Meta Ads MCP Server: What It Can Change and How to Lock It Down
Meta runs an official ads MCP server at mcp.facebook.com/ads, announced in open beta on April 29, 2026, and still in open beta. ChatGPT, Claude and Perplexity can connect to it with no Meta developer app, and since July 16, 2026 any developer can connect their own app. It reads your reports, and it can create and edit campaigns, ad sets and ads, create, update and delete audiences, and build catalogs. New items start paused. Meta's ads MCP server rules can block changes, but not every business has them yet.
Agencies acting for other businesses need app review. Before an AI touches a live account, set an ad account spending limit and start read-only. Here is how, with the money math.
Last checked: October 24, 2026. Sources are listed at the end.
What a Meta ads MCP server is, in plain words
MCP stands for Model Context Protocol, an open-source standard for connecting AI apps to outside systems that Anthropic open-sourced on November 25, 2024. The official MCP site compares it to a USB-C port for AI apps. An MCP server is the plug on the other end: it tells the AI which actions exist and runs them when the AI asks. Meta's ads MCP server is hosted by Meta at https://mcp.facebook.com/ads and works with any MCP-compatible AI agent. Meta pitches it to advertisers who want to manage ads through a chat instead of Ads Manager or code. People search for it as both “Meta ads MCP” and “Facebook ads MCP”. Meta's separate Social Technologies MCP is for app developers and does not run ads.
Is there an official Meta ads MCP server?
Yes, and it has been public for months. The dates, from Meta's own pages:
| Date | What Meta did |
|---|---|
| April 29, 2026 | Announced its ads AI connectors (MCP server and CLI) in open beta. For MCP: no developer credentials, API setup or coding required. |
| July 16, 2026 | Added connections through your own developer app, and ads MCP server rules that let anyone with full control of a business portfolio limit what AI agents can do |
| September 4, 2026 | Last update to the get-started page, which says: “Owning a Meta app is not a prerequisite” |
| September 22, 2026 | The July 16 developer blog post was updated |
Meta ads MCP server timeline, checked October 24, 2026.
Meta is still rolling out tool access gradually. Some guides still say Meta has no official server, which has been wrong since April 29, 2026. Our own article on whether ChatGPT or Claude can manage your ad accounts said the same, and now carries a dated correction.
What the Meta ads MCP server can read
Spend, impressions, CTR, CPC, CPM and conversions for campaigns, ad sets and ads, by date range and breakdown. An account score from 0 to 100 with recommendations. Errors that are blocking delivery. Event Match Quality scores and data freshness for your pixel and datasets. Searches of the Meta Business Help Center and the public Ad Library. And an activity log that mirrors the Ads Manager campaign history page.
It reports Meta's numbers. It does not know your margins unless you tell the AI. An honest note against our own interest: if all you want is answers about last month's numbers, Meta's own server gives them in a chat, and Meta says there is no additional cost from Meta to connect. Your AI app's own plan terms still apply. You do not need a paid tool for that, ours included.
What it can change in your ad account
Meta's tool reference (updated October 16, 2026) says write tools create items paused, and your AI app asks for confirmation before turning them on. Meta's Help Center also describes an “Ads MCP draft mode” that saves new campaign work for review before publishing.
| Tool or group | What it does | Watch out for |
|---|---|---|
ads_create_campaign, ads_create_ad_set, ads_create_ad | Create a campaign, an ad set with targeting, budget and optimization goal, or an ad, all paused | The budget it picks is what runs once you turn it on |
ads_update_entity | Changes fields on an existing campaign, ad set or ad | No paused-only limit is stated, so in our reading a budget edit on a live item changes live spend |
ads_activate_entity | Switches a paused item to active | Meta's words: “starts spending budget” |
ads_boost_ig_post | Turns an existing organic Instagram post into a boosted ad | A boost is paid advertising once it runs |
| Custom audiences | Create customer-file, website, lookalike and other audiences; update and delete them; add or remove people on a customer list | Changes who sees your ads. Customer-list edits upload hashed personal data to Meta. |
| Catalogs | Create a catalog, upload products by feed URL, inline items or file, delete products | Changes which products your catalog ads can show |
| Tests and signals | Create A/B tests and conversion lift studies; create and delete pixel event rules | The signals group sits with diagnostics but is not read-only |
Meta ads MCP server write tools, from Meta's tool reference pages, checked October 24, 2026.
“Paused by default” protects new items only. Meta's tool page does not limit ads_update_entity to paused items, so a budget raise on a running ad set applies to live spend. Meta says actions taken for you need “your authorization through the AI agent”. In practice, that is the approval prompt in your AI app. Read each one before you click allow.
Deleting campaigns is unclear. Meta's developer blog says the server can “create, edit, and delete campaigns, ad sets, and ads”, but its tool list (checked October 24, 2026) only has delete tools for custom audiences, catalog products, product sets, product feeds and feed rules, and pixel event rules and parameters. None deletes a campaign, ad set or ad.
How to give an AI read-only access to Meta ads
Meta documents no single read-only switch. There are three locks, each with a gap, so use at least two. Meta's blog suggests starting read-only or approval-required and widening access later.
- Grant fewer permissions at sign-in. The minimum is
ads_mcp_managementplusads_readorads_management; more permissions enable more tools. Where the sign-in screen or your own token setup allows it, grantads_readand leaveads_managementoff. Pass: asked “what tools do you have access to?”, the AI lists no create, update or activate tools. Meta publishes no tool list per permission, so check. Our explainer on what ad account permissions really allow covers the sign-in screen. - Block actions with rules. You need full control of the business portfolio. In Meta Business Suite, open Settings, select Ads MCP server under Integrations, pick the ad account, and switch actions such as Create campaigns from Allowed to Blocked. Meta says rules can give an agent read access to performance data while withholding changes to budgets, campaigns or creative. Pass: “Limited” appears next to “Take actions in this ad account”. Fail: no Ads MCP server entry means you do not have rules yet.
- Connect as a person with less access. Anthropic warns that a connector can modify data within your permissions. In Meta's ad account task table, View performance can view ads and reports but cannot create and edit ads. Meta does not say how the MCP server treats that role, so it is a backup, not a guarantee.
Ads MCP server rules: what you can block
Meta's rules guide (updated August 12, 2026) describes each rule as denying one agent action on one ad account or catalog. The ones that matter most:
| Rule | What the agent can no longer do |
|---|---|
| Create campaigns | Create any campaign |
| Edit or set budget | Change any campaign or ad set budget |
| Budget increase above a percentage | Raise a budget by more than a percentage you set, such as 20% |
| Budget increase above an amount | Raise a budget by more than a fixed amount you set |
| Budget above a ceiling | Set a budget over your amount. Meta's example: enter $1,000 and anything over $1,000 is blocked. |
| Delivery status changes | Pause or turn on campaigns, ad sets or ads |
| Edit targeting, edit creative | Change who sees an ad, or what it shows |
| All | Every agent action on the account |
Ad account rules from Meta's rules guide and Help Center, checked October 24, 2026. Budget rules can cover daily budgets, lifetime budgets or both; the default is both.
Rules are in limited availability. Through the API, a business that is not enrolled gets error code 10 on the ad account endpoint and HTTP 403 on the catalog endpoint. Rules a partner sets on your shared ad account apply only to the partner's own people, so set your own. Agencies can set rules in bulk through a Marketing API endpoint.
Worked example: what one AI budget edit can cost
An illustration, not a test we ran: a dog groomer runs one ad set at $20 a day. Meta's daily budget rules let a day's spend reach 175% of the daily budget, and a week's spend reach 7 times it. The owner types “put more money behind the winner”, the AI proposes $50 a day, and the owner clicks allow.
| Setup | Daily budget | Most in one day | Most in one week | Extra per week |
|---|---|---|---|---|
| Before the edit | $20 | $20 × 1.75 = $35 | $20 × 7 = $140 | $0 |
| AI sets $50, no rules | $50 | $50 × 1.75 = $87.50 | $50 × 7 = $350 | $350 - $140 = $210 |
| $30 ceiling rule blocks $50; AI sets $30 | $30 | $30 × 1.75 = $52.50 | $30 × 7 = $210 | $210 - $140 = $70 |
| 20% increase rule; AI sets the most allowed | $20 × 1.2 = $24 | $24 × 1.75 = $42 | $24 × 7 = $168 | $168 - $140 = $28 |
Worst-case spend under Meta's 175% daily and 7 times weekly limits. Illustrative numbers.
Break-even, on gross margin: a groom sells for $70 and the groomer keeps 60% after supplies and wages, so $70 × 0.60 = $42 of gross profit per groom. With no rules, covering the extra spend takes $210 ÷ $42 = 5 extra grooms a week. With the ceiling rule, $70 of extra spend ÷ $42 = 1.67, about 2. With the 20% rule, $28 ÷ $42 = 0.67, less than 1.
One catch with the 20% rule: Meta's example is “deny any budget increase above 20%”, and its pages do not say whether several smaller raises in a row are added up. Pair a percentage rule with a ceiling.
Then cap the whole account. Meta's ad account spending limit is a lifetime cap on what the whole account can spend from when you set it; when spending reaches it, ads pause. For the groomer, $20 × 30 days = $600, so a $600 limit set on the 1st stops the account at $600, whatever budget edits are made, unless someone raises the limit. It counts from the day you set it, so reset or raise it each month.
The decision rule: reading reports needs one lock (permissions). Letting an AI change anything needs a spending limit plus a budget rule. No rules in your Business Suite yet? Keep the AI read-only.
Who needs app review and Advanced Access
| You are | What Meta asks for |
|---|---|
| An owner using ChatGPT, Claude or Perplexity on your own ad account | No Meta app. Add the server URL in your AI app and sign in. |
| Building your own tool for your own business | Your own Meta app with the ads MCP server use case. Meta's blog asks for app review only when you handle data for other businesses. |
| An agency or partner acting for other businesses | App review for Advanced Access on ads_mcp_management, which also needs Business Verification. Apps with Advanced Access also go through Meta's ongoing review. |
| Connecting from code with no person signing in | A system user token. Only Employee-role system users work, not Admin-role ones. |
From Meta's developer blog, get-started page and access level docs, checked October 24, 2026.
Without Advanced Access, an app can only request permissions from people who have a role on it. The review needs a screencast of the Facebook login and of performance data in your app. Naming trap: Meta's Marketing API authorization page has renamed its own access tiers, so you will see “Limited Access” and “Full Access” there where older pages say Standard and Advanced.
How to connect Meta's ads MCP server: setup checklist
Path A: no Meta app (most owners)
- In a supported AI app (Meta's ads MCP server page lists ChatGPT, Claude and Perplexity), add a connector with the URL
https://mcp.facebook.com/ads. It is the same for all of them. - Sign in with Facebook and approve the permissions the screen asks for. No manual token setup. If the screen lets you leave out
ads_management, do that for now. - Ask “what tools do you have access to?” and save the answer. Fail cue: missing tools. Meta warns that not every account has every tool yet, and Pipeboard reports some accounts see “Ads MCP is gradually being rolled out”.
Pipeboard also reports that other clients, such as Cursor, fail this sign-in. Its advice matches Meta's Help Center: any other client goes through your own Meta app (Path B).
Path B: your own Meta app (developers)
- In the Meta developer dashboard, pick your app, then Use cases, then Add use cases. Choose Ads and monetization, select “Create & manage ads with ads MCP server”, and save.
- In Facebook Login for Business settings, set the redirect URL to match your MCP client.
- Claude Code:
claude mcp add --transport http --client-id <META_APP_ID> meta-ads https://mcp.facebook.com/ads. ChatGPT: choose OAuth and enter your Meta app ID as the OAuth Client ID under Advanced OAuth Settings. Or skip OAuth and pass a user access token or Employee-role system user token you already hold.
What to lock down before an AI touches a live account
- An ad account spending limit at your monthly budget. Ads will not run past a limit set by an admin, and Meta says you track it in Payment settings. Fail: accounts that pay with available funds (prepaid) cannot set one, so lean harder on rules.
- A read-only trial period. Our suggestion is two weeks, checking a few of the AI's numbers against Ads Manager.
- A budget ceiling plus a block on delivery status changes, so nothing turns on without you. Daily budgets are not hard caps; Meta says lifetime budgets are.
- The activity log after every AI session. Ask the agent for it, or open campaign history in Ads Manager.
- Special ad categories. When you create a campaign, Meta requires you to say whether it is in a Special Ad Category. For housing, employment and financial products ads reaching the US, age, gender, ZIP code, lookalike and saved audiences are limited or unavailable, and undeclared political or social issue campaigns are disapproved. Meta's tool page does not say how its create tool handles this, so check the category on anything an AI drafts. See our special ad categories setup guide.
- A fast stop. If you have rules, Meta's rules guide lists an
allrule that denies “every agent action on the account”.
Can using an MCP server get my Meta ad account banned?
Meta's Help Center says: “Using the ads MCP server on its own does not put your account at risk.” The ads still have to follow Meta's policies, and you approve what the AI writes. If an account does get restricted, here is how to fix a restricted Meta ad account.
Google Ads MCP vs Meta Ads MCP
| Question | Google Ads MCP (official) | Meta ads MCP (official) |
|---|---|---|
| Who runs the server | You, on your computer or your own cloud host (Google also mentions a hosted pilot for allowlisted testers) | Meta, at mcp.facebook.com/ads |
| When it appeared | Repository created October 2025 | Open beta announced April 29, 2026 |
| Reads account data | Yes | Yes |
| Changes campaigns | No, read-only in the current release | Yes: creates and edits campaigns, ad sets and ads. New items start paused, and the AI app asks before turning them on. |
| Built-in limits | Turn individual tools on or off in a settings file | Rules that deny actions, such as any budget increase above 20% (limited availability) |
| What you need | A Google Cloud project with Explorer access or higher, plus OAuth or a service account | A token with ads_mcp_management plus ads_read or ads_management. Your own Meta app is optional (added July 16, 2026). |
| Where changes are logged | Google Ads change history (2 years) | An activity-log tool that mirrors Ads Manager history |
| Price | Open source (Apache 2.0), no license fee | Meta says no additional cost from Meta to connect; your AI app's plan still applies |
Official Google and Meta ads MCP servers, checked October 24, 2026.
Google's server cannot change your spend; Meta's can, so the locks above matter more on Meta. See our Google Ads MCP guide.
Other Meta ads MCP servers, and what they charge
On October 24, 2026, the GitHub search API returned 294 repositories matching “meta-ads mcp” and 44 matching “facebook-ads mcp”. At least one community server listed on Glama says it can delete campaigns, ad sets and ads, which Meta's own tool list does not show. The details below come from each project's own page, checked the same day. We have not run any of them.
| Server | What its own page says | Price on its page |
|---|---|---|
| Pipeboard | Independent open-source project; Pipeboard says it is a badged Meta Business Partner. README lists 42 tools. Business Source License 1.1, turning Apache 2.0 on January 1, 2029. | Free $0 (30 tool runs a week, 2 ad accounts); Pro US$29.90/mo; Premium US$99/mo; Agency US$199/mo. 7-day trial on Pro and Premium. Permission-scoped tokens not on Free. |
| GoMarble open-source server | Read tools only: accounts, ad objects, insights and change history. Setup can create your Meta token through GoMarble's server. | Free, open source |
| GoMarble Copilot | Analyze supported accounts without making changes | From $139/mo |
| GoMarble Operator | Adds write actions: approved changes across connected ad accounts | From $399/mo |
Meta ads MCP servers from other makers, from each project's own page, checked October 24, 2026.
Each has a real use: Pipeboard's free tier costs nothing to try, GoMarble's open-source server cannot change anything by design, and Operator puts approval on changes. Pipeboard's own comparison even calls Meta's connector “the safest single-platform option”. GoMarble's table says “Claude + Meta/Google MCP” has no account-safe changes. Our view: that is fair only where rules are missing.
Before you hand a token to any third party, read Meta's Platform Terms: they forbid sharing access tokens except with a service provider that helps run your app.
If you just want your ads run
An MCP server gives an AI a way into your account. It does not decide what to do with your budget. If what you want is ads written and run for you, that is a different kind of tool. AdFlint is not an MCP server. It runs Google Ads and Meta (Facebook and Instagram) ads inside ad accounts you own. On Google it launches Search campaigns only. You approve every ad before it runs, and budgets have hard caps. Self-serve plans start at $40 a month for up to $1,000 of ad spend, with 0% markup on ad spend. See how it works.
What we could not confirm
- Deletes. Meta's blog says the server can delete campaigns, ad sets and ads; its tool list shows no such tool.
- Price and beta status. Meta's ads MCP server page says there is no additional cost from Meta to connect and that the connectors are currently in open beta. The developer docs say neither, and we found no page that says when the beta ends.
- Draft mode. Meta's Help Center says “Ads MCP draft mode saves new campaign work for review before publishing”. Meta's other pages say new campaigns start paused or as drafts, and its developer pages do not explain how draft mode is switched on or whether it differs from paused.
- How far rules reach. Nothing we found says they also block changes made in Ads Manager, through Meta's ads CLI or through a community server, or whether the
allrule blocks reports too. We also could not confirm whether the percentage rule adds up several small raises. - Exactly which tools an
ads_readtoken gets, and whether an agent can change the account spending limit. No such tool is listed, which is not the same as impossible. - Smaller gaps: when every business gets rules, app review times, how the create tool handles special ad categories, and which ChatGPT or Claude plans can add the server.
Questions
Does Meta have an official MCP server for ads?
Yes. Meta hosts the ads MCP server at mcp.facebook.com/ads. It was announced in open beta on April 29, 2026; on July 16, 2026 Meta added own-app connections and rules.
What is the Meta ads MCP server URL?
https://mcp.facebook.com/ads, the same for every supported AI agent.
Is the Facebook ads MCP server free?
Meta says there is no additional cost from Meta to connect, and your AI app's own plan terms still apply. Third-party servers range from Pipeboard's $0 tier to GoMarble Operator from $399 a month.
Can Claude or ChatGPT spend money in my Meta account without asking?
New items start paused, and the AI app asks before turning them on. But an approved edit to something already live, such as a budget change, applies to live spend. Set a spending limit and a budget rule first.
Why can't I see Ads MCP server in Business Suite settings?
Meta says that means you do not have access to rules yet; they are in limited availability. You also need full control of the business portfolio.
Do I need a Meta developer app?
No. Meta says owning a Meta app is not a prerequisite. Agencies serving other businesses through their own app need app review.
Is the Meta ads MCP server the same as Meta's ads CLI?
No. Meta announced both on April 29, 2026 as its ads AI connectors. The ads CLI is a command-line tool for developers that can create, list, update and delete campaigns, ad sets, ads and creatives from a terminal, with new items paused by default. The MCP server is what a chat app like Claude or ChatGPT connects to.
Sources
All accessed October 24, 2026.
- Meta for Developers, Meta's ads MCP server is now available for developers (July 16, 2026, updated September 22, 2026)
- Meta for Business, Meta ads AI connectors announcement (April 29, 2026, with a July 16, 2026 update)
- Meta for Business, Meta ads MCP server (supported AI tools, cost and open beta status, accessed October 28, 2026)
- Meta developer docs: overview (updated July 14, 2026), get started (updated September 4, 2026), rules best practices (updated August 12, 2026), ad creation and management tools (updated October 16, 2026), reporting tools, signals tools, help tools, activity logs, catalog tools (updated October 28, 2026) and A/B test tools
- Meta for Developers, permissions reference, access levels, Facebook Login for Business, Marketing API authorization (updated May 5, 2026) and Platform Terms
- Meta for Developers, Developer Tools MCP (June 30, 2026, renamed Social Technologies MCP on August 18, 2026) and Introducing Ads CLI (April 29, 2026)
- Meta Business Help Center: manage ads from an AI agent, ad account spending limits, budgets and spending limits, daily budgets, ad account tasks and special ad categories
- Google, Google Ads MCP server developer guide (last updated October 16, 2026) and the googleads/google-ads-mcp repository; Google Ads Help, about change history
- Model Context Protocol, introduction and tools specification (2025-06-18 version); Anthropic, introducing the Model Context Protocol (November 25, 2024) and custom connectors using remote MCP
- Vendor and community pages: Pipeboard meta-ads-mcp, Pipeboard pricing, Pipeboard rollout notes, GoMarble MCP, GoMarble facebook-ads-mcp-server, Glama directory and the GitHub search API (meta-ads mcp) and (facebook-ads mcp)
Related guides
Google Ads MCP: What It Does and Who It's For
The official Google Ads MCP server reads your account but can't change it. What it does, what you need to run it, which servers can write, and the risks.
Can ChatGPT or Claude Manage Your Ad Accounts?
On Meta, yes: its official ads MCP server can create and edit campaigns. On Google, not yet: its official server only reads. What each path needs.
Meta Ad Account Restricted? How to Fix It
Meta ad account or business portfolio restricted? How to request a review in Business Support Home, and what to do when there is no ad account.
Skip the learning curve
AdFlint writes, launches, and optimizes Google and Meta campaigns inside the ad account you own — you approve every ad, and hard budget caps protect your spend. 7-day free trial.
Free tools: ad copy generator, ROAS calculator, budget calculator · ads by industry