Kit MCP Server (AI Connectors): Tools, Setup and Security

The Kit MCP server, which Kit calls AI Connectors, connects an AI app to your Kit creator account. It can look up subscribers, tag and segment people, draft broadcasts, build sequences and report on growth. Kit hosts it at https://app.kit.com/mcp.

Checked against: Claude's Kit listing and Kit's AI Connectors help article on 2 November 2026. eSEOspace did not install or test this server.

At a glance

What it can do

Kit says Claude, ChatGPT, Cursor and other MCP clients "can read your Kit account and take actions on your behalf." Claude's listing groups the work as "Tag subscribers, manage segments, draft and schedule broadcasts, enroll contacts in sequences, and more."

The tool names show the range:

• Subscribers and tags. create_subscriber, bulk_create_subscribers, bulk_tag_subscribers, filter_subscribers and add_subscriber_to_sequence.
• Broadcasts. create_broadcast, get_broadcast, list_broadcasts, get_stats_for_a_broadcast and get_link_clicks_for_a_broadcast.
• Sequences. create_sequence, create_sequence_email and delete_sequence.
• Pages, forms and products. create_landing_page, list_forms, create_product and list_purchases.
• Reporting. get_growth_stats and get_email_stats.

Kit also ships prompt templates for common jobs. In Claude Desktop and Cursor, they show up in the slash-command menu.

How to connect it

Kit says connecting "takes about 60 seconds." The flow is the same in every client:

1. Add a custom connector or MCP server with the URL https://app.kit.com/mcp.
2. Sign in to Kit in the browser window that opens.
3. Review the permissions and click Allow.

In Claude, use Customize > Connectors, then Add custom connector, and name it Kit. Kit says a one-click Claude directory listing was "on the way" when the article was written. Claude's directory now lists Kit, added in August 2026. In Cursor, add the URL under Settings, then Tools & Integrations, then MCP Tools.

For ChatGPT, Kit's steps use developer mode and an app with OAuth authentication. ChatGPT's custom MCP flow has changed recently, so check our ChatGPT notes before you follow older screenshots.

If you run several Kit accounts, add one connector per account. Kit suggests a different suffix on each URL, such as https://app.kit.com/mcp?account1.

Security notes

Kit describes three layers of protection:

• Risk tags. Each tool is tagged read, write or destructive, so your client can decide when to ask.
• Confirm in Kit. For sending a broadcast, deleting a sequence, unsubscribing a subscriber or firing a webhook, the server returns a deep link. The write "only fires when you click Confirm inside the Kit app."
• Same rights as today. Kit says the server "doesn't give your AI client any new powers over your account." Other users on the account get the same read or write access they already have.

Kit also rate-limits each AI client connection. Bulk tools, such as bulk_delete_tags, can change many records at once, so keep approvals on for those.

Subscriber replies and form entries can carry hidden instructions. Read prompt injection through tool results, the MCP project's security best practices and our MCP Security Center.

Alternatives

• beehiiv MCP server for newsletters with ads, podcasts and community.
• Mailchimp MCP servers for campaign drafts in Claude.
• ActiveCampaign MCP server for automation-heavy email marketing.

Next step

Start by asking for broadcast stats and subscriber growth, then let the AI draft a broadcast you review in Kit. Our email newsletter playbook walks through the full workflow.

Frequently asked questions