Customer.io MCP Server for Claude
Manage Customer.io from Claude — create segments, inspect customer profiles, send broadcasts and campaigns, work with journeys, and access the full Journeys UI and CDP Data Pipelines APIs — with the official Customer.io remote MCP server.
Open the source and read safety notes before installing.
Safety notes
- The server exposes three tool categories: read (GET), write (POST/PUT/PATCH), and delete (DELETE) — approve each independently.
- By default, the MCP server cannot delete customer profiles or modify live active campaigns — only create new items — reducing accidental audience impact.
- Write and delete tools can trigger real sends and modify live data; review Claude's proposed actions before confirming.
Privacy notes
- Customer profiles, segment definitions, journey configurations, and campaign data from your Customer.io workspace are surfaced in Claude's context.
- Customer.io's MCP server is authenticated via OAuth — no API keys are stored in your MCP config.
Prerequisites
- A Customer.io account — authenticate via OAuth when prompted on first tool use.
- EU customers should use `https://mcp-eu.customer.io/mcp` instead of the US endpoint.
- An MCP client such as Claude Code or Claude Desktop (MCP requires a paid Claude plan).
Schema details
- Install type
- cli
- Troubleshooting
- No
- Estimated setup
- 5 minutes
- Difficulty
- beginner
- Website
- https://customer.io
Full copyable content
{
"mcpServers": {
"customerio": {
"type": "http",
"url": "https://mcp.customer.io/mcp"
}
}
}About this resource
Overview
The Customer.io MCP Server is the official Model Context Protocol server from Customer.io. It gives Claude direct access to your Customer.io workspace — segments, customer profiles, campaigns, broadcasts, journeys, and the full Journeys UI and CDP Data Pipelines APIs — through natural language. Authentication is via OAuth with your Customer.io account; no API keys are required.
The server exposes three tool categories — read, write, and delete — so you can approve each category independently. By default, editing or deleting active campaigns and segments is restricted to prevent accidental audience changes.
Key capabilities
- Customer segments — create and manage segments using customer attributes and behavioral data.
- Customer profiles — inspect individual profiles, event history, and engagement patterns.
- Campaigns & broadcasts — create and send targeted broadcasts with personalization data.
- Journeys — build and manage multi-step messaging journeys.
- Full API access — the Journeys UI API and CDP Data Pipelines API are exposed via three
tool categories:
cio_read_api(GET),cio_write_api(POST/PUT/PATCH), andcio_delete_api(DELETE). - Delivery metrics — retrieve real-time delivery and engagement metrics.
How it compares
| Server | Lifecycle messaging | Segments | Journey builder | Campaign management | Auth |
|---|---|---|---|---|---|
| Customer.io MCP | Yes | Yes | Yes | Yes | OAuth |
| Klaviyo MCP | Yes | Yes | Limited | Yes | API key |
| Braze MCP | Yes | Yes | Yes | Yes | API key |
| Mailchimp MCP | Email only | Yes | Limited | Yes | OAuth |
Customer.io's MCP is notable for exposing the full API surface (read + write + delete) with explicit per-category permission controls, making it suitable for both analyst (read-only) and operator (full access) workflows.
Installation
Claude Code (OAuth)
claude mcp add --transport http customerio https://mcp.customer.io/mcp
Run /mcp in Claude Code to authenticate via OAuth with your Customer.io account.
Claude Desktop
Go to Settings → Connectors and add the Customer.io MCP connection, or manually add the server:
{
"mcpServers": {
"customerio": {
"type": "http",
"url": "https://mcp.customer.io/mcp"
}
}
}
EU region
Use https://mcp-eu.customer.io/mcp instead of the US endpoint.
Requirements
- A Customer.io account.
- A paid Claude plan (MCP is not available on Claude's free tier).
- An MCP client (Claude Code or Claude Desktop).
Security
- OAuth authentication — no API keys to manage or rotate.
- Approve read, write, and delete tool categories independently.
- Default restrictions prevent deleting profiles and editing live active campaigns.
Source Verification Notes
Verified on 2026-06-18:
- Customer.io's MCP getting-started guide at
docs.customer.io/ai/mcp/get-started/confirms the US and EU endpoints, OAuth auth, three API tool categories, and the default restrictions on editing live data. - Customer.io's MCP integration page confirms full Journeys UI API + CDP Data Pipelines API access and the three-tool architecture.
- Customer.io's Claude setup guide at
docs.customer.io/ai/mcp/claude/documents the HTTP transport and Claude Code installation pattern. - Claude Code's MCP documentation describes the
--transport httpinstallation pattern used above.
Source citations
Add this badge to your README
How it compares
Customer.io MCP Server for Claude side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
| Field | Customer.io MCP Server for Claude Manage Customer.io from Claude — create segments, inspect customer profiles, send broadcasts and campaigns, work with journeys, and access the full Journeys UI and CDP Data Pipelines APIs — with the official Customer.io remote MCP server. Open dossier | Hubspot MCP Server for Claude Access and manage HubSpot CRM data including contacts, companies, and deals Open dossier | AgentTrust MCP Server for Claude AgentTrust stdio MCP server giving AI agents verified identity with email, instant messaging, and cloud file storage across 19 Ed25519-signed tools. Open dossier | Airbyte MCP Server for Claude Connect Claude to your data through Airbyte's 50+ agent connectors — query CRMs, billing systems, project management tools, communication platforms, and more — with the official Airbyte remote MCP server for AI agents. Open dossier |
|---|---|---|---|---|
| Trust | ||||
| Install risk | Review first | Low risk | Review first | Review first |
| Notes | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ |
| Category | mcp | mcp | mcp | mcp |
| Source | source-backed | first-party | source-backed | source-backed |
| Author | Customer.io | HubSpot | AgentTrust | Airbyte |
| Added | 2026-06-18 | 2025-09-18 | 2026-06-14 | 2026-06-18 |
| Platforms | Claude CodeCodexCursorClaude Desktop | Claude CodeClaude Desktop | Claude CodeClaude Desktop | Claude CodeClaude Desktop |
| Source repo | — | — | — | — |
| Safety notes | ✓The server exposes three tool categories: read (GET), write (POST/PUT/PATCH), and delete (DELETE) — approve each independently. By default, the MCP server cannot delete customer profiles or modify live active campaigns — only create new items — reducing accidental audience impact. Write and delete tools can trigger real sends and modify live data; review Claude's proposed actions before confirming. | ✓Scope HubSpot CRM permissions and test writes against non-critical objects before enabling contact, company, or deal updates. | ✓Email tools can send outbound mail from your `@agenttrust.ai` address. Messaging tools can contact other agents and escalate to humans via HITL flows. Drive tools upload, download, and delete files—confirm destructive operations. Ed25519 signing keys are generated locally; back up `~/.agenttrust` before rotation. | ✓The server is hosted and managed by Airbyte — credentials for connected services are entered via browser OAuth flows or secure forms, never in the AI chat. Depending on the connector, the MCP can create and update records (not just read) — review Claude's proposed actions before confirming writes. Access is scoped by the permissions granted during OAuth; use least-privilege scopes for each connected service. |
| Privacy notes | ✓Customer profiles, segment definitions, journey configurations, and campaign data from your Customer.io workspace are surfaced in Claude's context. Customer.io's MCP server is authenticated via OAuth — no API keys are stored in your MCP config. | ✓Contacts, companies, deals, tickets, communication history, and CRM metadata may be exposed through tool calls. | ✓Email bodies, attachments, messages, and uploaded files are processed by AgentTrust. Signing keys and API keys are stored locally with 0600 permissions but still require host protection. Outbound email from address is enforced server-side to your agent's `@agenttrust.ai` identity. | ✓Data retrieved from connected services (contacts, deals, invoices, messages) is surfaced in Claude's context. All credential flows are browser-based and never transmitted through the AI chat interface. |
| Prerequisites |
|
|
|
|
| Install | | | | |
| Config | | | | |
| Citations | ||||
| Claim | Unclaimed | Unclaimed | Unclaimed | Unclaimed |
Signals
Loading live community signals…
A short, calm digest of reviewed Claude resources. Unsubscribe any time.