Access Security & Privacy
Details of our enterprise-grade security and privacy protocol for connecting Google Ad Manager.
REST endpoints
| Method | Path | Description | Credits |
|---|---|---|---|
| GET | /api/gam/credentials/check | Validate the state of the user's OAuth connection | 0 |
| POST | /api/auth/logout | Revoke the session and purge the Firestore caches | 0 |
MCP tools
| Tool | Description | Credits |
|---|---|---|
| check_credentials | Check the authentication status and the audit history | 0 |
| query_audit_log | History of requests and actions performed through the API | 0 |
Examples
Check the connection via MCP
{
"tool": "check_credentials",
"arguments": {}
}Notes
- • The application never has access to your Google passwords; the connection is delegated through OAuth 2.0.
- • Every refresh token is envelope-encrypted at rest via Google KMS.
- • All requests and budgets are isolated at the Firebase UID tenant level.
- • No report or budget is persistently retained on our servers.