adloop 0.14.0__tar.gz → 0.15.0__tar.gz

{adloop-0.14.0 → adloop-0.15.0}/PKG-INFO

@@ -1,13 +1,13 @@
 Metadata-Version: 2.3
 Name: adloop
-Version: 0.14.0
+Version: 0.15.0
 Summary: The AI command center for Google Ads, Reddit Ads, GA4, and tracking code.
 Keywords: mcp,google-ads,reddit-ads,google-analytics,ga4,cursor,marketing
 Author: Daniel Klose
 Author-email: Daniel Klose <info@daniel-klose.com>
 License: MIT
 Requires-Dist: fastmcp>=3.0.0
-Requires-Dist: google-ads>=31.1.0
+Requires-Dist: google-ads>=32.0.0
 Requires-Dist: google-analytics-data>=0.20.0
 Requires-Dist: google-analytics-admin>=0.27.0
 Requires-Dist: google-api-python-client>=2.100.0
@@ -37,7 +37,7 @@ Description-Content-Type: text/markdown
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Python 3.11+](https://img.shields.io/badge/Python-3.11+-3776AB.svg?logo=python&logoColor=white)](https://www.python.org/downloads/)
 [![MCP Compatible](https://img.shields.io/badge/MCP-Compatible-8A2BE2.svg)](https://modelcontextprotocol.io)
-[![Google Ads API](https://img.shields.io/badge/Google%20Ads-API%20v24-4285F4.svg?logo=google-ads&logoColor=white)](https://developers.google.com/google-ads/api/docs/start)
+[![Google Ads API](https://img.shields.io/badge/Google%20Ads-API%20v25-4285F4.svg?logo=google-ads&logoColor=white)](https://developers.google.com/google-ads/api/docs/start)
 [![GA4 Data API](https://img.shields.io/badge/GA4-Data%20API-E37400.svg?logo=google-analytics&logoColor=white)](https://developers.google.com/analytics/devguides/reporting/data/v1)
 [![GitHub stars](https://img.shields.io/github/stars/kLOsk/adloop?style=social)](https://github.com/kLOsk/adloop)
 
@@ -48,7 +48,7 @@ An MCP server that gives your AI assistant read + write access to Google Ads, Re
 </div>
 
 > [!TIP]
-> **[AdLoop Cloud](https://getadloop.com) is the hosted version of this project, with a free plan that needs no credit card.** Connect Google in two clicks and use the full toolset from claude.ai, ChatGPT, Claude Code, Cursor, or Gemini. No Google Cloud project, no developer token, no OAuth verification wait. EU-hosted, GDPR-first, DPA included.
+> **[AdLoop Cloud](https://getadloop.com) is the hosted version of this project, with a free plan that needs no credit card.** Connect Google in two clicks and use the full toolset from claude.ai, ChatGPT, Claude Code, Cursor, or Gemini. No Google Cloud project, no API access application, no OAuth verification wait. EU-hosted, GDPR-first, DPA included.
 
 > 📚 **Documentation: [docs.getadloop.com](https://docs.getadloop.com)** — setup guides per AI client, toolsets, the safety model, and troubleshooting for both editions.
 
@@ -62,7 +62,7 @@ Both versions run the same tools with the same safety model. The difference is w
 |---|---|---|
 | **Setup** | Connect Google in two clicks | ~5 min: own Google Cloud project + `adloop init` |
 | **Google Cloud project** | Not needed | Required (free) |
-| **Ads developer token** | Not needed | Required (from your MCC) |
+| **Ads API access** | Not needed | Granted to your Cloud project (no developer token, no MCC since Sept 2026) |
 | **Works with** | claude.ai, ChatGPT, Claude Code, Cursor, Gemini | Claude Code, Cursor, Claude Desktop, any local MCP client |
 | **Where your data flows** | EU servers (Germany), GDPR-first, DPA included | 100% your machine — nothing leaves it |
 | **Updates** | Automatic | `pip install -U adloop` |
@@ -299,7 +299,7 @@ AdLoop manages real ad spend, so safety is not optional.
 
 > **AdLoop uses your own (free) Google Cloud project for OAuth.** The `adloop init` wizard walks you through it — a one-time setup of about 5 minutes, with no shared user caps and no waiting on anyone's verification review. AdLoop does not ship built-in OAuth credentials.
 >
-> **Prefer zero setup?** [**AdLoop Cloud**](https://getadloop.com) is the hosted version: connect Google in two clicks — no Cloud project, no developer token, EU-hosted.
+> **Prefer zero setup?** [**AdLoop Cloud**](https://getadloop.com) is the hosted version: connect Google in two clicks — no Cloud project, no API access application, EU-hosted.
 >
 > *(Upgrading from ≤0.9 with built-in credentials? Those sign-ins were retired in 0.10 — run `adloop init` once to switch to your own project.)*
 
@@ -329,8 +329,8 @@ uv run adloop init
 The wizard walks you through:
 
 1. **Google Cloud setup** — creates a project, enables the three APIs, generates an OAuth client (see [Custom Google Cloud Project Setup](#custom-google-cloud-project-setup) below for the exact steps the wizard refers you to)
-2. **Developer token** — from your Google Ads MCC ([API Center](https://ads.google.com/aw/apicenter))
-3. **MCC Account ID** — your Manager Account ID (top bar in the MCC UI)
+2. **Google Ads API access** — applied for on your Cloud project's [Google Ads API Overview page](https://console.cloud.google.com/google/ads-apis/overview); the legacy developer-token prompt can be left empty
+3. **MCC Account ID** — optional, only if you reach several accounts through a Manager Account
 4. **OAuth sign-in** — opens a browser to sign in with Google (or prints a URL for headless servers)
 5. **Auto-discovers your accounts** — finds your GA4 properties and Ads accounts automatically
 6. **Optional services** — pin a GTM container, a Search Console property (both auto-discovered too), and a PageSpeed API key; skip any of them with Enter
@@ -341,26 +341,25 @@ The wizard walks you through:
 ### Requirements
 
 - Python 3.11+
-- A Google Ads account with an MCC (Manager Account)
-- A Google Ads Developer Token (see below)
+- A Google Ads account (a Manager Account is optional; you only need one to reach several accounts through one login)
+- Google Ads API access on your Google Cloud project (see below)
 
-### Google Ads Developer Token
+### Google Ads API access
 
-A developer token is **always required**. Your OAuth client handles Google sign-in; the developer token is a separate key that grants API access to your Google Ads data.
+Since 9 September 2026, Google Ads API access belongs to the **Google Cloud project that owns your OAuth client**. Developer tokens are sunset: the API ignores the header, the wizard's token prompt is optional, and you no longer need a Manager Account to get access.
 
-1. **Create an MCC** (free) at [ads.google.com/home/tools/manager-accounts](https://ads.google.com/home/tools/manager-accounts/) if you don't have one. Link your regular Google Ads account to it.
-2. In the MCC, go to **Tools & Settings → API Center**
-3. Your **developer token** is shown there. Copy it — the wizard will ask for it.
+Apply on your project's [Google Ads API Overview page](https://console.cloud.google.com/google/ads-apis/overview) in the Cloud Console:
 
-**Access levels** — your token's access level determines what it can do:
+| Level | How to get it | What it allows |
+|-------|---------------|----------------|
+| **Test** | Automatic when you enable the Google Ads API | Test accounts only, **not production accounts**. `CLOUD_PROJECT_NOT_APPROVED_FOR_PRODUCTION` (or `DEVELOPER_TOKEN_NOT_APPROVED` on older API versions) means you are here. |
+| **Explorer** | "Upgrade access level" → apply; usually granted automatically | 2,880 operations/day on production accounts. Enough to get started. |
+| **Basic** | Apply; reviewed automatically within minutes once the project is brand-verified (OAuth consent screen set to External and published "In production") | 15,000 operations/day. |
+| **Standard** | Apply; manual review, about ten business days | Higher limits; Google's RMF policy applies |
 
-| Level | How to Get | What It Allows |
-|-------|-----------|----------------|
-| **Test Account** | Default for new tokens | Can only access test accounts — **not production accounts**. If you see `DEVELOPER_TOKEN_NOT_APPROVED`, this is why. |
-| **Explorer** | Automatic after first API call with a production account | 2,880 operations/day on production accounts. Enough to get started. |
-| **Basic** | [Apply through API Center](https://ads.google.com/aw/apicenter) | 15,000 operations/day. Apply if you need more. |
+Projects on a Cloud free trial or with billing disabled are refused Explorer and Basic; use a project with billing set up.
 
-> **Getting `DEVELOPER_TOKEN_NOT_APPROVED`?** Your token is at "Test Account" level. Go to [API Center](https://ads.google.com/aw/apicenter) in your MCC and check your access level. If it shows "Test Account", you need to apply for Basic access or wait for Explorer access to be granted after your first production API call.
+> **Getting `CLOUD_PROJECT_NOT_APPROVED_FOR_PRODUCTION`?** Your project is at Test level. Open the Overview page above and apply for Explorer access.
 
 ### Headless Servers
 
@@ -465,7 +464,7 @@ All configuration lives in `~/.adloop/config.yaml`. See [`config.yaml.example`](
 | `google` | `credentials_path` | *(empty)* | Path to OAuth client JSON or service account key. Empty = `~/.adloop/credentials.json`, else Application Default Credentials. |
 | `google` | `token_path` | `~/.adloop/token.json` | Where to store the OAuth token (auto-created) |
 | `ga4` | `property_id` | — | Your GA4 property ID (auto-discovered by `adloop init`) |
-| `ads` | `developer_token` | — | Your Google Ads API developer token |
+| `ads` | `developer_token` | — | Legacy, optional: API access belongs to your Cloud project since Sept 2026 |
 | `ads` | `customer_id` | — | Default Google Ads customer ID (auto-discovered by `adloop init`) |
 | `ads` | `login_customer_id` | — | Your MCC account ID |
 | `reddit` | `client_id` / `client_secret` | *(empty)* | Your Reddit developer app (Business Manager → Developer Application) |
@@ -551,7 +550,7 @@ What's been shipped and what's next:
 - ~~Claude Code support~~ ✓ — `CLAUDE.md`, `.mcp.json`, `.claude/rules/`, `.claude/commands/`, CLI wizard snippets
 - **Claude Desktop one-click install** — `adloop install claude-desktop` (and/or a `.dxt` extension bundle) that writes the AdLoop MCP entry into `claude_desktop_config.json` automatically, so Claude Desktop + Cowork users don't have to hand-edit JSON
 - ~~PyPI package~~ ✓ — `pip install adloop`
-- ~~[AdLoop Cloud](https://getadloop.com)~~ ✓ — the hosted version: no Google Cloud project, no developer token, connect Google in two clicks (EU-hosted, GDPR-first)
+- ~~[AdLoop Cloud](https://getadloop.com)~~ ✓ — the hosted version: no Google Cloud project, no API access application, connect Google in two clicks (EU-hosted, GDPR-first)
 - ~~Headless server support~~ ✓ — manual URL copy-paste flow for servers without a browser
 - ~~Behavioral eval suites~~ ✓ — 28 prompt-and-expectation tests covering read, write, tracking, and planning workflows
 - ~~Google Tag Manager integration~~ ✓ — read tools for tags, triggers, variables, workspaces, and version history, plus the `audit_event_coverage` three-way join across codebase events, GTM tags, and GA4 actual fires

{adloop-0.14.0 → adloop-0.15.0}/README.md

@@ -10,7 +10,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Python 3.11+](https://img.shields.io/badge/Python-3.11+-3776AB.svg?logo=python&logoColor=white)](https://www.python.org/downloads/)
 [![MCP Compatible](https://img.shields.io/badge/MCP-Compatible-8A2BE2.svg)](https://modelcontextprotocol.io)
-[![Google Ads API](https://img.shields.io/badge/Google%20Ads-API%20v24-4285F4.svg?logo=google-ads&logoColor=white)](https://developers.google.com/google-ads/api/docs/start)
+[![Google Ads API](https://img.shields.io/badge/Google%20Ads-API%20v25-4285F4.svg?logo=google-ads&logoColor=white)](https://developers.google.com/google-ads/api/docs/start)
 [![GA4 Data API](https://img.shields.io/badge/GA4-Data%20API-E37400.svg?logo=google-analytics&logoColor=white)](https://developers.google.com/analytics/devguides/reporting/data/v1)
 [![GitHub stars](https://img.shields.io/github/stars/kLOsk/adloop?style=social)](https://github.com/kLOsk/adloop)
 
@@ -21,7 +21,7 @@ An MCP server that gives your AI assistant read + write access to Google Ads, Re
 </div>
 
 > [!TIP]
-> **[AdLoop Cloud](https://getadloop.com) is the hosted version of this project, with a free plan that needs no credit card.** Connect Google in two clicks and use the full toolset from claude.ai, ChatGPT, Claude Code, Cursor, or Gemini. No Google Cloud project, no developer token, no OAuth verification wait. EU-hosted, GDPR-first, DPA included.
+> **[AdLoop Cloud](https://getadloop.com) is the hosted version of this project, with a free plan that needs no credit card.** Connect Google in two clicks and use the full toolset from claude.ai, ChatGPT, Claude Code, Cursor, or Gemini. No Google Cloud project, no API access application, no OAuth verification wait. EU-hosted, GDPR-first, DPA included.
 
 > 📚 **Documentation: [docs.getadloop.com](https://docs.getadloop.com)** — setup guides per AI client, toolsets, the safety model, and troubleshooting for both editions.
 
@@ -35,7 +35,7 @@ Both versions run the same tools with the same safety model. The difference is w
 |---|---|---|
 | **Setup** | Connect Google in two clicks | ~5 min: own Google Cloud project + `adloop init` |
 | **Google Cloud project** | Not needed | Required (free) |
-| **Ads developer token** | Not needed | Required (from your MCC) |
+| **Ads API access** | Not needed | Granted to your Cloud project (no developer token, no MCC since Sept 2026) |
 | **Works with** | claude.ai, ChatGPT, Claude Code, Cursor, Gemini | Claude Code, Cursor, Claude Desktop, any local MCP client |
 | **Where your data flows** | EU servers (Germany), GDPR-first, DPA included | 100% your machine — nothing leaves it |
 | **Updates** | Automatic | `pip install -U adloop` |
@@ -272,7 +272,7 @@ AdLoop manages real ad spend, so safety is not optional.
 
 > **AdLoop uses your own (free) Google Cloud project for OAuth.** The `adloop init` wizard walks you through it — a one-time setup of about 5 minutes, with no shared user caps and no waiting on anyone's verification review. AdLoop does not ship built-in OAuth credentials.
 >
-> **Prefer zero setup?** [**AdLoop Cloud**](https://getadloop.com) is the hosted version: connect Google in two clicks — no Cloud project, no developer token, EU-hosted.
+> **Prefer zero setup?** [**AdLoop Cloud**](https://getadloop.com) is the hosted version: connect Google in two clicks — no Cloud project, no API access application, EU-hosted.
 >
 > *(Upgrading from ≤0.9 with built-in credentials? Those sign-ins were retired in 0.10 — run `adloop init` once to switch to your own project.)*
 
@@ -302,8 +302,8 @@ uv run adloop init
 The wizard walks you through:
 
 1. **Google Cloud setup** — creates a project, enables the three APIs, generates an OAuth client (see [Custom Google Cloud Project Setup](#custom-google-cloud-project-setup) below for the exact steps the wizard refers you to)
-2. **Developer token** — from your Google Ads MCC ([API Center](https://ads.google.com/aw/apicenter))
-3. **MCC Account ID** — your Manager Account ID (top bar in the MCC UI)
+2. **Google Ads API access** — applied for on your Cloud project's [Google Ads API Overview page](https://console.cloud.google.com/google/ads-apis/overview); the legacy developer-token prompt can be left empty
+3. **MCC Account ID** — optional, only if you reach several accounts through a Manager Account
 4. **OAuth sign-in** — opens a browser to sign in with Google (or prints a URL for headless servers)
 5. **Auto-discovers your accounts** — finds your GA4 properties and Ads accounts automatically
 6. **Optional services** — pin a GTM container, a Search Console property (both auto-discovered too), and a PageSpeed API key; skip any of them with Enter
@@ -314,26 +314,25 @@ The wizard walks you through:
 ### Requirements
 
 - Python 3.11+
-- A Google Ads account with an MCC (Manager Account)
-- A Google Ads Developer Token (see below)
+- A Google Ads account (a Manager Account is optional; you only need one to reach several accounts through one login)
+- Google Ads API access on your Google Cloud project (see below)
 
-### Google Ads Developer Token
+### Google Ads API access
 
-A developer token is **always required**. Your OAuth client handles Google sign-in; the developer token is a separate key that grants API access to your Google Ads data.
+Since 9 September 2026, Google Ads API access belongs to the **Google Cloud project that owns your OAuth client**. Developer tokens are sunset: the API ignores the header, the wizard's token prompt is optional, and you no longer need a Manager Account to get access.
 
-1. **Create an MCC** (free) at [ads.google.com/home/tools/manager-accounts](https://ads.google.com/home/tools/manager-accounts/) if you don't have one. Link your regular Google Ads account to it.
-2. In the MCC, go to **Tools & Settings → API Center**
-3. Your **developer token** is shown there. Copy it — the wizard will ask for it.
+Apply on your project's [Google Ads API Overview page](https://console.cloud.google.com/google/ads-apis/overview) in the Cloud Console:
 
-**Access levels** — your token's access level determines what it can do:
+| Level | How to get it | What it allows |
+|-------|---------------|----------------|
+| **Test** | Automatic when you enable the Google Ads API | Test accounts only, **not production accounts**. `CLOUD_PROJECT_NOT_APPROVED_FOR_PRODUCTION` (or `DEVELOPER_TOKEN_NOT_APPROVED` on older API versions) means you are here. |
+| **Explorer** | "Upgrade access level" → apply; usually granted automatically | 2,880 operations/day on production accounts. Enough to get started. |
+| **Basic** | Apply; reviewed automatically within minutes once the project is brand-verified (OAuth consent screen set to External and published "In production") | 15,000 operations/day. |
+| **Standard** | Apply; manual review, about ten business days | Higher limits; Google's RMF policy applies |
 
-| Level | How to Get | What It Allows |
-|-------|-----------|----------------|
-| **Test Account** | Default for new tokens | Can only access test accounts — **not production accounts**. If you see `DEVELOPER_TOKEN_NOT_APPROVED`, this is why. |
-| **Explorer** | Automatic after first API call with a production account | 2,880 operations/day on production accounts. Enough to get started. |
-| **Basic** | [Apply through API Center](https://ads.google.com/aw/apicenter) | 15,000 operations/day. Apply if you need more. |
+Projects on a Cloud free trial or with billing disabled are refused Explorer and Basic; use a project with billing set up.
 
-> **Getting `DEVELOPER_TOKEN_NOT_APPROVED`?** Your token is at "Test Account" level. Go to [API Center](https://ads.google.com/aw/apicenter) in your MCC and check your access level. If it shows "Test Account", you need to apply for Basic access or wait for Explorer access to be granted after your first production API call.
+> **Getting `CLOUD_PROJECT_NOT_APPROVED_FOR_PRODUCTION`?** Your project is at Test level. Open the Overview page above and apply for Explorer access.
 
 ### Headless Servers
 
@@ -438,7 +437,7 @@ All configuration lives in `~/.adloop/config.yaml`. See [`config.yaml.example`](
 | `google` | `credentials_path` | *(empty)* | Path to OAuth client JSON or service account key. Empty = `~/.adloop/credentials.json`, else Application Default Credentials. |
 | `google` | `token_path` | `~/.adloop/token.json` | Where to store the OAuth token (auto-created) |
 | `ga4` | `property_id` | — | Your GA4 property ID (auto-discovered by `adloop init`) |
-| `ads` | `developer_token` | — | Your Google Ads API developer token |
+| `ads` | `developer_token` | — | Legacy, optional: API access belongs to your Cloud project since Sept 2026 |
 | `ads` | `customer_id` | — | Default Google Ads customer ID (auto-discovered by `adloop init`) |
 | `ads` | `login_customer_id` | — | Your MCC account ID |
 | `reddit` | `client_id` / `client_secret` | *(empty)* | Your Reddit developer app (Business Manager → Developer Application) |
@@ -524,7 +523,7 @@ What's been shipped and what's next:
 - ~~Claude Code support~~ ✓ — `CLAUDE.md`, `.mcp.json`, `.claude/rules/`, `.claude/commands/`, CLI wizard snippets
 - **Claude Desktop one-click install** — `adloop install claude-desktop` (and/or a `.dxt` extension bundle) that writes the AdLoop MCP entry into `claude_desktop_config.json` automatically, so Claude Desktop + Cowork users don't have to hand-edit JSON
 - ~~PyPI package~~ ✓ — `pip install adloop`
-- ~~[AdLoop Cloud](https://getadloop.com)~~ ✓ — the hosted version: no Google Cloud project, no developer token, connect Google in two clicks (EU-hosted, GDPR-first)
+- ~~[AdLoop Cloud](https://getadloop.com)~~ ✓ — the hosted version: no Google Cloud project, no API access application, connect Google in two clicks (EU-hosted, GDPR-first)
 - ~~Headless server support~~ ✓ — manual URL copy-paste flow for servers without a browser
 - ~~Behavioral eval suites~~ ✓ — 28 prompt-and-expectation tests covering read, write, tracking, and planning workflows
 - ~~Google Tag Manager integration~~ ✓ — read tools for tags, triggers, variables, workspaces, and version history, plus the `audit_event_coverage` three-way join across codebase events, GTM tags, and GA4 actual fires

{adloop-0.14.0 → adloop-0.15.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "adloop"
-version = "0.14.0"
+version = "0.15.0"
 description = "The AI command center for Google Ads, Reddit Ads, GA4, and tracking code."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -15,7 +15,7 @@ keywords = [
 ]
 dependencies = [
     "fastmcp>=3.0.0",
-    "google-ads>=31.1.0",
+    "google-ads>=32.0.0",
     "google-analytics-data>=0.20.0",
     "google-analytics-admin>=0.27.0",
     "google-api-python-client>=2.100.0",

{adloop-0.14.0 → adloop-0.15.0}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "adloop"
-version = "0.14.0"
+version = "0.15.0"
 description = "The AI command center for Google Ads, Reddit Ads, GA4, and tracking code."
 readme = "README.md"
 authors = [
@@ -11,7 +11,7 @@ license = { text = "MIT" }
 keywords = ["mcp", "google-ads", "reddit-ads", "google-analytics", "ga4", "cursor", "marketing"]
 dependencies = [
     "fastmcp>=3.0.0",
-    "google-ads>=31.1.0",
+    "google-ads>=32.0.0",
     "google-analytics-data>=0.20.0",
     "google-analytics-admin>=0.27.0",
     "google-api-python-client>=2.100.0",

{adloop-0.14.0 → adloop-0.15.0}/src/adloop/ads/client.py

@@ -16,7 +16,7 @@ if TYPE_CHECKING:
 # Pin the API version so library upgrades don't silently break field names,
 # enum values, or mutate operation structures. Bump this deliberately when
 # migrating to a new API version — never let it float to the library default.
-GOOGLE_ADS_API_VERSION = "v24"
+GOOGLE_ADS_API_VERSION = "v25"
 
 
 def get_ads_client(config: AdLoopConfig) -> GoogleAdsClient:
@@ -28,11 +28,16 @@ def get_ads_client(config: AdLoopConfig) -> GoogleAdsClient:
     credentials = get_ads_credentials(config)
 
     client_config = {
-        "developer_token": config.ads.developer_token,
         "use_proto_plus": True,
         "version": GOOGLE_ADS_API_VERSION,
     }
 
+    # Access levels live on the Google Cloud project that owns the OAuth
+    # client since 2026-09-09; the developer token header is optional and
+    # ignored by the API. Send it only when someone still has one configured.
+    if config.ads.developer_token:
+        client_config["developer_token"] = config.ads.developer_token
+
     if config.ads.login_customer_id:
         client_config["login_customer_id"] = config.ads.login_customer_id.replace("-", "")
 

{adloop-0.14.0 → adloop-0.15.0}/src/adloop/ads/enums.py

@@ -22,9 +22,8 @@ def _enum_introspection_client():
     """Memoized no-auth GoogleAdsClient used purely for enum introspection.
 
     The client constructor doesn't make any network calls and doesn't
-    validate credentials beyond requiring SOMETHING in the developer-token
-    field — perfect for reading the bundled enum protos. We cache it so
-    every enum_names() call after the first is essentially free.
+    validate credentials — perfect for reading the bundled enum protos. We
+    cache it so every enum_names() call after the first is essentially free.
     """
     from google.ads.googleads.client import GoogleAdsClient
 
@@ -32,7 +31,6 @@ def _enum_introspection_client():
 
     return GoogleAdsClient(
         credentials=None,
-        developer_token="adloop-enum-introspection-not-used",
         use_proto_plus=True,
         version=GOOGLE_ADS_API_VERSION,
     )

{adloop-0.14.0 → adloop-0.15.0}/src/adloop/ads/forecast.py

@@ -226,7 +226,7 @@ def _build_keyword_ideas_rest_body(
 ) -> dict:
     """Build the JSON body for the REST generateKeywordIdeas endpoint.
 
-    Schema follows google-ads REST v24 (camelCase). Exactly one of
+    Schema follows the pinned google-ads REST version (camelCase; unchanged v24 → v25). Exactly one of
     ``keywordSeed`` / ``urlSeed`` / ``keywordAndUrlSeed`` is set based on
     which inputs were provided.
     """
@@ -272,10 +272,9 @@ def _post_keyword_ideas_rest_page(
     credentials = get_ads_credentials(config)
     session = AuthorizedSession(credentials)
 
-    headers = {
-        "developer-token": config.ads.developer_token,
-        "Content-Type": "application/json",
-    }
+    headers = {"Content-Type": "application/json"}
+    if config.ads.developer_token:
+        headers["developer-token"] = config.ads.developer_token
     if config.ads.login_customer_id:
         headers["login-customer-id"] = config.ads.login_customer_id.replace("-", "")
 

{adloop-0.14.0 → adloop-0.15.0}/src/adloop/ads/gaql.py

@@ -63,15 +63,24 @@ def run_gaql(
 # ---------------------------------------------------------------------------
 
 _GAQL_ERROR_HINTS = {
+    "CLOUD_PROJECT_NOT_APPROVED_FOR_PRODUCTION": (
+        "The Google Cloud project that owns your OAuth client only has Test "
+        "access, which cannot reach production Google Ads accounts. Apply for "
+        "Explorer or Basic access on the project's Google Ads API Overview "
+        "page: https://console.cloud.google.com/google/ads-apis/overview"
+    ),
+    # Pre-2026-09 wording: access levels moved from developer tokens to the
+    # Cloud project, but older API versions still answer with these names.
     "DEVELOPER_TOKEN_NOT_APPROVED": (
-        "Your Google Ads developer token is only approved for test accounts. "
-        "Apply for Basic or Standard access in the Google Ads API Center, "
-        "or use a test account."
+        "Your project's Google Ads API access is at Test level, which cannot "
+        "reach production accounts. Apply for Explorer or Basic access on the "
+        "Google Cloud project's Google Ads API Overview page: "
+        "https://console.cloud.google.com/google/ads-apis/overview"
     ),
     "DEVELOPER_TOKEN_INVALID": (
-        "Your Google Ads developer token is invalid. Update "
-        "`ads.developer_token` in `~/.adloop/config.yaml` using the token "
-        "from your manager account API Center."
+        "The configured `ads.developer_token` is invalid. Since September 2026 "
+        "no token is needed at all: remove it from `~/.adloop/config.yaml`; "
+        "access is granted to the Google Cloud project that owns your OAuth client."
     ),
     "EXPECTED_REFERENCED_FIELD_IN_SELECT_CLAUSE": (
         "Fields used in ORDER BY or HAVING must also appear in the SELECT clause. "

{adloop-0.14.0 → adloop-0.15.0}/src/adloop/cli.py

@@ -33,9 +33,13 @@ _GOOGLE_CLOUD_INSTRUCTIONS = """\
 │     → https://console.cloud.google.com/apis/credentials         │
 │     Download the JSON file.                                     │
 │                                                                 │
-│  5. Get your Google Ads Developer Token from your MCC account   │
-│     → https://ads.google.com/aw/apicenter                      │
-│     (You need a Manager Account / MCC)                          │
+│  5. Apply for Google Ads API access ON THE PROJECT              │
+│     → https://console.cloud.google.com/google/ads-apis/overview │
+│     New projects start at Test level (test accounts only).      │
+│     "Upgrade access level": Explorer is granted automatically   │
+│     (2,880 ops/day); Basic (15,000/day) needs the consent       │
+│     screen published ("In production") first.                   │
+│     No manager account (MCC) and no developer token needed.     │
 └─────────────────────────────────────────────────────────────────┘
 """
 
@@ -77,9 +81,11 @@ def _validate_customer_id(raw: str) -> str | None:
     return None
 
 
-def _prompt_customer_id(label: str, default: str = "") -> str:
+def _prompt_customer_id(label: str, default: str = "", required: bool = True) -> str:
     while True:
-        value = _prompt(label, default=default)
+        value = _prompt(label, default=default, required=required)
+        if not value and not required:
+            return ""
         formatted = _format_customer_id(value)
         err = _validate_customer_id(formatted)
         if err:
@@ -183,9 +189,10 @@ def _generate_config_yaml(
         f'  property_id: "{property_id}"',
         "",
         "ads:",
+        "  # Legacy; API access comes from the Google Cloud project since 2026-09.",
         f'  developer_token: "{developer_token}"',
         f'  customer_id: "{customer_id}"',
-        "  # MCC / Manager Account ID (required if using a manager account)",
+        "  # MCC / Manager Account ID (only if using a manager account)",
         f'  login_customer_id: "{login_customer_id}"',
         "",
         "gsc:",
@@ -604,23 +611,29 @@ def run_init_wizard() -> None:
     )
 
     step_num = 4
-    _step_header(step_num, "Google Ads Developer Token")
-    _print("  Find your developer token in your MCC account:")
-    _print("  → https://ads.google.com/aw/apicenter")
+    _step_header(step_num, "Google Ads API access")
+    _print("  Since September 2026 API access belongs to your Google Cloud")
+    _print("  project, not to a developer token. Apply on the project's page:")
+    _print("  → https://console.cloud.google.com/google/ads-apis/overview")
+    _print("  Leave the token empty unless you still run an old setup.")
     _print()
     developer_token = _prompt(
-        "Developer Token",
+        "Developer token (legacy, optional)",
         default=_existing("ads", "developer_token"),
+        required=False,
     )
 
-    # MCC Account ID (needed before auto-discovery for Ads API calls)
+    # Manager account: optional since access no longer comes from an MCC.
+    # Still needed to reach several accounts through one login.
     step_num += 1
-    _step_header(step_num, "MCC / Manager Account")
-    _print("  Your MCC (Manager) account ID is in the top bar of your MCC.")
+    _step_header(step_num, "Manager Account (MCC), optional")
+    _print("  Only if you manage several accounts through a manager account:")
+    _print("  its ID is in the top bar of the MCC. Leave empty otherwise.")
     _print()
     login_customer_id = _prompt_customer_id(
         "MCC Account ID (XXX-XXX-XXXX)",
         default=_existing("ads", "login_customer_id"),
+        required=False,
     )
 
     # OAuth + auto-discovery

{adloop-0.14.0 → adloop-0.15.0}/src/adloop/server.py

@@ -251,26 +251,36 @@ def _structured_error(fn_name: str, exc: Exception) -> dict:
     err = str(exc)
     err_lower = err.lower()
 
-    if "developer_token_not_approved" in err_lower or "only approved for use with test accounts" in err_lower:
+    # Access levels belong to the Google Cloud project that owns the OAuth
+    # client (developer tokens were sunset on 2026-09-09). v25+ names the
+    # project; older API versions still answer with the token wording.
+    if (
+        "cloud_project_not_approved_for_production" in err_lower
+        or "developer_token_not_approved" in err_lower
+        or "only approved for use with test accounts" in err_lower
+    ):
         return {
             "error": (
-                "Google Ads authorization failed — developer token is not "
-                "approved for production accounts."
+                "Google Ads authorization failed — your Google Cloud project's "
+                "API access level (Test) cannot reach production accounts."
             ),
             "hint": (
-                "This developer token can only access Google Ads test accounts. "
-                "Apply for Basic or Standard access in the Google Ads API Center, "
-                "or switch AdLoop to a test account."
+                "Open the project's Google Ads API Overview page "
+                "(https://console.cloud.google.com/google/ads-apis/overview) and "
+                "apply for Explorer access (usually granted automatically) or "
+                "Basic access (needs the OAuth consent screen brand-verified: "
+                "External and In production). Or switch AdLoop to a test account."
             ),
-            "auth_error": "DEVELOPER_TOKEN_NOT_APPROVED",
+            "auth_error": "CLOUD_PROJECT_NOT_APPROVED_FOR_PRODUCTION",
         }
 
     if "developer_token_invalid" in err_lower or "developer token is not valid" in err_lower:
         return {
-            "error": "Google Ads authentication failed — developer token is invalid.",
+            "error": "Google Ads authentication failed — the configured developer token is invalid.",
             "hint": (
-                "Update `ads.developer_token` in `~/.adloop/config.yaml` with "
-                "the token from your Google Ads manager account API Center. "
+                "Since September 2026 no developer token is needed: remove "
+                "`ads.developer_token` from `~/.adloop/config.yaml`. API access "
+                "belongs to the Google Cloud project that owns your OAuth client. "
                 "OAuth is working if GA4 tools succeed."
             ),
             "auth_error": "DEVELOPER_TOKEN_INVALID",