mcp-google-ads 1.2.5 → 1.4.0

package/README.md

@@ -103,6 +103,18 @@ Alternatively, set credentials via environment variables (these override `config
 | `GOOGLE_ADS_CLIENT_ID` | Yes | OAuth 2.0 client ID |
 | `GOOGLE_ADS_CLIENT_SECRET` | Yes | OAuth 2.0 client secret |
 | `GOOGLE_ADS_REFRESH_TOKEN` | Yes | OAuth 2.0 refresh token |
+| `GOOGLE_ADS_MCP_WRITE` | No | Set to `true` to expose mutating tools (create/update/pause/enable/remove/apply). Default: read-only. |
+
+### Read-only by default
+
+The server ships read-only. Mutating tools (anything that creates, updates,
+pauses, enables, removes, links, or applies) are hidden from the tool list
+until you set `GOOGLE_ADS_MCP_WRITE=true` in the MCP server environment.
+If a write tool is somehow invoked without that flag, the server returns a
+clear error pointing at the env var.
+
+This is deliberate: a casual chat message like "activate the Fundraising
+campaign" should not move live ad spend without an explicit opt-in.
 
 ### 4. Add to Claude Code
 

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "sha": "ce9ba28",
-  "builtAt": "2026-04-17T21:03:04.094Z",
+  "sha": "94b326c",
+  "builtAt": "2026-04-18T17:26:41.136Z",
   "embeddedSecrets": true
 }

package/dist/campaignBuilder.js

@@ -19,6 +19,14 @@ function buildCampaignCreatePayload(input) {
     status: enums.CampaignStatus.PAUSED,
     advertising_channel_type: channelEnum
   };
+  if (channelType === "DEMAND_GEN") {
+    campaign.network_settings = {
+      target_google_search: false,
+      target_search_network: false,
+      target_content_network: true,
+      target_partner_search_network: false
+    };
+  }
   if (input.start_date) campaign.start_date = input.start_date;
   if (input.end_date) campaign.end_date = input.end_date;
   switch (strategy) {

package/dist/doctor-cli.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+export interface DoctorCheck {
+    name: string;
+    status: "pass" | "fail" | "warn";
+    detail: string;
+}
+export interface DoctorOptions {
+    configPath?: string;
+    credentialsPath?: string;
+}
+export declare function runDoctor(opts?: DoctorOptions): Promise<DoctorCheck[]>;
+export declare function run(argv?: string[]): Promise<number>;

package/dist/doctor-cli.js

@@ -0,0 +1,144 @@
+#!/usr/bin/env node
+import { existsSync, readFileSync } from "fs";
+import { credentialsFilePath } from "./credentials.js";
+import { resolveDefaultConfigPath } from "./install-cli.js";
+async function runDoctor(opts = {}) {
+  const cfgPath = opts.configPath ?? resolveDefaultConfigPath();
+  const credsPath = opts.credentialsPath ?? credentialsFilePath;
+  const checks = [];
+  checks.push(checkNodeVersion());
+  const cfgExists = existsSync(cfgPath);
+  checks.push({
+    name: "claude_desktop_config exists",
+    status: cfgExists ? "pass" : "fail",
+    detail: cfgExists ? cfgPath : `Not found at ${cfgPath}. Run: npx mcp-google-ads-install`
+  });
+  let cfg = null;
+  let cfgParseOk = false;
+  if (cfgExists) {
+    try {
+      cfg = JSON.parse(readFileSync(cfgPath, "utf8") || "{}");
+      cfgParseOk = true;
+    } catch (err) {
+      cfgParseOk = false;
+    }
+    checks.push({
+      name: "claude_desktop_config is valid JSON",
+      status: cfgParseOk ? "pass" : "fail",
+      detail: cfgParseOk ? "parsed ok" : `${cfgPath} is not valid JSON. Fix syntax or delete the file and re-run mcp-google-ads-install.`
+    });
+  } else {
+    checks.push({
+      name: "claude_desktop_config is valid JSON",
+      status: "fail",
+      detail: "config file missing \u2014 cannot check JSON validity"
+    });
+  }
+  const mcpServers = cfgParseOk && cfg && typeof cfg === "object" ? cfg.mcpServers ?? {} : {};
+  const registered = Boolean(mcpServers["google-ads"]);
+  checks.push({
+    name: "google-ads registered in claude_desktop_config",
+    status: registered ? "pass" : "fail",
+    detail: registered ? "entry present under mcpServers.google-ads" : "not registered. Run: npx mcp-google-ads-install"
+  });
+  const credsExist = existsSync(credsPath);
+  checks.push({
+    name: "credentials file exists",
+    status: credsExist ? "pass" : "fail",
+    detail: credsExist ? credsPath : `Not found at ${credsPath}. Run: npx mcp-google-ads-auth`
+  });
+  let creds = {};
+  if (credsExist) {
+    try {
+      creds = JSON.parse(readFileSync(credsPath, "utf8"));
+    } catch {
+    }
+  }
+  const hasRefresh = typeof creds.refresh_token === "string" && creds.refresh_token.length > 0;
+  const hasCustomerId = typeof creds.customer_id === "string" && creds.customer_id.length > 0;
+  checks.push({
+    name: "credentials file has refresh_token and customer_id",
+    status: hasRefresh && hasCustomerId ? "pass" : credsExist ? "fail" : "warn",
+    detail: credsExist ? hasRefresh && hasCustomerId ? "both fields present" : "missing required fields. Re-run: npx mcp-google-ads-auth" : "credentials file missing \u2014 cannot check"
+  });
+  const customerId = typeof creds.customer_id === "string" ? creds.customer_id : "";
+  const mccId = typeof creds.mcc_customer_id === "string" ? creds.mcc_customer_id : "";
+  const isMccTerminal = customerId.length > 0 && customerId === mccId;
+  checks.push({
+    name: "customer_id is a leaf account, not an MCC",
+    status: !hasCustomerId ? "warn" : isMccTerminal ? "warn" : "pass",
+    detail: !hasCustomerId ? "customer_id missing \u2014 cannot check" : isMccTerminal ? `customer_id (${customerId}) equals mcc_customer_id \u2014 this is a Manager account. Most tools need a leaf. Re-run: npx mcp-google-ads-auth and pick a client under the MCC.` : `leaf account (customer_id=${customerId}${mccId ? `, under MCC ${mccId}` : ", direct access"})`
+  });
+  return checks;
+}
+function checkNodeVersion() {
+  const match = process.version.match(/^v(\d+)\./);
+  const major = match ? parseInt(match[1], 10) : 0;
+  return {
+    name: "node version >= 18",
+    status: major >= 18 ? "pass" : "fail",
+    detail: major >= 18 ? process.version : `${process.version} is too old. Install Node 18+ from https://nodejs.org/`
+  };
+}
+function renderChecks(checks) {
+  const icon = (s) => s === "pass" ? "\u2713" : s === "warn" ? "\u26A0" : "\u2717";
+  const lines = ["", "mcp-google-ads \u2014 diagnostic", ""];
+  for (const c of checks) {
+    lines.push(`  ${icon(c.status)} ${c.name}`);
+    lines.push(`      ${c.detail}`);
+  }
+  const failed = checks.filter((c) => c.status === "fail").length;
+  const warned = checks.filter((c) => c.status === "warn").length;
+  lines.push("");
+  if (failed === 0 && warned === 0) {
+    lines.push("All checks passed. If Claude Desktop still shows the MCP as disconnected,");
+    lines.push("fully quit Claude Desktop (Cmd+Q) and reopen it.");
+  } else {
+    lines.push(`${failed} failure${failed === 1 ? "" : "s"}, ${warned} warning${warned === 1 ? "" : "s"}. See details above.`);
+  }
+  lines.push("");
+  return lines.join("\n");
+}
+function parseArgs(argv) {
+  const out = { help: false };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--help" || a === "-h") out.help = true;
+    else if (a === "--config" && argv[i + 1]) out.configPath = argv[++i];
+    else if (a === "--credentials" && argv[i + 1]) out.credentialsPath = argv[++i];
+  }
+  return out;
+}
+async function run(argv = process.argv.slice(2)) {
+  const args = parseArgs(argv);
+  if (args.help) {
+    process.stderr.write("mcp-google-ads-doctor \u2014 diagnose Claude Desktop + Google Ads MCP setup\n");
+    return 0;
+  }
+  const checks = await runDoctor(args);
+  process.stdout.write(renderChecks(checks));
+  return checks.some((c) => c.status === "fail") ? 1 : 0;
+}
+import { fileURLToPath } from "url";
+import { realpathSync } from "fs";
+function isMainModule() {
+  if (!process.argv[1]) return false;
+  try {
+    return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+if (isMainModule()) {
+  run().then((code) => process.exit(code)).catch((err) => {
+    process.stderr.write(`
+\u274C ${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(1);
+  });
+}
+export {
+  run,
+  runDoctor
+};
+//# sourceMappingURL=doctor-cli.js.map

package/dist/index.js

@@ -11,6 +11,11 @@ import {
   ListToolsRequestSchema
 } from "@modelcontextprotocol/sdk/types.js";
 import { tools } from "./tools.js";
+import {
+  assertWriteAllowed,
+  filterTools,
+  isWriteEnabled
+} from "./writeGate.js";
 import { validateRsa } from "./validateRsa.js";
 import {
   validateRemoveInput,
@@ -36,7 +41,8 @@ import {
 } from "./imageAsset.js";
 import {
   validateDemandGenAd,
-  buildDemandGenAdPayload
+  buildDemandGenAdPayload,
+  isDemandGenAdGroup
 } from "./validateDemandGenAd.js";
 import { GoogleAdsApi, enums } from "google-ads-api";
 import { readFileSync, existsSync } from "fs";
@@ -729,7 +735,7 @@ class GoogleAdsManager {
     const cleanId = customerId.replace(/-/g, "");
     const agRows = await withResilience(
       () => customer.query(
-        `SELECT ad_group.id, ad_group.type FROM ad_group WHERE ad_group.id = ${sanitizeNumericId(
+        `SELECT ad_group.id, ad_group.type, campaign.advertising_channel_type FROM ad_group WHERE ad_group.id = ${sanitizeNumericId(
           input.ad_group_id
         )}`
       ),
@@ -738,11 +744,11 @@ class GoogleAdsManager {
     if (!agRows || agRows.length === 0) {
       throw new Error(`Ad group ${input.ad_group_id} not found`);
     }
-    const agType = agRows[0]?.ad_group?.type;
-    const isDgAdGroup = agType === 21 || agType === "DEMAND_GEN_MULTI_ASSET_AD_GROUP" || agType === "21";
-    if (!isDgAdGroup) {
+    if (!isDemandGenAdGroup(agRows[0])) {
+      const agType = agRows[0]?.ad_group?.type;
+      const cType = agRows[0]?.campaign?.advertising_channel_type;
       throw new Error(
-        `Ad group ${input.ad_group_id} has type '${agType}', not DEMAND_GEN_MULTI_ASSET_AD_GROUP. Use google_ads_create_ad_group with type=DEMAND_GEN_MULTI_ASSET_AD_GROUP first.`
+        `Ad group ${input.ad_group_id} is not a Demand Gen ad group (ad_group.type='${agType}', campaign.advertising_channel_type='${cType}'). It must belong to a DEMAND_GEN campaign.`
       );
     }
     const payload = buildDemandGenAdPayload({
@@ -1637,11 +1643,12 @@ const server = new Server(
   }
 );
 server.setRequestHandler(ListToolsRequestSchema, async () => {
-  return { tools };
+  return { tools: filterTools(tools) };
 });
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const { name, arguments: args } = request.params;
   try {
+    assertWriteAllowed(name);
     switch (name) {
       case "google_ads_get_client_context": {
         const cwd = args?.working_directory;
@@ -2598,6 +2605,11 @@ async function main() {
       logger.warn({ error: err.message }, "Auth check returned non-auth error (may be OK)");
     }
   }
+  const writeMode = isWriteEnabled();
+  logger.info(
+    { writeEnabled: writeMode, envVar: "GOOGLE_ADS_MCP_WRITE" },
+    writeMode ? "Write operations ENABLED (mutating tools exposed)" : "Read-only mode (write tools hidden -- set GOOGLE_ADS_MCP_WRITE=true to enable)"
+  );
   const transport = new StdioServerTransport();
   await server.connect(transport);
   logger.info("MCP Google Ads server running");

package/dist/install-cli.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+interface InstallOptions {
+    configPath?: string;
+    customerId?: string;
+}
+export declare function resolveDefaultConfigPath(): string;
+export declare function installIntoConfig(opts?: InstallOptions): {
+    path: string;
+    existed: boolean;
+};
+export declare function run(argv?: string[]): Promise<void>;
+export {};

package/dist/install-cli.js

@@ -0,0 +1,127 @@
+#!/usr/bin/env node
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { homedir, platform } from "os";
+import { dirname, join } from "path";
+function resolveDefaultConfigPath() {
+  const home = homedir();
+  switch (platform()) {
+    case "darwin":
+      return join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+    case "win32":
+      return join(process.env.APPDATA || join(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
+    default:
+      return join(home, ".config", "Claude", "claude_desktop_config.json");
+  }
+}
+function installIntoConfig(opts = {}) {
+  const configPath = opts.configPath ?? resolveDefaultConfigPath();
+  const existed = existsSync(configPath);
+  let config = {};
+  if (existed) {
+    const raw = readFileSync(configPath, "utf8");
+    if (raw.trim().length > 0) {
+      try {
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+          config = parsed;
+        }
+      } catch {
+        throw new Error(
+          `Claude Desktop config at ${configPath} is not valid JSON. Refusing to overwrite. Open the file, fix the syntax (or delete it to start fresh), and re-run.`
+        );
+      }
+    }
+  } else {
+    mkdirSync(dirname(configPath), { recursive: true });
+  }
+  const normalizedCustomerId = opts.customerId?.replace(/-/g, "");
+  const entry = {
+    command: "npx",
+    args: ["-y", "mcp-google-ads@latest"]
+  };
+  if (normalizedCustomerId) {
+    entry.env = { GOOGLE_ADS_CUSTOMER_ID: normalizedCustomerId };
+  }
+  const nextConfig = {
+    ...config,
+    mcpServers: {
+      ...config.mcpServers ?? {},
+      "google-ads": entry
+    }
+  };
+  writeFileSync(configPath, JSON.stringify(nextConfig, null, 2) + "\n", { mode: 420 });
+  return { path: configPath, existed };
+}
+function parseArgs(argv) {
+  const out = { help: false };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--help" || a === "-h") out.help = true;
+    else if (a === "--customer-id" && argv[i + 1]) out.customerId = argv[++i];
+    else if (a === "--config" && argv[i + 1]) out.configPath = argv[++i];
+  }
+  return out;
+}
+function printHelp() {
+  process.stderr.write(
+    [
+      "mcp-google-ads-install  \u2014  add mcp-google-ads to Claude Desktop config",
+      "",
+      "Usage:",
+      "  npx mcp-google-ads-install",
+      "  npx mcp-google-ads-install --customer-id 745-851-7309",
+      "",
+      "Options:",
+      "  --customer-id <id>   Pin the customer ID in the config (skips auth picker later)",
+      "  --config <path>      Override the default Claude Desktop config path",
+      "  -h, --help           Show this help",
+      "",
+      `Default config path: ${resolveDefaultConfigPath()}`,
+      ""
+    ].join("\n")
+  );
+}
+async function run(argv = process.argv.slice(2)) {
+  const args = parseArgs(argv);
+  if (args.help) {
+    printHelp();
+    return;
+  }
+  const result = installIntoConfig(args);
+  process.stdout.write(
+    [
+      "",
+      `\u2713 ${result.existed ? "Updated" : "Created"}: ${result.path}`,
+      "",
+      "Next steps:",
+      "  1. Fully quit Claude Desktop (Cmd+Q on macOS, not just close the window).",
+      "  2. Reopen Claude Desktop.",
+      "  3. If you haven't authenticated yet, run: npx mcp-google-ads-auth",
+      ""
+    ].join("\n")
+  );
+}
+import { fileURLToPath } from "url";
+import { realpathSync } from "fs";
+function isMainModule() {
+  if (!process.argv[1]) return false;
+  try {
+    return realpathSync(process.argv[1]) === realpathSync(fileURLToPath(import.meta.url));
+  } catch {
+    return false;
+  }
+}
+if (isMainModule()) {
+  run().catch((err) => {
+    process.stderr.write(`
+\u274C ${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(1);
+  });
+}
+export {
+  installIntoConfig,
+  resolveDefaultConfigPath,
+  run
+};
+//# sourceMappingURL=install-cli.js.map

package/dist/validateDemandGenAd.d.ts

@@ -60,3 +60,15 @@ export declare function buildDemandGenAdPayload(args: {
     input: DemandGenAdInput;
 }): DemandGenAdPayload;
 export declare function validateDemandGenAd(ad: DemandGenAdInput): DemandGenAdValidationResult;
+/**
+ * Decide whether a GAQL row describes a Demand Gen ad group. Accepts two
+ * orthogonal signals:
+ *   1) ad_group.type matches DEMAND_GEN_MULTI_ASSET_AD_GROUP (proto value 21
+ *      or its string name when future libs add it).
+ *   2) campaign.advertising_channel_type === DEMAND_GEN (14). This is the
+ *      authoritative check because DG campaigns can only contain DG ad groups,
+ *      and google-ads-api v23 returns undefined for ad_group.type when the
+ *      stored proto value isn't in its local enum map.
+ */
+export declare function isDemandGenAdGroup(row: any): boolean;
+export declare function normalizeCallToAction(input: string): string;

package/dist/validateDemandGenAd.js

@@ -12,7 +12,7 @@ function buildDemandGenAdPayload(args) {
   const assetRef = (id) => ({ asset: `customers/${customer_id_clean}/assets/${id}` });
   const dgAd = {
     business_name: input.business_name,
-    call_to_action_text: input.call_to_action,
+    call_to_action_text: normalizeCallToAction(input.call_to_action),
     marketing_images: input.marketing_image_asset_ids.map(assetRef),
     headlines: input.headlines.map((h) => ({ text: headlineText(h) })),
     descriptions: input.descriptions.map((t) => ({ text: t }))
@@ -83,6 +83,37 @@ function validateDemandGenAd(ad) {
   });
   return { valid: errors.length === 0, errors };
 }
+const DEMAND_GEN_CHANNEL_TYPE = 14;
+function isDemandGenAdGroup(row) {
+  if (!row) return false;
+  const agType = row.ad_group?.type;
+  const campaignChannelType = row.campaign?.advertising_channel_type;
+  return agType === 21 || agType === "21" || agType === "DEMAND_GEN_MULTI_ASSET_AD_GROUP" || campaignChannelType === DEMAND_GEN_CHANNEL_TYPE || campaignChannelType === "DEMAND_GEN";
+}
+const CTA_DISPLAY_MAP = {
+  LEARN_MORE: "Learn more",
+  GET_QUOTE: "Get quote",
+  APPLY_NOW: "Apply now",
+  SIGN_UP: "Sign up",
+  CONTACT_US: "Contact us",
+  SUBSCRIBE: "Subscribe",
+  DOWNLOAD: "Download",
+  BOOK_NOW: "Book now",
+  SHOP_NOW: "Shop now",
+  BUY_NOW: "Buy now",
+  DONATE_NOW: "Donate now",
+  ORDER_NOW: "Order now",
+  PLAY_NOW: "Play now",
+  SEE_MORE: "See more",
+  START_NOW: "Start now",
+  VISIT_SITE: "Visit site",
+  WATCH_NOW: "Watch now"
+};
+function normalizeCallToAction(input) {
+  if (!input) return input;
+  const key = input.toUpperCase();
+  return CTA_DISPLAY_MAP[key] ?? input;
+}
 export {
   MAX_DESCRIPTIONS,
   MAX_DESCRIPTION_LEN,
@@ -91,6 +122,8 @@ export {
   MAX_LONG_HEADLINES,
   MAX_LONG_HEADLINE_LEN,
   buildDemandGenAdPayload,
+  isDemandGenAdGroup,
+  normalizeCallToAction,
   validateDemandGenAd
 };
 //# sourceMappingURL=validateDemandGenAd.js.map

package/dist/writeGate.d.ts

@@ -0,0 +1,18 @@
+import type { Tool } from "@modelcontextprotocol/sdk/types.js";
+/**
+ * Tools that mutate Google Ads state. These are hidden from the tool list
+ * and refused at call time unless GOOGLE_ADS_MCP_WRITE=true.
+ *
+ * Adding a new tool? Put it in this set if it creates, modifies, pauses,
+ * enables, removes, links, unlinks, or applies anything.
+ */
+export declare const WRITE_TOOLS: ReadonlySet<string>;
+export declare function isWriteTool(name: string): boolean;
+export declare function isWriteEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function filterTools(allTools: readonly Tool[], env?: NodeJS.ProcessEnv): Tool[];
+export declare const WRITE_DISABLED_MESSAGE = "Write operations are disabled. Set GOOGLE_ADS_MCP_WRITE=true in the MCP server environment to enable mutating tools (create/update/pause/enable/remove/apply).";
+/**
+ * Assert that a tool call is allowed under the current write-mode setting.
+ * Throws a clear Error if the tool mutates state and writes are disabled.
+ */
+export declare function assertWriteAllowed(toolName: string, env?: NodeJS.ProcessEnv): void;

package/dist/writeGate.js

@@ -0,0 +1,54 @@
+const WRITE_TOOLS = /* @__PURE__ */ new Set([
+  "google_ads_create_campaign",
+  "google_ads_create_ad_group",
+  "google_ads_create_responsive_search_ad",
+  "google_ads_create_keywords",
+  "google_ads_create_shared_set",
+  "google_ads_create_demand_gen_multi_asset_ad",
+  "google_ads_create_image_asset",
+  "google_ads_enable_items",
+  "google_ads_pause_items",
+  "google_ads_pause_keywords",
+  "google_ads_pause_asset_links",
+  "google_ads_remove_items",
+  "google_ads_remove_shared_negatives",
+  "google_ads_remove_campaign_negatives",
+  "google_ads_remove_adgroup_negatives",
+  "google_ads_add_shared_negatives",
+  "google_ads_add_campaign_negatives",
+  "google_ads_link_shared_set",
+  "google_ads_unlink_shared_set",
+  "google_ads_apply_label",
+  "google_ads_update_campaign_tracking",
+  "google_ads_update_campaign_budget",
+  "google_ads_update_campaign_bidding",
+  "google_ads_update_asset_urls"
+]);
+function isWriteTool(name) {
+  return WRITE_TOOLS.has(name);
+}
+function isWriteEnabled(env = process.env) {
+  const v = (env.GOOGLE_ADS_MCP_WRITE || "").trim().toLowerCase();
+  return v === "true" || v === "1" || v === "yes";
+}
+function filterTools(allTools, env = process.env) {
+  if (isWriteEnabled(env)) return [...allTools];
+  return allTools.filter((t) => !WRITE_TOOLS.has(t.name));
+}
+const WRITE_DISABLED_MESSAGE = "Write operations are disabled. Set GOOGLE_ADS_MCP_WRITE=true in the MCP server environment to enable mutating tools (create/update/pause/enable/remove/apply).";
+function assertWriteAllowed(toolName, env = process.env) {
+  if (!isWriteTool(toolName)) return;
+  if (isWriteEnabled(env)) return;
+  throw new Error(
+    `Tool "${toolName}" is a write operation. ${WRITE_DISABLED_MESSAGE}`
+  );
+}
+export {
+  WRITE_DISABLED_MESSAGE,
+  WRITE_TOOLS,
+  assertWriteAllowed,
+  filterTools,
+  isWriteEnabled,
+  isWriteTool
+};
+//# sourceMappingURL=writeGate.js.map

package/package.json

@@ -1,12 +1,14 @@
 {
   "name": "mcp-google-ads",
   "mcpName": "io.github.mharnett/google-ads",
-  "version": "1.2.5",
-  "description": "MCP server for Google Ads API with MCC support, 36 tools for campaign management, reporting, and optimization -- now includes Demand Gen campaign creation end-to-end. Safe by default -- all changes created PAUSED.",
+  "version": "1.4.0",
+  "description": "MCP server for Google Ads API with MCC support, 41 tools for campaign management, reporting, and optimization. Read-only by default -- mutating tools require GOOGLE_ADS_MCP_WRITE=true. All creates/updates land PAUSED.",
   "main": "dist/index.js",
   "bin": {
     "mcp-google-ads": "dist/index.js",
-    "mcp-google-ads-auth": "dist/auth-cli.js"
+    "mcp-google-ads-auth": "dist/auth-cli.js",
+    "mcp-google-ads-install": "dist/install-cli.js",
+    "mcp-google-ads-doctor": "dist/doctor-cli.js"
   },
   "types": "dist/index.d.ts",
   "type": "module",
@@ -18,6 +20,14 @@
     "./auth-cli": {
       "import": "./dist/auth-cli.js",
       "types": "./dist/auth-cli.d.ts"
+    },
+    "./install-cli": {
+      "import": "./dist/install-cli.js",
+      "types": "./dist/install-cli.d.ts"
+    },
+    "./doctor-cli": {
+      "import": "./dist/doctor-cli.js",
+      "types": "./dist/doctor-cli.d.ts"
     }
   },
   "files": [