Skip to content

Marketing & research integration

Customer.io MCP server for Claude, Codex and Cursor

Work with Customer.io campaigns, segments and people. Connect the Customer.io MCP server to Toolstile once, then choose which of its tools Claude Code, Codex, Cursor and Claude Desktop may use.

Free plan available. Server credentials stay in Toolstile, not in agent configs.

On this page

What your AI apps can do with Customer.io

  • Review campaigns and messages
  • Search people and segments

Customer.io MCP tools

8 tools, taken from the publisher's documentation on 29 October 2026. The server decides what it offers and can add or rename tools at any time; after you connect, Toolstile shows the current list.

ToolWhat it does
cio_primeLoads Customer.io's AI-oriented API reference at the start of a task
cio_schemaExplores the API: lists resources, finds endpoints and shows parameters
cio_read_apiSends authenticated GET calls to list and inspect resources
cio_write_apiSends authenticated POST, PUT and PATCH calls to create or modify resources
cio_delete_apiSends authenticated DELETE calls to remove resources
cio_skills_listLists available agent skills for multi-step jobs
cio_skills_readRetrieves a skill's full instructions
cio_auth_statusReports authentication state and the workspaces the token can reach

Suggested access for each AI app

The documentation this list comes from doesn't mark Customer.io's tools as read-only or destructive. Read each tool's description and decide per app before allowing it.

Coding agent in Claude Code or Cursor. Allow the read tools so the agent can look things up without stopping, and require approval for tools that change shared data.

Chat or research app in Claude Desktop. Allow reading and searching. Allow writes only where you want the app to act for you.

Unattended agent, such as a scheduled Codex job. No one is watching the session, so keep it narrow: allow what the job needs, require approval for changes and block the rest.

Blocked tools are removed from the tool list an app sees, so it won't try them. Because rules apply per app, the same Customer.io connection can be broad in one app and read-only in another, and the credential stays in Toolstile instead of each app's config file.

How it works with Toolstile

  1. Connect once. Add Customer.io to a workspace (browser sign-in). Toolstile keeps the credential, so no agent config holds it.
  2. Choose access per app. Give Claude Code every Customer.io tool, give Cursor only the read tools, or keep Customer.io away from an app entirely.
  3. Share approved accounts. Teammates use the connection without copying tokens, and you can remove access in one place.
  4. Review activity. See which app called which tool and when, so you can tighten access with evidence.

Add the Customer.io MCP server to an AI app

Through Toolstile, every AI app uses one gateway entry, whichever servers you connect. In Claude Code:

Shell
claude mcp add --transport http toolstile 'https://toolstile.com/mcp'

Then connect Customer.io in your workspace and choose which of its tools that app may use. Client setup covers Codex, Cursor and Claude Desktop.

To connect directly instead, add the Customer.io endpoint to each app separately. In Claude Code:

Shell
claude mcp add --transport http customerio 'https://mcp.customer.io/mcp'

In Cursor's mcp.json:

JSON
{
  "mcpServers": {
    "customerio": {
      "url": "https://mcp.customer.io/mcp"
    }
  }
}

Some servers accept only clients they have approved, or need a token header. Check the Customer.io MCP documentation for what your client needs.

Before you connect

A Customer.io account. Sign-in uses your Customer.io permissions.

Server details

DetailValue
PublisherCustomer.io
Endpointhttps://mcp.customer.io/mcp
AuthenticationBrowser sign-in
CategoriesMarketing & research
Tool list8 tools, observed 29 October 2026 (docs)

Customer.io MCP documentation