What is MCP? The marketer's guide to Model Context Protocol
Every demo of "AI managing your ads" skips a critical detail: how does the model actually reach your account, and what can it do once it does? The answer is MCP, and the shape of that connection determines whether the AI reads, drafts, or spends your budget.
MCP in plain terms
The Model Context Protocol is a standardized way for an AI client — Claude, ChatGPT, Cursor, Windsurf, Gemini CLI — to call external tools. An MCP server publishes a menu of named tools, each with a typed schema describing what inputs it accepts and what it returns.
SpendSignoff is an MCP server. When you connect an AI client to it, the client gains access to tools like list_campaigns, get_account_snapshot, and propose_change. The model does not get your API key or a raw connection to Google Ads. It gets those specific tools and nothing else the server has not explicitly offered.
Why the connection shape matters
The dangerous version of "AI connects to your ad account" is an unrestricted write connection. The model can read, edit, create, delete — whatever the underlying API permits. A bad inference costs money.
MCP does not automatically prevent this. It is a transport standard, not a safety standard. Safety comes from which tools the server publishes and what each tool actually does. An MCP server could publish a spend_budget tool. SpendSignoff's server does not.
The scope boundary
mcp.read and mcp.draft. There is no mcp.approve. The policy server enforces this. No prompt injection, no creative system-message, no amount of model reasoning can grant the AI the scope to move money — it was never issued.The read, draft, approve split
This split means the worst outcome from a bad model inference is a draft you reject. Not a doubled daily budget you discover in the morning.
- {mcp.read} — the model can retrieve live campaign data: budgets, bids, pacing, ROAS, conversion counts. Read-only, no side effects.
- {mcp.draft} — the model can stage a proposed change as a before→after diff. The diff sits in the approval queue untouched.
- Approve — a human action only, completed in the SpendSignoff dashboard with a two-step confirm. This step lives server-side and is never delegated to the model.
What MCP looks like in practice
After OAuth setup (one-time, five minutes), you open your AI client and type: "check my Google Ads campaigns and tell me which ones are pacing over budget." The client calls get_account_snapshot, receives structured campaign data from the SpendSignoff server, and reasons over it to give you an answer grounded in current numbers.
You then say: "draft a 15% budget cut on the two that are over." The client calls propose_change twice. Two drafts appear in your SpendSignoff approval queue with before→after diffs. You review and approve. The cuts happen. Total time: under three minutes.
Sample MCP tool call (what the model sends)
{
"tool": "propose_change",
"input": {
"account_id": "123-456-7890",
"entity_type": "campaign",
"entity_id": "campaign_987",
"field": "daily_budget_micros",
"current_value": 10000000,
"proposed_value": 8500000,
"reason": "Pacing 18% over 30-day target; ROAS 1.2x below account average"
}
}MCP versus older integration patterns
Before MCP, connecting an AI model to an API meant custom tool definitions, one-off authentication flows, and no standard for how the model communicated with the server. Every vendor implemented it differently. MCP standardizes this so a server built to spec works with any MCP-compatible client.
For you, this means you install SpendSignoff once and it works with Claude Desktop, Claude Code, ChatGPT, Cursor, Windsurf, and any other client that speaks MCP. You do not need a separate connector for each.
FAQ
- Do I need to understand MCP to use SpendSignoff?
- No. The OAuth setup takes five minutes and after that you talk to your AI client in plain English. MCP is the transport underneath — the same way you do not need to understand TCP/IP to use a website.
- Can the AI spend my money?
- No. SpendSignoff's server never issues the approve scope to the model. Every money-moving change is staged as a draft. Your two-step approval in the dashboard is the only path to execution.
- Which AI clients support MCP?
- Claude Desktop, Claude Code, ChatGPT (via custom GPT Actions), Cursor, Windsurf, Codex, and Gemini CLI all have MCP support in varying degrees of maturity. Claude Desktop and Claude Code have the most complete native MCP implementation as of mid-2026.
Connect an account read-only and watch the operator work.
Reads are free on every plan. Nothing spends without your two-step approval.
Related reading