Klaviyo runs an official remote MCP server at https://mcp.klaviyo.com/mcp, plus a local server you run yourself. It exposes more than 260 tools across campaigns, flows, lists, segments, catalogs, templates and reporting, and several of them write — including send_campaign.
Last updated September 21, 2026. Figures are from Klaviyo's own documentation. New to the protocol? Start with what MCP is.
What the Klaviyo MCP server exposes
| Surface | What you get |
|---|---|
| Campaigns | Create, update, clone, delete — and send_campaign and cancel_campaign_send |
| Flows | Create, update, delete flows and flow actions |
| Audience | Lists, segments, profiles, subscriptions and bulk imports |
| Content | Email templates, universal content, images and translations |
| Commerce | Catalogs, coupons, back-in-stock and reviews |
| Reporting | Campaign, flow, form and segment performance, and metric aggregates |
The endpoint is https://mcp.klaviyo.com/mcp. You sign in with OAuth, and the server registers itself with your client, so there is nothing to configure. The local alternative runs with uvx klaviyo-mcp-server@latest and a private API key.
Connecting it
1. Open your client's connector settings
In Claude, go to Settings, then Customize, then Connectors. In ChatGPT, turn on Developer mode under Settings, then Security and login, and add it under Settings, then Plugins. If Klaviyo is already listed in the client's directory, add it from there instead.
2. Paste the endpoint
Add a custom connector with the URL https://mcp.klaviyo.com/mcp and leave the advanced fields empty. There is no client ID or secret to enter; the server registers itself when you sign in.
3. Sign in and read the scopes
The consent screen is the one place you see what you are granting. Read it, and choose the narrower scopes wherever you are offered a choice.
4. Confirm the tools arrived
Ask the assistant what the connector can do. An empty list after a successful sign-in means the token is not being accepted: disconnect and reconnect to clear the stale grant.
The exact path for thirteen clients is in the MCP client directory.
What it costs
- No separate price; it comes with your Klaviyo account.
- The remote server requires an Owner, Admin or Manager role.
- The local server works on any plan with a private API key carrying the scopes Klaviyo lists.
The three switches to set before you connect
read-only=trueon the remote server (orREAD_ONLY=truelocally) keeps only the read tools. Start here: reporting is most of the value and none of the risk.- Core tools only is the remote default. Leave it on. The full set is more than 260 tool descriptions, which crowds out every other server you have connected.
disable-tools-with-user-generated-content=trueturns off tools that read content your customers wrote, such as reviews — text a model would otherwise read as instructions.
One catch: the directory listings in Claude and ChatGPT take no query parameters. To use these switches, add the server as a custom connector with the parameters in the URL.
The limits worth knowing
- It can send a campaign. send_campaign sends to the configured audience. There is a cancel tool, but an email that has already been delivered cannot be unsent.
- Deletes are in scope. Flows, campaigns, lists, segments and templates can all be deleted. A model asked to "clean up old flows" will take the request literally.
- Role-gated, not permission-scoped. The remote server needs an Owner, Admin or Manager, so whoever connects it has broad rights by definition.
- Owned channels only. Klaviyo sees email and SMS. It does not see the paid campaigns that built the list or what each subscriber cost to acquire.
Where it stops for marketing
Klaviyo is the owned-channel half of an ecommerce question. The other half — which ads are bringing in subscribers who actually buy, and at what cost — lives in Google, Meta and TikTok. Sprites is an AI marketing agent that reads those accounts and Shopify through one MCP server, with every change held for approval.
That is the edge of what one vendor's data can answer, not a flaw in the server. It is why a marketing stack usually runs two or three: this one for what it is good at, and one for the channels that spend money. For the other half: Shopify and your ad accounts over MCP. If you would rather hand the marketing half to one agent, Sprites runs Google Ads, Meta, LinkedIn and SEO behind one connector, with every write staged for your approval.
Before you grant write access
MCP has no built-in approval step: a write tool applies the moment the model calls it, unless the server itself holds the change. Check three things before you connect: which scopes the consent screen asks for, whether writes are staged or applied, and how to revoke access. The rest is in is MCP safe.
Related
- HubSpot MCP
- Canva MCP
- Every marketing MCP server, by job
- Every MCP server worth connecting for marketing
- The Claude connector shortlist
Klaviyo MCP questions
Does Klaviyo have an MCP server?
Yes. Klaviyo runs an official remote server at https://mcp.klaviyo.com/mcp, signed in with OAuth, and a local server you run with uvx klaviyo-mcp-server and a private API key.
Can Klaviyo MCP send campaigns?
Yes. The send_campaign tool sends a campaign to its configured audience, and cancel_campaign_send cancels or reverts a send in progress. Use read-only mode if you do not want that possible.
How do I make Klaviyo MCP read-only?
Add read-only=true to the remote server URL as a custom connector, or set READ_ONLY=true on the local server. Only read tools remain.
Who can connect Klaviyo MCP?
The remote server requires an Owner, Admin or Manager role in Klaviyo. The local server needs a private API key with the scopes Klaviyo lists.
How many tools does Klaviyo MCP have?
More than 260 across campaigns, flows, audiences, catalogs, templates, reporting and beta features. The remote server loads a core set by default.