Production MCP servers, shipped.

from mcp.server import Server
from .auth import scoped_bq_client

# A read-only window into the campaigns warehouse.
server = Server("campaigns", version="1.4.0")

@server.tool()
async def top_creatives(account_id: str, window: str = "7d"):
    """Return the top 10 creatives by ROAS over a window."""
    async with scoped_bq_client() as bq:
        rows = await bq.run(QUERY_TOP_CREATIVES, account_id, window)
    return render(rows)

import { Server } from "@modelcontextprotocol/sdk";
import { scopedBQ } from "./auth";

const server = new Server({ name: "campaigns", version: "1.4.0" });

server.tool("top_creatives", {
  description: "Top 10 creatives by ROAS",
  input: z.object({ accountId: z.string(), window: z.string() }),
  handler: async ({ accountId, window = "7d" }) => {
    const bq = await scopedBQ();
    const rows = await bq.run(Q_TOP, accountId, window);
    return { content: [{ type: "text", text: render(rows) }] };
  }
});

mcpServers:
  campaigns:
    command: "uvx"
    args: ["--from", "[email protected]", "serve"]
    env:
      MCP_GATEWAY_URL: "https://mcp.acme.corp"
      MCP_AUTH: "oidc:google"
    scopes: ["bq:read", "ads:read"]
    audit: true
    evals: "campaigns/evals.yaml"