The address
https://mcp.bolrach.com/mcpNothing else needs typing. From that URL alone, the client finds Authvio, registers itself and opens the sign-in page.
Connecting a client
| Client | Where |
|---|---|
Claude | Settings, Connectors, Add custom connector, then paste the address |
Claude Code | The claude mcp add command below, then /mcp to sign in |
ChatGPT | Developer mode on, then Settings, Apps and connectors, Create, with OAuth |
Others | Any client with Streamable HTTP and OAuth support |
claude mcp add --transport http bolrach https://mcp.bolrach.com/mcpEach one ends on the Authvio consent screen. The person signs in, looks over the permissions and presses Allow. With Claude Code the browser opens on the developer's own machine and the token never leaves it.
The tools
| Group | Tools |
|---|---|
Accounts | list_ad_accounts, create_sandbox_account |
Campaigns | list, get, create, update, set budget, activate, pause, resume, delete |
Ad groups | list, create, update, set targeting |
Creatives | list, create, update, delete, upload image, draft ad copy |
A/B tests | start, read results, auto-pause on or off, stop |
Reports | get_campaign_report |
Look closely at a tool in Claude and a small label says whether it only reads or will add or change something. Claude and ChatGPT both put that flag in front of the person before running it. Deleting and spending get a confirmation prompt in clients that offer one.
Permissions on the consent screen
| Permission | What the assistant may do |
|---|---|
Read | See accounts and campaigns |
Reports | Read results and A/B tests |
Write | Create and change drafts, run sandbox tests |
Publish | Start or resume a campaign, test on a live account, raise a running budget |
Publish is the one that spends. Many people leave it off at first. The assistant then gets a campaign ready, and the owner presses start in the console after looking it over.
An assistant reaches the accounts its person can reach at bolrach.com/ads, with the same rights and no more. Each change lands in the account's audit log under that person's name and the client's. The Ads API page lists every permission in detail.
A safe first run
The first request worth making is "make me a sandbox". Campaigns there see test placements only and cannot spend a cent. Watching an A/B test take shape in one tells a new user more than this page does.
Disconnecting
Open the Authvio account, go to Connected apps and remove the client. The token dies with it.
What the server does not do
The server shows no ads of its own and trains no model on anyone's account. It stores no campaigns either; each answer is read fresh from Bolrach Ads.