Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

AdButler

NPM · @ADBUTLER/MCP-SERVER · 3 COMPONENTS

Manage AdButler campaigns, zones, ad items, VAST, and reports from Claude, ChatGPT, and Cursor.

+1 this week 78 Trust /100

Last scanned (17 hours ago)

Scores higher than 60% of npm servers

Category Marketing and SEO

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security81
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability80
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 36354 tokens (~57/item across 628 items; 628 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 105 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "delete_advertiser" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 628 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (16)

  • Malware scan
  • Known CVEs
  • Install scripts
  • Dependency health
  • Source repository
  • Provenance
  • License
  • Maintenance
  • Security disclosure
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this package (2)

  • Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
  • Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 9 Nov 26 +5
    • Source repository: unverified → pass ▲ security
  • 8 Nov 26 −5
    • Provenance: pass → unverified ▼ security
  • 6 Nov 26 0
    • Stability: 0.97 → pass security
  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 −1
    • Stability: pass → 0.90 functional
  • 28 Oct 26 0
    • Stability: 0.97 → pass security
  • 27 Oct 26 0
    • Stability: pass → 0.97 functional
  • 24 Oct 26 −5
    • CVE-2023-54404 affects this package: high ▼ security
    • Known CVEs: pass → fail ▼ security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 10 Nov 2026 · Analysed npm/@adbutler/mcp-server@2.8.0

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-mrhx-c7xc-m3w5 CVE-2023-54404 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 93 packages
Packages resolved 93
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 628 exposed · ~36,354 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
create_manager ~361

Create a new manager

NameTypeReqDescription
can_assign_campaigns_directlyboolean–Can assign campaigns directly to zones
can_manage_admin_api_accessboolean–Can manage API keys
can_manage_biddersboolean–Can manage bidders
can_manage_billingboolean–Can view invoices and billing
can_manage_contractsboolean–Can manage contracts and templates
can_manage_data_keysboolean–Can manage data keys
can_manage_linksboolean–Can create/edit/delete active tracking links
can_manage_mediaboolean–Can manage creatives and media groups
can_manage_native_ad_templatesboolean–Can manage native templates
can_manage_product_dbboolean–Can manage product catalogs
can_manage_programmaticboolean–Can manage demand sources and PMP deals
can_manage_self_serveboolean–Can manage Self-Serve portals
can_manage_targetsboolean–Can assign/remove targets from placements
can_manage_ticketsboolean–Can create/view support tickets
can_manage_usersboolean–Can manage user accounts and permissions
emailstringyesManager email address
is_enabledboolean–Whether the manager account is enabled
namestringyesManager name
notesstring–Notes about the manager
passwordstring–Login password (min 8 chars with upper, lower, number). Random if blank.
positionstring–Manager position in organization
publisher_accessstring–Publisher access level
publisher_access_listarray–Publisher IDs accessible when publisher_access is "specific"
statistics_accessstring–Statistics access level

No output schema declared.

No examples provided.

create_media_group ~25

Create a new media group

NameTypeReqDescription
namestringyesMedia group name

No output schema declared.

No examples provided.

create_native_ad_item ~142

Create a new native ad item using a native template

NameTypeReqDescription
heightnumber–Ad height in pixels
locationstring–Click-through URL
metadataobject–Custom metadata key-value pairs
namestringyesAd item name
templatenumberyesNative template ID
tracking_pixelstring–Third-party tracking pixel URL
tracking_pixelsarray–Array of tracking pixel URLs
trusted_redirect_domainsarray–Trusted redirect domains
variablesobjectyesTemplate variables as key-value pairs (keys should be integer strings)
widthnumber–Ad width in pixels

No output schema declared.

No examples provided.

create_native_template ~63

Create a new native ad template with HTML and variable placeholders

NameTypeReqDescription
namestringyesTemplate name
raw_htmlstringyesHTML template content with variable placeholders (e.g. "[%title%]")
variablesarrayyesArray of template variables

No output schema declared.

No examples provided.

create_ortb_native_data_asset ~57

Create a new data asset for an ORTB native template

NameTypeReqDescription
lennumber–Max length
template_idnumberyesORTB native template ID
typenumber–Data asset type

No output schema declared.

No examples provided.

create_ortb_native_image_asset ~84

Create a new image asset for an ORTB native template

NameTypeReqDescription
hnumber–Height
hminnumber–Min height
template_idnumberyesORTB native template ID
typenumber–Image asset type
wnumber–Width
wminnumber–Min width

No output schema declared.

No examples provided.

create_ortb_native_template ~58

Create a new OpenRTB native template

NameTypeReqDescription
html_templatestring–HTML template for rendering the native ad (e.g. "<div>{{title}}</div>")
namestring–ORTB native template name

No output schema declared.

No examples provided.

create_ortb_native_title_asset ~49

Create a new title asset for an ORTB native template

NameTypeReqDescription
lennumber–Max length of title
template_idnumberyesORTB native template ID

No output schema declared.

No examples provided.

create_placement ~283

Create a new placement (assign an ad item or campaign to a zone or channel)

NameTypeReqDescription
activeboolean–Whether placement is active (defaults to true)
advertisementobjectyesAdvertisement object with id and type
channelnumber–Channel ID (required if zone not set; mutually exclusive with zone)
contextual_segmentsarray–Array of contextual segment IDs
costobject–Pricing model: fixed_cost OR cpm/cpc/cpa
data_key_target_idnumber–Data Key Target ID (Enterprise only)
geo_targetnumber–Geotarget ID
keywordsstring–Comma-separated keywords for targeting
keywords_match_methodstring–Keyword matching method
list_targetnumber–List Target ID
payoutobject–Publisher payout configuration
platform_targetnumber–Platform target ID
prioritystring–Serving priority level (defaults to "standard")
schedulenumberyesSchedule ID
serve_methodstring–Serving system: weight-based or auction-based
share_of_voicenumber–Share of voice percentage (required when zone uses share_of_voice)
weightnumber–Relative delivery weight
zoneobject–Zone object (required if channel not set; mutually exclusive with channel)

No output schema declared.

No examples provided.

create_platform_target ~72

Create a new platform target for device/OS/browser targeting

NameTypeReqDescription
device_targetsarray–List of device patterns to target (e.g. "Apple*", "Samsung Galaxy S5")
namestringyesPlatform target name
platformstring–Preset platform target (default: any)

No output schema declared.

No examples provided.

create_pmp_deal ~88

Create a new PMP deal

NameTypeReqDescription
audience_targetnumber–Audience target ID (null = no targeting)
bid_floornumber–Bid floor for this deal
geo_targetnumber–Geo target ID (0 = no targeting)
namestring–PMP deal name
whitelist_seatsarray–Seat IDs with access to this deal

No output schema declared.

No examples provided.

create_postal_code_target ~60

Create a new postal code target

NameTypeReqDescription
inclusiveboolean–If true, inclusion target; if false, exclusion target
labelstringyesPostal code target name
locationsarrayyesArray of locations grouped by country

No output schema declared.

No examples provided.

create_product_catalog ~37

Create a new product catalog for a publisher

NameTypeReqDescription
namestring–Catalog name
publisher_idnumberyesPublisher ID

No output schema declared.

No examples provided.

create_product_catalog_item ~108

Create a new item in a product catalog

NameTypeReqDescription
catalog_idnumberyesCatalog ID
categorystring–Item category
descriptionstring–Item description
identifierstring–Unique identifier for the catalog item
image_urlstring–Item image URL
namestring–Item name
pricestring–Item price
publisher_idnumberyesPublisher ID
urlstring–Item URL

No output schema declared.

No examples provided.

create_product_source ~55

Create a new product source for a publisher

NameTypeReqDescription
namestring–Source name
publisher_idnumberyesPublisher ID
typestring–Source type
urlstring–Source URL

No output schema declared.

No examples provided.

create_product_source_target ~52

Create a new product source target for a publisher

NameTypeReqDescription
namestring–Source target name
publisher_idnumberyesPublisher ID
source_idnumber–Source ID to target

No output schema declared.

No examples provided.

create_publisher ~169

Create a new publisher

NameTypeReqDescription
can_admin_accountboolean–Grant administrator privileges
can_approve_adsboolean–Allow publisher to approve/deny ad items
can_change_passwordboolean–Whether publisher can change password
can_view_wordpress_keyboolean–Allow publisher to view WordPress key
default_payoutobject–Default payout configuration
domainstring–Publisher domain (top-level domains only)
emailstring–Contact email (allows publisher to log in)
metadataobject–Custom metadata key-value pairs
namestringyesPublisher name
seller_typestring–Seller type for ads.txt
timezonestring–Timezone (e.g., "America/New_York")

No output schema declared.

No examples provided.

create_report_schedule ~47

Create a new report schedule

NameTypeReqDescription
frequencystring–Schedule frequency
recipientsarray–Array of recipient objects
report_config_idnumberyesReport configuration ID

No output schema declared.

No examples provided.

create_rich_media_ad_item ~163

Create a new rich media ad item

NameTypeReqDescription
creativenumberyesRich media creative ID
expand_horizontal_directionstring–Horizontal expand direction
expand_vertical_directionstring–Vertical expand direction
heightnumber–Ad height in pixels
html_content_belowstring–HTML content below the ad item
locationstring–Click-through URL
metadataobject–Custom metadata key-value pairs
namestringyesAd item name
tracking_pixelstring–Third-party tracking pixel URL
tracking_pixelsarray–Array of tracking pixel URLs
trusted_redirect_domainsarray–Trusted redirect domains
widthnumber–Ad width in pixels

No output schema declared.

No examples provided.

create_rich_media_creative ~80

Create a new rich media creative. The API uses multipart file upload (ZIP for HTML5).

NameTypeReqDescription
descriptionstring–Creative description
groupnumberyesMedia group ID
index_file_pathstring–Path to index HTML file inside ZIP archive (for HTML5)
namestring–Creative name

No output schema declared.

No examples provided.

create_role ~286

Create a new role with permission settings

NameTypeReqDescription
can_assign_campaigns_directlyboolean–Can assign campaigns directly
can_manage_admin_api_accessboolean–Can manage API keys
can_manage_biddersboolean–Can manage bidders
can_manage_billingboolean–Can manage billing
can_manage_contractsboolean–Can manage contracts
can_manage_data_keysboolean–Can manage data keys
can_manage_linksboolean–Can manage tracking links
can_manage_mediaboolean–Can manage creatives and media groups
can_manage_native_ad_templatesboolean–Can manage native templates
can_manage_product_dbboolean–Can manage product catalogs
can_manage_programmaticboolean–Can manage programmatic
can_manage_self_serveboolean–Can manage Self-Serve
can_manage_targetsboolean–Can manage targets
can_manage_ticketsboolean–Can manage tickets
can_manage_usersboolean–Can manage users
is_default_roleboolean–Auto-assign this role to new users
namestringyesRole name
publisher_accessstring–Publisher access level
publisher_access_listarray–Publisher IDs for specific access
statistics_accessstring–Statistics access level

No output schema declared.

No examples provided.

create_schedule ~324

Create a new schedule for time-based ad delivery. Schedules are automatically linked to ad items via placements.

NameTypeReqDescription
day_cap_limitnumber–Daily cap limit (number of views or clicks per day)
day_cap_typestring–Daily cap type
day_parting_idnumber–Day parting ID for time-of-day targeting
delivery_methodstring–Delivery pacing: "default" (ASAP) or "smooth" (evenly distributed)
end_atstring–End date/time in ISO-8601 format, null for indefinite
end_at_timezonestring–IANA timezone for end_at
end_datestring–End date (YYYY-MM-DD HH:MM:SS), null for indefinite — deprecated, use end_at
per_user_view_limitnumber–Per-user view frequency cap
per_user_view_periodnumber–Days before per-user view counter resets
quota_lifetimenumber–Total quota amount (views or clicks, not per thousand)
quota_typestring–Quota measurement type
start_atstring–Start date/time in ISO-8601 format
start_at_timezonestring–IANA timezone for start_at (e.g. "America/New_York")
start_datestring–Start date (YYYY-MM-DD HH:MM:SS) — deprecated, use start_at
under_delivery_behaviourstring–Whether to keep serving until quota met or stop on end date

No output schema declared.

No examples provided.

create_sftp_connection ~75

Create a new SFTP connection

NameTypeReqDescription
hoststring–SFTP host
namestring–Connection name
passwordstring–SFTP password
pathstring–Remote path
portnumber–SFTP port
usernamestring–SFTP username

No output schema declared.

No examples provided.

create_signature_request ~28

Create a new signature request for a contract

NameTypeReqDescription
contract_idnumberyesContract ID

No output schema declared.

No examples provided.

create_trial_account ~118

Create a free AdButler trial account. Use this when the user does NOT have an AdButler account yet. Collects their info and creates the account. After calling this, the user must check their email for a verification code, then call verify_trial_email to complete setup.

NameTypeReqDescription
companystringyesCompany or organization name
emailstringyesUser email address
namestringyesFull name
phonestring–Phone number (optional)
websitestring–Website URL (optional)

No output schema declared.

No examples provided.

create_trusted_redirect_domain ~34

Create a new trusted redirect domain

NameTypeReqDescription
domainstringyesTrusted redirect domain (e.g. example.com)

No output schema declared.

No examples provided.

create_user ~49

Create a new user in a user database

NameTypeReqDescription
attributesobject–User attribute values
user_db_idnumberyesUser database ID
user_idstring–User ID

No output schema declared.

No examples provided.

create_user_attribute ~76

Create a new user attribute in a user database

NameTypeReqDescription
idstring–Field name in the user data (e.g. "signup_datetime")
labelstring–Descriptive label for the field
typestring–Data type of the field
user_db_idnumberyesUser database ID

No output schema declared.

No examples provided.

create_user_db ~44

Create a new user database

NameTypeReqDescription
id_field_namestring–Name of the field to use as primary user identifier
namestring–User database name

No output schema declared.

No examples provided.

create_vast_custom_report ~28

Create a new VAST report configuration

NameTypeReqDescription
namestringyesReport name

No output schema declared.

No examples provided.

create_video_creative ~51

Create a new video creative. The API uses multipart file upload.

NameTypeReqDescription
descriptionstring–Creative description
groupnumberyesMedia group ID
namestring–Creative name

No output schema declared.

No examples provided.

create_zone ~455

Create a new standard zone. Set dimensions to "dynamic" for a dynamic zone (width/height must be 0), or "fixed" (default) for a fixed-size zone.

NameTypeReqDescription
ad_size_filterobject–Ad size filter (dynamic zones only)
allow_demand_sourcesboolean–Allow requests to demand endpoints
allowed_root_native_templatesarray–Allowed root native template IDs
api_frameworksarray–Supported API frameworks for OpenRTB
auction_tie_breakstring–Tie-breaking method for auctions
bid_floornumber–Default bid floor for programmatic
burn_in_hoursnumber–Hours before eCPM confidence
burn_in_impressionsnumber–Impressions before eCPM confidence
dimensionsstring–Zone dimensions type: "fixed" (default) or "dynamic"
ecpm_testing_allowancenumber–Percentage for eCPM recalculation testing
heightnumber–Zone height in pixels (must be 0 if dimensions is "dynamic")
iab_categoriesarray–IAB category descriptors
metadataobject–Custom metadata key-value pairs
min_payoutnumber–Minimum payout per impression (CPM)
namestringyesZone name
optimization_strategystring–Zone optimization strategy
pmp_dealsarray–Allowed PMP Deal IDs
private_auctionboolean–Whether auction ignores non-deal bids
publishernumber–Publisher ID
refresh_frequencynumber–Interval in seconds for serving new ads
refresh_limitnumber–Total times zone will refresh
responsivestring–Size behavior
rtb_placement_idstring–OpenRTB tagid identifier
serve_priority_orderstring–Priority order: "weight" or "auction"
unique_deliveryboolean–Serve unique ads on each zone
use_share_of_voiceboolean–Use "share of voice" as serving strategy
widthnumber–Zone width in pixels (must be 0 if dimensions is "dynamic")

No output schema declared.

No examples provided.

create_zone_ortb_native_ad ~61

Create a new ORTB native ad for a standard zone

NameTypeReqDescription
namestring–ORTB native ad name
template_idnumber–ORTB native template ID
zone_idnumberyesStandard zone ID

No output schema declared.

No examples provided.

delete_advertiser ~24

Delete an advertiser

NameTypeReqDescription
idnumberyesAdvertiser ID

No output schema declared.

No examples provided.

delete_archived_campaign ~28

Permanently delete an archived standard campaign

NameTypeReqDescription
idnumberyesArchived campaign ID

No output schema declared.

No examples provided.

delete_archived_channel ~27

Permanently delete an archived channel

NameTypeReqDescription
idnumberyesArchived channel ID

No output schema declared.

No examples provided.

delete_archived_contract ~27

Permanently delete an archived contract

NameTypeReqDescription
idnumberyesArchived contract ID

No output schema declared.

No examples provided.

delete_audience ~38

Delete an audience from a user database

NameTypeReqDescription
idnumberyesAudience ID
user_db_idnumberyesUser database ID

No output schema declared.

No examples provided.

delete_audio_creative ~24

Delete an audio creative

NameTypeReqDescription
idnumberyesCreative ID

No output schema declared.

No examples provided.

delete_beacon_signing_key ~29

Delete a beacon signing key

NameTypeReqDescription
idnumberyesBeacon signing key ID

No output schema declared.

No examples provided.

delete_bidder ~23

Delete a bidder

NameTypeReqDescription
idnumberyesBidder ID

No output schema declared.

No examples provided.

delete_campaign ~22

Delete a standard campaign

NameTypeReqDescription
idnumberyesCampaign ID

No output schema declared.

No examples provided.

delete_campaign_assignment ~24

Delete a campaign assignment

NameTypeReqDescription
idnumberyesCampaign assignment ID

No output schema declared.

No examples provided.

delete_catalog_ad_item ~26

Delete a catalog ad item

NameTypeReqDescription
idnumberyesAd item ID

No output schema declared.

No examples provided.

delete_catalog_zone ~24

Delete a catalog zone

NameTypeReqDescription
idnumberyesCatalog zone ID

No output schema declared.

No examples provided.

delete_channel ~21

Delete a channel

NameTypeReqDescription
idnumberyesChannel ID

No output schema declared.

No examples provided.

delete_channel_zone_assignment ~28

Remove a zone from a channel

NameTypeReqDescription
idnumberyesChannel zone assignment ID

No output schema declared.

No examples provided.

delete_contact ~21

Delete a contact

NameTypeReqDescription
idnumberyesContact ID

No output schema declared.

No examples provided.

delete_contract ~21

Delete a contract

NameTypeReqDescription
idnumberyesContract ID

No output schema declared.

No examples provided.

delete_contract_document ~33

Delete a contract document

NameTypeReqDescription
contract_idnumberyesContract ID
idnumberyesDocument ID

No output schema declared.

No examples provided.

Install

How do I install the AdButler MCP server?

AdButler runs locally as an npm package, launched with npx -y @adbutler/mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @adbutler/mcp-server

# add to Claude Code
claude mcp add com-adbutler-mcp-server -- npx -y @adbutler/mcp-server
Common questions

What is the AdButler MCP server?

AdButler is an MCP server listed in the public MCP registry as com.adbutler/mcp-server. Manage AdButler campaigns, zones, ad items, VAST, and reports from Claude, ChatGPT, and Cursor. This page covers its npm package (@adbutler/mcp-server).

Is the AdButler MCP server safe to use?

AdButler scores 78 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 10 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the AdButler MCP server expose?

AdButler exposes 628 tools: list_advertisers, get_advertiser, create_advertiser, update_advertiser, delete_advertiser, and 623 more. Their descriptions and schemas cost roughly 36,354 tokens of context every time the server is loaded.

Is the AdButler MCP server still maintained?

AdButler is still listed as active in the MCP registry. We last reached this channel on 10 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the AdButler MCP server under?

AdButler declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

What did VerifyMCP test on the AdButler MCP server?

VerifyMCP ran 16 checks on AdButler, covering Malware scan, Known CVEs, Install scripts, Dependency health and 12 more. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.