What can you ask?
Specific questions work best, because the tools take app ids, countries and date windows.Every tool is read only
Every tool wraps aGET on the HTTP API and is annotated readOnlyHint: true. There is no write path at all.
Marking an action done is deliberately unavailable. An agent that can close its own recommendations can quietly clear a queue you never read, so the server proposes work and leaves the decision with you.
That constraint is why the integration is safe to hand to an agent with broad permissions. The worst case is a wrong answer, not a changed instance.
What it is not
The MCP server holds no database, imports no scraper and contains no server framework code. It is a consumer of the HTTP API exactly like the web app, typed with the same@asobeast/shared contracts, which is what keeps its tool descriptions from drifting away from the API.
Requirements
Next
Connect an agent
Both setup paths, client configuration and the two failures that catch everyone.