Infrastructure

MCP servers

All 9 MCP servers — tools, Fly.io app names, and auth.

Security note: This page contains bearer tokens. Keep this site access-controlled — do not share the URL publicly. If any token is compromised, rotate it immediately via flyctl secrets set.

Overview

All Hedgehog MCP servers run on Fly.io and use bearer token auth. They are connected to Claude.ai and NHH via the MCP protocol. Servers are read-only unless otherwise noted.

HH servers

Server	Fly.io app	Purpose	Reads	Writes
`hedgehog-google-ads`	`hedgehog-google-ads`	Google Ads data — campaigns, ad groups, keywords, spend	Google Ads API	—
`hedgehog-meta-ads`	`hedgehog-meta-ads`	Meta Ads data — campaigns, ad sets, insights	Meta Marketing API	—
`hedgehog-ga4`	`hedgehog-ga4`	GA4 traffic, sessions, conversions	GA4 Data API	—
`hedgehog-gsc`	`hedgehog-gsc`	Google Search Console — clicks, impressions, queries	GSC API	—
`hedgehog-gbp`	`hedgehog-gbp`	Google Business Profile — reviews, posts, insights	GBP API	—
`hedgehog-social-insights`	`hedgehog-social-insights`	Social media insights (Meta organic)	Meta Graph API	—
`hedgehog-bing`	`hedgehog-bing`	Bing Ads data	Bing Ads API	—
`hedgehog-onboarding`	`hedgehog-onboarding`	HH Onboarding — client setup workflows	ClickUp, Drive	ClickUp tasks, Drive files
`mechanic-mcp-server`	`mechanic-mcp-server`	MM-specific data and reporting tools	Google Ads, Sheets	Sheets

Auth

Primary bearer token — 7 of 9 servers

UzDXdYigzGifkJ8r9ZJcDHw5Jve2_JoGdmZFEu5qXb0

hedgehog-google-ads · hedgehog-meta-ads · hedgehog-ga4 · hedgehog-gsc · hedgehog-gbp · hedgehog-social-insights · hedgehog-onboarding

Separate token — hedgehog-bing + mechanic-mcp-server

748e3cc9c5a1bba9

hedgehog-bing · mechanic-mcp-server

Tokens are set as Fly.io secrets. To rotate:
flyctl secrets set MCP_AUTH_TOKEN=<new-token> --app <app-name>
Then redeploy the app.