io.github.mikusnuz/meta-ads
NPM · @MIKUSNUZ/META-ADS-MCP
MCP server for Meta Marketing API — Facebook & Instagram ad campaign management
Available components
Last scanned (3 hours ago)
Scores higher than 58% of npm servers
Category Marketing and SEO
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security81
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 30 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 16 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability85
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 13559 tokens (~98/item across 137 items; 134 tools + 3 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 16 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "delete_campaign" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 135 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 −1
- Stability: fail → 0.90 functional
- 29 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 95 to 98.
- 27 Oct 26 −1
No change was recorded against any check on this day. Stability & Change Management went from 98 to 92.
- 24 Oct 26 −5
- CVE-2023-54404 affects this package: high ▼ security
- Known CVEs: pass → fail ▼ security
- 20 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 19 Oct 26 −13
- Malware scan: pass → unverified ▼ security
- Judged manipulation: unverified → pass ▲ security
- Package version: 1.5.0 → 1.6.1 functional
- 17 Oct 26 +2
No change was recorded against any check on this day. Stability & Change Management went from 82 to 98.
- 15 Oct 26 −2
No change was recorded against any check on this day. Stability & Change Management went from 98 to 78.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/@mikusnuz/meta-ads-mcp@1.6.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-mrhx-c7xc-m3w5 | CVE-2023-54404 | high | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
list_lead_forms ~67
List lead generation forms for a Facebook Page.
| Name | Type | Req | Description |
|---|---|---|---|
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results to return |
| page_id | string | yes | Facebook Page ID |
No output schema declared.
No examples provided.
list_offline_event_sets ~95
List offline conversion data sets for the ad account.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to query (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results to return |
No output schema declared.
No examples provided.
list_product_sets ~64
List product sets within a catalog.
| Name | Type | Req | Description |
|---|---|---|---|
| after | string | – | Pagination cursor for next page |
| catalog_id | string | yes | Product catalog ID |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results to return |
No output schema declared.
No examples provided.
list_products ~74
List products within a catalog.
| Name | Type | Req | Description |
|---|---|---|---|
| after | string | – | Pagination cursor for next page |
| catalog_id | string | yes | Product catalog ID |
| fields | string | – | Comma-separated fields to return |
| filter | string | – | JSON string of filter rules |
| limit | number | – | Number of results to return |
No output schema declared.
No examples provided.
list_rf_predictions ~100
List reach & frequency predictions for the ad account. Returns paginated results.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to query (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results (default 25) |
No output schema declared.
No examples provided.
list_rules ~90
List automated rules for the ad account.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to query (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results to return |
No output schema declared.
No examples provided.
list_saved_audiences ~102
List saved audiences in the ad account. Saved audiences are reusable targeting presets.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to query (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results (default 25) |
No output schema declared.
No examples provided.
list_system_users ~64
List system users of the configured business. Requires META_BUSINESS_ID env var.
| Name | Type | Req | Description |
|---|---|---|---|
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results (default 25) |
No output schema declared.
No examples provided.
list_videos ~94
List ad videos uploaded to the ad account.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to query (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results (default 25) |
No output schema declared.
No examples provided.
refresh_token ~49
Extend a valid long-lived user access token through Meta's documented token exchange flow. Requires META_APP_ID and META_APP_SECRET.
| Name | Type | Req | Description |
|---|---|---|---|
| long_lived_token | string | yes | Long-lived access token to refresh |
No output schema declared.
No examples provided.
remove_business_user ~40
Remove a user from the configured business. Requires META_BUSINESS_ID env var.
| Name | Type | Req | Description |
|---|---|---|---|
| user_id | string | yes | User ID to remove from the business |
No output schema declared.
No examples provided.
remove_from_block_list ~52
Remove publisher URLs from an existing block list.
| Name | Type | Req | Description |
|---|---|---|---|
| list_id | string | yes | Block list ID |
| urls | string | yes | JSON array of URLs to remove (e.g. '["example.com"]') |
No output schema declared.
No examples provided.
remove_users_from_audience ~83
Remove users from a custom audience. Payload format is the same as add_users_to_audience.
| Name | Type | Req | Description |
|---|---|---|---|
| audience_id | string | yes | Audience ID |
| payload | string | yes | JSON string: {schema: ['EMAIL','PHONE',...], data: [['hash1','hash2',...], ...]}. All PII must be SHA-256 hashed. |
No output schema declared.
No examples provided.
search_ad_library ~160
Search the Meta Ad Library for ads. Allows searching by keywords, countries, and ad type. Useful for competitive research and transparency.
| Name | Type | Req | Description |
|---|---|---|---|
| ad_reached_countries | string | yes | Comma-separated country codes where ads were shown (e.g. 'US,GB,KR') |
| ad_type | string | – | Ad type filter: ALL, POLITICAL_AND_ISSUE_ADS, HOUSING_ADS, etc. |
| after | string | – | Pagination cursor for next page |
| fields | string | – | Comma-separated fields to return |
| limit | number | – | Number of results (default 25) |
| order_by | string | – | Sort order for results |
| search_terms | string | yes | Keywords to search for in ads |
No output schema declared.
No examples provided.
search_locations ~91
Search for geographic locations (countries, regions, cities, zip codes) for ad targeting.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Number of results (default 25) |
| location_types | string | – | Comma-separated location types: country, region, city, zip, geo_market, electoral_district |
| q | string | yes | Search query (e.g. 'New York', 'California', 'United States') |
No output schema declared.
No examples provided.
search_targeting ~153
Search for targeting options (interests, behaviors, demographics, etc.) by keyword. Use this to find valid targeting IDs for ad set targeting specs.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to query (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| limit | number | – | Number of results (default 25) |
| q | string | yes | Search query (e.g. 'fitness', 'technology', 'cooking') |
| type | string | – | Targeting type filter: adinterest, adgeolocation, adeducationschool, adeducationmajor, adworkemployer, adworkposition, adlocale, etc. |
No output schema declared.
No examples provided.
search_targeting_map ~86
Map targeting IDs to their full details (names, types, paths). Useful for resolving IDs obtained from other endpoints.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to query (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| targeting_list | string | yes | JSON array of targeting IDs to look up |
No output schema declared.
No examples provided.
send_conversion_event ~71
Send a server-side conversion event via the Conversions API (pixel).
| Name | Type | Req | Description |
|---|---|---|---|
| events | string | yes | JSON array of events: [{event_name, event_time, user_data, custom_data, action_source}] |
| test_event_code | string | – | Events Manager test code; use to verify delivery as test events |
No output schema declared.
No examples provided.
send_offline_event ~85
Send offline conversion events through the Conversions API to a dataset. Store events must use action_source=physical_store.
| Name | Type | Req | Description |
|---|---|---|---|
| event_set_id | string | yes | Dataset ID for offline events (legacy parameter name retained) |
| events | string | yes | JSON array of offline events |
| test_event_code | string | – | Events Manager test code; use to verify delivery as test events |
No output schema declared.
No examples provided.
update_ad ~89
Update an existing ad. Only provided fields will be modified.
| Name | Type | Req | Description |
|---|---|---|---|
| ad_id | string | yes | Ad ID to update |
| creative | string | – | New creative spec as JSON string |
| name | string | – | New ad name |
| status | string | – | New status: ACTIVE, PAUSED, DELETED, ARCHIVED |
| tracking_specs | string | – | New tracking specs as JSON string |
No output schema declared.
No examples provided.
update_ad_account ~117
Update the configured ad account settings. Only provided fields will be modified.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to update (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| name | string | – | New account name |
| spend_cap | string | – | Account spend cap in currency cents (e.g. '100000' = $1000.00) |
| timezone_name | string | – | New timezone (e.g. 'America/New_York') |
No output schema declared.
No examples provided.
update_adset ~422
Update an existing ad set. Only provided fields will be modified.
| Name | Type | Req | Description |
|---|---|---|---|
| adset_id | string | yes | Ad set ID to update |
| adset_schedule | array | – | Hourly delivery intervals (Sunday=0). Requires lifetime budgeting. Set timezone_type explicitly; Meta defaults to USER. |
| attribution_spec | array | – | Attribution windows; Meta validates compatibility with the objective and optimization goal |
| bid_amount | string | – | New bid amount in currency cents |
| bid_strategy | string | – | New bid strategy |
| daily_budget | string | – | New daily budget in currency cents |
| destination_type | string | – | Conversion destination, e.g. WEBSITE, APP, MESSENGER, INSTAGRAM_DIRECT, WHATSAPP |
| dsa_beneficiary | string | – | Beneficiary of EU-targeted ads |
| dsa_payor | string | – | Payer of EU-targeted ads; does not automatically copy the beneficiary |
| end_time | string | – | New end time (ISO 8601) |
| lifetime_budget | string | – | New lifetime budget in currency cents |
| name | string | – | New ad set name |
| pacing_type | array | – | Pacing settings. When a schedule is supplied, day_parting is required and is added if omitted. |
| start_time | string | – | New start time (ISO 8601) |
| status | string | – | New status: ACTIVE, PAUSED, DELETED, ARCHIVED |
| targeting | string | – | New targeting spec as JSON string. Advantage+ Audience automation flags go inside this object, e.g. targeting_automation: {"advantage_audience":1} — required for HEC-F (Housing/Employment/Financial P… |
| validate_only | boolean | – | Validate with Meta without creating or updating the ad set (default false) |
No output schema declared.
No examples provided.
update_audience ~54
Update an existing custom audience. Only provided fields will be modified.
| Name | Type | Req | Description |
|---|---|---|---|
| audience_id | string | yes | Audience ID to update |
| description | string | – | New audience description |
| name | string | – | New audience name |
No output schema declared.
No examples provided.
update_budget_schedule ~96
Update an existing budget schedule. Only provided fields will be modified.
| Name | Type | Req | Description |
|---|---|---|---|
| budget_value | integer | – | New unsigned value interpreted according to budget_value_type |
| budget_value_type | string | – | How budget_value is applied |
| schedule_id | string | yes | Budget schedule ID to update |
| time_end | integer | – | New end time as a Unix timestamp |
| time_start | integer | – | New start time as a Unix timestamp |
No output schema declared.
No examples provided.
update_campaign ~200
Update an existing campaign. Only provided fields will be modified.
| Name | Type | Req | Description |
|---|---|---|---|
| bid_strategy | string | – | New bid strategy: LOWEST_COST_WITHOUT_CAP, LOWEST_COST_WITH_BID_CAP, COST_CAP, LOWEST_COST_WITH_MIN_ROAS |
| campaign_id | string | yes | Campaign ID to update |
| daily_budget | string | – | New daily budget in currency cents |
| lifetime_budget | string | – | New lifetime budget in currency cents |
| name | string | – | New campaign name |
| spend_cap | string | – | Lifetime spend cap for the campaign, in account currency cents. Once set it cannot be removed, only raised or reset — pass '0' to reset/clear it. |
| start_time | string | – | New start time (ISO 8601) |
| status | string | – | New status: ACTIVE, PAUSED, DELETED, ARCHIVED |
| stop_time | string | – | New stop time (ISO 8601) |
No output schema declared.
No examples provided.
update_catalog ~35
Update an existing product catalog.
| Name | Type | Req | Description |
|---|---|---|---|
| catalog_id | string | yes | Product catalog ID |
| name | string | – | New catalog name |
No output schema declared.
No examples provided.
update_creative ~59
Update an existing ad creative. Only name and url_tags can be modified after creation.
| Name | Type | Req | Description |
|---|---|---|---|
| creative_id | string | yes | Creative ID to update |
| name | string | – | New creative name |
| url_tags | string | – | New URL tags |
No output schema declared.
No examples provided.
update_experiment ~51
Update an existing experiment (ad study).
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | New experiment description |
| experiment_id | string | yes | Experiment (ad study) ID |
| name | string | – | New experiment name |
No output schema declared.
No examples provided.
update_product ~100
Update an existing product in a catalog.
| Name | Type | Req | Description |
|---|---|---|---|
| availability | string | – | Product availability: in stock, out of stock, etc. |
| description | string | – | Product description |
| image_url | string | – | Product image URL |
| name | string | – | Product name |
| price | string | – | Product price (e.g. '9.99 USD') |
| product_id | string | yes | Product ID |
| url | string | – | Product URL |
No output schema declared.
No examples provided.
update_product_set ~50
Update an existing product set.
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | JSON string of updated filter rules |
| name | string | – | New product set name |
| set_id | string | yes | Product set ID |
No output schema declared.
No examples provided.
update_rule ~91
Update an existing automated rule.
| Name | Type | Req | Description |
|---|---|---|---|
| evaluation_spec | string | – | JSON string defining updated rule conditions |
| execution_spec | string | – | JSON string defining updated rule actions |
| name | string | – | New rule name |
| rule_id | string | yes | Rule ID |
| schedule_spec | string | – | JSON string defining updated rule schedule |
| status | string | – | Rule status: ENABLED, DISABLED |
No output schema declared.
No examples provided.
upload_feed ~45
Upload/trigger a feed file upload for a product feed.
| Name | Type | Req | Description |
|---|---|---|---|
| feed_id | string | yes | Product feed ID |
| url | string | yes | URL of the feed file to upload |
No output schema declared.
No examples provided.
upload_image ~195
Upload an ad image from a public URL or a local file. Returns image hash for use in ad creatives. Note: fetching from a URL requires the app to have Meta's URL-fetch capability — if that fails with an OAuthException 'Application does not have the capability to make this API call', use file_path to upload the raw bytes instead, which does not require that capability.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to upload into (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| file_path | string | – | Local filesystem path of the image to upload. Sent as base64-encoded bytes, bypassing Meta's URL-fetch capability requirement. |
| name | string | – | Name to assign to the uploaded image. Defaults to the file_path basename when uploading a local file. |
| url | string | – | Public URL of the image to upload |
No output schema declared.
No examples provided.
upload_video ~133
Upload an ad video from a public URL or a local file. Returns video ID for use in ad creatives.
| Name | Type | Req | Description |
|---|---|---|---|
| account_id | string | – | Ad account ID to upload into (e.g. 'act_123' or '123'). Falls back to META_AD_ACCOUNT_ID env var if omitted. |
| description | string | – | Video description |
| file_path | string | – | Local filesystem path of the video to upload. Sent as multipart/form-data, bypassing the need for a publicly reachable URL. |
| file_url | string | – | Public URL of the video to upload |
| title | string | – | Video title |
No output schema declared.
No examples provided.
How do I install the io.github.mikusnuz/meta-ads MCP server?
io.github.mikusnuz/meta-ads runs locally as an npm package, launched with npx -y @mikusnuz/meta-ads-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @mikusnuz/meta-ads-mcp
claude mcp add mikusnuz-meta-ads -- npx -y @mikusnuz/meta-ads-mcp
What is the io.github.mikusnuz/meta-ads MCP server?
io.github.mikusnuz/meta-ads is an MCP server listed in the public MCP registry as io.github.mikusnuz/meta-ads. MCP server for Meta Marketing API, Facebook & Instagram ad campaign management. This page covers its npm package (@mikusnuz/meta-ads-mcp).
Is the io.github.mikusnuz/meta-ads MCP server safe to use?
io.github.mikusnuz/meta-ads scores 78 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.mikusnuz/meta-ads MCP server expose?
io.github.mikusnuz/meta-ads exposes 134 tools: list_campaigns, get_campaign, create_campaign, update_campaign, delete_campaign, and 129 more. Their descriptions and schemas cost roughly 13,506 tokens of context every time the server is loaded.
Is the io.github.mikusnuz/meta-ads MCP server still maintained?
io.github.mikusnuz/meta-ads is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.mikusnuz/meta-ads MCP server under?
io.github.mikusnuz/meta-ads declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.