Connect an AI agent to AdvertZip

This is the AdvertZip Model Context Protocol server. Connect Claude, Cursor or any MCP client and let it manage your publisher sites, ad zones, mobile apps and advertiser campaigns — with hard safety limits.

Connect (OAuth)

In your MCP client (e.g. Claude Desktop → Settings → Connectors → Add custom connector) add this URL:
```
https://mcp.advertzip.com/mcp
```
Your browser opens the AdvertZip sign-in + a consent screen. Approve it.
The agent is connected. It authenticates as you and every write is audit-logged.

Connect (token, for Claude Code / Cursor)

Prefer a token? Put an AdvertZip AI session key (az_ai_…) or API key (xbl_…) — from console → AI access — in your client config:

{
  "mcpServers": {
    "advertzip": {
      "url": "https://mcp.advertzip.com/mcp",
      "headers": { "Authorization": "Bearer az_ai_…" }
    }
  }
}

What it can do

create_site · create_sites_bulk
verify_site (meta-tag ownership check)
create_zone · create_zones_bulk
get_zone_embed_code
create_app · create_ad_unit
create_campaign · create_ad_group
create_creative · set_campaign_targeting
set_campaign_status
get_campaign_stats · get_account_stats
whoami · get_catalog (+ list/update_*)
advertzip_trash_zones_bulk · advertzip_restore_zones_bulk
advertzip_list_trash · advertzip_get_trash_batch

46 tools in total. Access is scoped — on the consent screen you choose whether the agent may only read, provision publisher resources, and/or manage campaigns. Two guided prompts (monetize-website, launch-campaign) walk agents through the full flows.

Safety

✓ Allowed

Create & edit sites, zones, apps, ad units
Create & manage campaigns
Read all stats & reports
Move resources to the trash — and restore them

✕ Never

Billing, deposits, payouts, account settings, team
Deleting anything permanently — “delete” means moving to a 30-day trash bin you can restore from; physical removal is done by an internal worker only
Campaign budgets above your spend cap

Deleting is always reversible

There is no tool that erases anything. Removing a zone or site moves it to a trash bin: it stops serving immediately, disappears from the normal listings, and keeps its id, configuration and statistics for 30 days, after which an internal worker purges it. You can restore it at any point from console → Trash.

Every destructive call is two-phase: the agent must first preview (dry_run) — which returns the exact list plus a single-use token valid ~10 minutes — and only then execute with that token. If anything changed in between, the call is refused. The trash permission is its own checkbox on the consent screen, so an agent only gets it if you grant it.

Access is issued as a revocable token you can inspect or revoke any time at console → AI access. Sign-in and 2FA happen on AdvertZip — the agent never sees your password.