Braze MCP server
Learn about Braze MCP server, a secure, read-only connection that lets AI tools like Claude and Cursor access non-PII Braze data to answer questions, analyze trends, and provide insights without altering data.
Braze MCP Server is currently in beta. Want to help us make it better? Send us feedback at [email protected].
What is Model Context Protocol (MCP)?
Model Context Protocol, or MCP, is a standard that lets AI agents connect to and work with data from another platform. It has two main parts:
- MCP client: The application where the AI agent runs, such as Cursor or Claude.
- MCP server: A service provided by another platform, like Braze, that defines which tools the AI can use and what data it can access.
About Braze MCP server
After setting up Braze MCP server, you can connect AI tools like agents, assistants, and chatbots directly to Braze, allowing them to read aggregated data such as Canvas and Campaign analytics, custom attributes, segments, and more. Braze MCP server is great for:
- Building AI-powered tools that need Braze context.
- CRM engineers creating multi-step agent workflows.
- Technical marketers experimenting with natural language queries.
Braze MCP server supports 38 read-only endpoints that do not typically return Personally Identifiable Information (PII) data. You can choose to assign only some of these endpoints to your Braze API key to further restrict which data an agent can access.
Do not assign permissions to your API key that are not read-only. Agents may try to write or delete data in Braze, which could cause unintended consequences.
Usage example
You can interact with Braze through natural language using tools like Claude or Cursor. For other examples and best practices, see Using Braze MCP server.
Frequently Asked Questions (FAQ)
Which MCP clients are supported?
Currently, only Claude and Cursor are officially supported. You’ll need an account for one of these clients to use Braze MCP server.
What Braze data can my MCP client access?
MCP clients can only access read-only endpoints that are not built to retrieve PII. They cannot manipulate data in Braze.
Can my MCP client manipulate Braze data?
No. The MCP server only exposes tools that handle non-PII, read-only data.
Can I use a third-party Braze MCP server?
Using a third-party Braze MCP servers is not recommend. Only use the official Braze MCP server hosted on PyPi.
Why doesn’t Braze MCP server offer PII or write access?
To protect data while still enabling innovation, we have built the server to be limited to endpoints that are read-only and do not typically return PII. This reduces risk while supporting valuable use cases.
Can I reuse my API keys?
No. You’ll need to create a new API key for your MCP client. Remember to only give your AI tools access to what you’re comfortable with, and avoid elevated permissions.
Is Braze MCP server hosted locally or remotely?
Currently, Braze MCP server is hosted locally.
Disclaimer
The Model Context Protocol (MCP) is a newly introduced open-source protocol that may be susceptible to security issues or vulnerabilities at this time.
Braze MCP Server setup code and instructions are provided by Braze “as is” and without any warranties, and customers use it at their own risk. Braze shall not be responsible for any consequences arising from improper setup, misuse of the MCP, or any potential security issues that may arise. Braze strongly encourages customers to review their configurations carefully and to follow the outlined guidelines to reduce risks associated with the integrity and security of their Braze environment.
For assistance or clarification, please contact [email protected].