公开记录良好
软件健康报告模式 0.27.0 · 指标 2.3.1 · 2026-07-30 17:26 UTC
pipeboard-co / meta-ads-mcp
Meta Ads (Facebook/Instagram) MCP server for Claude, ChatGPT, Perplexity & Cursor — the Meta node of Pipeboard’s 5-platform family (+ Google, TikTok, Snap, Reddit). Hosted remote MCP, badged Meta Business Partner, free plan — no self-hosting required.
pipeboard-co/meta-ads-mcp 的健康指数为 100 分中的 75 分，处于「良好」区间。 其得分最高的类别是Vitality（94/100），最低的是AI Readiness（45/100）。 最近一次更新在今天。 近期的大部分工作由 1 位贡献者完成。
75
总分 / 100软件健康指数
指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均，再依据公开记录的分布进行校准，使各等级具有百分位含义；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 34（存在风险）的上限。
75
卓越93-100公开记录中的最高层级（约前 5%）；基本满足所有检验标准
优秀80-92各方面均表现强劲；仅有少量不足
良好65-79健康；不足之处有限且可控
中等50-64可接受，但存在明显不足；建议进行审查
薄弱35-49多个领域存在实质性薄弱环节
存在风险20-34存在重大薄弱环节；采用时应保持审慎
危急1-19问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
评分画像
每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。
加权总体分 65 经校准后在公布的指数量表上为 75（记录校准 2026-08-02）。
所有权
软件包生态系统
按类别列示的指标
活力
项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？
94
开发活跃度
90优秀
评分方式
| 36/36 | 推送新近度 — 最近一次推送于 0 天前 |
| 26.3/36 | 提交节奏 — 52 周中有 38 周有提交 |
| 18/18 | 提交量 — 最近一年 327 次提交 |
| 10/10 | OpenSSF Scorecard：Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
所用输入
| commits_last_year | 327 |
| human_commit_share | 0.99 |
| days_since_last_push | 0 |
| active_weeks_last_year | 38 |
发布纪律
100卓越
评分方式
| 27/27 | 有发布版本 — 已发布 100 个发布版本 |
| 36/36 | 发布时效 — 最近一次发布版本于 0 天前 |
| 27/27 | 发布节奏 — 约每 7.9 天发布一次 |
| 0/10 | OpenSSF Scorecard：Signed-Releases — 无数据 |
所用输入
| releases_count | 100 |
| latest_release_tag | 1.0.119 |
| releases_from_tags | 否 |
| days_since_latest_release | 0 |
| mean_days_between_releases | 7.9 |
已排除计分（无数据或不适用）：OpenSSF Scorecard：Signed-Releases。 其余权重已重新归一化。
社区与采用
项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？
61
流行度与采用
76良好
评分方式
| 49.4/60 | 星标 — 1,117 个星标 |
| 20.1/25 | 复刻 — 259 个复刻 |
| 6.4/15 | 关注者 — 15 位关注者 |
所用输入
| forks | 259 |
| stars | 1,117 |
| watchers | 15 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
社区健康
44薄弱
评分方式
| 22.5/22.5 | README |
| 16.9/22.5 | 许可证 — 存在许可证文件，但不是可识别的许可证 |
| 0/18 | CONTRIBUTING 指南 |
| 0/13.5 | 行为准则 |
| 0/7.2 | 议题模板 |
| 0/6.3 | PR 模板 |
所用输入
| has_readme | 是 |
| has_license | 是 |
| readme_badges | — |
| has_contributing | 否 |
| has_issue_template | 否 |
| has_code_of_conduct | 否 |
| readme_badge_services | — |
| has_pull_request_template | 否 |
可持续性与治理
项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？
53
维护者韧性（巴士系数）
19危急
评分方式
| 9/54 | 巴士系数 — 1 位贡献者贡献了半数提交 |
| 0.5/22.5 | 提交分布 — 头号贡献者编写了 98% 的提交 |
| 9.5/13.5 | 贡献者广度 — 7 位贡献者 |
| 0/10 | OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
所用输入
| bus_factor | 1 |
| contributors_sampled | 7 |
| top_contributor_share | 0.98 |
议题与 PR 响应能力
62中等
评分方式
| 28/42 | 议题解决 — 67% 的议题已关闭 |
| 26/30 | PR 接受 — 已裁定的 PR 中 97/112 已合并 |
| 0/13 | Newcomer PR acceptance — 30 天内没有首次贡献者的 PR 得到裁决 |
| 0/15 | OpenSSF Scorecard：Code-Review — Found 1/29 approved changesets -- score normalized to 0 |
所用输入
| merged_prs | 97 |
| open_issues | 11 |
| closed_issues | 22 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.667 |
| closed_unmerged_prs | 15 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
已排除计分（无数据或不适用）：newcomer_pr_acceptance。 其余权重已重新归一化。
所有权与托管责任
48薄弱
评分方式
| 30/30 | 所有权背书 — 组织持有 |
| 0/20 | 已验证域名 |
| 9.9/25 | 所有者影响力 — pipeboard-co 有 23 位关注者 |
| 7.7/25 | 既往记录 — 4 个公开仓库，账户约 1 年 |
所用输入
| followers | 23 |
| owner_type | Organization |
| is_verified | — |
| owner_login | pipeboard-co |
| public_repos | 4 |
| account_age_days | 471 |
软件包维护
100卓越
评分方式
| 25/25 | 已发布且可解析 — pypi 上有 1 个软件包 |
| 35/35 | 发布时效 — 最近一次发布于 0 天前 |
| 20/20 | 版本历史 — 177 个已发布版本 |
| 20/20 | 未被弃用 — 活跃，未被弃用或撤回 |
所用输入
| packages | meta-ads-mcp |
| ecosystems | pypi |
| any_deprecated | 否 |
| min_days_since_publish | 0 |
工程质量
基础的工程与文档实践是否到位？
67
工程实践
68良好
评分方式
| 24/24 | CI 工作流 — 3 个工作流 |
| 24/24 | 存在测试 |
| 0/16 | Linter 配置 |
| 0/9.6 | Pre-commit 钩子 |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard：CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
所用输入
| has_ci | 是 |
| has_tests | 是 |
| has_editorconfig | 否 |
| has_linter_config | 否 |
| has_precommit_config | 否 |
文档
65良好
评分方式
| 30/30 | README |
| 0/25 | 文档目录 |
| 15/15 | 文档 / 主页站点 — https://pipeboard.co |
| 10/10 | 仓库描述 |
| 10/10 | 主题标签 — 10 个主题标签 |
| 0/10 | Wiki |
所用输入
| topics | advertising, ai-agents, chatgpt, claude, facebook-ads, instagram-ads, mcp, meta-ads, model-context-protocol, pipeboard |
| has_wiki | 否 |
| homepage | https://pipeboard.co |
| has_readme | 是 |
| has_docs_dir | 否 |
| has_description | 是 |
安全
可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？
54
安全态势
49薄弱
评分方式
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/29 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | 许可证 — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — 无数据 |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 21 existing vulnerabilities detected |
所用输入
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4.9 |
已排除计分（无数据或不适用）：signed_releases。 其余权重已重新归一化。
依赖安全公告
72良好
评分方式
| 13.7/35 | 直接依赖不含已知公告 — 1 个受影响：mcp 1.23.0 (high 7.6) |
| 0/25 | 间接依赖不含已知公告 — 在此范围内，传递依赖集合无法与开发和测试依赖区分 |
| 40/40 | 没有长期未处理的公告 — 没有公告公开超过 90 天 |
所用输入
| source | osv |
| advisories | 6 |
| affected_packages | 1 |
| assessed_packages | 1 |
| unassessed_packages | 10 |
| affected_by_severity | high 1 |
| direct_affected_packages | 1 |
已排除计分（无数据或不适用）：间接依赖不含已知公告。 其余权重已重新归一化。 已将 1 个已解析依赖与 OSV 比对。 有 10 项无法评估——没有已解析的版本、生态系统不受支持，或超出所报告的软件包清单。 该仓库未发布任何索引可解析的软件包，因此改为评估仓库依赖图。该图将开发与测试版本固定同交付的依赖混在一起，因此仅对声明的运行时依赖计分；传递性发现仅作为背景信息列出，不计入评分。 未对可达性进行分析。
AI 就绪度
该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？权重刻意设小（4%）：代理工具链是一项真实的维护信号，但完全不具备的仓库仍可达到 100/100。
45
AI 代理上下文与指引
40薄弱
评分方式
| 0/45 | 代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则 |
| 0/15 | 机器可读文档（llms.txt） |
| 40/40 | 可读的提交历史 — 99 次人类提交中有 86 次说明了意图（结构化标题或解释性正文） |
所用输入
| has_llms_txt | 否 |
| legible_history_share | 0.869 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
评分方式
| 0/18 | 一条命令的引导启动 |
| 22/22 | 自动化测试 |
| 0/11 | Lint / 格式化配置 |
| 0/11 | 静态类型检查 |
| 10/10 | 可复现环境 — Dockerfile |
| 0/10 | 已体现的代理实践 — 最近 100 次提交中没有代理编写的提交 |
| 8/8 | 自动化维护 — 最近 100 次提交中有 1 次为自动依赖更新 |
| 0/10 | OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
所用输入
| has_nix | 否 |
| has_tests | 是 |
| lockfiles | — |
| has_dockerfile | 是 |
| typed_language | 否 |
| bootstrap_files | — |
| has_devcontainer | 否 |
| has_linter_config | 否 |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.01 |
面向模型的代码可读性
54中等
评分方式
| 0/45 | 可类型检查的代码 — Python，未配置类型检查 |
| 53.7/55 | 可控的文件大小 — 采样的 87 个源文件中有 2 个超过 60KB |
所用输入
| primary_language | Python |
| largest_source_bytes | 170,015 |
| source_files_sampled | 87 |
| oversized_source_files | 2 |
机器可读接口
60中等
评分方式
| 0/40 | API 模式（OpenAPI/GraphQL/proto） |
| 20/20 | MCP 服务器 |
| 40/40 | 可运行示例 — examples |
所用输入
| example_dirs | examples |
| has_mcp_signal | 是 |
| api_schema_files | — |
关键数据
1,117GitHub 星标
7贡献者
327最近 12 个月提交数
0距最近推送天数
100发布版本数
1巴士系数（bus factor）
11开放议题
PyPI软件包生态系统数
数据采集警告
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- deps.dev does not index pypi:meta-ads-mcp@1.0.119; advisories assessed against the repository dependency graph instead
更多细节
Star 与 Fork 历史 0 ★ / 259 ⇿
0Star
259Fork
99发布
每颗 star 和每个 fork 的添加时间，来自 GitHub 并按天汇总。累计增长位于其构成来源——每日新增——的正上方，二者可相互对照：稳定的自然增长与短暂的突增形态截然不同。当这一差别可被衡量时，它会作为增长真实性予以报告。
主版本 0次版本 0修订 99
每个点涵盖 2 天。
OpenSSF Scorecard 4.9 / 10
4.9综合
来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/29 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| 不适用 | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 21 existing vulnerabilities detected |
直接依赖 10
| 注册表 | 软件包 | 版本约束 | 清单文件 |
|---|---|---|---|
| PyPI | httpx | >=0.26.0 | pyproject.toml |
| PyPI | mcp | ==1.23.0 | pyproject.toml |
| PyPI | starlette | >=1.0.1 | pyproject.toml |
| PyPI | python-dotenv | >=1.1.0 | pyproject.toml |
| PyPI | requests | >=2.32.3 | pyproject.toml |
| PyPI | Pillow | >=10.0.0 | pyproject.toml |
| PyPI | pathlib | >=1.0.1 | pyproject.toml |
| PyPI | python-dateutil | >=2.8.2 | pyproject.toml |
| PyPI | pytest | >=8.4.1 | pyproject.toml |
| PyPI | pytest-asyncio | >=1.0.0 | pyproject.toml |
全部依赖 11
来自 GitHub 依赖图的完整解析依赖集合：11 个直接依赖与 0 个间接（传递）软件包。仓库提交锁文件时，传递闭包才是完整的。
| 注册表 | 软件包 | 版本 | 关系 |
|---|---|---|---|
| PyPI | httpx | — | 直接 |
| PyPI | mcp | — | 直接 |
| PyPI | mcp | 1.23.0 | 直接 |
| PyPI | pathlib | — | 直接 |
| PyPI | pillow | — | 直接 |
| PyPI | pytest | — | 直接 |
| PyPI | pytest-asyncio | — | 直接 |
| PyPI | python-dateutil | — | 直接 |
| PyPI | python-dotenv | — | 直接 |
| PyPI | requests | — | 直接 |
| PyPI | starlette | — | 直接 |
依赖安全公告 1
该仓库未发布可被索引解析的包，因此评估的是其自身的依赖图——共 1 个包，其中也包含从不交付的开发与测试版本固定：1 个存在已知公告，1 个为直接依赖。 有 10 个无法评估——没有已解析的版本、生态系统不受支持，或不在所列包清单之内。
| 软件包 | 版本 | 关系 | 严重程度 | 公告数 | 修复版本 |
|---|---|---|---|---|---|
| mcp | 1.23.0 | 直接 | 高 | 6 | 1.28.1 |
公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。
原始 JSON 报告 机器可读
{
"data": {
"repo": {
"topics": [
"advertising",
"ai-agents",
"chatgpt",
"claude",
"facebook-ads",
"instagram-ads",
"mcp",
"meta-ads",
"model-context-protocol",
"pipeboard"
],
"is_fork": false,
"size_kb": 2223,
"has_wiki": false,
"homepage": "https://pipeboard.co",
"languages": {
"Shell": 4121,
"Python": 1341907,
"Dockerfile": 545
},
"pushed_at": "2026-07-30T17:23:18Z",
"created_at": "2025-04-11T20:53:47Z",
"owner_type": "Organization",
"updated_at": "2026-07-30T17:22:14Z",
"description": "Meta Ads (Facebook/Instagram) MCP server for Claude, ChatGPT, Perplexity & Cursor — the Meta node of Pipeboard’s 5-platform family (+ Google, TikTok, Snap, Reddit). Hosted remote MCP, badged Meta Business Partner, free plan — no self-hosting required.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "pipeboard-co",
"company": null,
"location": null,
"followers": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/207607208?v=4",
"created_at": "2025-04-14T18:32:08Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 471
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "1.0.119",
"kind": "patch",
"published_at": "2026-07-30T17:23:18Z"
},
{
"tag": "1.0.118",
"kind": "patch",
"published_at": "2026-07-13T18:30:33Z"
},
{
"tag": "1.0.117",
"kind": "patch",
"published_at": "2026-06-08T21:03:04Z"
},
{
"tag": "1.0.116",
"kind": "patch",
"published_at": "2026-06-08T16:57:44Z"
},
{
"tag": "1.0.115",
"kind": "patch",
"published_at": "2026-06-05T18:57:03Z"
},
{
"tag": "1.0.113",
"kind": "patch",
"published_at": "2026-05-29T16:44:52Z"
},
{
"tag": "1.0.112",
"kind": "patch",
"published_at": "2026-05-27T23:39:12Z"
},
{
"tag": "1.0.111",
"kind": "patch",
"published_at": "2026-05-27T12:50:53Z"
},
{
"tag": "1.0.110",
"kind": "patch",
"published_at": "2026-05-23T13:48:14Z"
},
{
"tag": "1.0.109",
"kind": "patch",
"published_at": "2026-05-20T20:14:29Z"
},
{
"tag": "1.0.108",
"kind": "patch",
"published_at": "2026-05-20T19:20:22Z"
},
{
"tag": "1.0.107",
"kind": "patch",
"published_at": "2026-05-20T18:46:54Z"
},
{
"tag": "1.0.106",
"kind": "patch",
"published_at": "2026-05-20T18:38:36Z"
},
{
"tag": "1.0.105",
"kind": "patch",
"published_at": "2026-05-19T13:14:57Z"
},
{
"tag": "1.0.104",
"kind": "patch",
"published_at": "2026-05-19T12:42:35Z"
},
{
"tag": "1.0.103",
"kind": "patch",
"published_at": "2026-05-14T22:12:56Z"
},
{
"tag": "1.0.102",
"kind": "patch",
"published_at": "2026-05-14T21:00:15Z"
},
{
"tag": "v1.0.101",
"kind": "patch",
"published_at": "2026-05-12T15:05:28Z"
},
{
"tag": "v1.0.100",
"kind": "patch",
"published_at": "2026-05-11T18:21:44Z"
},
{
"tag": "v1.0.99",
"kind": "patch",
"published_at": "2026-05-08T04:20:10Z"
},
{
"tag": "v1.0.98",
"kind": "patch",
"published_at": "2026-05-07T20:32:34Z"
},
{
"tag": "v1.0.97",
"kind": "patch",
"published_at": "2026-05-05T00:55:58Z"
},
{
"tag": "v1.0.96",
"kind": "patch",
"published_at": "2026-05-05T00:06:28Z"
},
{
"tag": "v1.0.95",
"kind": "patch",
"published_at": "2026-05-04T23:28:19Z"
},
{
"tag": "v1.0.94",
"kind": "patch",
"published_at": "2026-05-04T14:59:12Z"
},
{
"tag": "v1.0.93",
"kind": "patch",
"published_at": "2026-04-30T22:08:09Z"
},
{
"tag": "v1.0.92",
"kind": "patch",
"published_at": "2026-04-30T21:21:45Z"
},
{
"tag": "v1.0.91",
"kind": "patch",
"published_at": "2026-04-30T19:53:15Z"
},
{
"tag": "v1.0.90",
"kind": "patch",
"published_at": "2026-04-22T22:40:03Z"
},
{
"tag": "v1.0.89",
"kind": "patch",
"published_at": "2026-04-22T22:20:43Z"
},
{
"tag": "1.0.88",
"kind": "patch",
"published_at": "2026-04-22T18:16:51Z"
},
{
"tag": "1.0.87",
"kind": "patch",
"published_at": "2026-04-22T15:01:34Z"
},
{
"tag": "1.0.86",
"kind": "patch",
"published_at": "2026-04-17T14:50:45Z"
},
{
"tag": "1.0.85",
"kind": "patch",
"published_at": "2026-04-17T14:34:06Z"
},
{
"tag": "1.0.84",
"kind": "patch",
"published_at": "2026-04-14T00:28:53Z"
},
{
"tag": "1.0.83",
"kind": "patch",
"published_at": "2026-04-13T23:48:20Z"
},
{
"tag": "v1.0.82",
"kind": "patch",
"published_at": "2026-04-13T06:44:42Z"
},
{
"tag": "1.0.81",
"kind": "patch",
"published_at": "2026-04-11T20:11:21Z"
},
{
"tag": "1.0.80",
"kind": "patch",
"published_at": "2026-04-10T14:39:06Z"
},
{
"tag": "1.0.79",
"kind": "patch",
"published_at": "2026-04-10T00:12:42Z"
},
{
"tag": "1.0.78",
"kind": "patch",
"published_at": "2026-04-09T22:48:46Z"
},
{
"tag": "1.0.77",
"kind": "patch",
"published_at": "2026-04-08T01:29:29Z"
},
{
"tag": "1.0.76",
"kind": "patch",
"published_at": "2026-04-06T18:54:06Z"
},
{
"tag": "1.0.75",
"kind": "patch",
"published_at": "2026-04-06T00:00:16Z"
},
{
"tag": "1.0.74",
"kind": "patch",
"published_at": "2026-04-05T18:57:39Z"
},
{
"tag": "1.0.73",
"kind": "patch",
"published_at": "2026-04-05T18:29:32Z"
},
{
"tag": "1.0.72",
"kind": "patch",
"published_at": "2026-04-05T18:25:21Z"
},
{
"tag": "1.0.71",
"kind": "patch",
"published_at": "2026-04-05T18:17:04Z"
},
{
"tag": "1.0.70",
"kind": "patch",
"published_at": "2026-04-02T01:08:58Z"
},
{
"tag": "1.0.69",
"kind": "patch",
"published_at": "2026-04-01T19:32:17Z"
},
{
"tag": "1.0.68",
"kind": "patch",
"published_at": "2026-03-30T22:51:09Z"
},
{
"tag": "1.0.67",
"kind": "patch",
"published_at": "2026-03-28T20:34:37Z"
},
{
"tag": "1.0.66",
"kind": "patch",
"published_at": "2026-03-25T22:26:34Z"
},
{
"tag": "1.0.65",
"kind": "patch",
"published_at": "2026-03-24T20:48:33Z"
},
{
"tag": "1.0.64",
"kind": "patch",
"published_at": "2026-03-24T16:07:39Z"
},
{
"tag": "1.0.63",
"kind": "patch",
"published_at": "2026-03-24T04:11:15Z"
},
{
"tag": "1.0.62",
"kind": "patch",
"published_at": "2026-03-24T03:21:41Z"
},
{
"tag": "1.0.61",
"kind": "patch",
"published_at": "2026-03-23T16:52:59Z"
},
{
"tag": "1.0.60",
"kind": "patch",
"published_at": "2026-03-19T17:19:53Z"
},
{
"tag": "1.0.59",
"kind": "patch",
"published_at": "2026-03-17T18:52:26Z"
},
{
"tag": "1.0.58",
"kind": "patch",
"published_at": "2026-03-17T18:30:17Z"
},
{
"tag": "1.0.57",
"kind": "patch",
"published_at": "2026-03-13T22:13:28Z"
},
{
"tag": "1.0.56",
"kind": "patch",
"published_at": "2026-03-13T04:35:36Z"
},
{
"tag": "1.0.55",
"kind": "patch",
"published_at": "2026-03-12T19:22:34Z"
},
{
"tag": "1.0.54",
"kind": "patch",
"published_at": "2026-03-10T12:31:58Z"
},
{
"tag": "1.0.53",
"kind": "patch",
"published_at": "2026-03-10T00:25:43Z"
},
{
"tag": "1.0.52",
"kind": "patch",
"published_at": "2026-03-09T21:34:17Z"
},
{
"tag": "1.0.51",
"kind": "patch",
"published_at": "2026-03-06T01:36:42Z"
},
{
"tag": "1.0.50",
"kind": "patch",
"published_at": "2026-03-04T22:40:14Z"
},
{
"tag": "1.0.49",
"kind": "patch",
"published_at": "2026-03-03T22:21:59Z"
},
{
"tag": "1.0.48",
"kind": "patch",
"published_at": "2026-03-02T13:10:12Z"
},
{
"tag": "1.0.47",
"kind": "patch",
"published_at": "2026-02-28T00:30:14Z"
},
{
"tag": "1.0.46",
"kind": "patch",
"published_at": "2026-02-26T00:17:53Z"
},
{
"tag": "1.0.45",
"kind": "patch",
"published_at": "2026-02-22T22:21:14Z"
},
{
"tag": "1.0.44",
"kind": "patch",
"published_at": "2026-02-21T23:08:04Z"
},
{
"tag": "1.0.43",
"kind": "patch",
"published_at": "2026-02-19T22:38:29Z"
},
{
"tag": "1.0.42",
"kind": "patch",
"published_at": "2026-02-19T21:21:29Z"
},
{
"tag": "1.0.41",
"kind": "patch",
"published_at": "2026-02-19T19:19:20Z"
},
{
"tag": "1.0.40",
"kind": "patch",
"published_at": "2026-02-18T23:56:53Z"
},
{
"tag": "1.0.39",
"kind": "patch",
"published_at": "2026-02-18T05:12:28Z"
},
{
"tag": "1.0.38",
"kind": "patch",
"published_at": "2026-02-17T17:49:48Z"
},
{
"tag": "1.0.36",
"kind": "patch",
"published_at": "2026-02-17T06:11:45Z"
},
{
"tag": "1.0.35",
"kind": "patch",
"published_at": "2026-02-17T04:36:56Z"
},
{
"tag": "1.0.34",
"kind": "patch",
"published_at": "2026-02-16T10:58:33Z"
},
{
"tag": "1.0.33",
"kind": "patch",
"published_at": "2026-02-12T03:06:32Z"
},
{
"tag": "1.0.32",
"kind": "patch",
"published_at": "2026-02-12T03:01:52Z"
},
{
"tag": "1.0.31",
"kind": "patch",
"published_at": "2026-02-12T01:25:54Z"
},
{
"tag": "1.0.30",
"kind": "patch",
"published_at": "2026-02-11T05:27:55Z"
},
{
"tag": "1.0.29",
"kind": "patch",
"published_at": "2026-02-11T05:15:22Z"
},
{
"tag": "1.0.28",
"kind": "patch",
"published_at": "2026-02-11T03:07:05Z"
},
{
"tag": "1.0.27",
"kind": "patch",
"published_at": "2026-02-11T02:34:27Z"
},
{
"tag": "1.0.26",
"kind": "patch",
"published_at": "2026-02-10T18:16:08Z"
},
{
"tag": "1.0.25",
"kind": "patch",
"published_at": "2026-02-09T01:40:56Z"
},
{
"tag": "1.0.24",
"kind": "patch",
"published_at": "2026-02-05T21:35:26Z"
},
{
"tag": "1.0.23",
"kind": "patch",
"published_at": "2026-02-03T20:29:04Z"
},
{
"tag": "1.0.22",
"kind": "patch",
"published_at": "2026-02-02T15:45:55Z"
},
{
"tag": "1.0.21",
"kind": "patch",
"published_at": "2026-01-27T18:40:49Z"
},
{
"tag": "1.0.20",
"kind": "patch",
"published_at": "2025-12-19T19:04:26Z"
},
{
"tag": "1.0.19",
"kind": "patch",
"published_at": "2025-12-19T18:19:14Z"
},
{
"tag": "1.0.18",
"kind": "patch",
"published_at": "2025-12-19T18:05:17Z"
}
],
"recent_commits": [
{
"oid": "ef2592d2d1b0702daa4793dedadf862cad5aedc0",
"body": "…response (GHSA-8353-5qhw-8hfw) (#151)\n\n* fix(security): attach HTTP auth middleware to served app under --sse-response (GHSA-8353-5qhw-8hfw)\n\nThe streamable-http auth gate was attached to the response app selected by\njson_response, so under --sse-response it landed on an app that is not served\nand \n[…]\nr patch loop. Documents the HTTP per-request auth\nmodel in STREAMABLE_HTTP_SETUP.md and the advisory in SECURITY.md.\n\nBump to 1.0.119.\n\n* chore(release): bump server.json to 1.0.119 to match pyproject",
"is_bot": false,
"headline": "fix(security): attach HTTP auth middleware to served app under --sse-…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-07-30T17:19:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b612c7d59646c76cc544d2d224baa550ca6b046",
"body": "Release includes changes merged since 1.0.117 (#141):\n- fix(security): stop make_api_request mutating the caller's params dict / token leak (#145)\n- fix(targeting): accept custom_locations/places/electoral_districts in estimate_audience_size preflight (#147)\n- docs(readme): Meta Business Partner positioning + multi-platform/hosted lede (#142, #146)",
"is_bot": false,
"headline": "chore(release): bump to 1.0.118 (#148)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-07-13T18:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db8b9b8de5d6ef0f531c465f2d98dcbdc0c9779f",
"body": "… estimate_audience_size preflight check (#147)\n\nThe preflight validator in estimate_audience_size only recognized\ncountries/regions/cities/zips/geo_markets/country_groups as valid\ngeo_locations keys. A targeting spec using radius-based custom_locations\n(or the less common places/electoral_districts\n[…]\n electoral_districts to the recognized\nkey list and updates the corresponding error messages. Adds regression\ntests covering each newly-accepted key plus a still-rejected case with\nno location at all.",
"is_bot": false,
"headline": "fix(targeting): accept custom_locations/places/electoral_districts in…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-07-13T18:13:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "225f46f5586a66add4e30cca218c5e88982e066c",
"body": "…EO) (#146)\n\nThe AEO re-measure (SEO tree n_eacb4cbd) found ChatGPT/Perplexity\nmisframe Pipeboard as 'Meta-only' and 'source-available/self-host'.\nThe first README paragraph is what answer engines weight most, and it\nled Meta-only with no client list or hosted/no-self-host signal.\n\n- Lede now names \n[…]\nerplexity to the family 'plug into any client' line.\n\nNewer Claude models (sonnet-4-6, opus-4-8) already cite this README and\nget multi-platform right; this hardens the top for the engines that don't.",
"is_bot": false,
"headline": "docs(readme): front-load multi-platform + hosted + clients in lede (A…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-07-09T22:58:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "555ae487f4a88cf4ea148ca58d9ff33d56c356c1",
"body": "…t (token leak) (#145)\n\nmake_api_request took the caller's params dict by reference\n(request_params = params or {}) and then injected access_token /\nappsecret_proof and json.dumps'd dict/list values into it. Any tool that\nechoes its params back to the user AFTER the call leaked the user's Meta\nacces\n[…]\nw-copy the params before injecting credentials and\nserializing. The outgoing wire format is unchanged (token still sent,\ndict/list values still JSON-stringified) — covered by the new regression\ntests.",
"is_bot": false,
"headline": "fix(security): stop make_api_request mutating the caller's params dic…",
"author_name": "George Phelipe Azevedo",
"author_login": "george-pipeboard",
"committed_at": "2026-07-07T19:42:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "24a155c94577332891eea8ba8b522fad18d92fe6",
"body": "…e (AEO) (#142)\n\nAnswer-engine visibility check (ChatGPT/Claude/Perplexity) found this repo is\na top citation source for \"best Meta Ads MCP\" — but the README never stated\nPipeboard's differentiators, so Perplexity misdescribed us as \"Meta-only\" and\n\"open-source-style.\" Fixes:\n\n- Intro note now state\n[…]\nies. Honest: credits Meta's official connector as the safest\n single-platform option; positions Pipeboard as the cross-platform choice.\n- Features: added a Partner-backed / free-plan / hosted bullet.",
"is_bot": false,
"headline": "docs(readme): add Meta Business Partner positioning + comparison tabl…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-07-01T17:03:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15bddc3cfe05b4e76be27da027c1d42edb475546",
"body": "* fix(insights): keep action data on platform_position breakdown (bump 1.0.117)\n\nget_insights with breakdown=platform_position was dropping the action-typed fields (actions, action_values, conversions, cost_per_action_type), so placement-level reports lost leads, CPL, and conversions while spend/cli\n[…]\n, and [action_type]). Stripping the fields was an unnecessary over-correction.\n\nRemoves the field-stripping path and its constants; adds regression tests.\n\n* chore: sync server.json version to 1.0.117",
"is_bot": false,
"headline": "fix(insights): keep leads/CPL on platform_position breakdown (#141)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-06-08T21:02:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b996a6aaca79351d107e4bf521272c43717f07a6",
"body": "…#140)\n\n* docs(create_adset): clarify OUTCOME_ENGAGEMENT conversion locations\n\nOn Post engagement uses destination_type=ON_POST (not ON_AD) and needs promoted_object={page_id} set at creation (immutable; otherwise create_ad fails with subcode 1885154). ON_AD is the OUTCOME_LEADS instant-form destina\n[…]\nD_PAGE_ENGAGEMENT) is not available via the Marketing API for OUTCOME_ENGAGEMENT. Docstring only; no behavior change (destination_type still passes through to Meta).\n\n* chore(release): bump to 1.0.116",
"is_bot": false,
"headline": "docs(create_adset): clarify OUTCOME_ENGAGEMENT conversion locations (…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-06-08T16:57:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "90bebea832b381abcbd022f3682d2902e9ec8d40",
"body": "Add the X-Pipeboard-Token auth-bypass advisory entry (fixed in 1.0.115) alongside the existing GHSA-45gf and GHSA-9gw6 entries. Documentation only; the fix already shipped.",
"is_bot": false,
"headline": "docs(security): document GHSA-2v2f-mvfg-ph56 in SECURITY.md (#139)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-06-05T19:37:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d9926336bbdac6285a988d043c4ccfe126c94c5",
"body": "…gf-fjxp-cjpq) (1.0.115) (#138)\n\nupload_ad_image and the image-viewing tools fetched a caller-supplied URL server-side with follow_redirects enabled and no host/IP validation, allowing the server to reach loopback, private-network, and cloud-metadata addresses.\n\n- Add validate_public_url(): allow on\n[…]\ntiple_download_methods raises so upload_ad_image surfaces a clear error.\n- Add tests (tests/test_ssrf_url_validation.py); document advisory in SECURITY.md; bump to 1.0.115.\n\nFixes GHSA-45gf-fjxp-cjpq.",
"is_bot": false,
"headline": "fix(security): block SSRF in upload_ad_image image_url fetch (GHSA-45…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-06-05T18:55:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "95e852793b7ff8604a8132e85d5facd08c91a36e",
"body": "…leware (1.0.114) (#137)\n\n* fix(auth): require a primary access-token credential at the HTTP middleware (1.0.114)\n\nTighten AuthInjectionMiddleware so it admits a request only when a primary access-token credential is present (Authorization: Bearer, X-META-ACCESS-TOKEN, or X-PIPEBOARD-API-TOKEN).\n\nX-\n[…]\n forwarded alongside a primary credential, so the duplication flow is unaffected.\n\nAdds regression tests and bumps the version to 1.0.114.\n\n* chore: bump server.json to 1.0.114 to match pyproject.toml",
"is_bot": false,
"headline": "fix(auth): require a primary access-token credential at the HTTP midd…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-06-05T17:26:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93083c6c79f9e64d390bb912fb12238f6b35add9",
"body": "…poetry.lock (#136)\n\nstarlette is pulled in transitively by mcp for the streamable-http transport. Versions <= 1.0.0 are affected by CVE-2026-48710 (BadHost), a Host-header validation bypass that can poison request.url.path and bypass path-based auth. Add an explicit starlette>=1.0.1 floor to pyproj\n[…]\ny.lock pinned starlette 0.46.1 and an outdated mcp 1.6.0; nothing builds from it (Docker and CI install from requirements.txt via uv), so it is removed. This clears the Dependabot alert at its source.",
"is_bot": false,
"headline": "fix(deps): require starlette>=1.0.1 (CVE-2026-48710) and drop unused …",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-06-05T16:42:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4f872bbba497e6ff0bcb18c960cdf86875d3706",
"body": "…13) (#134)\n\n* fix(auth): distinguish policy-blocked errors from token expiry (1.0.113)\n\nCode 368 (action disallowed) and code 190 + subcode 459 (user\ncheckpointed by Facebook security) leave the access token valid;\ninvalidating it and surfacing a renew-token message is misleading.\n\n- Skip auth_mana\n[…]\ntoken.\n- Other code 190 subcodes (458, 460, 463, 464, 467) remain genuine\n session errors and keep the existing invalidate + reauth path.\n\n* chore: bump server.json to 1.0.113 to match pyproject.toml",
"is_bot": false,
"headline": "fix(auth): distinguish policy-blocked errors from token expiry (1.0.1…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-29T16:44:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "24032e248422219f064dcfda01a70a37bb3fdb7a",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.112 (#133)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-27T23:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab6689f7b74f16c0f2456383655dc6b1105ef5ae",
"body": "When a video has not finished transcoding, Meta returns a placeholder\n\"picture\" (size 228x119, stp=dst-jpg_p228x119) instead of a real frame.\nUsing that placeholder in object_story_spec or asset_feed_spec yields a\nvideo ad with a tiny/blank poster in Ads Manager.\n\nThis change:\n- Requests thumbnails \n[…]\nusing the placeholder.\n- create_ad_creative now blocks attempts to wrap a still-processing\n video without an explicit thumbnail_url, with a clear error pointing\n callers at get_ad_video for polling.",
"is_bot": false,
"headline": "fix(video): surface real thumbnail frame and processing status (#132)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-27T23:36:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f57250ddd29d729c8fcdf6da766db7fa7997013",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.111 (#131)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-27T12:50:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85b40cdad371262c00797737675ab3f586869034",
"body": "* Fix DOF + video + multi-text returning Meta error_subcode 2061015\n\nFor DOF + video, the canonical Meta shape requires link_urls + CTA in\nasset_feed_spec and a bare object_story_spec (no video_data anchor).\nThe DOF branch in create_ad_creative was previously building a\nminimal AFS (DOF + image shap\n[…]\ned to expect the new OSS shape for DOF + video,\nincluding the CALL_NOW phone-number case.\n\nVerified end-to-end against the v24 sandbox 2026-05-27 via\npipeboard mcp tools-call bulk_create_ad_creatives.",
"is_bot": false,
"headline": "Fix DOF + video + multi-text returning Meta error 2061015 (#130)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-27T12:44:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4d12f6522bc18414e36e4074fe75d8ef0fa5be07",
"body": "…) (#129)\n\nNO-DEPLOY\n\nReframes README so single-platform comparisons cannot reduce Pipeboard to a Meta-only MCP. New top-level family section with verified tool counts (42/59/59/37/33 = 230+) and CLI placement. Removes redundant mid-document Also Available table.",
"is_bot": false,
"headline": "docs(readme): lead with Pipeboard MCP family (5 platforms, 230+ tools…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-26T21:23:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e339ad26e3e6972e39364a9a60cf7cfc03fbf99",
"body": "…ddit (#128)",
"is_bot": false,
"headline": "docs(readme): writes-first framing + subdomain URLs + add Snap and Re…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-24T15:55:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee92dc9290985330ed4860ac10e2a0302c0e418d",
"body": "* docs(upload_ad_image): tell LLMs the response carries a viewable URL\n\nThe Returns section only mentioned image_hash for create_ad_creative.\nProduction logs show LLMs receiving a hash from upload_ad_image and\nthen calling get_ad_image with (account_id, image_hash), getting a\nPydantic validation err\n[…]\nnd upload_ad_image docstrings to mention the new\ntool. Tests cover the happy path, act_-prefix normalization, and the\ntwo empty-input branches.\n\n* chore(release): bump to 1.0.110 for get_image_by_hash",
"is_bot": false,
"headline": "feat(meta-ads): get_image_by_hash tool + docs steering LLMs to it (#127)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-23T13:47:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0ce1ee646608d69190f08bc1f9fd1f8a23bf353",
"body": "…named mode (#126)\n\nThe PAC path (optimization_type=PLACEMENT + labelled videos[]/images[] +\nasset_customization_rules) was documented only inside individual parameter\ndocs. Add it as a first-class mode in the top-of-docstring summary so\ncallers can discover the dual-aspect, non-Dynamic-Creative shape without\nreading every parameter description. Notes the label-matching requirement\nand the matching error_subcode 1487390.",
"is_bot": false,
"headline": "docs(create_ad_creative): promote Placement Asset Customization to a …",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-22T02:00:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14d7371d4ed77b1e9bb04ff1d00e94e00eba32a7",
"body": "…n error URLs (GHSA-9gw6-46qc-99vr) (#125)\n\nTwo issues affected operators running --transport streamable-http with a\nMETA_ACCESS_TOKEN env var on a network-reachable port:\n\n- AuthInjectionMiddleware forwarded requests with no auth headers, so any\n caller could invoke MCP tools using the operator en\n[…]\n\n\nAdds SECURITY.md with reporting policy and the advisory entry, including\noperator action items (upgrade + rotate any token that may have been\nexposed via earlier error responses).\n\nBumps to 1.0.109.",
"is_bot": false,
"headline": "fix(security): reject unauthenticated HTTP requests + redact tokens i…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-20T20:13:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9cbd8aa4c5235a5ae2f01c60eaf464c0b60ccf6a",
"body": "… (#124)\n\nThe override pinned the mount to /mcp/ to match the (incorrect) assumption\nthat prod forwarded /mcp/. Verified via internal-nginx upstream access log\nthat prod META_MCP_BACKEND_URLS is /mcp (no trailing slash), so the SDK\ndefault streamable_http_path = /mcp matches prod and the override is\n[…]\nurity.enable_dns_rebinding_protection = False (required\nwhen internal nginx strips the port from the Host header, so the SDKs\nloopback allowlist 127.0.0.1:* never matches). Keeps mcp[cli]==1.23.0 pin.",
"is_bot": false,
"headline": "feat(transport): drop streamable_http_path override + bump to 1.0.108…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-20T19:19:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ef45fe14dd21c926aadc64f3309655a8725e569c",
"body": "…123)\n\nThe 1.0.106 canary on mcp2 returned HTTP 421 Invalid Host header for all\nproxied traffic. mcp 1.23.0 auto-enables transport_security with a\nport-wildcard allowlist (127.0.0.1:*, localhost:*, [::1]:*). The\ninternal nginx upstream uses proxy_set_header Host with the bare host\nvariable, which st\n[…]\nng_protection=False so the\nallowlist constraint stops blocking proxied traffic.\n\nDirect curl on mcp2 confirms: with the disable applied locally,\nHost: 127.0.0.1 (no port) returns 200; without it, 421.",
"is_bot": false,
"headline": "fix(transport): disable DNS rebinding protection + bump to 1.0.107 (#…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-20T18:46:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "893ba7bf491fb6b31b7845318cc40ed783bdf672",
"body": "The mcp SDK defaults streamable_http_path to /mcp (no trailing slash).\nThe upstream proxy at internal nginx :9009 forwards Next.js requests\nto /mcp/ verbatim, which the SDK responds to with HTTP 307 to /mcp.\nThat redirect dance is the prime suspect for the 1.0.104 production\ntransport regression (Pa\n[…]\n_http_path=/mcp/ makes the with-slash URL\ncanonical, so prod traffic hits a direct 200 instead of a 307. Pairs\nwith --host 127.0.0.1 in the systemd unit (separate repo) for\ndeterministic IPv4 binding.",
"is_bot": false,
"headline": "fix(streamable-http): pin mount to /mcp/ + bump to 1.0.106 (#122)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-20T18:38:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18769152438a5d3f609a49cd95c352fa8eba1928",
"body": "… for CTWA (#119)\n\nRoute single-video + Instagram-actor creatives through object_story_spec.video_data instead of asset_feed_spec so CTWA campaigns (OUTCOME_SALES/OUTCOME_ENGAGEMENT, destination=WHATSAPP) accept them. Drop link from the WHATSAPP_MESSAGE CTA value (Meta error_subcode 1815630). Normalize optimization_type=REGULAR to no-op. Sanitized test fixtures. Bump to 1.0.104. Full suite: 450 passed.",
"is_bot": false,
"headline": "fix(create_ad_creative): single video + IG actor -> object_story_spec…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-19T12:42:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c87ee2dcae6fffeddd84fe1a95e8539e049f315",
"body": "Bumps the pip group with 1 update in the / directory: [mcp](https://github.com/modelcontextprotocol/python-sdk).\n\n\nUpdates `mcp` from 1.12.2 to 1.23.0\n- [Release notes](https://github.com/modelcontextprotocol/python-sdk/releases)\n- [Changelog](https://github.com/modelcontextprotocol/python-sdk/blob/\n[…]\n dependency-type: direct:production\n dependency-group: pip\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump mcp in the pip group across 1 directory (#121)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-19T10:49:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e7ff4e1740c9e0bc725f0161e266540620bbdf66",
"body": "…#117)",
"is_bot": false,
"headline": "chore(release): bump to 1.0.103 for CALL_NOW tel: URI fix (PR #116) (…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-14T22:12:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5b2d1001181f1cab1dc24d24e1ea42e7ad922ec",
"body": "…ction.value.link tel: URI (#116)\n\nMeta Marketing API v24 rejects a literal phone_number key inside\ncall_to_action.value with code 100 (\"Invalid keys phone_number were\nfound in param call_to_action[value]\"). The supported shape is\ncall_to_action.value.link = \"tel:<E.164 number>\".\n\nThis change update\n[…]\nENT asset_feed_spec image, simple\nimage link_data, simple video video_data, plus a second\nasset_feed_spec branch) and refreshes the docstring + regression\ntests in tests/test_call_now_phone_number.py.",
"is_bot": false,
"headline": "fix(create_ad_creative): serialize CALL_NOW phone_number as call_to_a…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-14T22:06:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a74d46112d4ac1cfbb312b7a027cfcf4edf77fd",
"body": "…e_ad_creative (#114)\n\n* Translate deprecated instagram_actor_id to instagram_user_id in create_ad_creative\n\nMeta deprecated instagram_actor_id at POST /act_ID/adcreatives in Jan 2026.\nSending the field returns error 100: 'Param instagram_actor_id must be a\nvalid Instagram account id' verbatim, rega\n[…]\ny_id.py covering the\nobject_story_id + instagram_actor_id, object_story_id +\nasset_customization_rules + instagram_actor_id, and the updated error\nenhancement paths.\n\n* chore(release): bump to 1.0.102",
"is_bot": false,
"headline": "Translate deprecated instagram_actor_id to instagram_user_id in creat…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-14T21:00:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30f901e55bd2f5038770ba152e8a0c6b6ac0890f",
"body": "…ect.toml (#113)\n\n* chore(release): sync server.json to 1.0.101 and enforce parity with pyproject.toml in CI\n\nserver.json had drifted to 1.0.93 while pyproject.toml is at 1.0.101. The MCP Registry publish step has been failing with cannot publish duplicate version on every release since (v1.0.99, .1\n[…]\nplace the no-op validate-version CI step with a real check that fails the build when pyproject.toml and server.json versions diverge.\n\n* fix(ci): drop tomllib (Python 3.11+) for grep so 3.10 job works",
"is_bot": false,
"headline": "chore(release): sync server.json version + enforce parity with pyproj…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-12T15:18:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7d14226dcc7209ff016c3f9653209ba42a602325",
"body": "…migration, bump to 1.0.101 (#112)\n\nMeta's documented mechanism for disabling the Advantage campaign budget and assigning per-ad-set budgets is a single POST to /CAMPAIGN_ID with adset_budgets=[{adset_id, daily_budget}, ...]. The previous workaround of sending empty daily_budget/lifetime_budget via \n[…]\ning with Budget Conflict.\n\nAdd adset_budgets parameter, document the migration in the tool description, and clarify in the response note that use_adset_level_budgets is not reliable for the migration.",
"is_bot": false,
"headline": "feat(campaigns): add adset_budgets to update_campaign for CBO to ABO …",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-12T15:04:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e2f5033bd3ef9e584005ea08c78563fcbee3bb3",
"body": "…_ad_details, bump to 1.0.100 (#111)\n\nstatus reflects only the configured ACTIVE/PAUSED state, so callers cannot detect NOT_DELIVERING, DISAPPROVED, WITH_ISSUES, or PENDING_REVIEW from get_ads. Add effective_status and issues_info to the field list in all three branches of get_ads (account, campaign, adset) and on get_ad_details so delivery state and policy issues come through by default.",
"is_bot": false,
"headline": "feat(ads): return effective_status and issues_info on get_ads and get…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-11T18:21:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d2e43da3cd3c618aececb5ef2b14800f5c6a059",
"body": null,
"is_bot": false,
"headline": "docs(create_campaign): expand tool description, bump to 1.0.99 (#110)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-08T04:19:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3a982f6ad8b7a4c4223851afec6d6b9aeccee5b",
"body": "…nses (#109)\n\nMeta still emits standard_enhancements inside creative_features_spec on GET\nresponses but rejects it on POST with error_subcode 3858504. LLM clients\nfrequently copy GET payloads straight into the next mutation, which silently\nre-introduces the deprecated key and blocks creative writes.\n[…]\nkey from get_creative_details and get_ad_creatives at both the\ntop-level creative_features_spec and degrees_of_freedom_spec.creative_features_spec\nso the model never sees it.\n\nBumps version to 1.0.98.",
"is_bot": false,
"headline": "fix(creatives): strip deprecated standard_enhancements from GET respo…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-07T20:32:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "496c988aae74e7e432b67ed131211250b0a443e8",
"body": "…e (#107)\n\nMeta rejects (action_type, media_type) with (#100) invalid breakdown columns.\nAuto-set action_breakdowns=[] when breakdown=media_type so the request succeeds\n(empty rows for non-DCO ads, real rows for DCO ads). Add an action_breakdowns\nparameter so callers can override the heuristic or pass other Meta-supported\nvalues (action_target_id, action_destination, etc.).\n\nBumps version 1.0.96 -> 1.0.97.",
"is_bot": false,
"headline": "feat(insights): action_breakdowns override + auto-empty for media_typ…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-05T00:55:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a1145a6bc08daa789642d4d8727f38c8b6290c3",
"body": "PR #105 (v1.0.95) lumped media_type in with the 6 truly-nonexistent\nmedia_* names. Direct Meta probe shows media_type is a real Insights\nbreakdown (returns 200 with action_breakdowns=[]; collides with the\ndefault action_type, hence the (#100) action_type collision Davide saw).\nThe other six (media_a\n[…]\n,\nmedia_format, media_origin_url, media_text_content) are genuinely\nnonexistent fields.\n\nRestores media_type to the Creative Assets line and rewrites the note\nto cite only the nonexisting-field error.",
"is_bot": false,
"headline": "docs(insights): restore media_type to supported list, bump 1.0.96 (#106)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-05T00:06:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f9c5aeb3bc0fb915c9674a91103b0ae1d164e52",
"body": "…ted list (#105)\n\n* fix(insights): drop action-typed fields for media_* breakdowns\n\nget_insights with breakdown=media_asset_url, media_creator, media_destination_url, media_format, media_origin_url, media_text_content, or media_type was failing with Meta error #100 (Current combination of data break\n[…]\ns. Reverts code changes from the closed PR #104 that tried to drop action-typed fields for these names — that was a no-op for the user since Meta rejected regardless.\n\n* chore(release): bump to 1.0.95",
"is_bot": false,
"headline": "docs(insights): remove unsupported media_* breakdowns from the suppor…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-04T23:28:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "780a391c4635ca5c8652a027846d8ce070e3fb4e",
"body": "…ugh on get_account_info (#103)\n\nget_insights with breakdown=platform_position used to fail with\nMeta (#100) error: platform_position must be paired with publisher_platform\nand is incompatible with the default action_breakdowns=[action_type].\nAuto-prepend publisher_platform when platform_position is\n[…]\nn fetch funding_source_details, spend_cap, is_prepay_account, and\nother Graph fields needed to reconcile pre-paid balances. Default\nfield set unchanged when fields is omitted.\n\nBump version to 1.0.94.",
"is_bot": false,
"headline": "fix(insights,accounts): platform_position breakdown + fields passthro…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-05-04T14:58:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "358884c609e204c7a2832d677480e4e010ecbb69",
"body": "…am (#102)\n\nLets callers pass individual feature opt-ins/opt-outs on the duplicate (e.g.\nimage_touchups, image_uncrop, text_optimizations, video_auto_crop with\n{enroll_status: OPT_IN | OPT_OUT}). Forwarded through to the Next.js\nduplication service which merges the override on top of the source crea\n[…]\nerride produced duplicate 962587122816028 with the expected merged dof\nspec on readback (image_touchups OPT_OUT overrode source OPT_IN, image_uncrop\nOPT_IN added, text_optimizations OPT_IN preserved).",
"is_bot": false,
"headline": "feat(duplicate_creative): add new_creative_features_spec override par…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-30T22:07:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2dc247449ff3ca23a8458bc52add8d5ef56c113",
"body": "…drop client-side length guards (#101)\n\nTwo related fixes for create_ad_creative + update_ad_creative when used with\nasset_customization_rules:\n\n1. headlines / descriptions / messages now accept either plain strings (existing\n behavior) OR objects {text, adlabels:[{name}]}, mirroring what videos[]\n[…]\nsuite. Existing length/count validation tests\nwere inverted to assert the new pass-through behavior; 4 new positive tests\ncover the dict-form titles, descriptions, bodies, and the str/dict mixed case.",
"is_bot": false,
"headline": "fix(ads): accept {text,adlabels} headlines/descriptions/messages and …",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-30T21:21:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c8e64917f48ec6a3d54d14bcaf5c75a1a49d468",
"body": "…feed_spec path (#100)\n\nWhen call_to_action_type and lead_gen_form_id (or phone_number) are both set\non the asset_feed_spec path (videos[]/images[] + asset_customization_rules,\nPLACEMENT optimization), emit Metas call_to_actions plural object array\ncarrying value.lead_gen_form_id instead of the stri\n[…]\nme\nshape.\n\nSame fix applied to the object_story_id (existing-post) branch when rules\nare present.\n\nBumps version to 1.0.91.\n\nTests: 28/28 in tests/test_video_creatives.py; full creative suite 108/108.",
"is_bot": false,
"headline": "fix(ads): emit call_to_actions plural with lead_gen_form_id on asset_…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-30T19:52:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bec3af2a4e5c5604f78ca1c2170c53e4080916d4",
"body": "… (#99)\n\nFree-form CTA values (e.g. MAKE_RESERVATION, BOOK_TABLE) are rejected by Meta with code 100. The previous docstring listed only four examples, which left the LLM guessing at the right enum value for restaurants and similar verticals.\n\nExpands the docstring with the documented set of common Meta CTA values and explicitly notes that BOOK_NOW is the correct choice for restaurant reservations / appointments.\n\nDoc-only change. No behavior change.",
"is_bot": false,
"headline": "docs(ads): expand call_to_action_type enum list in create_ad_creative…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-30T03:33:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7237f1992ece150d8076353ac5820b8d920637c7",
"body": "…s is set (#97)\n\nMeta enforces link_urls at create_ad time (error 1885800) whenever a creative\nuses asset_customization_rules, including Lead ads. Docstring previously\nclaimed link_url was optional for Lead ads, which is only true when rules are\nabsent.",
"is_bot": false,
"headline": "docs(ads): clarify link_url is required when asset_customization_rule…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-24T17:48:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13ec83b150d80e4ba1ff7c7a72874233c89cfb37",
"body": "…namic_creative (#95)\n\nThe previous wording told callers that placement rules would 'depend on the\ntarget ad set is_dynamic_creative capability'. That conflates two modes:\nis_dynamic_creative governs regular Dynamic Creative, while an\nasset_customization_rules-bearing creative with optimization_type\n[…]\ncreative on the ad set.\n\nThe new warning says so explicitly and points callers who actually wanted\nAdvantage+ auto-optimization at removing asset_customization_rules instead.\n\nBumps version to 1.0.90.",
"is_bot": false,
"headline": "docs(ads): rewrite DOF-downgrade warning to name PAC instead of is_dy…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-22T22:39:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c209133f4ceb1dd5dbd39e55bb17ac99844ad08",
"body": "When the caller provides videos with explicit labels (videos[].label) AND\nasset_customization_rules that reference those videos via video_ids, the\ntranslator now reuses the explicit adlabel as the rule video_label instead\nof minting a fresh PBOARD_VID_N. Meta rejected the prior mismatch shape\nwith e\n[…]\n\n\nHappy path unchanged: when no explicit adlabels are set on the videos,\nPBOARD_VID_N minting still runs and Meta accepts the creative.\n\nRegression covered by two new tests in test_video_creatives.py.",
"is_bot": false,
"headline": "fix(ads): reuse existing video adlabel in placement_groups rules (#94)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-22T22:20:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a7d5978e364a6c8d0be159adac9f1db44c79590",
"body": "…#93)\n\nWhen create_ad_creative posts multi-image asset_feed_spec with\nasset_customization_rules, Meta can accept the POST and return a creative\nid without error, yet persist only a single-image object_story_spec. The\nhandler now compares the readback against the posted payload and surfaces a\nwarning\n[…]\n the multi-image feed was not preserved.\n\nAlso revises the DOF downgrade warning to avoid claiming rules always take\neffect, and adds pytest cases for the new detection path.\n\nBumps version to 1.0.88.",
"is_bot": false,
"headline": "fix(ads): detect silent single-image collapse in create_ad_creative (…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-22T17:59:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84d783048ba10c3ed3aa84e826f92e1f332b1893",
"body": "The release process references private infrastructure and lives in\ninternal documentation.\n\nExternal contributors: refer to the GitHub Releases page and PyPI for\navailable versions.",
"is_bot": false,
"headline": "docs: remove RELEASE.md (#92)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-22T17:23:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef902874267c673cf48576e91b0e3062fbd555eb",
"body": "* feat(adsets): expose bid_adjustments on get/create/update\n\nAdd bid_adjustments as a pass-through parameter on create_adset and update_adset, and include it in the fields= query on get_adsets and get_adset_details. Shape: {user_groups: {<dim>: {<value>: <float>, default: <float>}}}. Writing requires Meta app capability allowlisting.\n\n* Bump version to 1.0.87",
"is_bot": false,
"headline": "feat(adsets): expose bid_adjustments + bump to 1.0.87 (#91)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-22T15:01:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac5045454425318d495b440f64d886e8b709f15a",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.86",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-17T14:50:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c2150d1673e95ab018f731165f82e99dd32474e",
"body": "….videos[] is used (Meta 1443048) (#89)\n\n* fix(ads): drop video_data from object_story_spec when asset_feed_spec.videos[] is used (Meta 1443048)\n\nWhen create_ad_creative builds an asset_feed_spec.videos[] payload (the\nuse_asset_feed branch with video_id), the previous code emitted a dual\nshape: the \n[…]\nbare_page_id_*, singular_description_uses_bare_page_id)\n whose contracts are already pinned by the modified existing tests\n- Relocate link_url and (where applicable) CTA assertions to asset_feed_spec",
"is_bot": false,
"headline": "fix(ads): drop video_data from object_story_spec when asset_feed_spec…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-17T14:49:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "38a1d4c29ace2762447d11af44f3d6390da41b6a",
"body": "* Bump version to 1.0.85\n\n* Bump version to 1.0.85 (remaining files)",
"is_bot": false,
"headline": "Bump version to 1.0.85 (#90)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-17T14:33:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a64c11e6478545dfe62627849a7c2cae4cc347ed",
"body": "…ative (#88)\n\nMeta API v24 requires a thumbnail (image_hash or image_url) for each entry\nin asset_feed_spec.videos[]. Without one, creates fail with error 1443226\n(Please specify one of image_hash or image_url in the video_data field of\nobject_story_spec). Until now, only the singular video_id path \n[…]\nelper prefers thumbnails.data[0].uri over picture (the\npre-generated URI is more reliable; picture can be a small placeholder),\nand returns None on failure so the caller can decide whether to proceed.",
"is_bot": false,
"headline": "fix(ads): auto-fetch thumbnails for videos[] entries in create_ad_cre…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-16T23:07:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4907aa624f5371fc164ccbe7888f7f31ec949a62",
"body": "When callers use videos=[] with asset_customization_rules in placement_groups\nformat, translate the rules to Meta API shape (customization_spec with\npublisher_platforms + facebook_positions/instagram_positions, video_label at\nrule level) and add adlabels to videos[] entries. Previously the rules wer\n[…]\n set via videos[].label.\n\nNo API version change needed — verified end to end on v24 (default). Creative\ncreated successfully with optimization_type PLACEMENT and correct per-video\nplacement targeting.",
"is_bot": false,
"headline": "fix(ads): translate placement_groups rules for videos[] path (#87)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-16T22:36:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c314bbc9e73494ff275d254149dc75026b4584e9",
"body": "…(#86)\n\nWhen create_ad_creative is called with videos=[...] (plural) but no singular\nvideo_id, the auto-fetch block was reached because is_video was true; it then\ncalled make_api_request(None, ...), which Meta rejects with a generic error and\nthe warning logs Could not auto-fetch thumbnail for video\n[…]\nis intentionally out of scope here and will be\naddressed in a follow-up PR. Add a regression test asserting that the plural\nvideos[] form does not trigger the singular auto-fetch.\n\nSplit out from #85.",
"is_bot": false,
"headline": "fix(ads): guard video thumbnail auto-fetch on video_id, not is_video …",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-16T20:01:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "988a05b123d0e30d54f082e7519f4e740d67d498",
"body": "Add facebook_branded_content and instagram_branded_content as optional\ndict parameters. Passed through as top-level fields on the creative\npayload to Meta adcreatives endpoint. Includes JSON string coercion\nfor MCP transports that deliver dicts as strings.\n\nfacebook_branded_content: {sponsor_page_id: <page_id>} for Facebook partnership ads\ninstagram_branded_content: {sponsor_id: <ig_user_id>} for Instagram partnership ads",
"is_bot": false,
"headline": "feat: add branded content params to create_ad_creative (#84)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-15T18:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f2b69297d971dc3e6648fc718aa73ee78afd681",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.84 (#83)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-14T00:28:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4a7199ebd3e9bf4e9b96e452c486876db859ebb",
"body": "…feed_spec to avoid error 1443048 (#82)\n\nMeta returns error 1443048 (object_story_spec ill formed) when instagram_user_id is set\nin object_story_spec for a video creative without ad_formats=[\"SINGLE_VIDEO\"] present in\nasset_feed_spec. Either field alone is insufficient - both must be present togethe\n[…]\n asset_feed_spec is present with\nad_formats=[\"SINGLE_VIDEO\"]; added two new tests for explicit ad_formats and regression\ncoverage for the plain video path (no instagram_actor_id stays on simple path).",
"is_bot": false,
"headline": "fix create_ad_creative: route video+instagram_actor_id through asset_…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-14T00:20:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3329220c0b121cd309d56e84343ce04fb0254549",
"body": "Public repo protection: scans diffs for email patterns and blocks\ncommits unless the address is in .email-allowlist.",
"is_bot": false,
"headline": "Add pre-commit hook to block email addresses in staged changes (#81)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-13T23:50:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62e06181ef9794539dd503867aa88f7685279bb7",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.83 (#80)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-13T23:48:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e4f487b6a5ff7d5b3ef3761c6a8c50fafcf2e19",
"body": "* docs+fix: warn when DOF mode is used with multiple image_hashes\n\nMeta silently serves only ONE image at delivery time when\noptimization_type=DEGREES_OF_FREEDOM is combined with multiple\nimage_hashes, despite accepting the spec without error.\n\n- Add warning to image_hashes and optimization_type doc\n[…]\nd to create_ad_creative response for DOF + multiple image_hashes\n\nCall proceeds normally — warning is included in the success response\nso the LLM knows Meta will only serve one image at delivery time.",
"is_bot": false,
"headline": "docs+fix: warn when DOF mode is used with multiple image_hashes (#78)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-13T23:47:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b0ef8c6b97feceb2f84fb9332134b91282722090",
"body": "…mization_type=PLACEMENT) (#79)\n\n- Remove validation that blocked optimization_type values other than DEGREES_OF_FREEDOM.\n PLACEMENT is a valid Meta API value needed for per-placement asset customization.\n\n- Add videos[] and images[] parameters to create_ad_creative. Each entry supports\n a label f\n[…]\ne object_story_spec) while DOF keeps its\n existing link_data anchor pattern.\n\n- Fix DOF auto-downgrade to only apply when optimization_type is DEGREES_OF_FREEDOM,\n not for PLACEMENT or other values.",
"is_bot": false,
"headline": "feat: support placement asset customization (videos[], images[], opti…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-13T23:34:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "173ba4b2a570113c4f0455738a44222a2fa1ac86",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.82 (#77)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-13T05:51:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54c8546f0ea250ba4592f3140e95b1c87dab6e54",
"body": "The bug was caused by Pipeboard own ACL gate, not the Meta API.\nAdding these tools to CROSS_ACCOUNT_TOOLS in route.ts is the correct fix.",
"is_bot": false,
"headline": "Revert account_id param from targeting search tools (#76)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-12T04:23:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19627b945f453809f59de3e69ff4b975350ac9f2",
"body": "…earch_behaviors (#75)\n\nAccount-restricted Meta API tokens require account_id to be passed to the\n/search endpoint. Without it, Meta returns: Please specify the account_id\nparameter. This API token is restricted to a specific ad account.\n\n- search_interests: add optional account_id param, include in API call when set\n- get_interest_suggestions: same fix\n- search_behaviors: same fix\n- tests: add account_id test cases for all three functions",
"is_bot": false,
"headline": "Add account_id param to search_interests, get_interest_suggestions, s…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-12T04:17:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "579bf3cc5df7e84c23e6238efc8afde0e189fb46",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.81 (#74)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-11T20:11:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7765caac75d5a90038ceb8323a5878e8edcd3ea5",
"body": "…r Ads (#73)\n\nAdds reminder_data parameter to create_ad_creative, placing inline event\ndata (event_name, start_time, end_time) inside object_story_spec.link_data.\nThis enables the REMINDERS_SET optimization goal without requiring an\nexisting ig_upcoming_event_id (upcoming_events path).\n\nChanges:\n- N\n[…]\ns covering all reminder_data scenarios\n- Fix pre-existing test failures in test_duplication and\n test_duplication_regression caused by PIPEBOARD_API_BASE_URL env var\n not being pinned in those tests",
"is_bot": false,
"headline": "add reminder_data support to create_ad_creative for Instagram Reminde…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-11T20:09:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "64d2182c5e4d10d219e2d67a5613620731998bed",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.80",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-10T14:38:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4f71979d26174727ca334c12161a6a661643f17",
"body": "…S campaigns (#72)\n\n* feat: add event_id parameter to create_ad_creative for EVENT_RESPONSES campaigns\n\nAdds event_id to link_data so event RSVP/ticket ads render the event card correctly. Also included in call_to_action.value when call_to_action_type is EVENT_RSVP or BUY_TICKETS, per Meta's documen\n[…]\ned in both link_data.event_id and call_to_action.value.event_id on read-back from the real Meta API. Uses sys.path insertion to ensure the local package is loaded instead of any site-packages install.",
"is_bot": false,
"headline": "feat: add event_id parameter to create_ad_creative for EVENT_RESPONSE…",
"author_name": "George Phelipe Azevedo",
"author_login": "george-pipeboard",
"committed_at": "2026-04-10T14:35:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c036c6fdbce38fdcf55be9d9167b7d063dbe26f0",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.79",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-10T00:12:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5816a20ee4f151fb04f81cf99bf10777334e6bf",
"body": "When daily_budget or lifetime_budget is provided to create_adset and the parent\ncampaign already has a budget (Campaign Budget Optimization / CBO mode), Meta\nrejects the request with a cryptic Invalid parameter error (subcode 1885621).\n\nThis change adds a pre-flight check that fetches the campaign b\n[…]\ns.\n\nAlso fixes two pre-existing duplication test failures caused by PIPEBOARD_API_BASE_URL\nbeing set to localhost in the dev environment.\n\n14 new unit tests added in tests/test_cbo_budget_conflict.py.",
"is_bot": false,
"headline": "create_adset: detect CBO budget conflict before hitting Meta API (#71)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-10T00:10:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "29c421bbd1f5858d3611a4dfbe8de7d8d7ed1315",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.78",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-09T22:48:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d202f24c3b44e78ff7cf1d9a1b60b24ef4b58d9",
"body": "* feat: add object_story_id and disable_all_enhancements to create_ad_creative\n\n* fix: use individual enhancement keys for disable_all_enhancements (standard_enhancements deprecated)",
"is_bot": false,
"headline": "feat: add object_story_id support to create_ad_creative (#68)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-09T22:41:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7afec28cffa8bdd5ba8ccb153976b675cab71d72",
"body": "* fix: skip bid_strategy when using adset-level budgets\n\nPrevents Meta API error 1885737 by only sending bid_strategy when the\ncampaign owns its budget. bid_strategy defaults to LOWEST_COST_WITHOUT_CAP\nso the condition was always true, even for adset-level budget campaigns.\n\n* fix: auto-downgrade DO\n[…]\native mode, and a warning field is returned in the response. Also includes asset_customization_rules in the use_asset_feed decision so rules aren't ignored when only a singular image_hash is provided.",
"is_bot": false,
"headline": "Fix/bid strategy adset budget (#70)",
"author_name": "George Phelipe Azevedo",
"author_login": "george-pipeboard",
"committed_at": "2026-04-09T14:35:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7544050fc174d565bdb14ef05d47b3bc548adab2",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.77",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-08T01:29:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a03921b01b6f51c1b5695f7731067baa78e3114",
"body": "* fix image_crops docstring: list valid keys, remove invalid 191x100 example, add 1080x1080 coordinates\n\nThe previous docstring showed 191x100 as a valid example crop key. Meta API only accepts 6 crop keys: 100x100, 100x72, 400x500, 400x150, 600x360, 90x160. Passing 191x100 causes all creatives to f\n[…]\n remove unnecessary 191x100 warnings and no-auth note from crop docs\n\nThe 191x100 warnings are no longer needed since the docs now list only\nvalid crop keys. The \"no authentication\" note is redundant.",
"is_bot": false,
"headline": "fix: image_crops valid keys + new compute_image_crops tool (#67)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-08T01:28:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ca0a3bfdb693b34d64eb79d409a5aa907505c797",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.76 (#65)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-06T18:53:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c96485614a8708c2a14b80d89848b8140884b047",
"body": "…ky URL tests (#64)",
"is_bot": false,
"headline": "fix: expand optimization_goal docs for OUTCOME_ENGAGEMENT and fix fla…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-06T18:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3f949d49a6c61ba50f7ed2c8854b09a042bd80a",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.75",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T23:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46d741681c2151d3035a93690bbd5fd392213b6e",
"body": "* fix: support description field for video creatives via asset_feed_spec\n\nMeta API v24 rejects description inside video_data directly. Previously,\npassing description with a video creative silently ignored the field.\n\nNow, when video_id + description are both provided, the code routes through\nasset_\n[…]\ned pre-existing test failures in test_duplication*.py where\nPIPEBOARD_API_BASE_URL from the dev environment was overriding the\nproduction URL expected by URL-assertion tests.\n\n* Bump version to 1.0.74",
"is_bot": false,
"headline": "fix: support description field for video creatives via asset_feed_spec",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T23:53:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd0f0fb0bb1df8c8e0f0eb55992f11fbe3b9f019",
"body": "…t_adsets (#61)\n\nAdd regional_regulated_categories and regional_regulation_identities to\nthe fields requested by get_adset_details and get_adsets, so users can\nread verified identity IDs from existing ad sets when creating new ones\nin regulated markets (Singapore, Taiwan, Australia, India, Thailand).\n\nAlso bump version to 1.0.74.",
"is_bot": false,
"headline": "feat: return regional_regulation fields from get_adset_details and ge…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T18:57:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47bd86fb150967b9ef42a9caf5c4b0afc98c7d18",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.73 (fix server.json version for MCP Registry)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T18:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4799272967283c6828bdcc8bc689af81936767ae",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.72",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T18:25:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "754a4627470081512e6a8178ef4b84ad2e1e9a15",
"body": null,
"is_bot": false,
"headline": "docs: warn that attribution_spec is immutable after ad set creation",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T18:21:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8c53307ad069b578be3ea916978c5bb56a5626a",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.71",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T18:16:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c05db3e16c572e9de636b1ad4c849abee6f34176",
"body": "…#60)",
"is_bot": false,
"headline": "feat: add attribution_spec support to create_adset and update_adset (…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-05T18:13:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83981e469131e6e6fbadcc05d852e00ee452dbea",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.70",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-02T01:08:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b056d5313f7993d8a84fde8cec091ce903c27e51",
"body": "Allow renaming ads via the update_ad tool by accepting an optional name parameter.",
"is_bot": false,
"headline": "feat: add name parameter to update_ad tool (#59)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-02T01:07:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6c3518c75db6c84ae7039d4a351bf5058a1b715",
"body": "Update version number in pyproject.toml, server.json, and __init__.py to reflect the latest release.",
"is_bot": false,
"headline": "chore: bump version to 1.0.69",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-01T19:31:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7eb32942b67c7502cbbd27ec0ebc32a2124adf63",
"body": "BM-shared tokens cannot access ad or video nodes directly (error 100/33).\nAdding account_id as an explicit parameter lets get_ad_video use the\nadvideos edge without needing to look up the ad first. The account_id\nis strongly recommended in the tool description.",
"is_bot": false,
"headline": "fix: add account_id param to get_ad_video for BM token compatibility",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-01T14:44:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4be80efe359ccb8ada16238647d256af4cc5f973",
"body": "… permission errors\n\nDirect GET /{video_id} fails with error 100/33 for BM-shared tokens and\nerror #10 for page-owned videos. The advideos edge (GET /act_{id}/advideos\nwith filtering) works for any video in the account video library.\n\nNow tries the advideos edge first when ad_id is provided, then falls back\nto direct node access.",
"is_bot": false,
"headline": "fix: use ad account advideos edge in get_ad_video to resolve BM token…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-04-01T14:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a24f24101cb7ae87e886ef8acc4071e157b71a78",
"body": "Update version number in pyproject.toml, server.json, and __init__.py to reflect the latest release.",
"is_bot": false,
"headline": "chore: bump version to 1.0.68",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-30T19:19:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb4c86d3aeee52ec789cccfd029de1a1cb3c847f",
"body": "Prevents Meta API error 1885737 by only sending bid_strategy when the\ncampaign owns its budget. bid_strategy defaults to LOWEST_COST_WITHOUT_CAP\nso the condition was always true, even for adset-level budget campaigns.",
"is_bot": false,
"headline": "fix: skip bid_strategy when using adset-level budgets (#57)",
"author_name": "George Phelipe Azevedo",
"author_login": "george-pipeboard",
"committed_at": "2026-03-30T18:23:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f10d5b9c7dafa6713a3a86392714982dcc0a0f75",
"body": "…E (#55)\n\nAdd documentation for the Pipeboard CLI as an alternative to MCP,\nand a table showing Google Ads and TikTok Ads remote MCP URLs.",
"is_bot": false,
"headline": "docs: add Pipeboard CLI section and cross-platform ads table to READM…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-29T03:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa3469bd839fcc3c3515dbbdf3e51d84b2b40c34",
"body": "* feat: add regional_regulated_categories and regional_regulation_identities to adset create/update\n\nSupport for regional transparency compliance (Taiwan, Australia, India, Singapore, Thailand).\n\n* Bump version to 1.0.67",
"is_bot": false,
"headline": "feat: add regional regulated categories to adset create/update (#54)",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-28T20:34:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f367b39224000f21c5140e14bbc1269171442c17",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.66",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-25T22:26:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab3fd20d79fbd9d948ac0e054f4405e7eaaa07c7",
"body": "…age\" error (#53)\n\nWhen creating DOF creatives with a single image_hash (not image_hashes),\nthe link_data was missing the image_hash, causing Meta subcode 2446388.",
"is_bot": false,
"headline": "fix: include image_hash in DOF link_data to prevent \"Could not get im…",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-25T22:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10716bdfd0cf9ddd9bf644ae5c34529a76bf3d5f",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.65",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-24T20:48:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ab0bef85429432a3964a30badcddbab41df45ac",
"body": "…defaults (#52)\n\nDefault bid_strategy to LOWEST_COST_WITHOUT_CAP in create_campaign and\nwarn that BID_CAP/COST_CAP strategies require bid_amount on child ad sets.\nAdd warning that is_dynamic_creative is immutable after ad set creation.",
"is_bot": false,
"headline": "fix: add warnings for immutable is_dynamic_creative and bid_strategy …",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-24T20:47:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f716c8b8648c666995d9a456df78df201ee405ef",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.0.64",
"author_name": "Yves Junqueira",
"author_login": "nictuku",
"committed_at": "2026-03-24T16:07:25Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 327,
"latest_release_at": "2026-07-30T17:23:18Z",
"latest_release_tag": "1.0.119",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 38,
"days_since_latest_release": 0,
"mean_days_between_releases": 7.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "meta-ads-mcp",
"exists": true,
"license": "BUSL-1.1",
"keywords": [
"ads",
"api",
"claude",
"facebook",
"mcp",
"meta",
"License :: Other/Proprietary License",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/meta-ads-mcp/",
"is_deprecated": false,
"latest_version": "1.0.119",
"repository_url": "https://github.com/pipeboard-co/meta-ads-mcp",
"versions_count": 177,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2025-04-11T21:11:03.444338Z",
"latest_published_at": "2026-07-30T17:24:01.921543Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 259,
"stars": 1117,
"watchers": 15,
"fork_history": {
"days": [
{
"date": "2025-04-23",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-05-04",
"count": 2
},
{
"date": "2025-05-05",
"count": 1
},
{
"date": "2025-05-07",
"count": 1
},
{
"date": "2025-05-09",
"count": 1
},
{
"date": "2025-05-13",
"count": 1
},
{
"date": "2025-05-14",
"count": 1
},
{
"date": "2025-05-18",
"count": 1
},
{
"date": "2025-05-27",
"count": 3
},
{
"date": "2025-05-28",
"count": 1
},
{
"date": "2025-05-30",
"count": 3
},
{
"date": "2025-06-06",
"count": 1
},
{
"date": "2025-06-24",
"count": 1
},
{
"date": "2025-06-25",
"count": 1
},
{
"date": "2025-06-27",
"count": 1
},
{
"date": "2025-06-28",
"count": 1
},
{
"date": "2025-06-29",
"count": 2
},
{
"date": "2025-07-01",
"count": 2
},
{
"date": "2025-07-07",
"count": 1
},
{
"date": "2025-07-10",
"count": 1
},
{
"date": "2025-07-11",
"count": 2
},
{
"date": "2025-07-12",
"count": 1
},
{
"date": "2025-07-13",
"count": 1
},
{
"date": "2025-07-15",
"count": 1
},
{
"date": "2025-07-16",
"count": 1
},
{
"date": "2025-07-17",
"count": 2
},
{
"date": "2025-07-20",
"count": 1
},
{
"date": "2025-07-22",
"count": 1
},
{
"date": "2025-07-30",
"count": 2
},
{
"date": "2025-07-31",
"count": 2
},
{
"date": "2025-08-03",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-05",
"count": 3
},
{
"date": "2025-08-06",
"count": 1
},
{
"date": "2025-08-13",
"count": 1
},
{
"date": "2025-08-15",
"count": 1
},
{
"date": "2025-08-23",
"count": 1
},
{
"date": "2025-08-24",
"count": 2
},
{
"date": "2025-08-26",
"count": 1
},
{
"date": "2025-08-27",
"count": 1
},
{
"date": "2025-08-29",
"count": 1
},
{
"date": "2025-09-01",
"count": 2
},
{
"date": "2025-09-05",
"count": 1
},
{
"date": "2025-09-07",
"count": 1
},
{
"date": "2025-09-14",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-09-23",
"count": 1
},
{
"date": "2025-09-28",
"count": 1
},
{
"date": "2025-10-06",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-08",
"count": 1
},
{
"date": "2025-10-10",
"count": 1
},
{
"date": "2025-10-15",
"count": 1
},
{
"date": "2025-10-17",
"count": 1
},
{
"date": "2025-10-21",
"count": 1
},
{
"date": "2025-10-28",
"count": 1
},
{
"date": "2025-10-29",
"count": 1
},
{
"date": "2025-10-30",
"count": 1
},
{
"date": "2025-11-05",
"count": 1
},
{
"date": "2025-11-12",
"count": 1
},
{
"date": "2025-11-14",
"count": 2
},
{
"date": "2025-11-16",
"count": 1
},
{
"date": "2025-11-18",
"count": 2
},
{
"date": "2025-11-20",
"count": 1
},
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-12-01",
"count": 1
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2025-12-07",
"count": 1
},
{
"date": "2025-12-10",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2025-12-13",
"count": 1
},
{
"date": "2025-12-15",
"count": 1
},
{
"date": "2025-12-16",
"count": 1
},
{
"date": "2025-12-17",
"count": 1
},
{
"date": "2025-12-23",
"count": 1
},
{
"date": "2026-01-03",
"count": 1
},
{
"date": "2026-01-04",
"count": 1
},
{
"date": "2026-01-07",
"count": 1
},
{
"date": "2026-01-09",
"count": 1
},
{
"date": "2026-01-13",
"count": 1
},
{
"date": "2026-01-15",
"count": 1
},
{
"date": "2026-01-21",
"count": 1
},
{
"date": "2026-01-24",
"count": 2
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-01-31",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-04",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-08",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-12",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-14",
"count": 1
},
{
"date": "2026-02-15",
"count": 1
},
{
"date": "2026-02-16",
"count": 1
},
{
"date": "2026-02-21",
"count": 1
},
{
"date": "2026-02-22",
"count": 1
},
{
"date": "2026-02-23",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-02-25",
"count": 2
},
{
"date": "2026-02-26",
"count": 1
},
{
"date": "2026-02-27",
"count": 3
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-06",
"count": 1
},
{
"date": "2026-03-07",
"count": 1
},
{
"date": "2026-03-08",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-11",
"count": 1
},
{
"date": "2026-03-13",
"count": 3
},
{
"date": "2026-03-14",
"count": 3
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-03-23",
"count": 3
},
{
"date": "2026-03-25",
"count": 4
},
{
"date": "2026-03-27",
"count": 1
},
{
"date": "2026-03-28",
"count": 1
},
{
"date": "2026-03-30",
"count": 3
},
{
"date": "2026-03-31",
"count": 2
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-02",
"count": 3
},
{
"date": "2026-04-03",
"count": 2
},
{
"date": "2026-04-06",
"count": 1
},
{
"date": "2026-04-07",
"count": 2
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-04-09",
"count": 1
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-11",
"count": 3
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-14",
"count": 2
},
{
"date": "2026-04-17",
"count": 3
},
{
"date": "2026-04-18",
"count": 3
},
{
"date": "2026-04-19",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-22",
"count": 4
},
{
"date": "2026-04-23",
"count": 1
},
{
"date": "2026-04-25",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-03",
"count": 2
},
{
"date": "2026-05-04",
"count": 5
},
{
"date": "2026-05-05",
"count": 1
},
{
"date": "2026-05-07",
"count": 2
},
{
"date": "2026-05-08",
"count": 2
},
{
"date": "2026-05-09",
"count": 1
},
{
"date": "2026-05-11",
"count": 4
},
{
"date": "2026-05-12",
"count": 3
},
{
"date": "2026-05-13",
"count": 2
},
{
"date": "2026-05-14",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-05-16",
"count": 1
},
{
"date": "2026-05-18",
"count": 2
},
{
"date": "2026-05-20",
"count": 2
},
{
"date": "2026-05-25",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-06-01",
"count": 2
},
{
"date": "2026-06-02",
"count": 2
},
{
"date": "2026-06-04",
"count": 3
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-15",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-22",
"count": 1
},
{
"date": "2026-06-23",
"count": 2
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-06-26",
"count": 2
},
{
"date": "2026-06-29",
"count": 1
},
{
"date": "2026-06-30",
"count": 1
},
{
"date": "2026-07-04",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-08",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-11",
"count": 1
},
{
"date": "2026-07-21",
"count": 1
},
{
"date": "2026-07-27",
"count": 3
},
{
"date": "2026-07-29",
"count": 2
},
{
"date": "2026-07-30",
"count": 2
}
],
"complete": true,
"collected": 256,
"total_forks": 259
},
"star_history": null,
"open_issues_and_prs": 19
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 170015,
"source_files_sampled": 87,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml",
"requirements.txt",
"setup.py"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "mcp",
"direct": true,
"version": "1.23.0",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.6,
"advisory_ids": [
"GHSA-hvrp-rf83-w775",
"GHSA-jpw9-pfvf-9f58",
"GHSA-vj7q-gjh5-988w",
"PYSEC-2026-3481",
"PYSEC-2026-3482",
"PYSEC-2026-3483"
],
"fixed_version": "1.28.1",
"advisory_count": 6,
"oldest_advisory_days": 13
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1
},
"advisory_count": 6,
"affected_count": 1,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 10,
"direct_affected_count": 1
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "httpx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.26.0"
},
{
"name": "mcp",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==1.23.0"
},
{
"name": "starlette",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0.1"
},
{
"name": "python-dotenv",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.1.0"
},
{
"name": "requests",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.32.3"
},
{
"name": "Pillow",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=10.0.0"
},
{
"name": "pathlib",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0.1"
},
{
"name": "python-dateutil",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.8.2"
},
{
"name": "pytest",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=8.4.1"
},
{
"name": "pytest-asyncio",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "httpx",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "mcp",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "mcp",
"direct": true,
"version": "1.23.0",
"ecosystem": "pypi"
},
{
"name": "pathlib",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "pillow",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "pytest",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "pytest-asyncio",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "python-dateutil",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "python-dotenv",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "starlette",
"direct": true,
"version": null,
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 11,
"direct_count": 11,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 97,
"open_issues": 11,
"closed_ratio": 0.667,
"closed_issues": 22,
"closed_unmerged_prs": 15
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "nictuku",
"commits": 526,
"avatar_url": "https://avatars.githubusercontent.com/u/202998?v=4"
},
{
"type": "User",
"login": "george-pipeboard",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/236438929?v=4"
},
{
"type": "User",
"login": "myang-gang",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/150190002?v=4"
},
{
"type": "User",
"login": "aadamovskiy",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/190411144?v=4"
},
{
"type": "User",
"login": "florianliebig",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/10775702?v=4"
},
{
"type": "User",
"login": "punkpeye",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/108313943?v=4"
},
{
"type": "User",
"login": "kennyrueter",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/131351?v=4"
}
],
"contributors_sampled": 7,
"top_contributor_share": 0.98
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"publish-mcp.yml",
"publish.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/29 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "21 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ef2592d2d1b0702daa4793dedadf862cad5aedc0",
"ran_at": "2026-07-30T17:25:44Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-30T17:24:19Z",
"oldest_open_prs": [
{
"number": 29,
"created_at": "2025-11-22T22:11:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 31,
"created_at": "2025-12-21T12:42:05Z",
"last_comment_at": "2025-12-21T12:42:32Z",
"last_comment_author": "Shiftyads"
},
{
"number": 115,
"created_at": "2026-05-14T20:08:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 150,
"created_at": "2026-07-16T20:10:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 152,
"created_at": "2026-07-27T10:23:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 153,
"created_at": "2026-07-27T13:42:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 154,
"created_at": "2026-07-29T03:53:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 155,
"created_at": "2026-07-30T03:59:17Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-30T17:19:25Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 3,
"created_at": "2025-04-23T15:33:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 18,
"created_at": "2025-07-14T09:43:55Z",
"last_comment_at": "2025-07-15T01:31:30Z",
"last_comment_author": "ayushxx7"
},
{
"number": 28,
"created_at": "2025-10-28T08:16:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 34,
"created_at": "2026-03-07T23:55:56Z",
"last_comment_at": "2026-03-10T18:53:16Z",
"last_comment_author": "mjahmed1280"
},
{
"number": 58,
"created_at": "2026-04-01T10:19:00Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 69,
"created_at": "2026-04-08T17:55:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 96,
"created_at": "2026-04-22T23:47:56Z",
"last_comment_at": "2026-07-06T16:02:10Z",
"last_comment_author": "Kameeleonn"
},
{
"number": 98,
"created_at": "2026-04-29T20:53:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 144,
"created_at": "2026-07-06T16:01:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 149,
"created_at": "2026-07-14T02:53:15Z",
"last_comment_at": "2026-07-14T02:57:26Z",
"last_comment_author": "zoomvn222-hub"
},
{
"number": 156,
"created_at": "2026-07-30T03:59:30Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pipeboard-co/meta-ads-mcp",
"host": "github.com",
"name": "meta-ads-mcp",
"owner": "pipeboard-co"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 65 is calibrated to 75 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 65,
"calibrated": 75,
"calibration": "2026-08-02"
}
}
],
"value": 75,
"inputs": {
"security": 54,
"vitality": 94,
"community": 61,
"governance": 53,
"calibration": "2026-08-02",
"engineering": 67,
"ai_readiness": 45,
"weighted_overall_raw": 65
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "exceptional",
"name": "Vitality",
"value": 94,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"commits_last_year": 327,
"human_commit_share": 0.99,
"days_since_last_push": 0,
"active_weeks_last_year": 38
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "38/52 weeks with commits",
"points": 26.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 38
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "327 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 327
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 100,
"latest_release_tag": "1.0.119",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 7.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~7.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 7.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 3,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 3 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 3
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 61,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"forks": 259,
"stars": 1117,
"watchers": 15,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1,117 stars",
"points": 49.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 1117
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "259 forks",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 259
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "15 watchers",
"points": 6.4,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 15
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "weak",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 7,
"top_contributor_share": 0.98
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 98% of commits",
"points": 0.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 98
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "7 contributors",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 7
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"merged_prs": 97,
"open_issues": 11,
"closed_issues": 22,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.667,
"closed_unmerged_prs": 15,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "67% of issues closed",
"points": 28,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 67
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "97/112 decided PRs merged",
"points": 26,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 97,
"decided": 112
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"followers": 23,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "pipeboard-co",
"public_repos": 4,
"account_age_days": 471
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "23 followers of pipeboard-co",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 23,
"login": "pipeboard-co"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~1 yr old",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"meta-ads-mcp"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "177 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 177
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 67,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"advertising",
"ai-agents",
"chatgpt",
"claude",
"facebook-ads",
"instagram-ads",
"mcp",
"meta-ads",
"model-context-protocol",
"pipeboard"
],
"has_wiki": false,
"homepage": "https://pipeboard.co",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://pipeboard.co",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "10 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 10
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 54,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "21 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "good",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 1 resolved dependencies against OSV; 10 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 1
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 10
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 72,
"inputs": {
"source": "osv",
"advisories": 6,
"affected_packages": 1,
"assessed_packages": 1,
"unassessed_packages": 10,
"affected_by_severity": "high 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: mcp 1.23.0 (high 7.6)",
"points": 13.7,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "mcp 1.23.0 (high 7.6)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 45,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.869,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "86 of 99 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 86,
"sampled": 99
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 170015,
"source_files_sampled": 87,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/87 source files over 60KB",
"points": 53.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 87,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"mcp-server",
"library",
"network-service"
],
"scores": {
"library": 6,
"mcp-server": 9,
"network-service": 4
},
"primary": "mcp-server",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:pypi",
"weight": 6
},
{
"tier": "dependencies",
"label": "mcp-server",
"source": "dep:mcp",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:starlette",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "description",
"label": "mcp-server",
"source": "description:mcp-server",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index pypi:meta-ads-mcp@1.0.119; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-30T17:26:08.741148Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pipeboard-co/meta-ads-mcp.svg",
"full_name": "pipeboard-co/meta-ads-mcp",
"license_state": "custom",
"license_spdx": null
}