Observed Signal · Aug 3, 2026 · Technical Release · Source: https://www.blogger.com/feeds/7815614485808579332/posts/default?category=google_ads_api&orderby=published · Impact: 4/5 · Sentiment: Positive
Google Ads API pilot secures manager-account API access
Google is piloting a security feature for the Google Ads API that restricts sensitive API methods (account management, user management, billing) for accounts under a Google Ads manager hierarchy to a pre-approved allowlist of Google Cloud projects. Participating developers submit the top-level manager customer ID; Google audits API activity to identify associated applications and project numbers, then works with the manager to establish the allowlist. Unapproved applications attempting sensitive calls will fail. The pilot promises enhanced security and improved visibility into which applications can perform sensitive actions. Developers can apply via a Google form; allowlisting changes and opt-out changes are performed within 10 business days.
Major platform (Google) is piloting an account-level API access control that affects developer integrations and third-party applications; this security feature can materially change how API access is managed for Google Ads manager hierarchies.
Track Google Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Google launched a pilot to secure Google Ads manager accounts by restricting sensitive API methods to a pre-approved allowlist of Google Cloud projects.
- Developers join by submitting the customer ID of their top-level Google Ads manager account via an application form.
- Google audits API activity across accounts under the manager to identify applications and their Google Cloud project numbers before establishing the allowlist.
- Any unapproved application that attempts to make sensitive API calls under a protected manager account will fail.
- Allowlist additions and opt-out changes are handled by Google within 10 business days.
Connected Companies & Entities
2 Entities mapped“Google performs an audit of the API activity of all the accounts under the Google Ads manager account to identify the list of applications a...”
“Google performs an audit of the API activity of all the accounts under the Google Ads manager account to identify the list of applications a...”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Google Ads API Sees Surge in Developer Token Applications
Google posted an update noting increased developer token access applications for the Google Ads API following recent releases (Explorer Access, MCP server, Developer Assistant). Application reviews are taking longer than usual; Google has added reviewers, cleared some backlog items, and fast-tracked certain applications. The post advises developers to continue using Explorer Access if it meets their needs and to upgrade to Basic Access only if they consistently exceed quotas, expect growth, or require features unavailable in Test/Explorer access. Google lists actions to help speed Basic Access reviews: ensure managed child accounts are linked under the signing Manager account, complete advertiser verification for accounts, include an OAuth App‑verified Google Cloud project number when applicable, and provide clear, specific use-case details in the application. For technical support, developers are directed to Google Ads support.
Google speeds Ads API Basic Access with brand verification
Google has launched a pilot to expedite reviews of Basic Access applications for Google Ads API developer tokens by allowing developers to complete brand verification for their Google Cloud project. Developers with pending Basic Access applications can associate their developer token with a Google Cloud project and finish the OAuth brand verification process; once a project is brand verified, the pending application will be reviewed within hours. Brand verification is currently optional and used as a signal for faster eligibility determination, though the Google Ads API Compliance team may request it for some applicants. Google will monitor developer experience through pilot surveys to inform future changes.
Google Ads API Requires Multi-Party Approvals
Google announced that the Google Ads API will require multi-party approvals for sensitive account actions. The change affects inviting users and updating or revoking user access: when the API determines a review is necessary it will pause the normal workflow, create a MultiPartyAuthReview resource, and require approval by a second account administrator before the action takes effect. Developers can query pending reviews via GoogleAdsService.Search or SearchStream with GAQL and resolve them using MultiPartyAuthReviewService.ResolveMultiPartyAuthReview. The rollout begins July 27, 2026 and will be enabled for all users over the following weeks. Google added support for multi-party approvals across major API versions (v24.2, v23.3, v22.2 and v21.2) and urges developers to update client libraries and application logic to handle the new workflows before the rollout date.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.