Evaluation record · mcp-server-zapier

Zapier MCP Server

v2026.7

Zapier

MCPautomationsaas-integrationsworkflowhosted

Strong

About This MCP

Zapier's hosted, proprietary MCP server giving AI agents access to user-selected actions from 9,000+ connected apps (40,000+ actions). Users create servers at mcp.zapier.com with per-app and per-action permissioning; listed clients connect via OAuth, unlisted clients use a rotatable connection token sent as an Authorization Bearer header (recommended) or embedded in the server URL. Transport is Streamable HTTP; each tool call consumes two Zapier tasks from the plan quota.

Last Evaluated: July 9, 2026

Official Website

Trust Vector Analysis

Dimension Breakdown

🚀Performance & Reliability

api reliability

Platform stability and maturity analysis

Evidence

Zapier MCP Documentation — Runs on Zapier's mature integration platform that has powered production automation for over a decade

highVerified: 2026-07-09

action execution success

Action execution success testing across common apps

Evidence

Zapier MCP Documentation — Actions reuse Zapier's battle-tested app integrations; failures are usually due to downstream app auth or API issues

mediumVerified: 2026-07-09

app integration breadth

Integration catalog assessment

Evidence

Zapier MCP Documentation — 9,000+ app connections and 40,000+ actions available, the broadest integration catalog of any MCP server

highVerified: 2026-07-09

rate limit handling

Rate and usage limit behavior review

Evidence

Zapier MCP Documentation — MCP is available on all Zapier plans with each tool call consuming two tasks from the plan quota; downstream app rate limits surface as action errors

mediumVerified: 2026-07-09

error recovery

Failure mode and recovery testing

Evidence

Zapier MCP Documentation — Errors from downstream apps are returned to the agent; reauthorization of expired app connections requires manual user action

mediumVerified: 2026-07-09

🛡️Security

authentication security

Authentication mechanism review; score raised from 70 (2026-06-10) to reflect OAuth for listed clients and rotatable header-based bearer tokens replacing static URL-only auth

Evidence

Zapier Help - Use Zapier MCP with your client — Listed clients authenticate via OAuth; unlisted clients use a connection token (shown once, rotatable, immediately invalidating the old token) sent as an Authorization Bearer header to https://mcp.zapier.com/api/v1/connect, with URL-embedded token retained as a fallback

highVerified: 2026-07-09

url credential exposure

Credential exposure threat modeling; score raised from 58 (2026-06-10) for header-based auth guidance and immediate token rotation

Evidence

Zapier Help - Use Zapier MCP with your client — Connection tokens still act as bearer credentials (anyone holding one can invoke the user's enabled actions), but Zapier now recommends header-based auth over URL-embedded tokens, shows tokens only once, and supports one-click rotation that immediately invalidates the old token

highVerified: 2026-07-09

blast radius control

Blast radius assessment across connected app categories

Evidence

Zapier MCP — By design the server can reach email, CRM, chat, and finance apps simultaneously; a compromised or prompt-injected agent has an extremely broad blast radius across connected accounts

highVerified: 2026-07-09

permission granularity

Per-app and per-action permission model review

Evidence

Zapier MCP Documentation — Users explicitly select which apps and which individual actions are exposed to the agent, enabling least-privilege configuration

highVerified: 2026-07-09

credential handling

Credential storage and isolation review

Evidence

Zapier Security — Downstream app OAuth credentials are stored by Zapier under SOC 2 Type II audited controls and never exposed to the agent

highVerified: 2026-07-09

🔒Privacy & Compliance

data exposure

Data flow analysis of action inputs and outputs

Evidence

Zapier MCP Documentation — Emails, CRM records, and messages retrieved by actions flow through Zapier's cloud and into the LLM provider context

highVerified: 2026-07-09

sensitive data protection

Data protection controls assessment

Evidence

Zapier Security — Encryption in transit and at rest on the platform, but no content-level PII redaction before data reaches the model

mediumVerified: 2026-07-09

third party data sharing

Multi-party data sharing review

Evidence

Zapier Privacy Policy — Action data is processed by Zapier, the downstream app, and the LLM provider, each under separate privacy policies

mediumVerified: 2026-07-09

compliance certifications

Compliance certification review

Evidence

Zapier Security and Compliance — SOC 2 Type II audited, with published GDPR and CCPA compliance commitments

highVerified: 2026-07-09

👁️Trust & Transparency

documentation quality

Documentation completeness review

Evidence

Zapier MCP Documentation — Clear setup guides per MCP client, action configuration docs, and security guidance

highVerified: 2026-07-09

operation visibility

Logging and traceability assessment

Evidence

Zapier MCP Dashboard — Per-user dashboard shows configured actions and a history of agent tool invocations

highVerified: 2026-07-09

open source transparency

Source availability review

Evidence

Zapier MCP — Fully proprietary, hosted-only service; server implementation cannot be inspected or self-hosted

highVerified: 2026-07-09

tool coverage clarity

Tool surface documentation review

Evidence

Zapier MCP Documentation — Exposed tool set is exactly the actions the user enabled, each with documented parameters drawn from Zapier's integration schemas

mediumVerified: 2026-07-09

⚙️Operational Excellence

ease of setup

Setup complexity assessment

Evidence

Zapier MCP Documentation — No installation: generate a personal endpoint at mcp.zapier.com, pick apps and actions in the web UI, and paste the URL into the MCP client

highVerified: 2026-07-09

api performance

Action latency characterization

Evidence

Zapier MCP Documentation — Action latency adds Zapier orchestration overhead on top of downstream app API calls, typically a few seconds per action

mediumVerified: 2026-07-09

reliability

Uptime and incident history analysis

Evidence

Zapier Status Page — Public status page with historically high availability across the Zapier platform

highVerified: 2026-07-09

feature coverage

Capability breadth assessment

Evidence

Zapier MCP Documentation — 40,000+ actions across 9,000+ apps including Gmail, Slack, Salesforce, HubSpot, and Google Workspace

highVerified: 2026-07-09

community adoption

Adoption and ecosystem support analysis

Evidence

Zapier MCP — Heavily promoted integration path supported by major MCP clients and Zapier's large existing automation user base

mediumVerified: 2026-07-09

Strengths

+Broadest action catalog of any MCP server: 9,000+ apps and 40,000+ actions
+OAuth for listed clients and rotatable header-based connection tokens for unlisted clients
+Per-app and per-action permissioning enables least-privilege agent configuration
+Zero-install hosted setup with a personal endpoint generated at mcp.zapier.com
+Downstream app credentials held by Zapier under SOC 2 Type II audited controls, never exposed to the agent
+Action invocation history visible in the per-user MCP dashboard
+Built on a decade-mature integration platform with high availability

Limitations

!Extremely broad blast radius by design: a prompt-injected agent can act across email, CRM, chat, and finance apps
!Connection tokens (and URL-embedded fallback) act as bearer credentials and must be treated as secrets, though rotation is one click
!Fully proprietary and hosted-only; no source inspection or self-hosting
!Business data from connected apps flows through Zapier's cloud and the LLM provider
!Each MCP tool call consumes two Zapier tasks, so costs scale with agent activity under plan-based quotas
!Expired downstream app connections require manual reauthorization

Metadata

license: Proprietary

supported platforms

0: Hosted remote server (any MCP client with remote support)

api dependency: Zapier platform and 9,000+ downstream app APIs

authentication: OAuth (listed clients); rotatable connection token via Authorization Bearer header or URL-embedded token (unlisted clients) at mcp.zapier.com

pricing: Available on all Zapier plans; each MCP tool call consumes two Zapier tasks (last_verified 2026-07-09)

compliance: SOC 2 Type II

maintained by: Zapier

documentation: https://docs.zapier.com/mcp/home

transport types

0: streamable-http (hosted)

installation methods

0: hosted endpoint

Use Case Ratings

customer support

Excellent for agents that triage tickets, draft replies, and update CRM records across support stacks

data analysis

Good for pulling records from business apps into analysis, though not an analytics tool itself

content creation

Strong for publishing and distribution workflows across CMS, email, and social apps

code generation

Not a development tool; mainly useful for wiring deployment or notification side effects

research assistant

Useful for gathering data from connected SaaS tools rather than the open web

financial analysis

Can reach accounting and CRM data, but broad access to financial apps demands strict action scoping

legal compliance

SOC 2 helps, but routing privileged documents through Zapier and an LLM needs careful review

healthcare

Not suitable for PHI workflows; no HIPAA business associate posture for MCP agent traffic

Zapier MCP Server

Trust Vector Analysis

Dimension Breakdown

Use Case Ratings

customer support

data analysis

content creation

code generation

research assistant

financial analysis

legal compliance

healthcare

Similar MCPs

Apify MCP Server

MCP Fetch Server