What's New
Product updates, new features, and improvements to Xylo.
Enterprise Tier: Data Warehouse, Async Insights & Ad Integrity
Enterprise-tier release. A local data warehouse that refreshes Meta account state daily, async insights jobs for heavy queries that would time out synchronously, and an ad integrity checker that flags suspicious landing pages, unknown Pages, and unauthorized Instagram accounts on scheduled daily runs.
- Scheduled daily bulk pulls — campaigns, ad sets, ads with creatives, and daily-granularity insights on a rolling 90-day window — with incremental sync (re-pulls last 7 days each run to catch late conversion attribution, backfills older history 30 days at a time)
- Transparent local-snapshot serving for /v1/insights on enterprise accounts; response includes data_freshness: 'local_snapshot' with snapshot_at timestamp
- Async insights jobs via meta_start_insights_job / meta_check_insights_job MCP tools — threshold-routed (sync / sync_slow / async_recommended / async_required / refused) based on estimated row count (entities × date buckets × breakdowns)
- meta_check_ad_integrity MCP tool — flags ads linking to unknown domains, using unknown Facebook Pages, on unknown Instagram accounts, or with no destination URL
- Business website field on the account dashboard — sets the reference domain for the integrity checker; subdomains accepted automatically
- Approved domains panel in the dashboard — mark domains as known-good to stop future anomaly flags
- New endpoints: POST /v1/insights/async/start, GET /v1/insights/async/:job_id, GET /v1/ai/integrity-check, POST /v1/cron/bulk-pull
- URL history tracking — ad_url_history table records every unique landing URL per account, with first/last seen timestamps and seen_count
Publishing, Media Pipeline & MCP Polish
Meta MCP parity push: a staged media pipeline that dedupes and groups assets before finalizing to Meta, Page and Instagram publishing with comment management, and a broad round of MCP and insights polish.
- Staged media upload with dedupe and grouping — stage in Vercel Blob, finalize pushes to Meta while keeping blobs alive for Page/IG reuse
- Facebook Page and Instagram publishing with comment management and engagement counts on Page post responses
- List user-managed Pages without requiring a connected ad account
- Catalog discovery fixes and per-account default catalog selector, plus meta_list_catalogs and meta_list_catalog_products MCP tools
- Insight deduping across standard events and lead counts to match Ads Manager, with funnel metrics exposed
- MCP polish: accept xy_sk_ API keys as bearer tokens, keyword hints in tool descriptions for claude.ai tool_search, latest-post shortcuts for Page and Instagram, and lead form tools (meta_list_lead_forms, meta_get_lead_submissions)
- Dropped read_insights from the Meta OAuth scope to simplify consent
- Fixes for duplicate campaign/ad-set on Meta v25, budget schedule ISO parsing, and IG media delete via Page access token
- Ads Library preview removed
Google Ads Search Terms & Negative Keywords
Deep Google Ads optimization tools: search term reports, campaign and shared negative keyword lists, and full MCP tool coverage for search term management.
- Search term performance reports with date range filtering
- Campaign-level negative keyword management (add, remove, list)
- Shared negative keyword lists with campaign linking
- MCP tools for all search term and negative keyword operations
- Negative keyword list ↔ campaign association endpoints
Performance Max & Experiments
Full support for Google Ads Performance Max asset groups and A/B experiment management. Run experiments, promote winners, and manage PMax creative assets programmatically.
- Performance Max asset group CRUD and asset linking
- A/B experiment creation, promotion, and end lifecycle
- Google Ads change history and recommendation engine integration
- Keyword quality score reporting
- Budget management endpoints (shared budgets)
- User list and customer match audience management
Instagram & Facebook Pages Publishing
Publish content directly to Instagram and Facebook Pages through the API and MCP. Images, videos, Reels, Stories, carousels, and comment management across both platforms.
- Instagram publishing: images, videos, Reels, Stories, and carousels
- Facebook Page post creation, scheduling, and management
- Comment management for both Pages and Instagram
- Meta Pixel management and Conversions API (server-side events)
- Media insights and publishing rate limit checks
- MCP tools expanded to ~195 across all platforms
TikTok Ads & Multi-Provider Auth
TikTok Ads platform integration and a complete auth overhaul supporting email/password, Meta OAuth, and Google OAuth sign-in. Team management with role-based access control.
- TikTok Ads: campaigns, ad groups, ads, insights, and audiences
- Email/password authentication with bcrypt and email verification
- Google OAuth login (separate from Google Ads connection)
- Team management: roles (owner/admin/member/viewer), invites
- OAuth 2.1 with PKCE for MCP server authentication
- Webhook subscriptions for campaign and ad set events
- Bulk operations endpoint for sequential multi-request execution
- AI-powered campaign audit, budget optimization, and report generation
- Cross-platform insights with normalized metrics and grand totals
Google Ads Support
Full Google Ads API integration with the same normalized response format as Meta. Manage campaigns, ad groups, ads, and pull performance reports across both platforms with a single API key.
- Google Ads campaign CRUD operations
- Ad group management with targeting options
- Cross-platform normalized response schema
- Google Ads insights and performance reporting
- Keyword targeting and bid management endpoints
- Conversion action tracking and offline conversion uploads
- Asset management (sitelinks, callouts, structured snippets, images)
MCP Server Release
Introduced the Xylo MCP server, enabling AI agents like Claude, GPT-4, and Cursor to manage ad campaigns through natural language. Configure in your AI tool of choice.
- MCP server with Streamable HTTP transport and OAuth 2.1 auth
- Meta campaign, ad set, ad, audience, and insights tools
- Claude Desktop, Claude Code, and Cursor integration
- Typed tool schemas with descriptions for AI discovery
- Read and write operations with safety confirmations
Meta Ads Full Coverage
Expanded Meta Ads API coverage to include audiences, creatives, lead forms, catalogs, and Instagram-specific endpoints. Added response caching and rate limit handling.
- Custom audience and lookalike audience management
- Creative asset upload and management
- Lead form retrieval and lead data access
- Product catalog integration
- Instagram account and media endpoints
- Response caching with configurable TTLs
- Automatic retry with exponential backoff for rate limits
- Page management endpoints
Initial Launch
First public release of Xylo. Core Meta Ads API wrapper with campaign, ad set, and ad management. REST API with API key authentication and AES-256-GCM token encryption.
- Meta Ads campaign CRUD operations
- Ad set management with targeting configuration
- Ad creation and status management
- Performance insights and reporting endpoints
- API key authentication with SHA-256 hashing
- Meta OAuth connection flow
- Account management dashboard
- Organization and team support
- Usage logging and request tracking
- Docker deployment configuration