Klaviyo MCP Server: Tools, Setup and Security

The Klaviyo MCP server lets an AI app work with your Klaviyo email and SMS data, from campaign reports to drafting campaigns. Klaviyo publishes both a remote-hosted server, which it recommends, and a local version. Only Owner, Admin or Manager users can use it.

Checked against: Klaviyo MCP server docs on 28 October 2026. eSEOspace did not install or test this server.

If you are new to MCP, start with what an MCP server is.

At a glance

What it can do

Klaviyo's overview says tasks range "from campaign creation to flow performance reports." Example prompts include "Show me the performance of my email campaigns from the last 30 days" and "Which flows are performing the best in terms of conversions?"

Klaviyo's tool reference lists about 270 tools in more than 20 categories when we checked. It marks each tool as read-only, user-generated content, local-only or beta. Tools without the read-only mark change data. Examples:

• Reporting (read-only): get_campaign_report, get_flow_report, query_segment_values.
• Campaigns: get_campaigns, create_campaign, update_campaign, send_campaign, cancel_campaign_send, delete_campaign.
• Flows: get_flows, create_flow, update_flow, delete_flow.
• Profiles and lists: get_profiles, create_or_update_profile, subscribe_profile_to_marketing, add_profiles_to_list, merge_profiles.
• Templates: create_email_template, render_email_template, clone_email_template.
• Other groups: catalogs, coupons, tags, webhooks, forms, reviews, images and translations, plus beta groups such as brands, sending domains, text messaging and Customer Agent.

There is also a data privacy tool, request_profile_deletion.

How to connect it

Klaviyo's connection guide covers several clients.

Claude. Use the listed Klaviyo connector from Claude's connector directory, or add a custom connector with the remote URL. Add ?company=... to the URL if you manage several accounts.

Cursor (remote). Add the URL under mcpServers:

{
  "mcpServers": {
    "klaviyo": {
      "url": "https://mcp.klaviyo.com/mcp"
    }
  }
}

Then click "Needs login" in Cursor to authenticate.

ChatGPT. Use the Klaviyo ChatGPT app, or add the URL as a custom server with OAuth. Klaviyo describes a Developer mode route. OpenAI's custom MCP server guide now says you don't need to turn on Developer Mode first: go to Plugins, select +, then Add custom MCP server, and finish with Create as a plugin. OpenAI lists custom servers for Business and Enterprise/Edu on ChatGPT web, with Pro limited to read/fetch, as of October 2026.

Local server. Install uv, then run klaviyo-mcp-server@latest through uvx with PRIVATE_API_KEY, READ_ONLY and ALLOW_USER_GENERATED_CONTENT set in the env block. Klaviyo also offers secure launch commands for Claude and Cursor on macOS and Windows, such as uvx --from klaviyo-mcp-server@latest run-claude.

Useful remote URL parameters include read-only, disable-tools-with-user-generated-content, core-tools-only and toolsets (for example, toolsets=profiles:read,campaigns:read).

Security notes

• Start read-only. read-only=true on the remote URL, or READ_ONLY=true locally, removes write tools. Without it, tools such as send_campaign, delete_flow and request_profile_deletion are available to the AI.
• Watch user-generated content. Klaviyo tells you to review each tool call "to ensure your client is not acting on malicious instructions." Turn on disable-tools-with-user-generated-content if you do not need those tools. Our MCP prompt injection guide explains why.
• Narrow with toolsets. Use toolsets to grant only the resources and access levels you need.
• Role gate. Only Owner, Admin and Manager roles can use the server.
• Profile data is personal data. Profiles and events can include customer details. Check that your AI provider's data terms fit your privacy policy.
• Listed connectors ignore parameters. If you need read-only mode in Claude or ChatGPT, use a custom connector instead of the listed one.

See the MCP security hub for more.

Alternatives

• Brevo MCP server: email, SMS, WhatsApp and CRM modules.
• HubSpot MCP server: CRM and marketing email drafts.
• Buffer MCP server: social posts rather than email.

Next step

Email data is a good fit for read-only AI reporting first. See MCP for marketing teams for rollout ideas, or browse more MCP server profiles.

Frequently asked questions