{
  "description": "The OAuth scopes this gateway requests from each advertising platform, and what each one allows. Requesting an account owner's advertising access should be legible before they click, not after.",
  "documentation": "https://www.getmcpads.com/scopes.md",
  "platforms": [
    {
      "platform": "meta_ads",
      "name": "Meta Ads",
      "provider": "meta",
      "authorization_endpoint": "https://www.facebook.com/v21.0/dialog/oauth",
      "scopes_supported": [
        "ads_read",
        "ads_management",
        "business_management",
        "pages_show_list",
        "pages_read_engagement",
        "pages_manage_ads",
        "read_insights",
        "instagram_basic",
        "instagram_manage_insights",
        "catalog_management"
      ],
      "scope_details": [
        {
          "scope": "ads_read",
          "grants": "Read Meta campaigns, insights, creatives and audiences.",
          "allows_write": false
        },
        {
          "scope": "ads_management",
          "grants": "Create and manage Meta campaigns, ad sets, ads, creatives and audiences, including budgets and status. Writes require a paid plan and explicit confirmation.",
          "allows_write": true
        },
        {
          "scope": "business_management",
          "grants": "Access Business Manager assets, including owned and shared ad accounts, Pages and catalogs. This permission also permits Business Manager changes.",
          "allows_write": true
        },
        {
          "scope": "pages_show_list",
          "grants": "List the Facebook Pages you manage and discover linked Instagram professional accounts.",
          "allows_write": false
        },
        {
          "scope": "pages_read_engagement",
          "grants": "Read Page posts, media and engagement metadata used by your ads and content reports.",
          "allows_write": false
        },
        {
          "scope": "pages_manage_ads",
          "grants": "Create and manage ads associated with your Facebook Pages.",
          "allows_write": true
        },
        {
          "scope": "read_insights",
          "grants": "Read insights for Facebook Page content you can access.",
          "allows_write": false
        },
        {
          "scope": "instagram_basic",
          "grants": "Read your linked Instagram professional account profile and media.",
          "allows_write": false
        },
        {
          "scope": "instagram_manage_insights",
          "grants": "Read insights for your Instagram professional account and media.",
          "allows_write": false
        },
        {
          "scope": "catalog_management",
          "grants": "Read product catalogs and create or update products and product sets. Writes require a paid plan and explicit confirmation.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "pinterest_ads",
      "name": "Pinterest Ads",
      "provider": "pinterest",
      "authorization_endpoint": "https://www.pinterest.com/oauth/",
      "scopes_supported": [
        "ads:read",
        "ads:write"
      ],
      "scope_details": [
        {
          "scope": "ads:read",
          "grants": "Read Pinterest campaigns, ad groups, ads and analytics.",
          "allows_write": false
        },
        {
          "scope": "ads:write",
          "grants": "Pause, resume and change budgets on Pinterest campaigns. Only reachable on a paid plan.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "google_ads",
      "name": "Google Ads",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/adwords"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/adwords",
          "grants": "Read and write on Google Ads. Google publishes no read-only alternative, so read-only enforcement is done by this gateway, not by Google.",
          "allows_write": true
        }
      ],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED."
    },
    {
      "platform": "tiktok_ads",
      "name": "TikTok Ads",
      "provider": "tiktok",
      "authorization_endpoint": "https://business-api.tiktok.com/portal/auth",
      "scopes_supported": [],
      "scope_details": [],
      "enforced_by_gateway": "Write tools are hidden and refused on the Free plan. Every write previews by default and needs an explicit confirm. Campaign creation is always PAUSED.",
      "note": "TikTok does not pass permissions through the authorization URL. They are attached to the app in TikTok Business Center and shown to the advertiser when access is granted."
    },
    {
      "platform": "search_console",
      "name": "Search Console",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/webmasters.readonly"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/webmasters.readonly",
          "grants": "Read Search Console performance, index coverage and sitemaps. Cannot modify anything.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Read only. This gateway exposes no write tool for this platform."
    },
    {
      "platform": "ga4",
      "name": "Google Analytics 4",
      "provider": "google",
      "authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
      "scopes_supported": [
        "https://www.googleapis.com/auth/analytics.readonly"
      ],
      "scope_details": [
        {
          "scope": "https://www.googleapis.com/auth/analytics.readonly",
          "grants": "Read GA4 reports, metadata and property configuration. Cannot modify anything.",
          "allows_write": false
        }
      ],
      "enforced_by_gateway": "Read only. This gateway exposes no write tool for this platform."
    }
  ]
}
