Apple Search Ads MCP server, with a policy gate.
Let agents manage Apple Search Ads campaigns inside hard bounds: reporting is free, and bids, budgets, statuses, and keywords are each their own grant — so a keyword-tuning agent can't touch your budgets.
https://app.gentkey.com/mcpclaude.ai (web & mobile) · Claude Code · Cursor · any MCP clientWhat’s free, what needs a grant.
Reads: Org discovery and campaign, ad group, and keyword reporting work with no grant.
Writes: Bid, budget, status, and keyword changes each sit behind their own grant — the same dollar-bounded model as Google Ads.
| Grant | What it governs |
|---|---|
apple-search-ads.read | Org discovery, campaign and keyword reporting — on by default |
apple-search-ads.write.budget | Campaign daily budgets — max $ change per call, plus hourly change and daily moved-total caps |
apple-search-ads.write.bid | Keyword and ad-group bids — max bid change per call and a hard bid ceiling |
apple-search-ads.write.status | Pausing and resuming campaigns, ad groups, keywords — rate-limited per hour |
apple-search-ads.write.keyword | Adding and removing targeting keywords and negatives — with a bid ceiling on added keywords |
Bounds the gate enforces with arithmetic.
apple-search-ads.write.bid · max bid ceiling = $5An agent tuning bids can raise a keyword to $4.80 but a $9 bid is denied — the ceiling holds no matter how the request is phrased, and the denial lands in the audit log.
Connect once, use everywhere.
Sign in at gentkey.com, add Apple Search Ads (api key), then point each client at your endpoint. Every client completes a standard OAuth flow and lands in your Gentkey — your connections, nobody else’s.
claude.ai (web & mobile)
- Settings → Connectors
- Add custom connector
- Paste
https://app.gentkey.com/mcpand finish the OAuth prompt
Claude Code
claude mcp add --transport http \
gentkey https://app.gentkey.com/mcpCursor
// .cursor/mcp.json
{
"mcpServers": {
"gentkey": { "url": "https://app.gentkey.com/mcp" }
}
}Things agents do with Apple Search Ads here.
- Which keywords have the highest cost per install this month?
- Lower the bid on keywords with CPI over $8 by 20%.
- Pause the ad groups with zero installs this week.
- Add these five search terms as exact-match keywords.
Custody, gating, and audit — built in.
The model never sees a credential
Your Apple Search Ads key is encrypted at rest and injected server-side at call time. Your stored credential never enters a context window.
Writes need a grant
Anything that changes state needs a capability you granted explicitly — revoke it and the next call is denied.
A trail you can act on
Every decision is attributed to the agent that made it — allowed, denied, or denied by constraint.
Fair questions.
Can I cap how much an agent changes bids?
Yes — the bid grant carries a max change per call and a hard bid ceiling, and the budget grant carries its own per-call and per-day dollar caps. The policy gate checks the arithmetic before anything reaches Apple.
What happens when an agent calls a Apple Search Ads write tool it hasn't been granted?
The call is denied at the gateway — nothing reaches Apple Search Ads — and the denial is recorded in the audit log along with the grant that would have authorized it, so you can decide deliberately instead of finding out later.
Where are my credentials stored?
Encrypted at rest (AES-256-GCM) on Gentkey's server and injected server-side at call time. No credential you store with Gentkey ever enters a model's context window or an agent's config file.
Can I use this from claude.ai's free plan?
Yes — and it's the strongest case for a gateway: free claude.ai accounts currently get a single custom connector, so pointing that one slot at Gentkey puts every connector you've linked behind it.
How do I revoke an agent's access?
Revoke the grant (the next write is denied) or revoke the agent's tokens entirely in one click. Other agents and their grants are untouched — no shared key to rotate.
Is Gentkey affiliated with Apple Search Ads?
No. Gentkey is an independent MCP gateway. Trademarks belong to their owners; where an official Apple Search Ads MCP server exists, Gentkey proxies it and adds custody, gating, and audit on top.
Often connected together.
Cut Apple Search Ads a smaller key.
Sign in, connect Apple Search Ads, and grant your first scoped capability in under a minute.