Connectors Catalogued
20
0 active · 0 keys stored
Integration Lock
ACTIVE
All connectors locked
Monthly Cost Cap
$100
$0 spent · all disabled
EX-014 Status
BLOCKED
Offline conv. upload locked
🆕 Group A — Free / Owned Foundation (8 connectors)
NOT CONNECTED
📊 Google Ads Scripts → Google Sheets
Phase 1 · Free · Read-Only
Pull campaign/keyword data into Google Sheets via Apps Script. Zero cost, no OAuth for read, zero write risk.
ProviderGoogle
CategoryGoogle Ads data export / automation
PhasePhase 1 — first to enable
ReadCampaign, ad group, keyword, search term data
WriteNone (read pull only) — write_locked
CostFree
Cost RuleNo paid calls allowed
ModulesDaily Briefing, Keyword Intel, Budget Planner, Change History
Datacampaign_performance, keyword_performance, search_terms, ad_group_data
Why UsefulZero-cost Google Ads data pipeline. Copy-paste script into Google Ads Scripts editor — auto-exports to Sheets daily. No OAuth required for script-level access.
Key RisksScript errors can stall data; Sheets quota limits at scale; no real-time data
RequirementsGoogle Ads account access · Sheets spreadsheet ID · Script paste & authorize
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
📈 Google Analytics 4
Phase 3 · Free · Read-Only
Cross-channel session and conversion data. Free via Data API. Pairs with Google Ads for full attribution.
ProviderGoogle
CategoryWeb analytics / session intelligence
PhasePhase 3
ReadSessions, conversions, events, audiences
WriteNone — write_locked
CostFree (standard)
Cost RuleFree tier — no cost cap needed
ModulesGA4 Intelligence, Budget Planner, Client Report Builder
Dataga4_sessions, ga4_events, ga4_funnel, ga4_audiences
Why UsefulSession, event, funnel, and audience data. Required for CVR attribution, phone click events, engagement metrics. Same GCP project as GSC.
Key RisksData delayed 24–48 h; GA4 schema changes; sampling above 10M events
RequirementsGA4 Property ID · GCP Service Account · GA4 Viewer role granted
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
🏷 Google Tag Manager
Phase 3 · Free · Config Only
Configure conversion tags, GA4 data layer, and Clarity snippet via GTM. Config-only — no data pull.
ProviderGoogle
CategoryTag & tracking management
PhasePhase 3
ReadTag container config (no data API)
WriteTag publishes (human-only) — write_locked
CostFree
Cost RuleNo cost — config only
ModulesGA4 Intelligence, Clarity UX, Conversion Tracking
DataEnables GA4 events, conversion tags, Clarity snippet, phone_click trigger
Why UsefulTag container management. Required to fire GA4 events, conversion tracking, and Clarity without editing site code directly.
Key RisksBroken tags kill conversion tracking; always test in Preview mode before publishing
RequirementsGTM Container ID (GTM-XXXXXXX) · Site head access · Preview/publish access
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
🔍 Google Search Console
Phase 3 · Free · Read-Only
Organic search data for paid/organic overlap analysis. Free via Search Analytics API.
ProviderGoogle
CategoryOrganic search performance
PhasePhase 3
ReadOrganic clicks, impressions, CTR, position
WriteNone — write_locked
CostFree
Cost RuleNo cost — same GCP project as GA4
ModulesKeyword Intel, Competitor Intelligence, Executive Summary
Dataorganic_queries, organic_landing_pages, organic_ctr, organic_position
Why UsefulOrganic vs paid cannibalization view. Same GCP service account as GA4. Informs keyword strategy with real organic data.
Key RisksData delayed 2–3 days; position data sampled; not suitable for real-time decisions
RequirementsGSC Site URL verified · Service Account granted Viewer role · Search Analytics API enabled
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
🔥 Microsoft Clarity
Phase 3 · Free (Always) · Read-Only
Free UX intelligence layer. Identify poor-performing landing pages driving wasted ad spend.
ProviderMicrosoft
CategoryUX heatmaps / session recordings
PhasePhase 3
ReadHeatmaps, rage clicks, scroll depth, session recordings
WriteNone — write_locked
CostFree — always
Cost RuleNo cost cap needed
ModulesClarity UX, Landing Page Dx, Client Report Builder
Dataclarity_ux, rage_clicks, dead_clicks, scroll_depth, session_recordings
Why UsefulHeatmaps, rage/dead clicks, and session recordings. Paste one JS snippet via GTM. No API key required for dashboard data.
Key RisksUX data does not equal keyword data — separate root causes; session recordings may contain PII
RequirementsClarity Project ID · GTM snippet installed · Clarity API export configured
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
⚡ Google PageSpeed Insights
Phase 3 · Free · Read-Only
Real Core Web Vitals to prioritise landing page fixes that impact Quality Score and CVR.
ProviderGoogle
CategoryCore Web Vitals / landing page speed
PhasePhase 3
ReadLCP, INP, CLS, PageSpeed score per URL
WriteNone — write_locked
CostFree (25,000 calls/day)
Cost RuleRestricted API key — PageSpeed only; daily quota cap in GCP
ModulesLanding Page Dx, Budget Planner, Client Report Builder
Datalanding_page_vitals, lcp_score, inp_score, cls_score, pagespeed_score
Why UsefulCore Web Vitals and PageSpeed score per landing page. Free API — 25k calls/day. Restricted API key reduces risk.
Key RisksAPI key must be restricted to PageSpeed Insights only — no general-purpose keys
RequirementsGCP API Key (PageSpeed-restricted) · Daily quota cap set in GCP console
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
📞 Leads Gear
Phase 4 · Owned Subscription · Read-Only
Primary call attribution source. Maps calls to keywords via GCLID. Required before any offline conversion work.
ProviderLeads Gear
CategoryCall tracking / DNI / attribution
PhasePhase 4
ReadCall log, qualified calls, GCLID map, recordings
WriteNone — write_locked
CostOwned subscription (existing)
Cost RuleNo additional cost — already subscribed
ModulesDaily Briefing, Change History, Budget Planner, Export Center
Datacall_log, qualified_calls, gclid_map, call_duration, call_recording_urls
Why UsefulCall tracking, DNI, call recording, and GCLID capture for offline conversion staging. Already subscribed — just needs API wire.
Key RisksDNI must be configured per campaign; mixing tracking numbers creates attribution gaps; recording consent required
RequirementsLeads Gear API key (from account settings) · Account ID · .env storage (not HTML)
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
💼 CRM Integration
Phase 4 · Owned Subscription · Read-Only
Profit-per-keyword signal. Deferred until CRM platform confirmed but critical for bid strategy.
ProviderCRM Platform (TBD)
CategoryRevenue attribution / job status
PhasePhase 4
ReadJob records, revenue, GCLID-revenue map, close rates
WriteNone — write_locked
CostOwned subscription (existing)
Cost RuleNo additional cost — already subscribed
ModulesDaily Briefing, Budget Planner, Keyword Intel, Client Report Builder
Datacrm_jobs, revenue_by_keyword, gclid_revenue, job_status, close_rate
Why UsefulRevenue attribution, job status, repeat bookings, profit-per-keyword. Source of truth for CRM revenue winners — overrides all wasted-spend decisions.
Key RisksCRM platform TBD; GCLID mapping requires Leads Gear first; revenue data accuracy depends on job-close discipline
RequirementsCRM API key or webhook · Job schema mapping · GCLID field confirmed in CRM · .env storage
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
🆕 Group B — Google Ads Access (3 connectors)
NOT CONNECTED
🤖 Official Google Ads MCP
Phase 2 · Free · Read-Only First
Official Google MCP — safest path to Google Ads read data. Mutations locked at env level.
ProviderGoogle (Official)
CategoryGoogle Ads API via MCP protocol
PhasePhase 2 — read-only mode only
Readsearch_google_ads_query, list_accessible_customers, get_campaign_criterion
WriteMutations (mutate_resource) — write_locked
CostFree (standard access tier)
Cost RuleNo cost — mutations permanently locked until separate approval
ModulesDaily Briefing, Keyword Intel, Decision Center, Approval Queue
Datacampaign_performance, keyword_performance, ad_group_data, search_terms
Why UsefulOfficial Google MCP with 3 read-only tools. Mutations require explicit ALLOW_MUTATIONS env flag — permanently locked in BidScope.
Key RisksMutation flag must never be set without explicit approval; developer token required; OAuth2 required
RequirementsOAuth2 refresh token · Customer ID · Developer token · MCP server deployed · ALLOW_MUTATIONS=false confirmed
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
⚡ Google Ads API (Direct)
Phase 2 · Free · Read-Only First
Maximum flexibility for data access. Higher risk than MCP due to write surface — use read-only GAQL only.
ProviderGoogle
CategoryGoogle Ads REST/gRPC API via GAQL
PhasePhase 2 — read-only GAQL queries only
ReadFull GAQL access to any resource
WriteFull mutate operations — write_locked
CostFree (standard) / Enhanced for $50K+/day spend
Cost RuleNo cost reads; write operations locked
ModulesAll BidScope intelligence modules
DataAny Google Ads resource via GAQL: campaigns, keywords, ads, bidding, budgets, search_terms
Why UsefulFull API access via Python/Node client libraries. GAQL queries for any resource. Standard access is free. Enhanced access required for budgets >$50K/day.
Key RisksWrite operations can modify bids, budgets, keywords, ads — extreme care required; developer token required
RequirementsOAuth2 refresh token · Customer ID · Developer token · Python/Node client library · .env storage · Read-only mode confirmed
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
📞 Offline Conversion / Google Data Manager
Phase 6 · Free · BLOCKED
Offline conversion upload via Google Data Manager API. Blocked by EX-014 until all 12 blockers resolved.
ProviderGoogle
CategoryOffline conversion upload to Google Ads
PhasePhase 6 — staging/preview only; upload blocked
ReadConversion data staging and preview
WriteOffline conversion upload (BLOCKED — EX-014) — blocked
CostFree
Cost RuleEX-014 blocked until all 12 blockers resolved
ModulesBudget Planner, Change History, Executive Summary
Datagclid_conversion_map, conversion_timestamp, conversion_value, conversion_action_id
Why UsefulUpload won call/job conversions to Google Ads for Smart Bidding signals. CRITICAL: Legacy endpoint blocked June 2026. Must use new Data Manager API.
Key RisksEX-014 blocked; GCLID capture not confirmed; CRM mapping not confirmed; duplicate prevention not built; consent review required; staging not built; legacy endpoint deprecated
RequirementsAll EX-014 blockers resolved · GCLID confirmed in Leads Gear · CRM mapping done · Staging table built · Consent/privacy review done · Data Manager API tested
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
🆕 Group C — SEO / SERP / Competitor Research (3 connectors)
NOT CONNECTED
🔎 DataForSEO SERP API
Phase 7 · Optional Paid · $30/mo cap
Competitor ad and SERP intelligence. Highest-value paid connector for PPC research. Strictly capped.
ProviderDataForSEO
CategorySERP intelligence / competitor ads / keyword difficulty
PhasePhase 7 — after free stack is live
ReadSERP results, keyword difficulty, competitor ad copy, ranking data
WriteNone — write_locked
Cost~$30/month (pay-per-call, $0.0006/SERP)
Cost RuleHard cap $30/month · 70% warning · 90% critical · approval required per bulk check
ModulesCompetitor Intelligence, Keyword Intel, AI Prompts
Dataserp_results, competitor_ads, keyword_difficulty, serp_positions, paid_results
Why UsefulSERP intelligence, competitor ranking, paid ad copy monitoring. Optional paid module. Every bulk SERP check requires manual approval.
Key RisksPay-per-call — bulk checks drain budget fast; no competitor trademark copying; terms of service compliance required
RequirementsDataForSEO account · API credentials in .env · $30/month hard cap set · Per-check approval workflow
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
🏴 Apify SEO Actors
Planned · Locked · Optional
SEO crawling, SERP research, and competitor page intelligence platform. Current allowed mode: Mock / planning only. Live mode blocked until explicit real-integration approval and all safeguards in place.
ProviderApify
CategorySEO crawling / SERP research / competitor page intelligence
PhasePhase 8 — after DataForSEO is live and approved
Current StatusPlanned · Locked · Mock/planning only
ReadApproved actors on allowlisted domains only (future)
WriteNone — read/crawl only — write_locked
Cost~$10–$15/month (actor compute units)
Cost RuleHard cap $15/month · approved actors only · domain allowlist enforced · approval per run
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Potential Future Uses (planning only)
• Website crawling for on-page audit signals
• Competitor landing page capture for benchmarking
• Title / meta tag checks across competitor URLs
• Broken-link checks on client landing pages
• Missing-image and alt-text audit checks
• Content-gap research vs competitor pages
• Local competitor research in service area
• SERP snapshot actors where legally and technically appropriate
• Competitor landing page capture for benchmarking
• Title / meta tag checks across competitor URLs
• Broken-link checks on client landing pages
• Missing-image and alt-text audit checks
• Content-gap research vs competitor pages
• Local competitor research in service area
• SERP snapshot actors where legally and technically appropriate
Key Risks
• Scraping terms and legal/compliance review required
• robots.txt and website restrictions must be honoured
• Rate limits per target domain
• Actor maintenance (breaking changes on target sites)
• Changing page structures break selectors
• Data freshness — crawl timestamp must be recorded
• Result accuracy not guaranteed
• Cost control (actor compute units can spike)
• PII / customer-data risk in crawled pages
• robots.txt and website restrictions must be honoured
• Rate limits per target domain
• Actor maintenance (breaking changes on target sites)
• Changing page structures break selectors
• Data freshness — crawl timestamp must be recorded
• Result accuracy not guaranteed
• Cost control (actor compute units can spike)
• PII / customer-data risk in crawled pages
Required Safeguards Before Any Live Use
• Approved Actor list (no unapproved actors)
• Domain allowlist (no crawling outside approved domains)
• Rate limit enforced per domain
• Monthly cost cap ($15 hard cap)
• Data retention policy (how long crawl data kept)
• Source timestamp on every crawl result
• Crawl evidence log (what was crawled, when, by whom)
• No login-wall bypass
• No CAPTCHA bypass
• No protected or private data accessed
• Human review of every crawl result before use
• Domain allowlist (no crawling outside approved domains)
• Rate limit enforced per domain
• Monthly cost cap ($15 hard cap)
• Data retention policy (how long crawl data kept)
• Source timestamp on every crawl result
• Crawl evidence log (what was crawled, when, by whom)
• No login-wall bypass
• No CAPTCHA bypass
• No protected or private data accessed
• Human review of every crawl result before use
Human ApprovalRequired per actor run · per domain · per data use
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
📍 Google Business Profile
Phase 5 · Free · Read-Only
Local visibility intelligence. Required for local services strategy and map pack research.
ProviderGoogle
CategoryLocal search / reviews / map pack
PhasePhase 5
ReadReviews, ratings, local search impressions, profile data
WriteNone — write_locked
CostFree
Cost RuleNo cost cap needed
ModulesCompetitor Intelligence, Local Services (P033), Executive Summary
Datagbp_reviews, gbp_rating, local_search_impressions, map_pack_position
Why UsefulLocal search signals, review data, and map pack presence. Pairs with Local Services campaign strategy (P033). Read-only.
Key RisksWrite actions (responding to reviews) must never be automated; local pack position data delayed
RequirementsGoogle Business Profile API access · OAuth2 or service account · Profile verified
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
🆕 Group D — Reporting / Automation (4 connectors)
NOT CONNECTED
📊 Supermetrics
Phase 10 · Optional Paid · Write-Risk
Optional reporting layer. High cost risk and write-back risk. Evaluate against free alternatives first.
ProviderSupermetrics
CategoryMulti-platform reporting connector
PhasePhase 10 — after full review; read-only only
Read200+ platform data in Sheets / Looker Studio / BigQuery
WriteWrite-back to Google Ads (PERMANENTLY LOCKED) — write_locked
CostPaid — subscription required (~$99+/month)
Cost RuleOnly approved if data value justifies cost over free alternatives · write-back never enabled
ModulesClient Report Builder, Executive Summary (reporting layer only)
DataAll platforms consolidated into Sheets/Looker reports
Why Useful200+ platform connector for consolidated reporting. Only connector with write-back capability — permanently locked. Consider whether free Google Data Studio + Sheets achieves same outcome.
Key RisksWrite-back to Google Ads must never be enabled; subscription cost may exceed value vs free alternatives; data accuracy not guaranteed
RequirementsCost-benefit review vs free alternatives · Write-back confirmed disabled · Approved data sources list · Subscription justified
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
⚡ Zapier
Phase 10 · Optional · Deferred · Write-Risk
Output-only notification zaps only. No Google Ads write zaps ever without explicit per-zap approval.
ProviderZapier
CategoryWorkflow automation platform
PhasePhase 10 — deferred; zap-by-zap review required
ReadTrigger-action workflows reading from 6000+ apps
WriteAny Google Ads action via zap (PERMANENTLY LOCKED unless approved per-zap) — write_locked
CostFree tier available; paid for multi-step zaps
Cost RuleNo zap touching Google Ads enabled without per-zap review and approval
ModulesNotification workflows, digest automation (output only)
DataWorkflow trigger/action data from connected apps
Why UsefulWorkflow automation platform. Risk: can trigger Google Ads actions automatically. Deferred until each zap reviewed individually.
Key RisksAny zap connecting to Google Ads can modify campaigns; auto-actions locked; zap-by-zap review required
RequirementsPer-zap approval · Google Ads zaps confirmed blocked · Output-only zaps reviewed · Subscription justified
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
💬 Slack Alerts
Phase 9 · Output-Only · Free / Freemium
Alert delivery channel. Low risk — output only. No Slack-triggered actions ever.
ProviderSlack / Salesforce
CategoryAlert and digest delivery
PhasePhase 9 — output-only
ReadNone (output only — BidScope sends TO Slack)
WriteNone — no actions triggered from Slack — write_locked
CostFree webhook / free Slack workspace
Cost RuleNo cost cap needed for webhook output
ModulesDaily Briefing, Budget Planner, Decision Center (alerts)
DataSlack webhook payload: alert text, metrics, approval links
Why UsefulSend BidScope performance alerts and weekly digests to Slack channel. Output-only. No Google Ads actions triggered from Slack messages.
Key RisksNo actions must ever be triggered by incoming Slack messages; webhook URL must be kept private
RequirementsSlack workspace · Incoming Webhook URL · Alert templates defined · .env storage for webhook URL
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
📡 Uptime Monitoring
Phase 9 · Optional Paid · Alert-Only
Protect budget from landing page downtime. Low cost, high value. Auto-pause never automatic.
ProviderUptimeRobot / StatusCake
CategoryLanding page uptime monitoring
PhasePhase 9
ReadUptime status, downtime events, response time
WriteNone (alert-only; no auto-pause without manual enable) — write_locked
CostFree (limited) or ~$7/month Pro
Cost RuleHard cap $10/month · auto-pause rule requires per-campaign manual enable
ModulesDaily Briefing, Budget Planner (downtime risk), Decision Center
Datauptime_status, downtime_events, response_time_ms, status_page_url
Why UsefulMonitor all active landing pages. Alert when page goes down to prevent wasting ad spend on 404s or server errors.
Key RisksAuto-pause rule requires manual enable per campaign; never auto-resume ads without confirming tracking is restored
RequirementsUptimeRobot/StatusCake account · Monitors configured for all landing pages · API key in .env · Auto-pause approval per campaign
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
🆕 Group E — AI / Call Intelligence (2 connectors)
NOT CONNECTED
🤖 AI Analysis API
Phase 7+ · Optional Paid · $20/mo cap
AI explanation layer for non-technical client reporting. Strictly capped. Never auto-deploys to Google Ads.
ProviderAnthropic (Claude API)
CategoryNatural language summaries and analysis
PhasePhase 7+ — after read data is live
ReadAI summaries, intent labels, ad copy variants, decision explanations
WriteNone (analysis only) — write_locked
Cost~$20/month (Claude Haiku, pay-per-token)
Cost RuleHard cap $20/month · console usage limit required · server-side proxy only · no keys in HTML
ModulesAI Prompts, Ad Copy Builder, Decision Center, Client Report Builder
Dataai_summaries, intent_classifications, ad_copy_variants, decision_rationale
Why UsefulNatural language summaries of performance data, ad copy generation, keyword intent classification, and decision explanations. Optional paid layer.
Key RisksAPI keys must never be in HTML or JS files; use server-side proxy only; uncapped calls = high bill risk
RequirementsAnthropic API key in .env (server-side only) · Console usage limit set at $20 · Server-side proxy deployed
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
NOT CONNECTED
🎙 Call Tracking / Transcription
Phase 7+ · Optional Paid · $20/mo cap
Call intent intelligence layer. Highest legal risk connector. Do not activate without legal review.
ProviderWhisper (OpenAI) / AssemblyAI
CategoryCall recording transcription and intent analysis
PhasePhase 7+
ReadTranscripts, intent scores, objection log, call summaries
WriteNone (analysis only) — write_locked
Cost~$20/month (Whisper ~$0.006/min)
Cost RuleHard cap $20/month · GDPR consent required before any transcription
ModulesDaily Briefing, Change History, Budget Planner (call quality signal)
Datacall_transcripts, intent_scores, objection_log, quote_value_signals
Why UsefulTranscribe recorded calls from Leads Gear. Classify intent, detect objections, extract quote value signals. Requires Leads Gear integration first.
Key RisksCall recording and transcription requires explicit consent under GDPR/UK PECR; PII in transcripts; legal sign-off required before activation
RequirementsLeads Gear live · Recording consent confirmed · Whisper/AssemblyAI account · API key server-side only · GDPR review complete
Human ApprovalRequired
integration_lockedtrue
live_write_allowedfalse
credentials_storedfalse
Last ReviewedStep 73 / 2026-06-16
💰 $100/Month Optional Paid-Tool Budget
$0 spent · All disabled · enabled: falseAll paid modules remain enabled: false. No paid API calls made. Hard cap $100/month total. Free / owned data always used first.
DataForSEO
$30
hard cap · pay-per-SERP · approval per bulk check
AI Analysis API
$20
hard cap · Claude Haiku · console limit required
Call Transcription
$20
hard cap · Whisper ~$0.006/min · GDPR first
Apify SEO Actors
$15
hard cap · approved actors only · domain allowlist
Uptime Monitor
$10
hard cap · UptimeRobot Pro · auto-pause manual only
Reserve Budget
$5
unallocated · case-by-case approval
Total Hard Cap
$100
provider blocks at 100% · 70% warning · 90% critical
Spent This Month
$0
all modules disabled · mock mode only
Cost Control Rules
🦮 70% of any provider cap → warning alert
🔴 90% of any provider cap → critical alert
🔒 100% of any provider cap → auto-block by provider
🔒 $100 total cap → all paid calls blocked
No paid call without module enabled: true
No connector bypasses its provider limit
Free / owned data always used first
Apify: approved domains + approved actors only
DataForSEO: top-priority keywords/SERPs only
All paid modules currently enabled: false
🚂 11-Phase Integration Roadmap
Integration lock active · No phase starts until explicitly unlockedPhase 1 — Google Ads Scripts + Sheets
Read-only data pull via Apps Script. Zero cost, no OAuth for script. First safe integration.
Phase 2 — Official Google Ads MCP
Read-only MCP. ALLOW_MUTATIONS=false. OAuth + developer token. No write actions.
Phase 3 — GA4 + GSC + GTM + Clarity + PageSpeed
All free, all read-only. Same GCP service account. No write risk.
Phase 4 — Leads Gear + CRM
Owned subscriptions. Read-only call log and revenue data. Required before any offline conversion work.
Phase 5 — Google Business Profile
Local search signals. Read-only. Required for local services strategy.
Phase 6 — Offline Conversion Staging Only
Preview and staging pipeline only. No live upload until EX-014 fully resolved. Data Manager API only.
Phase 7 — DataForSEO (Capped)
$30/month hard cap. Read-only SERP data. Approval required per bulk check. Top-priority keywords only.
Phase 8 — Apify SEO Actors (Strict Allowlist)
$15/month cap. Approved actor list + domain allowlist. Human review per crawl. No CAPTCHA/login bypass.
Phase 9 — Slack Alerts + Uptime Monitoring
Slack output-only. Uptime monitors all landing pages. Auto-pause never automatic.
Phase 10 — Optional Supermetrics / Zapier
Only after cost-benefit review vs free alternatives. Write-back permanently locked. Per-zap review for Zapier.
Phase 11 — Google Ads Write Actions (LOCKED)
ALL write actions (keyword upload, negative upload, bid changes, budget changes, ad upload) remain locked unless separately and explicitly approved. Never automatic.
📋 Connector Readiness Matrix
All 20 connectors| Connector | Data Value | Module Fit | Read Risk | Write Risk | Cost Risk | Legal Risk | Phase | Status | Approval | Locked |
|---|---|---|---|---|---|---|---|---|---|---|
| Scripts→Sheets | High | All intelligence | Low | None | Free | Low | 1 | Planned | Yes | ✓ |
| GA4 | High | CVR, attribution | Low | None | Free | Med | 3 | Planned | Yes | ✓ |
| GTM | High | Tracking layer | Low | Config only | Free | Low | 3 | Planned | Yes | ✓ |
| GSC | Med | Keyword intel | Low | None | Free | Low | 3 | Planned | Yes | ✓ |
| Clarity | Med | UX / landing page | Low | None | Free | Med (PII) | 3 | Planned | Yes | ✓ |
| PageSpeed | Med | Landing page Dx | Low | None | Free | Low | 3 | Planned | Yes | ✓ |
| Leads Gear | High | Call attribution | Med | None | Owned | Med (calls) | 4 | Planned | Yes | ✓ |
| CRM | High | Revenue / bidding | Med | None | Owned | Med (revenue) | 4 | Deferred | Yes | ✓ |
| Google Ads MCP | Critical | All modules | Med | High | Free | Med | 2 | Planned | Yes | ✓ |
| Ads API Direct | Critical | All modules | Med | Very High | Free | Med | 2 | Planned | Yes | ✓ |
| Offline Conv. | High | Smart Bidding signals | Low | Very High | Free | High (EX-014) | 6 | Blocked | Yes | ✓ |
| DataForSEO | High | Competitor intel | Low | None | $30/mo | Med (ToS) | 7 | Planned | Yes | ✓ |
| Apify | Med | SEO / competitor | Med | None | $15/mo | High (scraping) | 8 | Deferred | Yes | ✓ |
| Google Biz Profile | Med | Local services | Low | None | Free | Low | 5 | Planned | Yes | ✓ |
| Supermetrics | Med | Reporting layer | Low | High | $99+/mo | Med | 10 | Deferred | Yes | ✓ |
| Zapier | Low | Automation only | Low | Very High | Paid | Med | 10 | Deferred | Yes | ✓ |
| Slack Alerts | Low | Alert delivery | None | None (output) | Free | Low | 9 | Planned | Yes | ✓ |
| Uptime Monitor | Med | Budget protection | Low | None | $10/mo | Low | 9 | Planned | Yes | ✓ |
| AI Analysis API | Med | Summaries / copy | Low | None | $20/mo | Med (data) | 7+ | Planned | Yes | ✓ |
| Call Transcription | Med | Call intelligence | Med | None | $20/mo | High (GDPR) | 7+ | Planned | Yes | ✓ |
🔒 Offline Conversion Gate — EX-014 BLOCKED
Upload blocked · All 12 blockers must be resolved first🔒 EX-014 — Offline Conversion Upload Permanently Blocked Until All Blockers Resolved
🚫 EX-014 blocked — explicit unlock required
🚫 GCLID / GBRAID / WBRAID capture not confirmed
🚫 CRM won/lost mapping not built
🚫 Conversion timestamp validation not built
🚫 Duplicate prevention not implemented
🚫 Consent/privacy review not complete
🚫 Staging table not built
🚫 Approval queue not wired
🚫 Rollback / audit record not implemented
🚫 Legacy endpoint deprecated (Jun 2026)
🚫 Data Manager API migration not done
🚫 Official Google requirements not re-verified
⚠️ No live upload button exists in BidScope. Offline conversion upload requires separate explicit approval after all 12 blockers are individually resolved and signed off.
🚫 What NOT To Enable
Safety wall — permanent until explicitly lifted❌ Google Ads Mutate Operations
No campaign/keyword/ad/bid/budget mutations via API or MCP without separate explicit approval.
❌ Campaign / Keyword / Ad Upload
No campaign creation, keyword upload, negative upload, or RSA/ETA upload. All write-locked.
❌ Live Budget / Bid Changes
No automated budget or bid changes. No bid rules. Human approval required per change.
❌ Offline Conversion Upload
EX-014 blocked. No upload until all 12 blockers resolved and explicitly unlocked.
❌ Zapier Write Zaps
No Zapier zaps connecting to Google Ads. Each zap reviewed per-action, per-destination.
❌ Supermetrics Write-Back
Supermetrics write-back to Google Ads permanently locked even after read is enabled.
❌ Unrestricted Apify Crawling
No Apify actors without approved actor list, domain allowlist, rate limit, and human review.
❌ CAPTCHA / Login-Wall Bypass
No CAPTCHA solving, no login-wall bypass, no accessing protected or private data.
❌ Unapproved Competitor Scraping
No competitor trademark copying. No bulk scraping without legal and technical review per domain.
❌ AI Auto-Deployment
AI API outputs are analysis only. No AI result auto-deployed to Google Ads without human approval.
❌ Credentials in HTML / JS
No API keys, tokens, passwords, or credentials ever stored in HTML or JS files. Server-side .env only.
❌ Real Customer Data in Mock Files
All mock JSON files use synthetic data only. No real GCLID, call recordings, CRM records, or PII.
🔒 System Update
Admin only · server-enforcedRelease Manager
Signed release checks, backups, migrations, and rollback for this deployment. Requires an admin session token.
Open System Update →✅ Settings Self-Check
Running...
BidScope AI — Settings & Connected Accounts · Step 73 · 2026-06-16 · 20 connectors catalogued · integration_locked: true · live_write_allowed: false · credentials_stored: false · EX-014: BLOCKED · API keys: 0 · Live calls: 0 · Google Ads writes: 0