Zapier MCP server and Claude connector: what it does, access, how to connect

Zapier hosts one official MCP server, also a Claude directory connector, that runs read and write actions in your connected apps. Sign in with OAuth or a connection token. Verified 21 Oct 2026.

Official remote MCP · read & write
Claude connector and ChatGPT app · read & write

Hosting: Remote only: Zapier hosts it over Streamable HTTP at https://mcp.zapier.com/api/v1/connect.
Auth: OAuth sign-in (default); a long-lived connection token for code and unlisted clients.
Read / write: Read and write: separate tools run read and write actions in your connected apps.
Works with: Claude.ai, Claude Desktop, Claude Code, ChatGPT, Cursor, Codex, VS Code, Gemini CLI and any Streamable HTTP client, per Zapier.
Plan requirement: Any Zapier plan; each successful tool call uses 2 tasks from the plan allowance. Zapier says the Claude connector works on all Claude plans, including Free.
Last changed: 2025-11 (Zapier connector added to the Claude directory)
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: medium

What can an agent do with Zapier through MCP?

It finds, enables and runs actions in the apps connected to your Zapier account, which Zapier puts at 9,000+, through 16 meta-tools in the default agentic mode.

Where it runs

Mode	Tools
Agentic mode (the default for new servers)	Fixed meta-tools: find and enable actions, run a read action, run a write action, manage app connections and manage saved skills. On first connect Zapier enables actions for every app you have already connected, and the agent can enable more mid-conversation.
Managed mode	Each action you choose is its own tool. The agent cannot add more.

Extra tools on some accounts

Some servers also get a write_code_action tool (rolling out, per Zapier). It writes and runs custom code with authenticated API access to an app when no built-in action fits.
Early-access accounts get workflow tools that can create, publish, enable and run standing Next Gen Zaps.

How writes behave

Zapier documents no draft or approval step. A write action runs in the target app when called. So an enabled action that pays, refunds, posts or sends an invoice in a finance app does so at once.

Can

Find, enable and disable actions for your connected apps (agentic mode)
Run read and search actions, such as finding a record or row
Run write actions, such as sending a message or updating a record
List and manage your Zapier app connections
Create, update and delete saved skills (agentic mode)
Write and run custom code against an app's API (some servers, rolling out)
Build, publish, enable and run standing Next Gen Zap workflows (early access)
Expose a fixed list of actions with locked field values (managed mode)

Cannot

Auto-provision app connections another Zapier user shared with you; app connections can't be shared user to user (per Zapier)
Run actions the user can't perform in the connected app (per Zapier)
Add third-party tools; Zapier owns every tool (per Zapier)
Offer region-specific data residency unless otherwise agreed, or dedicated VPC or on-premises hosting (per Zapier)

What access does it get?

It gets whatever your Zapier user can do through the app connections on your server. Zapier doesn't publish OAuth scope names.

Where	Scopes and permissions (as documented)	Admin requirement
Zapier MCP via OAuth (remote, https://mcp.zapier.com/api/v1/connect)	Not documented by the vendor. Sign-in asks you to review the requested access, pick an account and Allow; the client then reaches every action enabled on your default server.	Organization-managed clients may need an admin or owner to approve Zapier. On Zapier Enterprise, account-level app and action restrictions apply to MCP.
Zapier MCP via connection token (code and unlisted clients)	One long-lived token per server, from mcp.zapier.com › Settings › API token. Anyone holding it can run that server's tools, per Zapier.	No approval step: MCP is on by default for all accounts, including Enterprise, and any user in an MCP-enabled account or workspace can create servers and tokens. Workspace admins can switch MCP off (via the account manager), limit it by workspace membership and set MCP task quotas; calls appear in the History tab and account audit log, and Enterprise SAML SSO extends to MCP, per Zapier.
Zapier connector in Claude and ChatGPT workspace app	Same Zapier OAuth consent. Claude Team/Enterprise Owners can set each tool to Always allow, Ask or Block.	Claude Team/Enterprise: an Owner enables Zapier first; each member still signs in. ChatGPT Business/Enterprise/Edu: an admin makes the app available.

How do I connect it?

In Claude or ChatGPT, add Zapier as a connector and sign in; Zapier creates your default server on first connect, so you need no URL or token.

In Customize › Connectors (or claude.com/connectors/zapier), find Zapier and click Connect; Zapier also documents asking Claude in chat to connect.
On Zapier's screen click Copy prompt, then Continue, review the access and click Allow.
Paste the copied prompt back into Claude to run onboarding, then remove write actions you don't need.
Team/Enterprise: an Owner must enable Zapier in Organization settings › Connectors first.

Listed as Anthropic verified, added November 2025. Zapier says Claude Cowork needs a paid Claude plan.

What should a finance team watch for?

Every successful call costs 2 Zapier tasks, write actions run straight away, and the default mode lets the agent enable new actions itself.

Cost: each successful call uses 2 tasks from the plan your Zaps share; 5 spreadsheet rows is 10 tasks. Failed calls are free. At the limit, pay-per-task billing charges extra tasks up to a cap; otherwise calls and Zaps stop until the cycle resets. Workspace admins can set MCP task quotas, per Zapier.
A write action runs in the app at once, and Zapier documents no approval step. Keep per-call approval on: Zapier's quickstart suggests approving the first run for the whole session, which a finance team should not do with write tools. For Zapier Team, Zapier suggests Claude Owners set write/delete tools to Ask or Block; for Enterprise it suggests Always allow plus Zapier app access policies, which removes per-call approval in Claude.
Least privilege: onboarding enables actions for all your connected apps by default. Disable what you don't need, or use managed mode to fix the tool list and lock field values.
Money can move through any enabled payment, refund or invoice-send action. Leave those off unless a person approves each call.
Code and automations: write_code_action (some servers) and the early-access workflow tools can create code or standing Zaps that write to finance apps outside per-call approval. Keep them on Ask or Block, or use managed mode.
Connection tokens are long-lived secrets. Zapier recommends the Bearer header over ?token= in the URL, storing the token in an environment variable or secret manager, and one server and token per user; an admin should never distribute one. Keep config files out of shared folders and repos and rotate a leaked token. Revoke OAuth from the client or mcp.zapier.com.
Prompt injection: emails, CRM notes and invoice descriptions carry free text; an injected instruction could push the agent to send, post or pay.
Zapier says data is stored in AWS US-East 1 and Enterprise accounts are opted out of AI training by default; check Zapier's and your AI provider's terms.

How could finance teams and accounting firms use it?

Read actions suit questions that span several apps. Write actions suit drafting work, with a person approving each call that changes a system of record.

Inside a company

Look up a customer's open invoices and CRM notes before a collections call.
Summarise a spend-tracker spreadsheet by vendor for month-end review.
Draft a payment reminder for a person to review and send.

At an accounting firm

Give each staff member their own Zapier sign-in so actions follow their app permissions.
List what is still missing from a client's document-request tracker.
Use managed mode with locked fields for a fixed reporting action.

Whatever the use, a person should approve each write action that changes the books or another system of record, and check the result in that app.

Want Zapier connected to Claude for your team?

We configure scoped connections and a review step before anything changes your books. The fee is fixed.

Book a 30-minute setup call

Change log

Date	Change	Source
2025-11	Zapier connector listed in the Claude directory (Anthropic verified), remote URL https://mcp.zapier.com/api/v1/connect	claude.com/connectors/zapier

FAQ

Is this official?

Yes. Zapier hosts and documents the server, and the Claude directory lists its connector as Anthropic verified.

Is it free?

There is no separate MCP fee, but each successful call uses 2 tasks from your Zapier plan. Failed calls are free, per Zapier.

Does it change data in Zapier?

Yes, in your connected apps: write actions send, create and update records, and the agent can enable actions on your Zapier server.

Is my data used to train models?

Zapier says Enterprise customers are opted out of AI model training by default under its AI Supplementary Terms. For other plans, check Zapier's terms and your AI provider's terms.

Can my accountant use it on my behalf?

Zapier says app connections can't be shared and a shared server doesn't let someone run tools as you, so an accountant connects with their own Zapier user.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.