Add New → Upload Plugin**, choose the zip, click **Install Now**, then **Activate**. 3. Ask your AI for the WordPress site overview (`wordpress_site_info`). It shows the plugin as active with its version. If the site was connected with an Editor, connect it again with an Administrator's application password for redirects, cache purges and IndexNow. #### What it unlocks - SEO title, meta description, canonical URL, noindex and focus keyword per post or page: `wordpress_set_seo_meta`: Can edit that post (Author, Editor, Administrator) - One JSON-LD document per post or page, printed in the page head: `wordpress_set_schema`: Can edit that post - Redirects: up to 500 exact-path rules, 301/302/307/308, with hit counts: `wordpress_redirects, wordpress_set_redirects`: Administrator (manage_options) - Clear page caches (WP Rocket, W3 Total Cache, LiteSpeed Cache, WP Super Cache, WP Fastest Cache, SiteGround Optimizer, Autoptimize) and the object cache: `wordpress_purge_cache`: Administrator - Serve the IndexNow key file at https://your-site/.txt without uploading it: `wordpress_set_indexnow_key`: Administrator Every change is a plan with a before-and-after diff that a person approves, like every other write. Plans stop if the value changed in WordPress after the plan was made, and everything except a cache purge can be undone. Without the plugin, these tools reply with a link to this page. #### Permissions and security - **No new login.** The plugin's REST routes (namespace `megamcp/v1`) use the application password MegaMCP already has. WordPress checks it; the plugin then checks capabilities on every request. - **Per-post changes** (SEO fields, JSON-LD) need permission to edit that post. **Site-wide changes** (redirects, cache purges, the IndexNow key) need `manage_options`, which only administrators have. - **Validated input, escaped output.** Titles and descriptions are plain text. Canonical URLs and redirect targets must be http(s). JSON-LD must be a JSON object with `@context` and `@type`, at most 20 KB, and is encoded so it can't close its script tag. Redirects can't take over `/wp-admin`, the login page or the REST API, and loops and duplicates are refused. - **Nothing else.** No outside calls, no telemetry, no admin screens, no code execution, no theme or file edits. Note Redirects from the plugin apply before WordPress's own canonical redirects and before a page not found. Redirects from other plugins (such as Redirection) or the web server keep working and aren't listed by `wordpress_redirects`. #### What it stores - SEO fields: in Yoast SEO's or Rank Math's post fields when one is active, otherwise in the plugin's own post fields (`_megamcp_seo_*`, `_megamcp_focus_keyword`). - JSON-LD: one post field per post (`_megamcp_schema`). - Redirects and their hit counts: two options that aren't loaded on every page (`megamcp_redirects`, `megamcp_redirect_hits`). - The IndexNow key: one option (`megamcp_indexnow_key`). The key is public by design: search engines fetch it from your site. #### Uninstall Deactivate and delete it under **Plugins**. Deleting runs its uninstaller, which removes its options (redirects, hit counts, the IndexNow key) and its own post fields (SEO fields and JSON-LD) on every site of a multisite network. Values it wrote into Yoast SEO or Rank Math fields stay, since they belong to those plugins. #### FAQ **Do I need the plugin to connect WordPress?** No. Posts, pages, media, the SEO audit and plugin lists work with an application password alone. The plugin adds SEO fields, JSON-LD, redirects, cache purges and the IndexNow key file. **Does it work with Yoast SEO or Rank Math?** Yes. With either one active, SEO titles, descriptions, canonical URLs, noindex and focus keywords are written to that plugin's own fields, so it keeps printing them. Without one, the MegaMCP Connector prints the tags itself. **Can the plugin run code or change my theme?** No. It has no way to run code, edit theme or plugin files, or change settings other than its own redirects and IndexNow key. It makes no outside calls and sends no telemetry. **What does deleting it remove?** Deleting it from Plugins removes its redirects, redirect hit counts, the IndexNow key, its own SEO fields and every JSON-LD document it stored. Values it wrote into Yoast SEO or Rank Math fields stay, because they belong to those plugins. Deactivating keeps everything; it just stops working until you reactivate it. ## Security and data Source: https://megamcp.com/security Three locks on every account ### Encrypted keys. Human approvals. Narrow scopes. Your AI can read what you switch on and propose changes. It can't apply them, raise a cap, or see a token. #### Encrypted, row-bound tokens Platform tokens are sealed with AES-256-GCM under versioned keys, and each ciphertext is bound to the connection it belongs to. google · refresh_token**sealed** `versioned key · aes-256-gcm · aad=connection` `9f2c…e71a ████████████████` `copied to another row → fails to decrypt` #### Plans, not actions Every write is a plan with a diff that waits for a person. Budget bumpers are checked when it's proposed and again before it's applied. **Plan blocked**Daily budget $120 → $400 is above the $250 cap.Budget bumper · checked before applyBlocked by budget bumper #### Only the scopes features use Each permission is listed below with the reason MegaMCP asks for it. Optional products ask separately. - `openid` - `email` - `adwords` - `analytics.readonly` - `analytics.edit` - `webmasters` - `tagmanager.readonly` - `tagmanager.edit.containers` - `tagmanager.edit.containerversions` - `tagmanager.publish` - `ads_read` - `ads_management` - `business_management` #### No login passwords OAuth platforms use their own sign-in. HubSpot also supports private-app tokens, and WordPress uses an application password, never your login password. Disconnect removes stored access in MegaMCP; revoke credentials at the platform to end their access there. #### Encrypted tokens Platform tokens are encrypted with AES-256-GCM, with versioned keys for rotation, and bound to the database row they belong to. #### Humans approve Connected-platform changes require a reviewed plan with a diff and human approval. Budget bumpers can block supported budget changes. Internal report drafts can be saved directly; public sharing requires admin review. #### Undo Supported operations record what they need for reversal. Irreversible operations are marked before approval and excluded from undo. Undo is its own plan, with its own diff and approval. #### Flight recorder Every tool call, plan, approval, connection and billing event is logged with who did it and from which AI app. #### No training We never train models on your data. Reporting snapshots are stored when you capture them. The optional hosted agent stores encrypted conversations and tool receipts; your chosen provider's data terms apply. **On this page** 1. How your AI connects 2. How we connect to Google, Meta, Microsoft and HubSpot 3. Encryption and secrets 4. Changes are gated 5. Audit log 6. Application security 7. Your data 8. Responsible disclosure 9. Questions Back to top ### How your AI connects - **OAuth 2.1 with PKCE** (S256 only). Each person signs in to MegaMCP in their browser and picks a workspace. The AI app never sees a password. - **Tokens are scoped to MegaMCP's MCP endpoint** (resource indicators, RFC 8707), so a token issued for MegaMCP is useless anywhere else. - **Short-lived access tokens** (1 hour) with refresh tokens that rotate on every use (30 days max). If an old refresh token or authorization code is replayed, we treat it as theft and revoke that connection. - **Role checks on every call.** Each tool call re-checks the person's membership, role and the workspace's plan. Viewers can't propose or approve changes. - **Origin checks and rate limits** on the MCP endpoint to block DNS-rebinding attacks and runaway clients. - **Revoke anytime** from **Connect AI** in the dashboard. It takes effect immediately. ### How we connect to Google, Meta, Microsoft and HubSpot OAuth flows use single-use state and PKCE where supported. Review account access and client assignment after connecting. A first Google, Meta, Microsoft, HubSpot or other one-click sign-in switches on every account it finds for reads; changes still need a person's approval. New file, key-based and beta integration accounts start switched off, and a first WordPress or store connection with exactly one discovered account switches that account on. Reconnecting preserves existing choices. Your AI sees enabled accounts within its permitted client scope. We request the scopes MegaMCP's features use: #### Google Each Google product is its own short consent: connecting Google Ads asks only for the Ads permission, Search Console only for Search Console, and so on. Adding another product to the same login uses Google's incremental authorization, so earlier grants stay as they were. - `openid`: Identify which Google account you connected. - `email`: Show which Google account a connection belongs to. - `adwords`: Google Ads API access. Google offers only this one scope; MegaMCP's own approvals decide what actually changes. - `analytics.readonly`: Run GA4 reports. - `analytics.edit`: Change the GA4 settings you approve: key events, custom dimensions and metrics, audiences, web data streams, data retention, enhanced measurement and property settings. Deleting a data stream or archiving a definition is marked irreversible before approval. - `webmasters`: Read Search Console performance, inspect URLs, submit sitemaps (after approval). - `tagmanager.readonly`: Read and audit Tag Manager containers. - `tagmanager.edit.containers`: Create and update GA4 event tags, custom-event triggers and constant variables, and pause tags, in a workspace (after approval). - `tagmanager.edit.containerversions`: Create a container version so a workspace can be published. - `tagmanager.publish`: Publish a workspace, always as its own approved plan. #### Optional Google products These are requested separately when an admin connects the corresponding product. They are not added to the default marketing grant automatically. Operator API setup, Google verification and customer consent are required; code support alone does not establish public approval. - `drive.file`: Read and edit only files created for or explicitly selected for MegaMCP, including supported Sheets, Docs and Slides. Existing files use Google's Picker and a separate narrow browser grant. - `content`: Inspect Merchant Center products and data sources, and perform the specific account-name/product-copy edits you approve. Product-input edits are irreversible. - `business.manage`: Discover Business Profile locations, read reviews, and after approval reply to a review or change a location's website URI or regular hours. Google project/API approval may also be required. - `youtube.readonly`: Read your connected channel and owned video metadata. - `youtube.force-ssl`: Optional YouTube management consent for reviewed video title/description changes. The permission is broader than the metadata tools MegaMCP exposes. - `bigquery`: Read metadata and dry-run constructed SELECT queries in an enabled dataset. Actual query execution requires cost consent and a separate human-approved plan with maximum bytes billed; costs cannot be undone. #### File services and customer API keys Microsoft Graph requests delegated Files.Read.All for reads, or Files.ReadWrite.All when reviewed renames are selected, plus identity and offline access. These grants are broad at Microsoft; MegaMCP checks the enabled folder and client before file operations. Dropbox OAuth requests account_info.read, files.metadata.read and files.content.read and restricts tools to the enabled folder. Private commerce, research, advertising and SEO credentials can also have broader vendor privileges than MegaMCP's tool set. Use dedicated credentials, review each connection's disclosure, and revoke vendor access separately when finished. #### Meta - `ads_read`: Read campaigns, ad sets, ads and insights. - `ads_management`: Make the changes you approve (pause, budgets, duplicate, create paused ads). - `business_management`: Find ad accounts owned by your Business Manager. #### Microsoft Advertising - `https://ads.microsoft.com/msads.manage`: Microsoft Advertising API access. Microsoft offers only this one scope; it lets MegaMCP read the ad accounts your login can reach and make the changes you approve (statuses, daily budgets, negative keywords). - `offline_access`: Get a refresh token, so the connection keeps working after the one-hour access token expires. - `openid`: Sign you in with your Microsoft account. - `profile`: Show which Microsoft account a connection belongs to. #### HubSpot - `oauth`: Required by HubSpot for every app that connects with OAuth; also lets us read the connected account's id, name and currency. - `crm.objects.contacts.read`: Search and read contacts, and read notes, tasks, calls, emails and meetings (HubSpot's activity APIs use the contact scopes). - `crm.objects.contacts.write`: Create contacts, update contact properties, and add notes and tasks (after you approve the plan). - `crm.objects.companies.read`: Search and read companies. - `crm.objects.companies.write`: Update company properties (after you approve the plan). - `crm.objects.deals.read`: Search and read deals and deal pipelines. - `crm.objects.deals.write`: Create deals and update deal properties such as stage and amount (after you approve the plan). - `crm.objects.owners.read`: Show who owns a record and check owner ids before assigning them. - `crm.schemas.contacts.read`: List contact properties, including traffic-source and click-id properties. - `crm.schemas.deals.read`: List deal properties. #### Other one-click sign-ins Each appears in the dashboard only after the vendor approves MegaMCP's app. Customers can still use their own dedicated tokens or keys instead. - TikTok Ads: Ad account management, campaign management and reporting permissions, chosen on MegaMCP's TikTok app - LinkedIn Ads: r_ads, r_ads_reporting, rw_ads - Reddit Ads: identity, adsread, adsedit - Pinterest Ads: ads:read, ads:write, user_accounts:read - X Ads: OAuth 1.0a read and write access for the X Ads API - Shopify: read_products, write_products, read_orders, read_locations, read_inventory, write_inventory - Klaviyo: accounts:read, campaigns:read, campaigns:write, lists:read, metrics:read, templates:read, templates:write - Mailchimp: Mailchimp's standard account access (Mailchimp has no narrower scopes); tools stay within enabled audiences and drafts Google lets you untick individual permissions on its consent screen. MegaMCP shows which products a login hasn't granted and offers to add just those. ### Encryption and secrets - **Platform tokens** and WordPress application passwords are encrypted at rest with **AES-256-GCM**. Application passwords are only ever sent to the site they belong to, over https. Keys are versioned: new data is encrypted with the newest key while older keys can still decrypt, so keys can be rotated without downtime. - **Row binding.** Each ciphertext is bound to the connection and purpose it belongs to (authenticated additional data), so an encrypted token copied into another row simply fails to decrypt. - **We store only hashes of our own secrets.** Session cookies, sign-in links and the OAuth tokens we issue to AI apps are stored as SHA-256 hashes. A database leak wouldn't hand anyone a working session. - **In transit,** everything is served over HTTPS with HSTS. - **Never logged.** Tokens and secrets are kept out of logs, error messages and the flight recorder. ### Changes are gated - **Plans, not actions.** Write tools read the live state and return a plan with before and after values. They can't touch the platform. - **Human approval,** in the dashboard by default. If an admin opts in, a connection can also apply its own plans in chat after an explicit yes, but never workflow plans or uncapped spend increases. - **Budget bumpers** are checked when a plan is proposed and again right before it's applied. Blocked plans can't be applied by anyone. - **Applied at most once.** A plan flips from pending to applying atomically, so a double click or a retried request can't apply it twice. - **Stops on the first failure,** and skips the rest, so you never get half a plan you didn't expect. - **Plans expire** after 24 hours, because the live account may have moved on. - **Safe defaults:** new Google Ads campaigns and new Meta ads are created paused, and Tag Manager publishing is always its own plan. [How approvals and undo work](https://megamcp.com/docs/approvals-and-undo) · [Budget bumpers](https://megamcp.com/docs/guardrails) ### Audit log The flight recorder logs every tool call (with its arguments), plan, approval, rejection, change, undo, connection, team change and billing event, with the person and the AI app behind it. It's searchable in the dashboard and admins can export it as CSV. ### Application security - A strict Content Security Policy: no inline scripts, no framing, and no third-party scripts except Google Analytics, which runs without cookies until you accept them. - CSRF tokens on every form that changes anything, and `HttpOnly`, `SameSite`, `Secure` cookies. - Parameterized SQL everywhere, and every query scoped to your workspace. - Rate limits on sign-in, sign-up and the MCP endpoint. - Stripe webhooks are verified by signature; card details go to Stripe, never to us. - Automated tests for the security-critical paths: OAuth, encryption, the change engine, guardrails and workspace isolation. ### Your data We don't sell your data and we never use it (or data from Google, Meta, Microsoft or HubSpot) to train AI models. Ordinary immediate connector reads do not create saved report snapshots. Saved reporting stores definitions, layouts, commentary, imported rows, brand kits, and captured data with source receipts. Report access follows workspace and client permissions; admin-approved snapshot links expire after 30 days or can be revoked earlier. Expiring a link does not delete its saved snapshot. The optional hosted agent stores encrypted conversations and tool receipts until deleted or after 30 days without activity; your chosen provider's data terms also apply. Google data is handled under Google's API Services User Data Policy, including the Limited Use requirements. The full story is in our [Privacy Policy](https://megamcp.com/privacy). #### Subprocessors - [OpenAI API](https://openai.com): Optional hosted agent, workflow AI and image creation/editing using authorized BYOK or configured included AI where supported - [Anthropic API](https://anthropic.com): Optional hosted agent, only when an admin supplies an Anthropic key and authorizes it - [Gemini API](https://ai.google.dev): Optional hosted agent, workflow AI and Veo creation using authorized customer Paid Services credentials - [DeepSeek API](https://api-docs.deepseek.com): Optional BYOK hosted agent and workflow AI after admin training-exclusion attestation - [xAI API](https://docs.x.ai): Optional BYOK hosted agent and workflow AI with response continuation storage disabled - [Cloudinary](https://cloudinary.com): Optional deterministic private MP4 trimming, cropping, downscaling and audio removal using a customer-configured account - [LinkedIn](https://learn.microsoft.com/linkedin/marketing/): Optional approved Advertising API access at the customer direction - [Mailchimp](https://mailchimp.com/developer/marketing/): Optional Marketing API reads and reviewed plaintext draft edits at the customer direction - [Snap](https://developers.snap.com/api/marketing-api): Optional Snapchat Marketing API operations at the customer direction - [X](https://docs.x.com/x-ads-api): Optional approved Ads API operations at the customer direction - [Customer SMTP provider](https://megamcp.com/privacy): Optional exact plaintext email and owned attachments sent only after authenticated human dashboard approval - [Railway](https://railway.com): Application hosting and managed Postgres database - [Stripe](https://stripe.com): Subscription billing and payments - [Resend](https://resend.com): Transactional email (sign-in links, invitations, workflow emails) - [Google APIs](https://developers.google.com): Authorized Google marketing, selected Workspace files, Merchant Center, Business Profile, YouTube and BigQuery operations, at the customer direction - [Meta Platforms](https://developers.facebook.com): Meta advertising and optional owned Facebook Page/linked professional Instagram operations, at the customer direction - [Microsoft Advertising](https://learn.microsoft.com/advertising): Microsoft Advertising API (Bing Ads), at the customer's direction - [HubSpot](https://developers.hubspot.com): HubSpot CRM API, at the customer's direction ### Responsible disclosure Found a vulnerability? Email security@megamcp.com with what you found, steps to reproduce, and the impact you think it has. We'll acknowledge your report, keep you updated while we fix it, and credit you if you'd like. Please test only against your own account and workspace, don't access or modify other people's data, don't degrade the service (no denial-of-service or spam), don't use social engineering, and give us reasonable time to fix the issue before disclosing it. If you follow these guidelines in good faith, we won't pursue legal action against you for your research. Machine-readable contact details: [/.well-known/security.txt](https://megamcp.com/.well-known/security.txt). ### Questions **Can MegaMCP staff see my ad accounts?** We don't browse customer accounts. Platform tokens are encrypted and only used to run the tools you and your AI call. We'd only look at your data with your permission (for example, in a support request), for security investigations, or when the law requires it. **What if my AI app gets tricked by a prompt injection?** It still can't change anything on its own. Write tools only create plans; applying one needs a human approval, budget bumpers still apply, and approvals in chat are off unless an admin turns them on. MegaMCP also tells the AI to treat platform data like search terms and page titles as untrusted, never as instructions. **What happens to my tokens if I disconnect?** They're wiped from our database immediately and we ask Google, Meta or HubSpot to revoke them (Microsoft has no revocation endpoint, so remove MegaMCP from your Microsoft account's app permissions to revoke it there). The accounts are switched off. **Do you have SOC 2?** Not yet. We're an early-stage company and we'd rather tell you that than wave a badge. Ask us for our security questionnaire answers at security@megamcp.com. ## Frequently asked questions ### Can I connect multiple Google accounts? Yes. Connect separate Gmail and Google Workspace logins in the same MegaMCP workspace. Each login has its own encrypted connection to supported Google services, such as Ads, Analytics and selected Workspace files. You can also connect multiple Microsoft logins and WordPress sites. Choose which accounts your AI can use and group them by client. Multiple connections are included on every plan, with no per-account fee; each integration's rollout status and vendor limits still apply. ### What is MegaMCP, in one breath? A hosted MCP server plus a dashboard that plugs your AI (Claude, ChatGPT, Cursor, Claude Code, VS Code) into Google Ads, Meta Ads, Microsoft Ads, GA4, Search Console, Tag Manager, WordPress and HubSpot, so you can report, launch and fix things by asking, and approve every change before it happens. ### What's MCP? The Model Context Protocol is an open standard that lets AI assistants use outside tools. MegaMCP is one MCP connection that gives your assistant safe, scoped access to your marketing accounts. ### Can I use it today? Yes. Start a 5-day free trial, no credit card needed. Every workspace gets a sandbox ad account you can use right away. Google and Meta connections are rolling out while their app reviews finish, so connecting a real account may be limited at first. ### Why no credits? Paid plans do not charge per MCP operation or BYOK agent run. Your AI provider bills your own API key. Optional operator-funded hosted AI has a separate monthly allowance and must be enabled by your workspace admin. Creative generation uses your provider key and incurs its charges. Fair-use limits apply to protect the service. ### Can it actually change things, or just report? Both. It can build Search campaigns, pause and enable things, change budgets, add negatives, create paused Meta ads, and edit and publish tags. Every write shows a diff first, needs human approval, and lands in the flight recorder. Supported operations have a reviewed undo plan; irreversible operations are marked before approval. ### Do you store or train on my data? We never train AI models on your data. Ordinary immediate connector reads do not create saved report snapshots. When you use saved reporting, we store definitions, layouts, commentary, imported rows, brand kits and captured data with source receipts. Share links expire after 30 days or can be revoked earlier; this does not delete saved snapshots. The optional hosted agent stores encrypted conversations and tool receipts until deleted or after 30 days without activity; your chosen provider's data terms also apply. We keep change plans, approvals and tool activity for audit and supported undo. Platform tokens are encrypted. Details are on our security and privacy pages. ### What happens when the trial ends? You drop to the Free plan. Your AI can still read every connected account, up to 100 reads a day, forever. Proposing and applying changes and scheduled workflows need a paid plan. Nothing is deleted, and everything picks up where it left off when you subscribe. ### Is there a free plan? Yes. Free is read-only: reports, audits and questions across every integration, up to 100 reads a day, with no credit card. Every new workspace starts with a 5-day trial of everything, then keeps Free unless you pick a plan. ### I'm switching from Markifact. Anything I should know? Start a free trial, then email hello@megamcp.com with the workflows you run today. We'll help you rebuild them in MegaMCP. ### Do I pay per integration or per AI app? No. Every plan, Free included, covers every integration and every AI client (Claude, ChatGPT, Cursor, Claude Code and VS Code) through one MCP connector URL. There are no add-ons and no per-connector fees. ### What counts as a seat? Every member of a workspace, whatever their role, viewers included. Connected Google logins, ad accounts and websites do not count as extra seats. Solo has 1 seat, Crew has 10. Need more than 10? Legion has custom seats. ### Can I switch plans or billing period later? Yes. Workspace admins switch plans, change the card, download invoices and cancel from Billing in the dashboard (Stripe's customer portal). Stripe prorates plan changes. ### What happens if I cancel? You keep paid features until the end of the period you've paid for. Then the workspace moves to the Free plan: reads keep working, nothing is deleted, and everything picks up where it left off if you subscribe again. ### Do you offer refunds? Fees are non-refundable except where the law requires otherwise or we've said so in writing. That's why every paid plan starts with a free trial and Free stays free. ### What if a payment fails? Your workspace keeps working for 7 days while Stripe retries the card. Update it from Billing any time. ### How is yearly billing charged? Yearly plans are billed once a year in advance through Stripe, at the yearly price shown here, plus any applicable taxes. ## More from MegaMCP - [Learn](https://megamcp.com/learn): Guides to MCP, AI agents for marketing, and running ad accounts from Claude and ChatGPT. - [Free tools](https://megamcp.com/tools): Free browser tools for marketers: no signup needed. - [Compare](https://megamcp.com/compare): MegaMCP compared with other MCP servers and marketing AI tools, with sourced facts. - [Glossary](https://megamcp.com/glossary): Plain-English definitions of MCP, OAuth, GAQL and other marketing and AI terms. - [Prompt library](https://megamcp.com/prompts): Copy-ready prompts for Google Ads, Meta Ads, GA4, Search Console, WordPress and more. - [Changelog](https://megamcp.com/changelog): what shipped and when. - [Privacy policy](https://megamcp.com/privacy) and [Terms of service](https://megamcp.com/terms).