Workspace and accounts
How the two-tier shell maps a Google login to a workspace and each Google Ads customer to its own account.
The app has two tiers. The workspace holds the account list and shared settings — your profile, the Google Ads connection, and the org-wide kill switch. Everything account-specific lives under a project, where one project is exactly one Google Ads customer account.
Workspace tier
One Google login and its encrypted refresh token belong to the workspace. From it you connect Google Ads,
discover accessible accounts, and import the ones you manage. Workspace settings live under /app/settings:
- Profile — your account.
- Google Ads — connect, disconnect, and import accounts (
/app/settings/integrations/google-ads). - General — the org-wide auto-apply kill switch (see Safe-apply policy).
- MCP — mint org-scoped tokens (
/app/settings/mcp).
Account (project) tier
Each imported account gets its own space under /app/[projectId], grouped in the sidebar:
| Group | Pages |
|---|---|
| — | Overview, AI Chat |
| Performance | Campaigns, Keywords, Quality score, Search terms, Ads |
| Growth | Audit, Recommendations, Approvals, History |
| Settings | General, Optimization, Tracking, MCP |
Account-scoped settings — including optimization targets and a
project-scoped MCP token — live under /app/[projectId]/settings.
This distinction matters over MCP too: an org-scoped token reaches every account (pass a projectId), a
project-scoped token is clamped to one. See Token scopes.