registry / mcp-vk-ads / 1.2.1

mcp-vk-ads@1.2.1

MCP server for the VK Ads (VK Реклама) API — manage ad plans, ad groups, banners and pull statistics from AI agents.

AI Security Review

scanned 8h ago · by lpm-firewall-ai

This is an MCP server with user-invoked tools that can create, modify, stop, or delete VK Ads objects using a supplied token. No covert install-time or foreign-control-surface behavior is established.

Static reason

No blocking static signals were detected.

Trigger

Running the mcp-vk-ads binary and invoking a write-capable MCP tool with valid VK Ads credentials.

Impact

An authorized or overly-permitted MCP client could alter or delete advertising campaigns, groups, and banners.

Mechanism

Authenticated VK Ads API mutation through MCP tools

Rationale

No concrete malicious behavior was found. It nevertheless provides a high-impact, agent-accessible advertising-account mutation capability, so it warrants a warning rather than a publication block.

Evidence

package.jsondist/config.jsdist/client.jsdist/index.jsdist/tools/raw.jsdist/tools/util.jsdist/tools/adPlans.jsdist/tools/adGroups.jsdist/tools/banners.js

Network endpoints1

ads.vk.com/api

Decision evidence

public snapshot

mcp-vk-ads@1.2.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code