# Bootstrap a full Google API service account # Claude generates this — you approve once # 1. Create project + enable APIs gcloud projects create organized-ai-tracking --name="OA Tracking" gcloud services enable tagmanager.googleapis.com \ analyticsadmin.googleapis.com \ analyticsdata.googleapis.com \ googleads.googleapis.com # 2. Create + key service account gcloud iam service-accounts create tracking-agent \ --display-name="OA Tracking Agent" gcloud iam service-accounts keys create \ ~/.config/gcp/tracking-agent.json \ --iam-account=[email protected] # 3. Store in Secrets Manager gcloud secrets create TRACKING_SA_KEY \ --data-file=~/.config/gcp/tracking-agent.json # Done — all APIs accessible from Claude Code

# claude_desktop_config.json — GCP MCP wired up { "mcpServers": { "cloudflare": { "url": "https://bindings.mcp.cloudflare.com/sse" } } } # Claude Code session — infrastructure conversation # "List all my Cloudflare Workers" → cloudflare.workers_list() # "Create a D1 database for GTM audit storage" → cloudflare.d1_database_create({ name: "gtm-audit-db" }) # "Store this container export in R2" → cloudflare.r2_bucket_create({ name: "gtm-containers" }) # "Query the last audit for this account" → cloudflare.d1_database_query({ database_id: "...", sql: "SELECT * FROM audits ORDER BY ts DESC LIMIT 1" }) # Full infra management — no console, no context switching

// Claude Code — GTM audit + fix via MCP const containers = await gtm.listContainers({ accountId }); for (const c of containers) { const ws = await gtm.listWorkspaces(c); const tags = await gtm.listTags(ws[0]); // Find orphan tags — no firing rule attached const orphans = tags.filter(t => !t.firingRuleId?.length); // Find undefined variable references const broken = await validateVariableRefs(tags); // Patch + push to staging workspace for (const tag of [...orphans, ...broken]) { await gtm.updateTag({ ...tag, patch: fixConfig(tag) }); } await gtm.createVersion({ name: `AI Audit — ${new Date().toISOString()}` }); } // Full audit + fix across all containers: ~90 seconds

-- GAQL: conversion health audit — real query SELECT conversion_action.name, conversion_action.status, conversion_action.type, conversion_action.counting_type, metrics.conversions, metrics.conversions_value, metrics.all_conversions FROM conversion_action WHERE segments.date DURING LAST_30_DAYS AND conversion_action.status = 'ENABLED' ORDER BY metrics.conversions DESC // Claude Code MCP tool call googleAds.query({ customerId: "XXX-XXX-XXXX", query: gaql }) // Returns JSON → Claude flags zero-value conversions // → drafts fix plan → implements via API

// Funnel report — piped into Claude analyticsData.runFunnelReport({ property: "properties/XXXXXXXXX", funnelSteps: [ { name: "View Product", filter: eventFilter("view_item") }, { name: "Add to Cart", filter: eventFilter("add_to_cart") }, { name: "Purchase", filter: eventFilter("purchase") } ], dateRanges: [{ startDate: "30daysAgo" }] })

// Organized Codebase — ships pre-wired scripts/ qa/ playwright-tag-check.ts ← QA gate event-coverage-check.ts ← GA4 parity GTM-CONTAINER-BASELINE.json ← diff source audit/ gtm-api-audit.ts ← GTM API ads-conversion-check.ts ← Ads API ga4-schema-diff.ts ← GA4 API infra/ bootstrap-gcp.sh ← gcloud setup scheduler-create.sh ← cron jobs deploy/ gtm-push-workspace.ts ← auto-publish // One command starts the full loop: claude --dangerously-skip-permissions "run full tracking audit and fix loop for this account"

# Trigger the skill from Claude Code claude "audit this Meta account" # Phase 1 — automatic data pull get_ad_accounts(user_id="me", limit=200) bulk_get_insights(level="campaign", time_range="last_30d") stape_container_analytics() # Phase 2 — health score output # Attribution Health: 3.0 / 3.0 # ROAS Performance: 2.0 / 2.5 # CAPI Deployment: 0.75 / 1.5 # Revenue Tracking: 0.75 / 1.5 # Campaign Structure: 1.0 / 1.5 # ──────────────────────────── # Total: 7.5 / 10 🟡 Good

# autoresearch for tracking — overnight while signal_window_complete: config = gtm.exportContainer(baseline) patch = claude.propose_optimization( config, goal="max event match quality") gtm.updateTag({ ...patch }) gtm.createVersion("exp-042") score = ga4.runReport(match_quality) + ads.query(conv_parity) - dedup.penalty(duplicates) if score > best: gtm.publishVersion() # promote else: gtm.revertWorkspace() # discard # ~12 experiments/day · ~100/weekend

# morning deliverables workspace = gtm.getWorkspace( "autoresearch-nightly") # review what changed print(workspace.changelog) # → 14 tags modified # → score: 0.72 → 0.91 # → 47 experiments run # happy? one-click publish gtm.publishWorkspace(workspace) # or grab the JSON for review config = r2.get("winning-config.json") gtm.importContainer(config)

# Drop this into Claude Code — right now claude --dangerously-skip-permissions "You are a tracking audit agent. Using the GTM MCP and Google Ads MCP: 1. List all containers for account [ID] 2. Flag tags without firing rules 3. Cross-check conversion actions against GA4 purchase events 4. Generate a remediation plan as JSON 5. Use GWS CLI to log the audit to GCP Secrets Manager 6. Push approved fixes to staging" # That's a full audit + fix cycle. # Time to run: < 2 minutes # Time saved: 6 hours per client