Gam MCP Server
Google Ad Manager API access using a least-privilege, local-only architecture.
Data last scanned today · Reviewed today
Overview
Gam MCP Server allows AI clients to interface with the Google Ad Manager API for reading and managing ad data. It is engineered with a strict security-first posture, isolating service account keys and access tokens within the local process to prevent exposure to the model itself. The server emphasizes granular control over mutation operations by implementing a two-step propose-and-confirm mechanism. It also provides a read-only kill-switch and a network allowlist to limit the scope of operations, aiming to provide a safer alternative to shared-service-account designs found in other GAM integrations.
Our verdict
This server carries a high risk level with a security score of 30/100. The repository is community-maintained rather than vendor-backed, lacks editorial review, and currently has a bus-factor risk due to having only one contributor. Users should exercise caution; it is best suited for developers building internal prototypes who prioritize self-hosting over third-party proxies, provided they can verify the security controls themselves.
- Uses least-privilege OAuth scopes for read-only mode.
- Implements a multi-layer network allowlist for tool calls.
- Small footprint with only five direct dependencies.
- Provides a two-step confirmation gate for all write mutations.
- Community-maintained with no official vendor support.
- Current security score is low at 30/100.
- Single contributor increases long-term maintenance uncertainty.
- Zero GitHub stars suggests limited community testing.
Setup
{
"mcpServers": {
"gam-mcp": {
"args": [
"-y",
"gam-mcp"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| get_network | Retrieves information about the current Google Ad Manager network. | low |
| list_orders | Lists orders within the Google Ad Manager network. | low |
| get_order | Retrieves details for a specific order. | low |
| list_line_items | Lists line items within the Google Ad Manager network. | low |
| get_line_item | Retrieves details for a specific line item. | low |
| run_report | Executes a report within the Google Ad Manager network. | low |
| propose_update_line_item | Proposes an update to a line item that requires confirmation via confirm_write. | medium |
| confirm_write | Confirms and executes a pending write operation. | high |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›Does gam-mcp support per-user accountability?
Yes, by using the user_oauth authentication mode, the server calls Google Ad Manager as the individual user, ensuring that actions are attributed to a real person rather than a shared service account.
›How does the server prevent accidental mutations to Google Ad Manager data?
The server offers a read-only mode, uses a two-step confirm_write process for mutations, and validates all network codes against an allowlist.
›What is the difference between service_account and user_oauth modes?
Service_account uses a single shared identity for all operations, while user_oauth allows each operator to authorize with their own Google account to bound actions by their specific GAM permissions.
›Are my credentials ever exposed to the AI model?
No, service-account keys and access tokens remain inside the server process and are never placed in a tool result.
›What prerequisites are needed in the Google Ad Manager console to use this server?
You must enable API access in your GAM network settings, note your network code, and enable the Google Ad Manager API in your GCP project.
›Can I use this server for Google Ads campaigns?
No, this server is specifically for Google Ad Manager, which is the publisher platform, not Google Ads, which is the advertiser platform.
Alternatives
Badge
Maintain this server? Add the live badge to your README.