Fixed allowlist
The public profile exposes thirteen concrete tools and blocks hidden tools when called directly by name.
Security and controls
Account access is scoped. Live changes are deliberate.
AdvisorPPC combines Google authorization, encrypted credential storage, tenant isolation, a fixed public tool allowlist, and confirmation before campaign changes.
Google Ads authorization
The user authorizes Google through its OAuth flow. AdvisorPPC receives scoped tokens rather than a Google password and can reach only the accounts and operations permitted for that identity.
Provider tokens are encrypted at rest. HTTPS protects transport to the public service. Users can revoke Google access through Google or use an available AdvisorPPC disconnect control.
Boundaries
Several controls work together.
Account context
MCC and child-account discovery reduces the risk of selecting an unintended customer.
Two-step writes
Pause, enable, and budget replacement require an explicit confirmed retry with the exact target and effect.
Read and write operations
| Operation | Examples | Control |
|---|---|---|
| Read | List accounts and campaigns; retrieve performance and search terms | Authenticated user and connected Google Ads access |
| Analysis | Find wasted-spend evidence | Returns findings only and never applies them |
| Write | Pause, enable, or replace a campaign budget | Exact target plus a separate confirmed=true retry |
Report a concern
Email support@advisorppc.com without sending passwords, tokens, or API secrets.