Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

AdButler

NPM · @ADBUTLER/MCP-SERVER · 3 COMPONENTS

Manage AdButler campaigns, zones, ad items, VAST, and reports from Claude, ChatGPT, and Cursor.

+1 this week 78 Trust /100

Last scanned (18 hours ago)

Scores higher than 60% of npm servers

Category Marketing and SEO

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security81
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability80
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 36354 tokens (~57/item across 628 items; 628 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 105 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "delete_advertiser" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 628 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (16)

  • Malware scan
  • Known CVEs
  • Install scripts
  • Dependency health
  • Source repository
  • Provenance
  • License
  • Maintenance
  • Security disclosure
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this package (2)

  • Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
  • Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 9 Nov 26 +5
    • Source repository: unverified → pass ▲ security
  • 8 Nov 26 −5
    • Provenance: pass → unverified ▼ security
  • 6 Nov 26 0
    • Stability: 0.97 → pass security
  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 −1
    • Stability: pass → 0.90 functional
  • 28 Oct 26 0
    • Stability: 0.97 → pass security
  • 27 Oct 26 0
    • Stability: pass → 0.97 functional
  • 24 Oct 26 −5
    • CVE-2023-54404 affects this package: high ▼ security
    • Known CVEs: pass → fail ▼ security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 10 Nov 2026 · Analysed npm/@adbutler/mcp-server@2.8.0

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-mrhx-c7xc-m3w5 CVE-2023-54404 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 93 packages
Packages resolved 93
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 628 exposed · ~36,354 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
resend_signature_request ~36

Resend a signature request

NameTypeReqDescription
contract_idnumberyesContract ID
request_idnumberyesSignature request ID

No output schema declared.

No examples provided.

resend_verification_code ~51

Resend the email verification code for a trial account. Use this if the user did not receive the code or it expired.

NameTypeReqDescription
emailstringyesThe email address used to create the trial account

No output schema declared.

No examples provided.

revoke_report_schedule_historical_access ~43

Revoke historical access for a report schedule

NameTypeReqDescription
report_config_idnumberyesReport configuration ID
schedule_idnumberyesSchedule ID

No output schema declared.

No examples provided.

search_adbutler_api ~155

Find AdButler API endpoints by keyword when no specific tool matches what you need. Returns matching endpoints with their HTTP method, path, and a brief summary. Use this when the user asks about a concept that is a *field* rather than a resource — e.g. 'priority', 'pacing', 'frequency cap', 'metadata', 'tracking pixel' — and you can't find a tool that handles it. Then call describe_adbutler_api on the most promising hit, then call_adbutler_api to invoke it.

NameTypeReqDescription
limitinteger–Max results to return (default 10, max 50).
querystringyesKeyword(s) to search for. Single word works best.

No output schema declared.

No examples provided.

search_product_catalog_items ~48

Search for items in a product catalog

NameTypeReqDescription
catalog_idnumberyesCatalog ID
publisher_idnumberyesPublisher ID
querystring–Search query string

No output schema declared.

No examples provided.

serve_ad ~308

Request ad delivery for a zone. Returns the ad(s) that would be served, useful for verifying ad setup. Uses POST /adserve.

NameTypeReqDescription
IDnumberyesYour AdButler account ID
_abdk_jsonobject–Data key key-value pairs for data key targeting
defer_signingboolean–Defer beacon signing hash generation
ipstring–IPv4 address for geographic targeting (required for server-side requests)
kwarray–Keywords for keyword targeting
pidnumber–Page ID for unique delivery/roadblocks (random number, same for all zones on page)
placenumber–Place counter for unique delivery (0, 1, 2, etc.)
referrerstring–Page URL for URL targeting (required for server-side requests)
rfnumber–Pass 1 to include is_redirectable field in response
setIDnumberyesZone ID to serve an ad from
shnumber–Screen height for platform targeting
sizestring–Expected ad size (e.g. "300x250")
sprnumber–Screen pixel ratio for platform targeting
swnumber–Screen width for platform targeting
typestringyesResponse type: "json" for most eligible ad, "jsonr" for all eligible ads ranked
uastring–User agent string for platform targeting

No output schema declared.

No examples provided.

setup_api_key ~49

Configure AdButler with an existing API key. Use this if the user already has an AdButler account and API key.

NameTypeReqDescription
api_keystringyesThe AdButler API key

No output schema declared.

No examples provided.

sync_kogan_stats ~96

Push externally-tracked Kogan stats (impressions, clicks, conversions, quantity sold, sales) into AdButler for a set of ad items over a time window. Kogan marketplace accounts only — requires the Kogan self-serve feature; other accounts receive a feature-not-enabled error.

NameTypeReqDescription
dataarrayyesPer-ad-item stat rows to record
metaobjectyesTime window the stat rows cover

No output schema declared.

No examples provided.

test_sftp_connection ~69

Test an SFTP connection with the provided credentials

NameTypeReqDescription
hoststring–SFTP host
passwordstring–SFTP password
pathstring–Remote path
portnumber–SFTP port
usernamestring–SFTP username

No output schema declared.

No examples provided.

unarchive_advertiser ~30

Restore an archived advertiser back to active status

NameTypeReqDescription
idnumberyesArchived advertiser ID

No output schema declared.

No examples provided.

unarchive_campaign ~29

Restore an archived standard campaign back to active status

NameTypeReqDescription
idnumberyesArchived campaign ID

No output schema declared.

No examples provided.

unarchive_channel ~28

Restore an archived channel back to active status

NameTypeReqDescription
idnumberyesArchived channel ID

No output schema declared.

No examples provided.

unarchive_contract ~28

Unarchive a contract (restore from archive)

NameTypeReqDescription
idnumberyesArchived contract ID

No output schema declared.

No examples provided.

unarchive_email_zone ~31

Restore an archived email zone back to active status

NameTypeReqDescription
idnumberyesArchived email zone ID

No output schema declared.

No examples provided.

unarchive_publisher ~29

Restore an archived publisher back to active status

NameTypeReqDescription
idnumberyesArchived publisher ID

No output schema declared.

No examples provided.

unarchive_zone ~29

Restore an archived standard zone back to active status

NameTypeReqDescription
idnumberyesArchived zone ID

No output schema declared.

No examples provided.

update_advertiser ~111

Update an existing advertiser

NameTypeReqDescription
can_add_ad_itemsboolean–Whether advertiser can submit advertisements for scheduling
can_change_passwordboolean–Whether advertiser can change password
emailstring–Contact email
idnumberyesAdvertiser ID
metadataobject–Custom metadata key-value pairs
namestring–Advertiser name
passwordstring–Password for advertiser portal (min 8 chars, must include upper, lower, number)

No output schema declared.

No examples provided.

update_audience ~60

Update an existing audience in a user database

NameTypeReqDescription
attributesobject–Attribute targets defining the audience
idnumberyesAudience ID
namestring–Audience name
user_db_idnumberyesUser database ID

No output schema declared.

No examples provided.

update_audio_creative ~43

Update an existing audio creative

NameTypeReqDescription
descriptionstring–Creative description
idnumberyesCreative ID
namestring–Creative name

No output schema declared.

No examples provided.

update_beacon_signing_key ~42

Update an existing beacon signing key

NameTypeReqDescription
idnumberyesBeacon signing key ID
key_namestring–Beacon signing key name

No output schema declared.

No examples provided.

update_bidder ~55

Update an existing bidder

NameTypeReqDescription
bid_urlstring–Bid endpoint URL
idnumberyesBidder ID
namestring–Bidder name
statusstring–Bidder status

No output schema declared.

No examples provided.

update_campaign ~117

Update an existing standard campaign

NameTypeReqDescription
advertisernumber–Advertiser ID
budgetobject–Budget limits
contractnumber–Contract ID
idnumberyesCampaign ID
metadataobject–Custom metadata key-value pairs
namestring–Campaign name
roadblock_tagsstring–Roadblock tag
scheduling_sourcestring–Scheduling level
targeting_sourcestring–Targeting level
trusted_redirect_domainsarray–Trusted redirect domains

No output schema declared.

No examples provided.

update_campaign_assignment ~124

Update an existing campaign assignment

NameTypeReqDescription
activeboolean–Whether assignment is active
data_key_targetnumber–Data Key Target ID
geo_targetnumber–Geo Target ID
idnumberyesCampaign assignment ID
keywordsstring–Comma-separated keywords
keywords_match_methodstring–Keyword matching method
list_targetnumber–List Target ID
platform_targetnumber–Platform Target ID
schedulenumber–Schedule ID
weightnumber–Relative delivery weight

No output schema declared.

No examples provided.

update_catalog_ad_item ~100

Update an existing catalog ad item

NameTypeReqDescription
catalog_item_identifierstring–Unique identifier for the catalog item
idnumberyesAd item ID
locationstring–Click-through URL
metadataobject–Custom metadata key-value pairs
namestring–Ad item name
tracking_pixelstring–Third-party tracking pixel URL
tracking_pixelsarray–Array of tracking pixel URLs

No output schema declared.

No examples provided.

update_catalog_zone ~114

Update an existing catalog zone

NameTypeReqDescription
advertiser_cost_typestring–Billing model
auction_typestring–Auction type
bid_floor_cpcnumber–CPC bid floor
bid_floor_cpmnumber–CPM bid floor
click_cooldown_periodnumber–Click cooldown period in seconds
conversion_lookback_periodnumber–Conversion lookback period in seconds
idnumberyesCatalog zone ID
namestring–Zone name

No output schema declared.

No examples provided.

update_channel ~40

Update an existing channel

NameTypeReqDescription
idnumberyesChannel ID
namestring–Channel name
prioritystring–Serving priority

No output schema declared.

No examples provided.

update_contact ~50

Update an existing contact

NameTypeReqDescription
emailstring–Contact email address
idnumberyesContact ID
namestring–Contact name
notesstring–Additional notes

No output schema declared.

No examples provided.

update_contract ~114

Update an existing contract

NameTypeReqDescription
advertisernumber–Advertiser ID
descriptionstring–Contract description
end_atstring–Contract end date (YYYY-MM-DD)
idnumberyesContract ID
namestring–Contract name
payment_due_datestring–Payment due date (YYYY-MM-DD)
ratenumber–Contract rate
start_atstring–Contract start date (YYYY-MM-DD)
statusstring–Contract status

No output schema declared.

No examples provided.

update_contract_document ~43

Update an existing contract document

NameTypeReqDescription
contract_idnumberyesContract ID
idnumberyesDocument ID
namestring–Document name

No output schema declared.

No examples provided.

update_contract_template ~34

Update an existing contract template

NameTypeReqDescription
idnumberyesContract template ID
namestring–Template name

No output schema declared.

No examples provided.

update_creative ~42

Update an existing image creative

NameTypeReqDescription
descriptionstring–Creative description
idnumberyesCreative ID
namestring–Creative name

No output schema declared.

No examples provided.

update_custom_html_ad_item ~172

Update an existing custom HTML ad item

NameTypeReqDescription
custom_htmlstring–The HTML content
expand_horizontal_directionstring–Horizontal expand direction
expand_vertical_directionstring–Vertical expand direction
heightnumber–Ad height in pixels
html_content_belowstring–HTML content below the ad item
idnumberyesAd item ID
locationstring–Click-through URL
metadataobject–Custom metadata key-value pairs
namestring–Ad item name
tracking_pixelstring–Third-party tracking pixel URL
tracking_pixelsarray–Array of tracking pixel URLs
trusted_redirect_domainsarray–Trusted redirect domains
widthnumber–Ad width in pixels

No output schema declared.

No examples provided.

update_custom_report ~149

Update an existing report configuration

NameTypeReqDescription
columnsarray–Columns to include
dateobject–Date configuration
exclude_campaign_ad_itemsboolean–Exclude ad items in campaigns
exclude_channel_statsboolean–Exclude stats from channel-served ads
exclude_publisher_ad_itemsboolean–Exclude ad items directly in zones
filtersobject–Filter criteria
idnumberyesReport configuration ID
namestring–Report name
periodstring–Data grouping period
require_channel_statsboolean–Only include stats from channel-served ads
typestring–Report type

No output schema declared.

No examples provided.

update_data_key ~46

Update an existing data key

NameTypeReqDescription
idnumberyesData key ID
namestring–Data key name
typestring–Data key value type

No output schema declared.

No examples provided.

update_data_key_target ~50

Update an existing data key target

NameTypeReqDescription
idnumberyesData key target ID
namestring–Data key target name
targetstring–JSON formatted target logic

No output schema declared.

No examples provided.

update_data_list ~36

Update an existing data list

NameTypeReqDescription
idnumberyesData list ID
labelstring–Data list label/name

No output schema declared.

No examples provided.

update_day_parting ~103

Update an existing day parting rule

NameTypeReqDescription
idnumberyesDay parting ID
is_templateboolean–If true, shown in UI when creating/editing schedules
namestring–Day parting name
rangesobject–Object mapping day names (monday-sunday) to arrays of time ranges
use_member_timezoneboolean–If true, use account timezone; if false, use viewer timezone

No output schema declared.

No examples provided.

update_demand_endpoint ~203

Update an existing demand endpoint

NameTypeReqDescription
allowed_sizesarray–Allowed zone sizes
bid_floornumber–Default CPM bid floor
default_parametersobject–Default parameters
demand_sourcenumber–Demand Source ID
filter_typestring–Zone filtering type
filtered_vast_zonesarray–VAST zone IDs for filter list
filtered_zonesarray–Zone IDs for filter list
geo_targetnumber–Geo target ID
idnumberyesDemand endpoint ID
markup_percentnumber–Markup percent
namestring–Demand endpoint name
native_json_encodedboolean–Whether native JSON should be encoded
prioritystring–Serving priority
revenue_sharenumber–Revenue share percentage
statusstring–Whether to send bid requests
supported_formatsarray–Supported ad formats

No output schema declared.

No examples provided.

update_demand_source ~108

Update an existing demand source

NameTypeReqDescription
idnumberyesDemand source ID
namestring–Demand source name
spend_limitnumber–Spend limit amount
spend_limit_endstring–Spend limit end date (ISO-8601)
spend_limit_periodstring–Spend limit reset interval
spend_limit_startstring–Spend limit start date (ISO-8601)
statusstring–Whether to send bid requests

No output schema declared.

No examples provided.

update_email_zone ~119

Update an existing email zone

NameTypeReqDescription
auction_tie_breakstring–Tie-breaking method
heightnumber–Zone height in pixels
idnumberyesEmail zone ID
metadataobject–Custom metadata key-value pairs
namestring–Zone name
publishernumber–Publisher ID
rotate_timerobject–Period after which user sees a new ad
uid_rotateboolean–Serve different ads per user
widthnumber–Zone width in pixels

No output schema declared.

No examples provided.

update_event_log_upload_config ~96

Update an existing event log upload configuration

NameTypeReqDescription
connection_idnumber–SFTP connection ID to use for upload
enabledboolean–Whether the upload configuration is enabled
formatstring–Log file format
frequencystring–Upload frequency (e.g. "daily", "hourly")
idnumberyesUpload configuration ID
namestring–Configuration name

No output schema declared.

No examples provided.

update_geo_target ~85

Update an existing geo target

NameTypeReqDescription
areasarray–Array of geographic areas
idnumberyesGeo target ID
inclusiveboolean–If true, target users IN these areas; if false, EXCLUDE
namestring–Geo target name
rangenumber–Radius range
unitstring–Distance unit

No output schema declared.

No examples provided.

update_image_ad_item ~184

Update an existing image ad item

NameTypeReqDescription
creativenumber–Image creative ID
creative_urlstring–URL to image file
heightnumber–Ad height in pixels
html_alt_textstring–Alt text for the image
html_content_belowstring–HTML content below the ad item
html_targetstring–Window/frame for destination URL
idnumberyesAd item ID
locationstring–Click-through URL
metadataobject–Custom metadata key-value pairs
namestring–Ad item name
tracking_pixelstring–Third-party tracking pixel URL
tracking_pixelsarray–Array of tracking pixel URLs
trusted_redirect_domainsarray–Trusted redirect domains
widthnumber–Ad width in pixels

No output schema declared.

No examples provided.

update_kogan_product_category ~90

Update the category and category slug of a Kogan marketplace product. Kogan marketplace accounts only — requires the Kogan self-serve feature; other accounts receive a feature-not-enabled error.

NameTypeReqDescription
categorystringyesNew category name
category_slugstringyesNew category slug
seller_idstringyesKogan seller ID
skustringyesProduct SKU

No output schema declared.

No examples provided.

update_list_target ~62

Update an existing list target

NameTypeReqDescription
data_listnumber–Data list ID
idnumberyesList target ID
inclusiveboolean–If true, inclusion; if false, exclusion
labelstring–List target name

No output schema declared.

No examples provided.

update_manager ~328

Update an existing manager

NameTypeReqDescription
can_assign_campaigns_directlyboolean–Can assign campaigns directly
can_manage_admin_api_accessboolean–Can manage API keys
can_manage_biddersboolean–Can manage bidders
can_manage_billingboolean–Can manage billing
can_manage_contractsboolean–Can manage contracts
can_manage_data_keysboolean–Can manage data keys
can_manage_linksboolean–Can manage tracking links
can_manage_mediaboolean–Can manage creatives and media groups
can_manage_native_ad_templatesboolean–Can manage native templates
can_manage_product_dbboolean–Can manage product catalogs
can_manage_programmaticboolean–Can manage programmatic
can_manage_self_serveboolean–Can manage Self-Serve
can_manage_targetsboolean–Can manage targets
can_manage_ticketsboolean–Can manage tickets
can_manage_usersboolean–Can manage users
emailstring–Manager email address
idnumberyesManager ID
is_enabledboolean–Whether the manager account is enabled
namestring–Manager name
notesstring–Notes about the manager
passwordstring–Login password
positionstring–Manager position
publisher_accessstring–Publisher access level
publisher_access_listarray–Publisher IDs for specific access
statistics_accessstring–Statistics access level

No output schema declared.

No examples provided.

update_media_group ~35

Update an existing media group

NameTypeReqDescription
idnumberyesMedia group ID
namestring–Media group name

No output schema declared.

No examples provided.

update_native_ad_item ~120

Update an existing native ad item

NameTypeReqDescription
idnumberyesAd item ID
locationstring–Click-through URL
metadataobject–Custom metadata key-value pairs
namestring–Ad item name
templatenumber–Native template ID
tracking_pixelstring–Third-party tracking pixel URL
tracking_pixelsarray–Array of tracking pixel URLs
trusted_redirect_domainsarray–Trusted redirect domains
variablesobject–Template variables as key-value pairs

No output schema declared.

No examples provided.

update_native_template ~67

Update an existing native template. Variables uses add/remove format for updates.

NameTypeReqDescription
idnumberyesNative template ID
namestring–Template name
raw_htmlstring–HTML template content with variable placeholders
variablesobject–Variables to add/remove

No output schema declared.

No examples provided.

update_ortb_native_data_asset ~67

Update an existing data asset for an ORTB native template

NameTypeReqDescription
idnumberyesData asset ID
lennumber–Max length
template_idnumberyesORTB native template ID
typenumber–Data asset type

No output schema declared.

No examples provided.

Install

How do I install the AdButler MCP server?

AdButler runs locally as an npm package, launched with npx -y @adbutler/mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @adbutler/mcp-server

# add to Claude Code
claude mcp add com-adbutler-mcp-server -- npx -y @adbutler/mcp-server
Common questions

What is the AdButler MCP server?

AdButler is an MCP server listed in the public MCP registry as com.adbutler/mcp-server. Manage AdButler campaigns, zones, ad items, VAST, and reports from Claude, ChatGPT, and Cursor. This page covers its npm package (@adbutler/mcp-server).

Is the AdButler MCP server safe to use?

AdButler scores 78 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 10 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the AdButler MCP server expose?

AdButler exposes 628 tools: list_advertisers, get_advertiser, create_advertiser, update_advertiser, delete_advertiser, and 623 more. Their descriptions and schemas cost roughly 36,354 tokens of context every time the server is loaded.

Is the AdButler MCP server still maintained?

AdButler is still listed as active in the MCP registry. We last reached this channel on 10 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the AdButler MCP server under?

AdButler declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

What did VerifyMCP test on the AdButler MCP server?

VerifyMCP ran 16 checks on AdButler, covering Malware scan, Known CVEs, Install scripts, Dependency health and 12 more. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.