diff --git a/tools/clis/activecampaign.js b/tools/clis/activecampaign.js
index 0475cd9..80842ca 100755
--- a/tools/clis/activecampaign.js
+++ b/tools/clis/activecampaign.js
@@ -273,11 +273,11 @@ async function main() {
         }
         case 'add-contact': {
           const automationId = args.id
-          const contactEmail = args.email
+          const contactId = args['contact-id']
           if (!automationId) { result = { error: '--id required (automation ID)' }; break }
-          if (!contactEmail) { result = { error: '--email required' }; break }
+          if (!contactId) { result = { error: '--contact-id required (contact ID, not email)' }; break }
           result = await api('POST', '/contactAutomations', {
-            contactAutomation: { contact: contactEmail, automation: automationId }
+            contactAutomation: { contact: contactId, automation: automationId }
           })
           break
         }
diff --git a/tools/clis/google-ads.js b/tools/clis/google-ads.js
index 87f0413..88f08b2 100755
--- a/tools/clis/google-ads.js
+++ b/tools/clis/google-ads.js
@@ -157,7 +157,7 @@ async function main() {
                 resourceName: `customers/${CUSTOMER_ID}/campaignBudgets/${args.id}`,
                 amountMicros,
               },
-              updateMask: 'amountMicros',
+              updateMask: 'amount_micros',
             }],
           })
           break
diff --git a/tools/clis/kit.js b/tools/clis/kit.js
index 5868699..d17abdb 100755
--- a/tools/clis/kit.js
+++ b/tools/clis/kit.js
@@ -14,6 +14,8 @@ async function api(method, path, body, useSecret = true) {
   if (method === 'GET' || method === 'DELETE') {
     if (useSecret && API_SECRET) {
       url.searchParams.set('api_secret', API_SECRET)
+    } else if (useSecret && !API_SECRET) {
+      return { error: 'KIT_API_SECRET required for this endpoint' }
     } else if (API_KEY) {
       url.searchParams.set('api_key', API_KEY)
     }
@@ -26,6 +28,8 @@ async function api(method, path, body, useSecret = true) {
     const authBody = { ...body }
     if (useSecret && API_SECRET) {
       authBody.api_secret = API_SECRET
+    } else if (useSecret && !API_SECRET) {
+      return { error: 'KIT_API_SECRET required for this endpoint' }
     } else if (API_KEY) {
       authBody.api_key = API_KEY
     }
diff --git a/tools/clis/linkedin-ads.js b/tools/clis/linkedin-ads.js
index dc805e5..3ca4981 100755
--- a/tools/clis/linkedin-ads.js
+++ b/tools/clis/linkedin-ads.js
@@ -11,6 +11,7 @@ if (!TOKEN) {
 async function api(method, path, body) {
   const headers = {
     'Authorization': `Bearer ${TOKEN}`,
+    'X-RestLi-Protocol-Version': '2.0.0',
     'Content-Type': 'application/json',
   }
   if (args['dry-run']) {
diff --git a/tools/clis/mailchimp.js b/tools/clis/mailchimp.js
index 1cacf3f..9c41dbc 100755
--- a/tools/clis/mailchimp.js
+++ b/tools/clis/mailchimp.js
@@ -11,8 +11,9 @@ const dc = API_KEY.split('-').pop()
 const BASE_URL = `https://${dc}.api.mailchimp.com/3.0`
 
 async function api(method, path, body) {
+  const auth = 'Basic ' + Buffer.from(`anystring:${API_KEY}`).toString('base64')
   const headers = {
-    'Authorization': `Bearer ${API_KEY}`,
+    'Authorization': auth,
     'Content-Type': 'application/json',
   }
   if (args['dry-run']) {
diff --git a/tools/clis/meta-ads.js b/tools/clis/meta-ads.js
index 3261617..4f8dd34 100755
--- a/tools/clis/meta-ads.js
+++ b/tools/clis/meta-ads.js
@@ -93,7 +93,7 @@ async function main() {
             name: args.name,
             objective: args.objective,
             status: args.status || 'PAUSED',
-            special_ad_categories: [],
+            special_ad_categories: ['NONE'],
           }
           result = await api('POST', `/act_${accountId}/campaigns`, body)
           break
diff --git a/tools/clis/mixpanel.js b/tools/clis/mixpanel.js
index f53766e..66c8cd1 100755
--- a/tools/clis/mixpanel.js
+++ b/tools/clis/mixpanel.js
@@ -155,8 +155,8 @@ async function main() {
             params: {
               events: [{ event: args.event || 'all' }],
               time_range: {
-                from_date: args['from-date'] || '30daysAgo',
-                to_date: args['to-date'] || 'today',
+                from_date: args['from-date'] || new Date(Date.now() - 30 * 86400000).toISOString().slice(0, 10),
+                to_date: args['to-date'] || new Date().toISOString().slice(0, 10),
               },
             },
           }
diff --git a/tools/clis/onesignal.js b/tools/clis/onesignal.js
index 408ecd7..42bf0f9 100755
--- a/tools/clis/onesignal.js
+++ b/tools/clis/onesignal.js
@@ -16,7 +16,7 @@ if (!APP_ID) {
 
 async function api(method, path, body) {
   const headers = {
-    'Authorization': `Basic ${REST_API_KEY}`,
+    'Authorization': `Key ${REST_API_KEY}`,
     'Content-Type': 'application/json',
     'Accept': 'application/json',
   }
diff --git a/tools/clis/resend.js b/tools/clis/resend.js
index d0fd0ba..b0b9082 100755
--- a/tools/clis/resend.js
+++ b/tools/clis/resend.js
@@ -203,7 +203,7 @@ async function main() {
           break
         case 'create': {
           const events = args.events?.split(',') || ['email.sent', 'email.delivered', 'email.bounced']
-          result = await api('POST', '/webhooks', { endpoint_url: args.endpoint, events })
+          result = await api('POST', '/webhooks', { endpoint: args.endpoint, events })
           break
         }
         case 'delete':
diff --git a/tools/clis/wistia.js b/tools/clis/wistia.js
index 4d9ca0b..0092af6 100755
--- a/tools/clis/wistia.js
+++ b/tools/clis/wistia.js
@@ -9,13 +9,14 @@ if (!API_KEY) {
 }
 
 async function api(method, path, body) {
+  const auth = 'Basic ' + Buffer.from(`${API_KEY}:`).toString('base64')
   if (args['dry-run']) {
     return { _dry_run: true, method, url: `${BASE_URL}${path}`, headers: { 'Authorization': '***', 'Content-Type': 'application/json', 'Accept': 'application/json' }, body: body || undefined }
   }
   const res = await fetch(`${BASE_URL}${path}`, {
     method,
     headers: {
-      'Authorization': `Bearer ${API_KEY}`,
+      'Authorization': auth,
       'Content-Type': 'application/json',
       'Accept': 'application/json',
     },