SYNTER / DEVDOCUMENTATION

Reference

Recommend, approve, execute, verify

The plugin instructions default to recommend-then-execute and require explicit user approval before actions that create or change spend.

Instructional guardrail, not an absolute technical guaranteeThis behavior comes from the plugin's workflow and safety instructions. Do not treat it as cryptographic enforcement or assume every underlying ad platform independently enforces the same approval policy.

Before approving

  1. Identity: verify the Synter organization and exact platform account ID returned by the tools.
  2. Economics: verify currency, daily/total budget, bid strategy, CPA/ROAS target, and scaling step.
  3. Measurement: verify the intended conversion action, GA4/pixel/CAPI state, and destination URL before spending.
  4. Scope: identify the exact campaign, audience, creative, fields, and old/new values.
  5. Evidence: distinguish observed data, assumptions, recommendations, drafts, and executed changes.

After an action

Secrets and plugin trust

Never paste a Synter API key, platform credential, access token, customer list, or other secret into a prompt. Configure the key in the sensitive plugin field or, for MCP clients that support custom headers, as X-Synter-Key. Standalone Claude Custom Connector UI cannot set arbitrary HTTP headers. Install only from the canonical repository or an organization-reviewed package; plugins can include connectors and local components with meaningful permissions.

Unattended operation

The repository's headless SDK harness is read-only by default. Do not enable unattended writes merely because a workflow can execute them interactively. Apply separate operational controls, narrow credentials, spending limits, monitoring, and incident procedures for any automation.