Skip to main content Announcing Tool Policies: AI agent permissions down to the field Read the announcement
Live 37 Actions

Zapier MCP Server
for AI Agents

Connect your AI agent to StackOne's Zapier MCP server and give it 37 MCP tools out of the box. Auth, tool execution, and security all managed.

Zapier logo
Zapier MCP Server
Built by StackOne StackOne
DrataGPLocalyzeFlipMindtoolsScreenloop

Coverage

37 Agent Actions

Agents can read, write, delete and run operations in Zapier. Extend your agent's capabilities with custom actions.

Authentication

Agent Tool Authentication

Per-user OAuth in one call. Your Zapier MCP server gets session-scoped tokens with zero credentials stored on your infra.

Agent Auth →

Security

Agent Protection

Every Zapier tool response scanned for prompt injection in milliseconds, with 88.7% accuracy, all running on CPU.

Prompt Injection Defense →

Performance

Max Agent Context. Min Cost.

Free up to 96% of your agent's context window to enhance reasoning and reduce cost, on every Zapier call.

Tools Discovery →

What is the Zapier MCP Server?

A Zapier MCP server lets AI agents read and write Zapier data through the Model Context Protocol, Anthropic's open standard for connecting LLMs to external tools. StackOne's Zapier MCP server ships with 37 pre-built actions, fully extensible via the Connector Builder, plus managed authentication, prompt injection defense, observability, and agent execution runtime. Connect it from MCP clients like Claude Desktop, Claude Code, Cursor, Goose, and VS Code, or from agent frameworks like OpenAI Agents SDK, LangChain, and Vercel AI SDK.

All Zapier MCP Tools

Every StackOne action for Zapier, ready for your agent. Read, write, delete and run operations, scoped to exactly what you need.

Action Runs

  • Create Action Run

    Run an app action once outside a Zap

  • Get Action Run

    Get the status and results of an action run

Authentications

  • Create Authentication

    Create a connected app authentication from credential fields

  • List Authentications

    List the user's connected app authentications for an app

  • Delete Authentication

    Delete a connected app authentication

Groups

  • List Groups

    List groups in the connected Zapier account through the SCIM API.

  • Get Group

    Get a single Zapier group by SCIM ID.

Unified Groups

  • List Unified Groups

    List unified groups in the connected Zapier account.

  • Get Unified Group

    Get a unified Zapier group by ID.

Unified Users

  • List Unified Users

    List unified users in the connected Zapier account.

  • Get Unified User

    Get a unified Zapier user by ID.

Promotion Enrollments

  • Create Promotion Enrollment

    Enroll the connected Zapier account in a partner promotion

  • Get Promotion Enrollment

    Get the status and task usage of a promotion enrollment

  • Delete Promotion Enrollment

    Unenroll an account from a promotion

Users

  • List Users

    List users in the connected Zapier account through the SCIM API.

  • Get User

    Get a single Zapier user by SCIM ID.

Zaps

  • Create Zap

    Create a Zap from a title and an ordered list of steps

  • List Zaps

    List the Zaps of the authenticated user

  • Update Zap

    Edit a Zap title or replace its steps

  • Delete Zap

    Permanently remove a Zap and its configuration by id, which cannot be undone

Other (17)

  • List Actions

    List the triggers and actions an app offers

  • Get Input Choices

    Get the allowed values for a dropdown input field of an action

  • List Apps

    List or search apps in the Zapier App Directory

  • Get Apps V1

    List apps in the Zapier App Directory sorted by popularity

  • Get Categories

    List Zapier app categories

  • Get Input Fields

    Get the input fields of an action

  • Get Output Fields

    Get the output fields an action produces

  • Get Service Provider Config

    Get the SCIM configuration of the connected Zapier account.

  • Get Schemas

    Get how Zapier formats SCIM users or groups.

  • List Zap Runs

    List Zap run history with status and date filters

  • Get User Profile

    Get the profile of the authenticated Zapier user

  • Get Zaps V1

    List the authenticated user's Zaps with your app's step params

  • Get Zap Templates

    List popular Zap templates for your integration

  • Test Action Step

    Run a test of an action step with the given inputs

  • Guess Zap

    Suggest a Zap and a pre-filled Zapier URL from a plain-language description (beta)

  • Disable Zap

    Turn a Zap off without deleting it

  • Enable Zap

    Turn a Zap on by republishing its current version

Set Up Your Zapier MCP Server in Minutes

One endpoint. Any framework. Your agent is talking to Zapier in under 10 lines of code.

Agent Frameworks

Claude Desktop
{
  "mcpServers": {
    "stackone": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote@latest",
        "https://api.stackone.com/mcp?x-account-id=<account_id>",
        "--header",
        "Authorization: Basic <YOUR_BASE64_TOKEN>"
      ]
    }
  }
}

Check More Workflow Automation MCP Servers

n8n

175+ actions

Fivetran

172+ actions

Airbyte

93+ actions

Talend

71+ actions

Make

70+ actions

Ironclad

64+ actions

Comeet

26+ actions

Zapier MCP Server FAQ

Does StackOne have a Zapier MCP server?
Yes. StackOne offers a hosted Zapier MCP server with 37 pre-built actions, and every action is tested and QA'd by StackOne. Connect it to Claude, Cursor, and any other MCP client, or to any agent framework through the AI Action SDK. It ships with managed agent authentication, prompt injection defense, and tool discovery with server-side execution that preserve your agent's context window and keep reasoning performance.
Zapier MCP server vs direct API integration: what's the difference?
A Zapier MCP server and direct API integration serve different use cases. Direct API integration is for software-to-software work, where backend code calls Zapier. A Zapier MCP server is for AI agents that discover and call Zapier at runtime, such as MCP clients like Claude and Cursor, plus framework agents built with OpenAI, LangChain, or Vercel AI. StackOne provides both.
How does Zapier authentication work for AI agents?
Zapier authentication for AI agents works through a StackOne Connect Session. Create one via the dashboard or the SDK to get an auth link and ready-to-paste config for Claude Desktop, Cursor, and other MCP clients. Your user authenticates their own Zapier account; StackOne handles token exchange, storage, and refresh. Credentials never reach the LLM, and each user is isolated via origin_owner_id.
Are Zapier MCP tools vulnerable to prompt injection?
Yes. Zapier MCP tools can be vulnerable to indirect prompt injection. Any tool that reads user-written content, such as documents, messages, tickets, records, or free-text fields, is a potential vector. StackOne Defender scans every tool response before it enters the agent's context. It runs regex patterns in ~1ms, then a MiniLM classifier in ~4ms. Accuracy is 88.7%, and it runs entirely on CPU.
What is the context bloat of a Zapier agent and how do I avoid it?
Context bloat happens when Zapier tool schemas and API responses eat your Zapier agent's memory, preventing it from reasoning effectively. A single Zapier query can return a massive JSON response, and connecting multiple tools compounds the problem. Tools Discovery reduces it by loading only the tools relevant to each query.
Can I limit which actions my Zapier agent can access?
Yes. You can limit which actions your Zapier agent can access directly from the StackOne dashboard. Toggle actions on or off, or restrict them to specific accounts, with no code changes to your agent. Session tokens can be scoped to exact actions so if one leaks, exposure stays contained.
Can I create custom agent actions for my Zapier MCP server?
Yes. You can create custom agent actions for your Zapier MCP server using Connector Builder. It's an integration agent your coding assistant (Claude Code, Cursor, or Copilot) can invoke to research Zapier's API, generate production-ready connector YAML, test against the live API, and validate before you ship.
When should I NOT use a Zapier MCP server?
Skip a Zapier MCP server if your integration is purely software-to-software, because direct Zapier API integration is simpler when no AI agent is involved. For deterministic, compliance-critical operations (financial transactions, regulatory reporting), direct API gives you predictable behavior without agent-driven decision-making. MCP shines when AI agents need to dynamically discover and call Zapier actions at runtime.
What AI frameworks and AI clients does the StackOne Zapier MCP server support?
The StackOne Zapier MCP server supports both. MCP clients (paste-and-go apps): Claude Desktop, Claude Code, Cursor, VS Code, Goose. Agent frameworks (code SDKs you build with): OpenAI Agents SDK, Anthropic, Vercel AI, Google ADK, CrewAI, Pydantic AI, LangChain, LangGraph, Azure AI Foundry.

Put your AI agents to work

All the tools you need to build and scale AI agent integrations, with best-in-class connectivity, execution, and security.