Klaviyo MCP Server: What It Is and What You Can Ask It

The Klaviyo MCP server is an official Klaviyo connection that lets an AI assistant read your Klaviyo account and, if you allow it, take actions in it. It is built on MCP (Model Context Protocol), an open standard that defines how AI apps connect to outside tools and data. If MCP itself is new to you, start with "What Is MCP? A Plain-English Guide for E-commerce Merchants".

This article explains what the server is, what you can ask it, how the Claude setup works, and where the limits are. Details come from Klaviyo's developer docs, help center and product pages, and Klaviyo changes this product often. Check the current docs before you rely on any specific tool or setting.

What is the Klaviyo MCP server?

Klaviyo describes it as a secure bridge between assistants like Claude and ChatGPT and your Klaviyo account. Technically it is a wrapper on top of Klaviyo's APIs. It exposes a defined set of Klaviyo tools (named actions such as "get campaigns" or "create campaign") to any compatible AI client. You authenticate once, and the assistant can read account data and perform supported actions.

In practice this means you no longer export reports and paste them into a chat. The assistant asks Klaviyo directly, using your permissions, and answers from the result.

Three points are worth knowing:

• It is a connector, not an AI model. The intelligence comes from the assistant you pick. Klaviyo supplies the data access and the tools.
• It acts as you. The assistant can only do what your Klaviyo login and the server settings allow.
• It is large. Klaviyo's Available Tools page lists more than 260 tools, with a smaller core set of about 40.

Remote server or local server: which one is it?

There are two versions. Klaviyo recommends the remote-hosted one.

	Remote server	Local server
Where it runs	Hosted by Klaviyo	On your own computer
Sign-in	OAuth (a browser login, no key to paste)	Private API key
Works with web clients such as ChatGPT	Yes	No, use remote
Tool coverage	Not every tool is available	Flagged per tool in the docs
Safety switches	URL options such as read-only	Environment settings such as READ_ONLY

The local server was published first, around mid-2025 according to a third-party source, and Klaviyo announced general availability of an enhanced version with a remote server on 2025-08-20. The PyPI page for the local package still carries a "(Beta)" label, and an older docs version says web clients are unsupported. That older page is outdated for the remote server.

What can you ask the Klaviyo MCP server?

The documented categories include campaigns, flows, profiles, reporting, catalogs, events and others. Klaviyo's own materials suggest prompts like these:

Reporting and analysis

• "Pull email campaign performance for the last 30 days."
• "Compare my flows by conversions."
• "Which campaigns had the highest revenue per recipient this quarter?"

Content and campaigns

• "Draft an email announcing our fall sale."
• "Create an email campaign from this brief."
• "Upload these images to my Klaviyo account."

Account and catalog

• "Show my account details and connected metrics."
• "List catalog items and check which ones appear in a flow."

Klaviyo's 2026-05-07 Claude update added a "Query Metric Aggregates" capability and MCP Apps support, which shows interactive charts and dashboards inside Claude. On 2026-08-11 Klaviyo said 260+ new tools can read data, build segments, run campaigns, author flows and manage catalogs from Claude, OpenAI or a custom agent. Drag-and-drop email template create and update tools were added on 2026-05-29.

For more prompt ideas that work across tools, see "Ecommerce Marketing Prompts for AI Assistants and MCP Servers".

A note on natural-language SQL

At its K:BOS 2026 event, Klaviyo announced SQL access in its Klaviyo Data Platform, where a question asked through Composer, MCP or another AI interface is translated to SQL and returned with the query. This is reported by a secondary source. Whether it is generally available or still rolling out was not confirmed, so verify with Klaviyo before planning around it.

How do you connect Klaviyo to Claude?

This is the usual "Klaviyo Claude" route, and it is the core of any Klaviyo MCP setup.

Prerequisites

• A Klaviyo user with the Owner, Admin or Manager role.
• A Claude plan that supports connectors: Pro, Max, Team or Enterprise. On Team and Enterprise, an organization admin may need to enable connectors first.

Steps

1. In Claude, open Settings, then Connectors.
2. Look for Klaviyo in the connector directory. Klaviyo's community post covers the built-in connector.
3. If you want custom settings, choose Add custom connector and enter the server URL: https://mcp.klaviyo.com/mcp (no trailing slash).
4. Sign in to Klaviyo with OAuth and approve access.
5. Start a new chat, enable the connector and ask a simple read question, such as listing your recent campaigns.

For a safer first session, add options to the URL, for example https://mcp.klaviyo.com/mcp?read-only=true&disable-tools-with-user-generated-content=true. Klaviyo's community post uses this exact example when explaining how to restrict Claude's access.

How do you connect ChatGPT, Cursor or VS Code?

Klaviyo's docs say any MCP client that supports remote servers can connect, and it documents Claude, ChatGPT, Cursor and VS Code. The server uses Streamable HTTP transport and OAuth with dynamic client registration, so most clients need only the URL.

• ChatGPT: a listed Klaviyo app appeared in January 2026 per a third-party report. The docs also describe a Custom MCP Server path in Developer mode, which they recommend if you connect several accounts. For ChatGPT, the core-tools-only setting defaults to true.
• Cursor and VS Code: add the remote URL in each tool's MCP settings. Exact menus change between versions, so follow the current Klaviyo docs.
• Local server: run uvx klaviyo-mcp-server@latest with a PRIVATE_API_KEY. This suits technical users who want to set API scopes from the start.

How do you keep it safe?

Treat it as live access to customer data and sending tools. Klaviyo provides these controls on the remote server:

• read-only=true disables tools that can write. The default is false.
• disable-tools-with-user-generated-content=true disables tools that read content written by outsiders, such as customer-entered text. The default is false.
• core-tools-only=true limits the server to about 40 core tools, which helps clients with small context windows.
• Scoped tool access and an opt-in for beta tools are listed on Klaviyo's product page.

The user-generated-content switch matters because of prompt injection: hidden instructions in text an assistant reads can steer it. Klaviyo's docs advise reviewing every tool call carefully. See "MCP Prompt Injection in E-commerce and How to Reduce It" and "MCP Permissions: Read-Only vs Read-Write for Ads and Stores" for a wider checklist.

A sensible order: start read-only, test reporting questions, then enable write tools only for a named task, and approve each action by hand.

What can the Klaviyo MCP server not do?

• It cannot fix bad data. Answers rest on your Klaviyo tracking and metrics. If events are missing or duplicated, the assistant will report them confidently anyway.
• It does not cover other platforms. It sees Klaviyo only. Ad spend, store profit and site analytics need other connections.
• Not every tool is on the remote server. The Available Tools page flags which are.
• It can make mistakes. Check numbers against the Klaviyo dashboard before acting, and never let an assistant send to a live list without review.
• Your role limits apply. Setup needs Owner, Admin or Manager, so a junior user cannot connect it.

Which Klaviyo MCP servers are official?

Many GitHub projects use the same name, and third-party gateways list their own "Klaviyo MCP servers" with different tool counts. Examples noted in research include mattcoatsworth/Klaviyo-MCP-Server and relay-commerce/Klaviyo-MCP-Server. These are not the official server. Use the Klaviyo developer docs and the URL above, and avoid pasting private API keys into unvetted code.

Klaviyo also uses the term "Klaviyo Headless" for exposing the platform to agents, announced 2026-09-09. It is a marketing label for the broader direction, not a separate server you install.

For how this fits with other tools, see "Best MCP Servers for E-commerce and Marketing Teams (2026)".