Manage MMO Assets

Use this skill to securely acquire, organize, and share marketing assets using RBAC-based access control, programmatic 2FA/TOTP handling, secrets vault isolation, and virtual card (VCC) compartmentalization to eliminate cascading ban blast radiuses.

Legal & Compliance Notice

Ad platforms (Meta, Google, TikTok) prohibit circumventing their account, ownership, or verification policies — sharing Business Managers/Vias to route around identity or ownership checks, or maintaining "clean backup" assets specifically to survive a ban that would otherwise apply, can violate platform ToS regardless of the isolation hygiene used. This skill documents access-control and compartmentalization mechanics only. It does not authorize policy circumvention; any step that exists specifically to defeat a platform's account-integrity or ownership verification system falls under REVIEW-SYSTEM LOCK in the mmo-engineer role and requires explicit written user authorization plus Security Engineer review before implementation.

When to Use

• onboarding new ad accounts, Vias, or Business Managers (BMs) into isolated operational silos
• automating 2FA/TOTP login verification codes using programmatic RFC 6238 generation from secrets vaults
• allocating virtual commercial cards (VCCs) with distinct BINs across ad accounts to prevent billing bans
• migrating plain text credentials and session cookies into HashiCorp Vault or AWS Secrets Manager
• auditing asset health, ASN boundaries, and VCC usage to prevent cascading ban ("chét chùm") incidents

Example (TOTP Programmatic Handling & VCC BIN Diversity)