Approval-gated writes
AdCopilot reads freely and changes things only when you ask. Approval is your AI client's own tool-permission prompt, and a set of limits holds on AdCopilot's server whatever the client allows.
AdCopilot draws a line between reading your accounts and changing them. Reading is free. A change runs only when you ask for it.
How a change happens
- You ask, or the assistant finds something worth changing.
- It proposes the exact change in plain words: the account, the campaign, ad group, keyword or ad, the change, and what it expects to happen. Money is spelled out, daily with its monthly equivalent.
- You say yes. Your AI client then asks permission to run the tool, and you allow it.
- It reports what changed and how to undo it, which is almost always the opposite call.
For example:
Add negative keyword "free" (phrase match) to campaign "Invoicing — Search". It blocks searches containing "free", which drove $60 of zero-conversion clicks last month. Tool:
add_negative_keywords.
Who does the approving
Nothing changes until you allow it in your AI client. The approval is your client's own tool-permission prompt, not a screen AdCopilot shows.
If you tell your client to always allow a tool, it will run that tool without asking again. That is why the limits that matter hold on AdCopilot's server, whatever the client does:
- It cannot delete. See It can never delete.
- It cannot publish a Tag Manager container. Its tag changes wait in a workspace for you to publish.
- It will not switch on a campaign it built for you. That switch is yours, in Google Ads.
- It asks for your budget before it builds, and refuses spending past your monthly cap. See The budget checks.
- It only reaches the accounts you switched on, within what your Google sign-in can open.
Every call is written down, refusals included. The dashboard's Tool calls page shows them.
No unattended mode
AdCopilot does not change anything on a schedule or while you are away. You can run the read-only daily check-in on a timer from your own AI client (see The daily routine); any change it finds is a proposal that waits for you.
Related
Any MCP client
Cursor, Windsurf, Microsoft Copilot or any client that speaks the Model Context Protocol — add the connector URL, approve it, and ask.
It can never delete
AdCopilot exposes no delete tool for any product and refuses any change that sets something to REMOVED. You pause instead. Deleting is something you do yourself, in Google's own interface.