PlainRouter MCP server

• duplicate-ad-with-creativewrite actionFree

  Submit a canonical proposal to duplicate a source Meta ad with a different creative asset. Approved copies are always created PAUSED.

• get-creative-libraryFree

  Return Meta image and video assets with the ads and last-30-day performance historically associated with each asset.

• get_account_stateFree

  Return the authorized advertising account, workspace, connection, Signal destination, and currently available read-only capabilities.

• get_performanceFree

  Admissible proposal evidence comparing Meta-reported conversions with gateway-verified accepted conversions, plus the latest stored daily Meta spend and delivery metrics.

• get_signal_healthFree

  Diagnostic view of first-party event flow, Meta delivery outcomes, match quality, and reconciliation gaps from Plainrouter stored measurements. Not admissible evidence for spend-affecting proposals. Does not call the Marketing API.

• propose-actionsFree

  Propose a batch of budget, status, upload, or creative-duplication actions for the approved ad account. Budget and status proposals are recommendations only; their execution is disabled in this release. Supported JPEG/PNG uploads and paused ad copies require human approval and workspace policy checks. Suggest-only approval never executes them.

• revoke_grantFree

  Revoke an active workspace grant. The caller must hold the revoke_grant scope in the same workspace or be the human delegator of the granted agent.

• show_spend_cap_approvalFree

  Render the static spend-cap approval preview card. Reads and writes nothing.

• upload-assetwrite actionFree

  Stage a JPEG/PNG image and submit a canonical upload action through the policy and approval gate.

• verify_signal_ingestionFree

  Verify server-side Signal ingestion by writing one idempotent, identity-free modeled event for the authorized workspace. This confirms ledger receipt but does not count as real arrival evidence or complete onboarding. No spend capability.

• –Code scanremote-only server, no package to scann/a
• Live reliabilityremote reachable in 2643ms17/20
• Tool poisoning10 tool descriptions checked15/15
• Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
• Maintenancelast push 2 days ago15/15
• Maintainer identityregistry namespace matches repository owner; website matches verified namespace9/10

Grade history

• 2026-09-19restoreC → Bscore 79: Write-action tools reachable without authentication

PlainRouter: common questions

Is PlainRouter MCP server safe?

Mostly: it is graded B (79/100). Read the PlainRouter safety report

How do I install PlainRouter?

It runs remotely at plainrouter.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.

Does PlainRouter need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is PlainRouter maintained?

The last commit was 3 days ago (2026-09-17). The latest release is v0.4.0.

Is PlainRouter up?

100% of our last 6 checks got an answer. We check remote servers about four times a day.

What can I use instead of PlainRouter?

Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server and Apple Health MCP server.