← MCP servers · ruslan2027

Adako — careful ad ops for AI agents

BLOCKgrade D · trust 69/100

Adako (アダコ) — careful ad ops for AI agents. Skills, client configs, Claude Code plugin, CLI and MCP Registry entry for the hosted MCP server at adako.ai.

advertisingchatgpt adsclaudegoogle adslinkedin adsmcpmcp servermeta ads

Overview

From the repository's own README, as read at the audited commit.

# Adako: ad ops for AI assistants**アダコ** · [adako.ai](https://adako.ai)Adako is an MCP server and REST API that connects Claude, ChatGPT, Cursor and other assistants toGoogle Ads, Meta Ads, ChatGPT Ads, TikTok Ads and LinkedIn Ads.```https://adako.ai/mcp```Ask "how did my campaigns do last month?" and get an answer from the live account, in the account'sown currency. Ask "raise that budget to 40 a day" and get a proposal you approve before anythingmoves. Created campaigns are always paused.This repository holds the public pieces: the Agent Skills, per-client configuration, one-fileinstallers, a Claude Code plugin, and the MCP Registry entry. The server itself is hosted.---## What it can do231 tools across five platforms, plus Adako's own.| Platform     | Tools | What they cover                                                                                                                                                                 || ------------ | ----- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- || Google Ads   | 70    | Search and Performance Max, keywords and search terms, budgets and bid strategies, assets and extensions, conversion actions, labels, schedules, geo, hourly and device reports || Meta Ads     | 43    | Campaigns, ad sets and ads, image, video, carousel and app-install launches, audiences and placements, pixels, lead forms, creative fatigue                                     || LinkedIn Ads | 34    | Campaign groups and campaigns, image, video, carousel and text ads, B2B targeting, audience forecasts, conversion rules, engagement metrics                                     || TikTok Ads   | 30    | Campaigns, ad groups and in-feed video ads, Spark Ads, video metrics, identities, pixels, creative fatigue                                                                      || ChatGPT Ads  | 23    | Chat card campa

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add cli --env ADAKO_API_KEY=${ADAKO_API_KEY} -- npx -y @adako/[email protected]
claude-desktop
{
  "mcpServers": {
    "cli": {
      "command": "npx",
      "args": [
        "-y",
        "@adako/[email protected]"
      ],
      "env": {
        "ADAKO_API_KEY": "${ADAKO_API_KEY}"
      }
    }
  }
}

Details

Source
ruslan2027/adako-mcp
npm
@adako/cli@0.1.0
Transports
streamable-http
Credentials it reads
ADAKO_API_KEY
Tools
Registered at runtime; the list could not be read from source.
License
NOASSERTION
Stars
0 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)FAIL
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (8)

HIGHPrompt injection · prompt.credential_read · CWE-94, CWE-1427
SKILL.md:493
- Do not ask for or accept platform passwords, access tokens or API keys in chat. Connections are
Why it matters. asks the agent to read credentials
HIGHPrompt injection · prompt.credential_read · CWE-94, CWE-1427
plugin/skills/adako/SKILL.md:493
- Do not ask for or accept platform passwords, access tokens or API keys in chat. Connections are
Why it matters. asks the agent to read credentials
HIGHPrompt injection · prompt.credential_read · CWE-94, CWE-1427
skills/adako/SKILL.md:493
- Do not ask for or accept platform passwords, access tokens or API keys in chat. Connections are
Why it matters. asks the agent to read credentials
MEDIUMPrompt injection · prompt.conditional_escalation · CWE-94, CWE-1427
plugin/skills/monitoring/SKILL.md:3
description: Operating procedure for monitors, alerts, scheduled briefs and reports in Adako, the MCP server and REST API that connects this assistant to Google Ads, Meta Ads, ChatGPT Ads, TikTok Ads 
MEDIUMPrompt injection · prompt.conditional_escalation · CWE-94, CWE-1427
skills/monitoring/SKILL.md:3
description: Operating procedure for monitors, alerts, scheduled briefs and reports in Adako, the MCP server and REST API that connects this assistant to Google Ads, Meta Ads, ChatGPT Ads, TikTok Ads 
LOWPrompt injection · prompt.credential_read · CWE-94, CWE-1427
GEMINI.md:487
- Do not ask for or accept platform passwords, access tokens or API keys in chat. Connections are
Why it matters. asks the agent to read credentials
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README.md:76
- **API key** — create one at [adako.ai/keys](https://adako.ai/keys), send it as
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-09-15 · audit v0.4.0 · source sha 6fd2bca9fa50 · full audit: observations/trust-audit/mcp-server/ruslan2027__ads.json · Report an issue or request a re-scan

Audit history

DateSourceVerdictGradeScoreChange
2026-09-156fd2bca9fa50BLOCKD69first audit

Alternatives

Other servers in the same categories, safer ones first.

Questions

What is the Adako — careful ad ops for AI agents MCP server?

Adako (アダコ) — careful ad ops for AI agents. Skills, client configs, Claude Code plugin, CLI and MCP Registry entry for the hosted MCP server at adako.ai.

Is Adako — careful ad ops for AI agents safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Adako — careful ad ops for AI agents need?

It reads ADAKO_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does Adako — careful ad ops for AI agents run?

It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as @adako/cli at 0.1.0.

How current is this page?

The grade is for one exact copy of the source (6fd2bca9fa50), read on 2026-09-15. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-15 · job trust-audit-2026-09-15