# What is read-only access?

> Read-only access lets a tool or person see an ad account's data but not change it. What it allows, why it matters before you connect an AI tool, and how to check it.
- **Author**: Marxx
- **Published**: 2026-11-07
- **Category**: AI
- **URL**: https://marxx.ai/library-glossary/read-only-access

---

Read-only access lets a person or a tool see an ad account's data without being able to change anything in it. An AI tool with read-only access can report spend, leads and results, but it cannot pause an ad, launch one or move a budget.

## What it allows and blocks

| Action | Read-only | Read and write |
|---|---|---|
| See spend, results, CTR | Yes | Yes |
| See ads, copy and audiences | Yes | Yes |
| Run an audit and suggest fixes | Yes | Yes |
| Pause or launch an ad | No | Yes |
| Change a budget or bid | No | Yes |

## Why it matters for AI tools

An AI can misread a question or a number. With read-only access, the worst outcome is a wrong answer you can check. With write access, a wrong step can spend money or stop a working ad.

A common habit is to start read-only, watch the answers for a few weeks, then allow changes with a person approving each one. See [best AI agents for advertising](/best/best-ai-agents-for-advertising) for which tools read and which act.

Read-only does not mean private. Anyone who can read the answers sees your spend and results. Control who can ask, too.

## How some tools set it

From each vendor's own site (checked 6 Nov 2026):

- **Runneth** is "read-only by default". It cannot launch, pause or edit ads until an owner or admin turns on ad launching. Editing or pausing live ads has its own extra switch.
- **Marxx** never changes ads from Slack. If ad changes are switched on for a client, it can draft a change you review in Marxx. We make Marxx.
- **MCP servers** can be read-only too. An [MCP server](/glossary/mcp-server) is a plug that lets an AI app reach another tool's data, see [what is MCP](/glossary/mcp).

## A worked example

Say Priya Shah connects an AI tool with read-only access to Northwind Escapes' Meta account. She asks it to cut waste. It replies: "Pause Goa static 03. It spent INR 7,800 in 14 days with 0 leads."

The tool cannot pause the ad itself. Priya checks the number in Ads Manager, sees INR 7,800 and 0 leads, and pauses it by hand. One person, one change, one record.

## FAQ

### Can a read-only tool still leak data?

It can show data to anyone who can see its answers. Keep the bot in channels where only the right people sit.

### How do I check a tool's access?

Read its permission settings and ask the vendor which actions it can take. Then ask the tool itself what it is allowed to change, and compare the two answers.

---
- [More AI articles](https://marxx.ai/library-glossary/category/ai)
- [All articles](https://marxx.ai/library-glossary)