Read vs write tools

Every tool is either a read or a write. Reads run freely. Writes change something in your account, so the assistant proposes them first and runs them only when you say yes. See Approval-gated writes.

The split, by product

Counted on the whole list, which is the same whichever products are connected:

The Google Ads reads include search (any report, in Google's query language), list_accessible_customers, get_resource_metadata, list_asset_links, list_auto_apply_subscriptions and every analysis tool, from full_audit to day_of_week. The tool reference marks every tool Read or Write.

The AdCopilot pair is get_org_context (read: what is connected, and where you stand) and save_org_context (write: saves what you told it about your business, so the next conversation remembers).

Read-only access

You can narrow what AdCopilot may change:

• Google Analytics and Tag Manager can be connected with Read-only access. Their write tools stay unavailable until you press Enable editing in Google products.
• A teammate with the viewer role can read but not change anything. The owner sets roles on the Team page, or on the invite link.
• A whole workspace can be put on the read-only tier. Every write tool is removed on our server. Ask [email protected].

How to tell, in practice

• If the assistant is answering a question, it is reading.
• If the assistant is proposing a change and waiting for your yes, it is about to write. That pause is the signal.