# Best MCP servers for marketing: who has to say yes > Best MCP servers for marketing: 18 official servers from vendor docs, who must approve each connection, where each stops a write, and what it costs. - URL: https://missiongrowth.io/blog/best-mcp-servers-for-marketing - Published: 2026-10-15 - Author: Furkan Aktaş, Co-Founder, Mission Growth - Publisher: Mission Growth. Company facts: https://missiongrowth.io/llms.txt The best MCP servers for marketing are 18 official vendor servers, and what separates them is who has to say yes before you can connect and where the vendor blocks a write. A marketing MCP server is a vendor-run connector that lets an AI assistant read or change data in that vendor's product through the Model Context Protocol. This page covers official MCP servers for marketing only. SEO servers live in our [SEO server landscape](https://missiongrowth.io/blog/seo-mcp) guide. Nothing here was tested hands-on: every fact comes from the vendor's own page, read on 2026-10-08. Access gates (who can connect) and write limits (where a write is stopped) are two different lists, and we keep them apart. ## Which of the best MCP servers for marketing fits which job Marketing MCP servers split into single-platform official servers and automation layers like Zapier, and what separates the 18 here is who has to say yes before a marketer can connect: a role, an admin toggle, a connector or a developer token. What a server connects to tells you little about whether you can switch it on this afternoon. Klaviyo wants an Owner, Admin, or Manager role, HubSpot wants someone to create an MCP connector first, and Google Ads wants a developer token. MCP servers for marketers are an access problem before they are a feature race. ::dataset{key="marketing-mcp-servers" name="Marketing MCP servers: maker, hosting, auth, write access and gate, checked 2026-10-08"} | Tool | Maker | Runs | Auth | Can write | Who must switch it on | Price basis | |---|---|---|---|---|---|---| | Google Ads | Google | Your own machine | Developer token plus credentials | No write tool listed | Developer token, Explorer access minimum | not stated | | Meta Ads | Meta | Remote, hosted by Meta | Facebook Login for Business sign-in | Yes, ads, ad sets and campaigns | Owning a Meta app is not required | not stated | | X Ads | X | Remote, Streamable HTTP | Scopes `ads.read`, `ads.write`, `offline.access` | Yes, under `ads.write` | Whoever authorizes picks the scopes | not stated | | Google Analytics | Google | Your own machine | Application Default Credentials | No, read-only scope | Google Cloud project with the APIs enabled | not stated | | Mixpanel | Mixpanel | Custom connector URL | Account sign-in | Yes | Organization admin, except new free and growth accounts | not stated | | Amplitude | Amplitude | Standard or EU server URL | Account sign-in | Yes, with Use MCP (write) | On by default; admins can opt out | not stated | | PostHog | PostHog | Free hosted endpoint | Login | Yes, read and write across products | not stated | Free to connect | | Microsoft Clarity | Microsoft | Your own machine, npx | Clarity API token | not stated | Clarity API token | not stated | | HubSpot | HubSpot | Remote | OAuth of an MCP connector | Yes, records and content | Someone creates an MCP connector | not stated | | Salesforce | Salesforce | Hosted | Per-user authentication | Depends on the server picked | An administrator enables MCP servers | not stated | | Klaviyo | Klaviyo | Remote | OAuth | Yes, unless `read-only=true` | Owner, Admin, or Manager role | not stated | | Metricool | Metricool | Hosted | OAuth or token and user ID | Yes, schedules posts | not stated | Any plan, Free included | | Tally | Tally | Remote | OAuth or API key | Yes, creates and edits forms | not stated | Free on all plans | | Stripe | Stripe | Remote, mcp.stripe.com | OAuth or agent API keys | Yes, confirmation for refunds | not stated | not stated | | Zapier | Zapier | Streamable HTTP only | Zapier handles OAuth | Yes, across apps | not stated | Task allowance | | Slack | Slack | Remote, Streamable HTTP | OAuth user tokens | Yes, sends and schedules messages | Workspace admins approve clients | not stated | | Notion | Notion | Remote, hosted by Notion | OAuth | Yes, updates content | Owners can list and revoke | not stated | | Webflow | Webflow | not stated | Existing roles | Within existing roles | Existing Webflow permissions | not stated | Choose by the person whose approval you need before you choose by feature. Three servers (Google Ads, Google Analytics and Clarity) run on your own machine, so a marketer without a developer meets a setup gate first. The rest are remote, and for those the gate is an admin or a role. In the table and on the cards, "not stated" means the vendor's MCP page says nothing on that point. ::figure{src="/blog/figures/best-mcp-servers-for-marketing-1.svg" alt="Matrix of nine of the best MCP servers for marketing against the gate each needs: role, admin toggle, connector or developer token" caption="Who has to switch on each of the best MCP servers for marketing" width="720" height="505"} Three short picks before the cards. With no admin rights, start with Metricool or Tally. If you can create credentials in Google Cloud, start with Google Analytics on its read-only scope. If someone else owns your Klaviyo account, ask that person for a role or for the read-only connection. The last section turns these picks into a sequence. ## Ad platform and analytics servers Google Ads, Meta Ads and X Ads are the three official ad-platform servers here, and a read-only first connection needs a different credential on each, from a developer token to a scope list to a Cloud-project setup, while Meta says owning an app is not required. Analytics sits beside them. Settle the method before you ask attribution questions, since an assistant returns whatever model the vendor uses. Pick between [mmm vs mta](https://missiongrowth.io/blog/mmm-vs-mta) first, then connect the data. ### 1. Google Ads MCP **Best for:** Reading account data from a machine you control, with no write tool in the way. ::shot{src="/blog/tools/google-ads-mcp-product.webp" width="1600" height="1000" alt="Google Ads MCP server documentation page" caption="Google Ads MCP product page" captured="2026-10-08"} Google publishes the source code for this server in the googleads/google-ads-mcp repository. You run it yourself, locally or on a host you deploy, and the README describes no Google-hosted endpoint. Setup takes five steps: configure Python, a developer token (marked optional, for setups that need one), the APIs in your project, credentials, then your MCP client. Two credentials gate it: - The developer token must have at least Explorer access to query production accounts. - The credentials must include the Google Ads API scope. If you reach the customer account through a manager account, you can pass the manager's customer ID per tool call with the optional `login_customer_id` parameter. The README lists three tools: `search`, which retrieves information about the Google Ads account, `get_resource_metadata` and `list_accessible_customers`. It lists no write tool. Your agent will ask for a customer ID on most prompts, and when you move between several customers, putting the ID in the prompt may be simpler. The README's own example asks how many active campaigns you have for a given ID. It also warns that the server exposes your data to the agent or LLM you connect, so decide which assistant gets that view first. **Pros:** - Official Google repository with three listed tools and no write tool - A narrow surface that suits a first read-only connection **Cons:** - Needs a developer token and a local Python setup - No hosted endpoint is described **Price:** not stated. ### 2. Meta Ads MCP **Best for:** Teams that want an assistant to create and edit Meta ads without building an integration. ::shot{src="/blog/tools/meta-ads-mcp-product.webp" width="1600" height="1000" alt="Meta Ads MCP server documentation page" caption="Meta Ads MCP product page" captured="2026-10-08"} Meta hosts this server itself, and its overview says it works with any MCP-compatible AI agent. Meta describes its ads AI connectors as structured, permission-scoped tools. Meta's get-started page says owning a Meta app is not a prerequisite and points to a separate guide for that route. On the own-app route, sign-in goes through the Facebook Login for Business dialog with your Facebook account or Meta Managed Account, and no manual token setup is required. The page lists a user access token as the second of its two sign-in methods. Meta groups the tools into categories, and the overview describes these in plain terms: - Reporting: detailed campaign performance, to help you understand what is working. - Signals: signal health and quality information, showing where to prioritize your signals setup. - Activity log: changes for an ad account, mirroring the Ads Manager campaign history page. - Tests: create and manage A/B tests and conversion lift studies, and retrieve details on existing ones. - Ads: create and edit ads, ad sets and campaigns. That last category makes the server write-capable from the first connection. The pages we read give no read-only switch, so the permissions the connecting person holds decide how far an agent can go. Ask your Meta admin what they are before the first prompt. **Pros:** - Remote-hosted by Meta, nothing to install - No Meta app ownership required **Cons:** - Can create and edit campaigns, so it is a poor read-only starter - No read-only switch stated **Price:** not stated. ### 3. X Ads MCP **Best for:** Reading X campaign analytics first and writing later, because the scopes separate the two. ::shot{src="/blog/tools/x-ads-mcp-product.webp" width="1600" height="1000" alt="X Ads MCP server documentation page" caption="X Ads MCP product page" captured="2026-10-08"} X runs the Ads MCP as a standard remote server over the Streamable HTTP transport. Its docs say any MCP-capable client can connect and use 74 X Ads tools with zero custom Ads API integration. Authentication is the user's own OAuth2 token, so an agent only ever sees the ads accounts that user can access. Your X user must have access to at least one ads account, and the docs suggest checking the ads dashboard on X to confirm the connection. On the developer side, selecting Ads Project under Project Access enables Ads API access for your App ID. Scopes do the gating: - `ads.read` grants the read and analytics tools. - `ads.write` grants campaign and creative writes. - `offline.access` enables token refresh. Without it, tokens expire in about 2 hours. The page's Writes row lists ten tools, including `create_campaign`, `activate_campaign` and `promote_post`, and other categories add create, update and delete tools for audiences, cards, media and tracking tags. Campaigns and line items are always created paused. X keeps a single live OAuth grant per app and user, so signing in from a second client revokes the first client's tokens. For marketing, X's own pitch is instant analytics: performance stats and reach estimates, pulled conversationally. **Pros:** - Read and write split into separate scopes - Campaigns and line items are always created paused **Cons:** - Tokens die after about 2 hours without `offline.access` - 74 tools is a large surface to review **Price:** not stated. ### 4. Google Analytics MCP **Best for:** Marketers who want GA4 numbers inside an assistant with credentials that cannot change anything. ::shot{src="/blog/tools/google-analytics-mcp-product.webp" width="1600" height="1000" alt="Google Analytics MCP server documentation page" caption="Google Analytics MCP product page" captured="2026-10-08"} Google publishes the source code for a local MCP server that interacts with the Google Analytics APIs in googleanalytics/google-analytics-mcp, and the entry is labelled Experimental. It runs on your own machine. Setup has three steps: configure Python, configure credentials for Google Analytics, then configure Gemini, with a Claude Code command alongside. The credentials are Application Default Credentials for a user with access to your Google Analytics accounts or properties, and they must include the Google Analytics read-only scope, so the server cannot write. You also enable the Admin API and the Data API in a Google Cloud project, and that project is the real setup cost. The README states no price and no usage limits. The README lists tools such as: - `run_report`, which runs a report using the Data API. - `run_funnel_report` and `run_realtime_report`, for funnel and realtime reports. - `list_google_ads_links`, which returns the links between a property and Google Ads accounts. Its example prompt asks for the most popular events in your property over the last 180 days. **Pros:** - Read-only scope baked into the credentials - Official Google repository **Cons:** - Labelled Experimental - Needs a Google Cloud project and local setup **Price:** not stated in the README; the setup cost is a Google Cloud project. ### 5. Mixpanel MCP **Best for:** Product-led teams whose Mixpanel organization admin is willing to flip one switch. ::shot{src="/blog/tools/mixpanel-mcp-product.webp" width="1600" height="1000" alt="Mixpanel MCP server documentation page" caption="Mixpanel MCP product page" captured="2026-10-08"} Mixpanel's docs describe a hosted server that you connect from an assistant such as Claude, ChatGPT or Cursor. For EU or IN regions, use Settings, Connectors, Add Custom Connector instead and enter your MCP Server URL. Once MCP is enabled, any Mixpanel user in your organization can connect. Users authenticate with their own Mixpanel credentials, so all existing project permissions and roles apply. There are two routes: - OAuth is a browser sign-in, best for interactive use. - Service Accounts (Beta) use a static credential header with no browser login, aimed at CI/CD pipelines, automated agents and shared team setups. MCP is on by default only for new free and growth accounts created after August 1, 2026. On all other accounts an organization admin must enable MCP in Settings, Org, Overview before anyone can connect. When connected, the AI assistant can both read and write. The Experiments and Feature Flags tools are in open Beta, without audience targeting or cohort editing, and the Get-Audit-Log tool is limited to some customers. Free plans can be subject to Query API access limits. Mixpanel's example prompt compares signup-to-purchase conversion this month with last month. It also warns that your data goes to whichever AI provider you use, so review that provider's data handling policies first. Acting on what such a prompt shows is a separate job, and this list of [conversion rate optimization tools](https://missiongrowth.io/blog/conversion-rate-optimization-tools) shows which tools cover testing, replay and feedback. **Pros:** - On by default for new free and growth accounts - Regional URLs for EU and IN **Cons:** - Organization admin needed on every other account - Free plans can hit Query API limits **Price:** not stated on the vendor's MCP page; free plans can hit Query API limits. ### 6. Amplitude MCP **Best for:** Teams that want an assistant to build charts and cohorts, and have an admin who will review roles. ::shot{src="/blog/tools/amplitude-mcp-product.webp" width="1600" height="1000" alt="Amplitude MCP server documentation page" caption="Amplitude MCP product page" captured="2026-10-08"} Amplitude hosts the connection at a Standard Server URL, which you use unless your data resides in the EU region, where a separate EU server applies. Authentication is OAuth, which Amplitude says secures the link between the MCP and your Amplitude account. Amplitude enables access for all users in your organization by default, and organization administrators can opt out or restrict it. Two RBAC actions govern what the MCP can do per project: Use MCP (read) and Use MCP (write). Every role grants read access, while the Member, Manager and Admin roles also grant write access, so nothing changes until an admin adjusts a role. It reads and writes charts, dashboards, experiments, cohorts, events and properties from natural-language prompts, so it is not read-only. Create, update, delete and restore calls require Use MCP (write). Every delete is a two-step action, and the first call returns a confirmation that lists the affected items, project and branch. Limits: it is not an ingestion endpoint, so events still go in through an Amplitude SDK or the HTTP V2 API. In ChatGPT it connects through a curated subset of approximately 25 tools because of a token cap on connected tool schemas. Amplitude's example prompt: show signup conversion rates by traffic source this month. **Pros:** - Broad coverage of charts, dashboards, experiments and cohorts - Admins can opt out or restrict access **Cons:** - Write is on by default for Member, Manager and Admin - An admin must adjust roles before it is read-only **Price:** not stated. ### 7. PostHog MCP **Best for:** Teams already on PostHog who want a free hosted endpoint. ::shot{src="/blog/tools/posthog-mcp-product.webp" width="1600" height="1000" alt="PostHog MCP server documentation page" caption="PostHog MCP product page" captured="2026-10-08"} PostHog describes its server as a free, hosted endpoint. It works with any MCP-compatible client, including PostHog Desktop, Claude Code, Claude Desktop, Cursor, Codex, VS Code, Windsurf and Zed. At login, PostHog's authentication server automatically routes you to the correct data region, US or EU, based on the account you log in with. There is no regional URL to choose, and the page we read names no admin gate or role that must approve the connection. Once connected, your agent can read and write across PostHog's products, so check which of your own roles can change data before you let it. The AI-powered tools are only available when AI data processing is enabled in your organization settings, which makes that setting the first thing to check. Connecting and calling tools is free, but some tools use LLMs internally and may be billed as PostHog AI spend. For marketing analysis, PostHog points to governed metrics. You can run metrics from your semantic layer, so every agent session answers a question like “what's our MRR?” with the same canonical definition. **Pros:** - Free hosted endpoint, nothing to install - Region chosen automatically at login **Cons:** - Some tools may be billed as PostHog AI spend - Agents can write, so roles matter before you connect **Price:** free to connect and call tools; some tools may be billed as PostHog AI spend. ### 8. Microsoft Clarity MCP **Best for:** Reading session recordings and project analytics from Clarity with only an API token. ::shot{src="/blog/tools/clarity-mcp-product.webp" width="1600" height="1000" alt="Microsoft Clarity MCP server documentation page" caption="Microsoft Clarity MCP product page" captured="2026-10-08"} Microsoft publishes microsoft/clarity-mcp-server, which connects Claude for Desktop or any other MCP client to three things in Clarity: session recordings, project analytics and the documentation. You run it on your own machine, with npx or a global npm install (the README recommends npm), so there is no hosted endpoint. The gate is a Clarity data export API token. You can provide it in two ways: with the `--clarity_api_token` command-line parameter, or as a tool parameter. The README does not say who in your organization can generate that token, so ask whoever administers your Clarity project. The README names tools for three jobs: - Listing your project's session recordings based on a filtering criteria. - Retrieving analytics data and metrics from your project's dashboard using a simplified natural language search query. - Retrieving snippets from Clarity documentation, including step-by-step screenshots for setup guides, features, usage, troubleshooting and integration instructions. The README describes no write tool, which is an absence on the page, not a promise. It states no usage limits or release status either. Clarity's own example prompt asks for recordings where users encountered JavaScript errors. **Pros:** - A single API token is the gate - Runs with npx, no install step **Cons:** - Local only, so a non-developer needs help - Write behavior is not stated **Price:** not stated. Three of these cards come down to a credential you request before anything works. The table lists the narrowest ask for each, and what happens if you skip it. | Server | Credential to request | What happens if you skip it | |---|---|---| | X Ads | ads.read and offline.access | Tokens expire in about 2 hours with no refresh | | Google Analytics | Credentials with the Google Analytics read-only scope | The setup fails the README's credential requirement | | Google Ads | A developer token with at least Explorer access | Production accounts cannot be queried | | Meta Ads | No Meta app of your own | Nothing to request; Meta states ownership is not a prerequisite | Ask for the narrowest credential first. The wrong or missing one fails differently on each server, and an expired X token is a worse surprise than a refused request. ## CRM, email and social servers HubSpot, Salesforce, Klaviyo, Metricool and Tally cover CRM, email, social and lead capture, and HubSpot's server can create, edit, and publish landing pages, website pages, and blog posts as well as read records. That changes how you set up its permissions. ### 9. HubSpot MCP **Best for:** Teams that want one assistant over CRM records and website content. ::shot{src="/blog/tools/hubspot-mcp-product.webp" width="1600" height="1000" alt="HubSpot MCP server documentation page" caption="HubSpot MCP product page" captured="2026-10-08"} HubSpot hosts the remote server, and you connect with the OAuth credentials of an MCP connector. Someone has to create that connector in the HubSpot account first, and the OAuth client must support PKCE. This server is separate from HubSpot's developer MCP server. All actions respect your existing HubSpot user permissions, so users can only view and modify records they have access to. You can ask it for the numbers behind your [b2b marketing metrics](https://missiongrowth.io/blog/marketing-kpis-b2b) from any records your HubSpot permissions allow. It also reads AEO data, from brand-level metrics and share of voice to full AI engine response text from ChatGPT, Gemini, Perplexity and Claude, on a Marketing Hub Professional or Enterprise subscription. One roundup says HubSpot's server reads campaigns, landing pages and blog posts, and lists writes only for CRM records. HubSpot's docs say otherwise: the remote server page lists create, edit, and publish for landing pages, website pages, and blog posts. Those page tools require user confirmation before publishing, and manage_crm_objects shows a proposed-changes summary before any CRM create or update. Treat HubSpot as a publishing surface, and set the connector's permissions as if an agent could push a page live. Search returns a maximum of 200 results per page, revenue objects are in BETA, and with Sensitive Data turned on, activity and conversation data are blocked from MCP access. **Pros:** - Official, remote, OAuth through a connector - Actions follow the connecting user's existing permissions **Cons:** - A connector must be created first - Can publish landing pages, website pages and blog posts **Price:** not stated. ### 10. Salesforce hosted MCP servers **Best for:** Admins who want to choose between a read-only server and a full-CRUD server. ::shot{src="/blog/tools/salesforce-mcp-product.webp" width="1600" height="1000" alt="Salesforce hosted MCP servers server documentation page" caption="Salesforce hosted MCP servers product page" captured="2026-10-08"} Salesforce's standard MCP servers reference, read live on 2026-10-08, says its standard servers are disabled by default and can be enabled by an administrator. A May 2026 archived copy of the activation page adds that clients cannot connect until an administrator does. All of them enforce per-user authentication and respect Salesforce's standard security model: field-level security, object permissions and sharing rules apply to every tool call. The servers split by scope: - SObject Reads is read and query only, with no mutations. - SObject Mutations allows create and update operations, with no delete. - SObject Deletes allows delete operations only. - SObject All has full create, read, update and delete plus query and search across all Salesforce objects. The choice of server is the cleanest write limit in this list. The May copy also lists servers that expose REST endpoints from the API Catalog as custom tools, expose Apex classes with @InvocableMethod as custom tools, and surface Prompt Builder templates as MCP prompts. You can also create custom servers with your own tools. For marketers, the interesting ones are Data 360, which queries unified customer data, and Tableau Next, which discovers semantic models, queries KPIs and executes analytics. The archived copy states no usage limits and may differ from what your org shows today, so ask your admin to check your own org before relying on any of this. **Pros:** - A read-only server exists as its own option - Standard Salesforce security applies to every tool call **Cons:** - Disabled until an administrator enables it - Activation and custom-server details come from a May 2026 archived copy **Price:** not stated. ### 11. Klaviyo MCP **Best for:** Email and SMS teams that can get an Owner, Admin, or Manager role. ::shot{src="/blog/tools/klaviyo-mcp-product.webp" width="1600" height="1000" alt="Klaviyo MCP server documentation page" caption="Klaviyo MCP product page" captured="2026-10-08"} Klaviyo runs a remote server for Claude and other clients. For web-based clients such as ChatGPT, Klaviyo points you to its remote-hosted server. A local server also exists for compatible clients such as Cursor, and it needs a Klaviyo private API key with the right permissions. The feature is only available to users with an Owner, Admin, or Manager role. In Claude, the listed Klaviyo connector is the simplest way in (Settings, Connectors, Browse Connectors). Klaviyo's page lists custom connectors for Claude and Claude Desktop users on Pro, Max, Team and Enterprise plans, while Anthropic's help center also lists Free, limited to one custom connector. The switches are query parameters on the URL, and the listed connector cannot set them: - `read-only=true` enables only the tools that do not modify Klaviyo data. - `core-tools-only` set to true limits the server to the ~40 core tools. - `toolsets` limits it to tools whose required API scopes fall within your list, in resource:access form, such as profiles:read,campaigns:read. - `disable-tools-with-user-generated-content` disables tools that read user-generated content your LLM could interpret as instructions. Another parameter enables new, potentially unstable tools. Klaviyo also tells you to review each tool call carefully so your client is not acting on malicious instructions. **Pros:** - Read-only switch as a URL parameter - A parameter that drops tools reading user-generated content **Cons:** - Owner, Admin, or Manager role required - The read-only switch is absent from the one-click listed connector **Price:** not stated. ### 12. Metricool MCP **Best for:** Marketers who want to schedule social posts and read multi-network analytics from any plan. ::shot{src="/blog/tools/metricool-mcp-product.webp" width="1600" height="1000" alt="Metricool MCP server documentation page" caption="Metricool MCP product page" captured="2026-10-08"} Metricool's help center describes an MCP that covers your brands, analytics (including the analytics of connected ad accounts) and the Planner. The `get_brands` tool lists and selects from the brands on the account. Sign-in is OAuth: you approve access from your AI client with your Metricool login, or you use a token and user ID, a route Metricool says requires an Advanced plan. The MCP uses the same permissions and authentication systems as the account itself. The code is public in the metricool/mcp-metricool GitHub repository and published as a package on PyPI. The gate is your plan, and it is a loose one. The MCP works with any Metricool plan, including Free, and plan limits still apply after you connect. The Metricool API is a separate matter, available only on Advanced and Custom. On the Claude side, remote custom connectors are available on Claude Free, Pro, Max, Team and Enterprise. Free users can use only one custom connector at a time, and Claude Code requires a Claude Pro or Max subscription. Writing is scoped to the Planner. You can schedule posts for a specific date and time, or at the best time Metricool recommends, and modify scheduled posts with `update_schedule_post`. Inbox messages, post comments, Smartlinks, Google Business Profile reviews, autolists, Canva or Drive files and the management of Ads campaigns are not available through the MCP. **Pros:** - Works on any plan, Free included - Public GitHub repository and PyPI package **Cons:** - No ad campaign management - Plan limits still apply **Price:** works on any Metricool plan including Free; plan limits still apply. ### 13. Tally MCP **Best for:** Lead-capture teams that want an assistant to build forms and read submissions. ::shot{src="/blog/tools/tally-mcp-product.webp" width="1600" height="1000" alt="Tally MCP server documentation page" caption="Tally MCP product page" captured="2026-10-08"} Tally runs a remote server, and any MCP-compatible assistant can connect to it. Tally lists Claude (claude.ai, Claude Desktop, Claude Code), ChatGPT, Cursor, Windsurf, Zed, Cline and Continue. It also has a dedicated connector for Claude and a dedicated plugin for ChatGPT, which it calls the quickest way to create forms, edit them and pull submission data into those assistants. If you prefer, you can authenticate with an API key as an alternative to OAuth. The help page names no role or admin switch. The assistant gets direct access to your Tally workspace and forms. It can create and edit forms, and it can fetch submission data to analyze, visualize and summarize right inside the conversation. It cannot delete forms or individual submissions. Submissions are not pre-loaded or sent to the AI without a direct request. Tally says the server is free to use on all plans, and the page states no usage limits. Tally's own example prompt asks the assistant to calculate the NPS score from your latest customer satisfaction survey. **Pros:** - Free on all plans - Reads submissions into the conversation **Cons:** - Can create and edit forms - Cannot delete forms or individual submissions **Price:** free to use on all plans. ## Revenue, automation and workspace servers Stripe, Zapier, Slack, Notion and Webflow are the revenue, automation and workspace servers, and vendors stop a write in four places: the server you pick, the permission, the connection setting and the action. That is why Stripe and X hold the money step behind a confirmation or a paused state. Where these tools fit in a wider channel plan is covered in our [growth marketing](https://missiongrowth.io/blog/growth-marketing) guide. ### 14. Stripe MCP **Best for:** Revenue questions in a conversation, with a person confirming refunds and outbound payments. ::shot{src="/blog/tools/stripe-mcp-product.webp" width="1600" height="1000" alt="Stripe MCP server documentation page" caption="Stripe MCP product page" captured="2026-10-08"} Stripe's MCP server is in public preview. When you connect a client with OAuth, the client opens Stripe's consent page, where you can grant access to one or more live mode accounts or sandboxes and set different permissions for each environment. Use an agent API key when an AI application needs independent, persistent access. MCP does not support OAuth when acting on behalf of connected accounts, so for those you authenticate with a restricted API key for your platform and grant only the permissions your agent needs. Administrators can enable or disable MCP access for the entire team in the Dashboard, separately for live mode and sandbox. A date matters: beginning October 31, 2026, Stripe MCP no longer accepts full-access secret keys or restricted API keys without the Agent tag. The generic tools read data with any Stripe API GET method and write data with any POST, PATCH, PUT and DELETE method. Stripe requires human confirmation before certain `stripe_api_write` actions, such as refunds and outbound payments, and an action you do not approve within 24 hours expires. Stripe advises turning on your client's tool-approval setting so you can review tool calls before they run. For marketing questions, an analytics tool marked Preview queries metrics, analyzes subscriptions and billing, and runs financial reports. **Pros:** - Human confirmation on refunds and outbound payments - Agent API keys for persistent access **Cons:** - Public preview - Full-access and untagged restricted keys will be refused from October 31, 2026 **Price:** not stated. ### 15. Zapier MCP **Best for:** Reaching tools that have no MCP server of their own. ::shot{src="/blog/tools/zapier-mcp-product.webp" width="1600" height="1000" alt="Zapier MCP server documentation page" caption="Zapier MCP product page" captured="2026-10-08"} Zapier is the one automation layer in this list. It connects your MCP client to your Zapier account, and its reach spans 9,000+ apps and 40,000+ actions. It works with Claude, ChatGPT, Cursor, Grok Bot and VS Code, and it supports MCP over Streamable HTTP only, so a client that can only use SSE cannot connect. Zapier handles OAuth, credentials and rate limiting, and most servers use dynamic tool discovery, so your AI enables the tools it needs during the conversation. You get one server per named MCP client. Sharing a server needs a Team or Enterprise plan, and on any plan you can share a copy of your tool list as a tool bundle instead. The cost model is its own. Each successful tool call consumes two tasks at a fixed rate, failed calls do not count, and tasks used through MCP count toward the plan's total task allowance. Zapier's own example, searching and updating 10 records, is 11 tool calls and 22 tasks. One search plus 100 record updates comes to 202 tasks, because every call costs two and the search adds one call to the 100 updates. Zapier's marketing example is to send a personalized follow-up email to each new subscriber. **Pros:** - 9,000+ apps behind one connection - Works with Claude, ChatGPT, Cursor, Grok Bot and VS Code **Cons:** - Two tasks per successful call add up - Streamable HTTP only **Price:** MCP tool calls draw on your plan's task allowance, two tasks per successful call. ### 16. Slack MCP **Best for:** Delivering marketing output and reports into the channels where the team already works. ::shot{src="/blog/tools/slack-mcp-product.webp" width="1600" height="1000" alt="Slack MCP server documentation page" caption="Slack MCP product page" captured="2026-10-08"} Slack earns its place here as the delivery layer for marketing output. Its server supports Streamable HTTP only: Slack says it does not support SSE-based connections or Dynamic Client Registration at this time. Workspace admins can approve and manage all MCP client integrations. A second rule applies to people who build clients rather than people who connect them. Only apps published in the Slack Marketplace and internal apps can use MCP at this time, and unlisted apps are prohibited. MCP clients must be backed by a registered Slack app with a fixed app ID. As a marketer, you ask your workspace admin to approve the client you use. The tools read and write: - Search messages and files, filtered by date, user and content type. - Send messages to any type of conversation. - Schedule a message to be sent to a conversation at a future time. The same rate limits apply whether an action goes through an MCP tool or directly through Slack Web API methods, and you can audit MCP activity with the associated audit logs. Slack's own use case is an AI assistant that searches your team's Slack history to answer questions, find past decisions and provide context for current projects. **Pros:** - Admins approve and manage every MCP client - Fits report delivery into existing channels **Cons:** - Admin approval needed - Builders face a Marketplace-or-internal-app rule **Price:** not stated. ### 17. Notion MCP **Best for:** Planning and briefs: reading and updating the pages your content calendar lives on. ::shot{src="/blog/tools/notion-mcp-product.webp" width="1600" height="1000" alt="Notion MCP server documentation page" caption="Notion MCP product page" captured="2026-10-08"} Notion MCP is a remote MCP server hosted by Notion. After you authorize a connection with OAuth, the client can use its tools to read and update content that you can access, so its reach is your own access rather than the whole workspace. On the admin side, workspace owners manage MCP client access in Settings, Connections, and organization owners can use the Admin API to list and revoke members' connections. Notion's help center adds that Enterprise admins can limit connections to an approved list of MCP clients, so on Enterprise an approval step can come before you connect. The tools read and write: - One retrieves content from a page, database, data source or saved database view by its URL or ID. - One queries data sources with SQL, reads rows from one data source or runs a saved view. - One creates pages with specified properties and content. Search depends on your plan. Full Notion MCP on Business or Enterprise is required to filter by editor, last-edited date, multiple teamspaces, title only or content status, and to sort by date. Other filters are available on every plan. For files, the `notion-create-file-upload` tool uploads images and other files up to 20 MiB, and workspace file-size limits still apply. **Pros:** - Remote and hosted by Notion - Owners can list and revoke connections **Cons:** - Can update content you have access to - Search filters by editor and date need Business or Enterprise **Price:** not stated. ### 18. Webflow MCP **Best for:** Marketing-site teams that already manage roles in Webflow. ::shot{src="/blog/tools/webflow-mcp-product.webp" width="1600" height="1000" alt="Webflow MCP server documentation page" caption="Webflow MCP product page" captured="2026-10-08"} Webflow's MCP server is built on Webflow's APIs. It exposes them as tools your AI agent can use to create elements, styles, components and variables, manage collections, custom code and assets, and read your site's analytics. Every agent works within your existing Webflow permissions and roles, and each site can provide its own Agent Instructions. Each authorization grants access to a single workspace, so you re-authenticate to use another. The MCP cannot change a site or Workspace's access settings, such as adding users or assigning roles. The limits are specific: - A few capabilities require the Webflow Designer open with the Bridge App connected. - Campaigns works only on sites in the Early Access program and covers building and measuring a campaign rather than launching it. - Page branches, for working on changes in isolation, require an Enterprise plan. - Creating new localized CMS items is not supported, though existing ones can be read and updated. - Interactions built with GSAP can be created and edited, and Classic interactions are out of reach. Secret environment variable values never pass through it, so you set those with the Webflow CLI. For marketing-site teams, Webflow also offers a library of ready-to-use prompts for image optimization, SEO audits, style refactoring and more. **Pros:** - Follows existing permissions and roles - Cannot change access settings **Cons:** - Campaigns limited to Early Access sites - Page branches need an Enterprise plan **Price:** not stated on the vendor's MCP page; page branches need an Enterprise plan. ### Four places a vendor stops a write A role, an admin toggle or a connector decides whether you can connect. None of them is a write block, so the two lists stay separate. Write limits sit in four places, and each protects something different. ::dataset{key="write-limit-places" name="Where marketing MCP vendors stop a write, checked 2026-10-08"} | Place | Example servers | What stops the write | Evidence | |---|---|---|---| | The server you pick | Salesforce | SObject Reads is read and query only, no mutations; SObject All adds create, update and delete | Salesforce server reference, archived May 2026 | | The permission | Amplitude, X Ads | Amplitude's Use MCP (write) action; X's `ads.write` scope | Amplitude and X docs | | The connection setting | Klaviyo | The query parameter `read-only=true` | Klaviyo connection page | | The action | Stripe, X Ads | Human confirmation for refunds and outbound payments; campaigns always created paused | Stripe and X docs | ::figure{src="/blog/figures/best-mcp-servers-for-marketing-2.svg" alt="Two columns of write limits: server and permission fixed before connecting, connection setting and action applied at use, with example servers" caption="Where a vendor stops an agent's write" width="720" height="313"} Choose the place you can audit. A server choice protects the data model, a permission protects the people, a connection setting protects one client, and an action check protects money. Each place also has a prompt injection angle. Klaviyo's page warns you to review each tool call for malicious instructions, and the action layer is the one a distracted human still sees. ## Where the popular roundups are out of date Amplitude's MCP server is not read-only, and Shopify's catalog and cart tools moved from `/api/mcp` to `/api/ucp/mcp`, so a list that calls Amplitude read-only or sends you to the old Shopify endpoint is out of date. Two corrections follow, each against a vendor page read on 2026-10-08. One roundup groups Amplitude with Google Analytics and Google Ads as read-only servers. Amplitude's docs say it reads and writes charts, dashboards, experiments, cohorts, events and properties. Write calls need the Use MCP (write) RBAC action, and the Member, Manager and Admin roles hold it by default. Shopify's Storefront MCP page says the catalog and cart tools on `https://{shop}/api/mcp` were removed and to use the Universal Commerce Protocol (UCP) instead. The capability moved to the UCP path; it was not dropped, and only the policies and FAQs tool stays on the old endpoint. A 2026 roundup can call a writable server read-only or name an endpoint that no longer carries the tools, so check the date on the vendor page before you trust any tool list, including this one. ## Which three servers to connect first, by team A team with no admin rights should start with a server on a plan it already has, a team with admin rights should start read-only on analytics, and nobody should connect an ad or payment server with write scopes first. The first connection is the one you can approve yourself, read-only, on data you already trust. | Situation | Connect first | Why | Gate to clear | |---|---|---|---| | No admin rights anywhere | Metricool or Tally | Metricool works on any plan including Free; Tally is free on all plans. Both can write (posts, forms), so start with one test brand or form | None stated on either vendor page | | You can create Google credentials | Google Analytics | Read-only scope, so it cannot change data | A Google Cloud project with the Admin and Data APIs enabled | | You own or can ask for Klaviyo access | Klaviyo with `read-only=true` | One parameter disables the tools that modify data | Owner, Admin, or Manager role; a client configuration file or Custom Connector route | | You run HubSpot | HubSpot, after a permissions check | Actions follow the connecting user's permissions | Someone creates the MCP connector | | You run paid ads | Google Ads | Three listed tools, no write tool | Developer token with Explorer access | Meta Ads and X Ads sit outside that table because they can write. A read-only first connection on them means choosing scopes with care. The read-only switch lives in a different place on each server, and so does the person who flips it. | Server | Where the read-only switch lives | Who flips it | |---|---|---| | Klaviyo | `read-only=true` in a client configuration file or the Custom Connector route, absent from the one-click listed connector | Whoever sets up the client | | X Ads | ads.read and offline.access chosen at authorization | Whoever authorizes | | Google Analytics | The read-only credential scope | Whoever creates the credentials | | Amplitude | Write is on by default for Member, Manager and Admin roles | An admin edits a role | | HubSpot | Connector permissions | Whoever creates the connector | Once you pick a server, roll it out in four steps that follow the write-limit places: 1. Pick the narrower server where one exists, such as Salesforce's SObject Reads. 2. Set the permission: `ads.read` only on X, and no Use MCP (write) action on the Amplitude roles that connect. 3. Set the connection: `read-only=true` for Klaviyo. 4. Keep the action check on, so Stripe confirmations and X's paused campaigns stay in force, and review each tool call. If you want one default, connect Google Analytics read-only, Klaviyo with `read-only=true`, and Metricool, in that order, because each needs a gate that one person can clear. That is the page's thesis in practice: ask who has to say yes before you compare features, then ask where the vendor stops a write. Today, send one message to the person who owns your analytics or email account and ask for the read-only credential. Skills are a separate package from servers; if you want that side, see our [claude skills for marketing](https://missiongrowth.io/blog/claude-skills-for-marketing) guide. ## FAQ ### Which marketing MCP servers are free? PostHog's server is a free hosted endpoint, Metricool's works on any plan including Free, and Tally's costs nothing on any plan. Those are the best MCP servers for marketing free of a separate connector fee. PostHog says some tools may be billed as PostHog AI spend, Metricool says plan limits still apply, and Zapier draws on your task allowance. ### Are MCP servers still useful? Yes, for the 18 here, because the vendors keep changing them. Shopify moved its catalog and cart tools to a new endpoint, and Stripe will refuse full-access secret keys from October 31, 2026. Each change shows a vendor maintaining its server, and each is a reason to date-check a roundup. ### Is there a marketplace for MCP servers? An MCP server marketplace can draw on the official MCP Registry, which is the project's own listing. The MCP Registry is in preview, with breaking changes or data resets possible before general availability, and its metadata is consumed mainly by aggregators such as marketplaces. ### Do you need to code to use them? Mostly no for the remote servers, yes for three. HubSpot, Klaviyo, Meta Ads, Notion and Tally connect through OAuth, a sign-in dialog or a URL, though X Ads also asks for a developer app step. Google Ads, Google Analytics and Clarity run on your own machine with Python or npx, which usually needs a developer's help. MCP for marketing is mostly a permissions task. ### How do I add one to Claude? Klaviyo shows the pattern. In Claude, open Settings, then Connectors, then Browse Connectors, and pick the listed Klaviyo connector. For a custom URL, use the Custom Connector route, which Anthropic lists for Free (one connector), Pro, Max, Team and Enterprise plans. ### Which of these servers are open source on GitHub? Google Ads (googleads/google-ads-mcp), Google Analytics (googleanalytics/google-analytics-mcp), Clarity (microsoft/clarity-mcp-server) and Metricool link a public GitHub repository from their docs, and Notion, Stripe and PostHog publish theirs as well. ### Can I use them in ChatGPT? Yes for several. Zapier lists ChatGPT as a client, Tally has a dedicated ChatGPT plugin, Klaviyo sends web clients such as ChatGPT to its remote server, Mixpanel names it among its assistants, and Amplitude connects through about 25 tools there. Meta, PostHog and X say any MCP-compatible client can connect. ### Can an agent post to social media? Metricool's server can schedule posts for a specific date and time or at the best time Metricool recommends. Meta Ads and X Ads create ads and campaigns, which is a different job from posting. ### My account is in the EU: which endpoint do I connect? It depends on the vendor. For EU or IN regions, Mixpanel sends you to a custom connector with the regional URL. Amplitude has a separate server for data that resides in the EU region. PostHog routes you to the US or EU region from the account you log in with.