Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 3
- 4 6
- 3 6
- 2 1
- 1 0
Trust in production
- Trust it - 38%
- With caveats - 50%
- Wouldn't - 13%
75% would recommend this server
How reviewers scored it
- Setup & docs 3.7
- Auth experience 3.3
- Reliability 3.6
- Maintainer responsiveness 4.1
Why it got a B
Hosted by Zapier, included in every plan (each tool call uses two tasks). Your app credentials stay in Zapier rather than reaching the model, and every action is logged in History. Actions can change real data in your apps, so use "managed" mode with a fixed set of actions, not "agentic" mode, where the AI can add new actions mid-conversation. Biggest deduction: the sign-in flow and its scopes aren't documented in detail, and the server is closed source, so auth and maintenance were scored one band lower.
How to connect
Hosted: set up at https://mcp.zapier.com (most clients sign in with OAuth; Streamable HTTP only)
Is Zapier MCP safe?
Is Zapier MCP safe to use?
Zapier MCP grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does Zapier MCP have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Zapier MCP support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Workflow Automation
- A Make MCPOfficial hosted Make server that exposes your scenarios (and, on paid plans, management tools) to agents.
- A NeverApply MCP ServerOfficial hosted server to search and match jobs, tailor resumes, prep for interviews and apply to jobs you approve, with separate read, write and apply OAuth scopes.
- A Repostit MCP ServerOfficial hosted server to draft social posts and carousels, schedule or publish them to your connected accounts, set up cross-posting workflows and check delivery.
- A n8n MCP Server (instance-level)n8n's built-in MCP server. Lets an agent search, run, and (from 2.13) build workflows on your instance.
- C ComfyUI MCP (artokun/comfyui-mcp)A community MCP server for ComfyUI, run locally from npm, that builds and runs image, video and audio workflows, edits your live graph, and manages models and custom nodes.
Community reviews
Does what it says, no drama
Tried it on a side project first, then rolled it out at work. Releases come often and the changelog is clear. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Happy to run it in production.
Used for Triggering workflows from chat
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Trustworthy enough for real work
Started with it as an experiment, now it is a fixture. Sign-in flow was painless and I never had to paste a key into a config file. Hosted endpoint means no local process to babysit. Updates land regularly, and nothing broke when I upgraded.
Used for Scheduled reporting jobs
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Went back to calling the API directly
Gave it a fair shot over two weeks. Auth is handled properly, and revoking access later was one click. You can tell it is actively maintained, the rough edges keep getting fixed. For anything real I would look elsewhere.
Used for Glue between tools that have no direct integration
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 2/5
The Zapier integration I wanted
Our agents call this dozens of times a day. Being closed source, I cannot audit it, but the vendor has been responsive. Scoped the token to just what the agent needs and it respected that. Would recommend without hesitation.
Used for Routing inbound requests
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Mixed feelings after two weeks
Took longer to configure than I expected. The scope options are worth reading carefully, the defaults are broader than I wanted.
Used for Glue between tools that have no direct integration
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Solid and well behaved
Replaced a homegrown script with Zapier MCP and have not looked back. Sign-in flow was painless and I never had to paste a key into a config file. Nice to use something maintained by Zapier rather than a random fork. Updates land regularly, and nothing broke when I upgraded.
Used for Ops tasks like provisioning accounts
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Our team uses it every day
Hooked Zapier MCP into Claude Code and it worked on the first try. I like that access goes through a proper sign-in instead of a long-lived secret on disk. It is in our production agent and I sleep fine.
Used for Connecting the agent to existing automations
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Installed it on a Friday, it was part of my workflow by Monday. Auth is handled properly, and revoking access later was one click. Fine in production if you sandbox it.
Used for Connecting the agent to existing automations
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Worth the five minutes to set up
I use this almost daily. Nothing to install, I just point the client at the URL. Releases come often and the changelog is clear. Scoped the token to just what the agent needs and it respected that. Easy recommendation.
Used for Scheduled reporting jobs
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Fine once configured properly
Good for experimenting, still deciding about production. Nice to use something maintained by Zapier rather than a random fork. Scoped the token to just what the agent needs and it respected that. Keep permissions tight and it is a good tool.
Used for Routing inbound requests
- Setup & docs 4/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Does the job, docs could be better
Works well enough for what I need. Filed an issue and got a reply within two days. Sign-in flow was painless and I never had to paste a key into a config file. Hosted endpoint means no local process to babysit. Fine in production if you sandbox it.
Used for Routing inbound requests
- Setup & docs 4/5
- Auth experience 2/5
- Reliability 4/5
- Maintainer responsiveness 4/5
OK for read-only work
It does the job, but it took some tweaking. Updates land regularly, and nothing broke when I upgraded. Worth it, just do not skip the hardening steps.
Used for Triggering workflows from chat
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 4/5
Works, just lock it down
I like it, with reservations. Auth is handled properly, and revoking access later was one click. Keep permissions tight and it is a good tool.
Used for Ops tasks like provisioning accounts
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Capable but needs guardrails
Mostly reliable, with the odd timeout. I like that access goes through a proper sign-in instead of a long-lived secret on disk. You can tell it is actively maintained, the rough edges keep getting fixed. I would use it in prod, but only with a human approving writes.
Used for Scheduled reporting jobs
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Been running this for about a month now. I would prefer to read the code, but the hosted service has been dependable. Sign-in flow was painless and I never had to paste a key into a config file. Recommended, with sensible guardrails.
Used for Triggering workflows from chat
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Surprisingly polished
Clear tool names, sensible outputs, very few surprises. Narrowing the scopes took ten minutes and made me much happier running it.
Used for Connecting the agent to existing automations
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.