Kit MCP by Scalekit

Tools your marketing agent reaches for on Kit MCP, scoped per user.

CALL ANY TOOL

Kit MCP exposes tools for managing subscribers, tags, sequences, broadcasts, forms, custom fields, webhooks, and account analytics — giving agents full control over email marketing workflows.

kitmcp_add_subscriber_to_form

Add Subscriber To Form

Subscribe a single email address to a Kit form. Creates the subscriber if they do not exist; returns the subscriber record.

Parameters

Name

Type

Required

Description

email_address

string

Required

Subscriber's email address (required)

form_id

integer

Required

The form ID (required). Use list_forms to find IDs.

session_id

string

Optional

UUID v4 identifier for grouping tool calls in the same conversation. Generate once at the start of the session and reuse it on every call.

user_goal

string

Optional

What the creator is trying to accomplish with this tool call. Pick the closest match; use 'unknown' only when no category fits.

kitmcp_add_subscriber_to_sequence

Add Subscriber To Sequence

kitmcp_bulk_add_subscribers_to_form

Bulk Add Subscribers To Form

kitmcp_bulk_create_custom_fields

Bulk Create Custom Fields

kitmcp_bulk_create_subscribers

Bulk Create Subscribers

kitmcp_bulk_create_tags

Bulk Create Tags

kitmcp_bulk_tag_subscribers

Bulk Tag Subscribers

kitmcp_bulk_untag_subscribers

Bulk Untag Subscribers

kitmcp_bulk_update_subscriber_custom_field_values

Bulk Update Subscriber Custom Field Values

kitmcp_create_broadcast

Create Broadcast

kitmcp_create_custom_field

Create Custom Field

kitmcp_create_sequence

Create Sequence

kitmcp_create_sequence_email

Create Sequence Email

kitmcp_create_snippet

Create Snippet

kitmcp_create_subscriber

Create Subscriber

kitmcp_create_tag

Create Tag

kitmcp_create_webhook

Create Webhook

kitmcp_delete_broadcast

Delete Broadcast

kitmcp_delete_custom_field

Delete Custom Field

kitmcp_delete_sequence

Delete Sequence

kitmcp_delete_sequence_email

Delete Sequence Email

kitmcp_delete_webhook

Delete Webhook

kitmcp_filter_subscribers

Filter Subscribers

kitmcp_get_account

Get Account

kitmcp_get_account_colors

Get Account Colors

kitmcp_get_broadcast

Get Broadcast

kitmcp_get_broadcast_clicks

Get Broadcast Clicks

kitmcp_get_broadcast_stats

Get Broadcast Stats

kitmcp_get_broadcasts_stats

Get Broadcasts Stats

kitmcp_get_creator_profile

Get Creator Profile

For more tools, view docs.

View all tools →

Build your Agent

Same auth pattern across every framework.

from langchain_mcp_adapters.client import MultiServerMCPClient
from scalekit import ScalekitClient

client = ScalekitClient(env_url=ENV_URL, client_id=CLIENT_ID, client_secret=SECRET)
token = client.agent.get_token(user_id="user_id", connector="kitmcp")

mcp = MultiServerMCPClient({
    "kitmcp": {
        "url": "https://mcp.scalekit.com/kitmcp",
        "headers": {"Authorization": "Bearer " + token}
    }
})
tools = await mcp.get_tools()

import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const client = new ScalekitClient({ envUrl, clientId, clientSecret });
const token = await client.agent.getToken({ userId: "user_id", connector: "kitmcp" });

const openai = new OpenAI();
// Connect to MCP at https://mcp.scalekit.com/kitmcp
// Pass: Authorization: Bearer + token

import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const client = new ScalekitClient({ envUrl, clientId, clientSecret });
const token = await client.agent.getToken({ userId: "user_id", connector: "kitmcp" });

const anthropic = new Anthropic();
// Connect to MCP at https://mcp.scalekit.com/kitmcp
// Pass: Authorization: Bearer + token

from google.adk.agents import LlmAgent
from scalekit import ScalekitClient

client = ScalekitClient(env_url=ENV_URL, client_id=CLIENT_ID, client_secret=SECRET)
token = client.agent.get_token(user_id="user_id", connector="kitmcp")
# Connect to MCP at https://mcp.scalekit.com/kitmcp
# Pass: Authorization: Bearer + token

Try these prompts

Prompts that put Kit MCP tools to work immediately.

Subscribers & analytics

Copy the prompt

Copied

How many active subscribers do I have, and how many joined in the last 30 days?

Copy the prompt

Copied

Find all subscribers who haven't opened an email in the last 60 days and list their email addresses.

Copy the prompt

Copied

Show me the engagement stats (opens, clicks) for subscriber john@example.com.

Copy the prompt

Copied

List all subscribers tagged with 'Trial' and export their email addresses.

Tags & segments

Copy the prompt

Copied

Create a tag called 'VIP Customers' and apply it to the top 10 most-engaged subscribers.

Copy the prompt

Copied

Rename the tag 'Old Customers' to 'Alumni' and show me how many subscribers it has.

Copy the prompt

Copied

Remove the 'Trial' tag from all subscribers who have been active for more than 90 days.

Copy the prompt

Copied

List all tags in my account and how many subscribers each one has.

Broadcasts & sequences

Copy the prompt

Copied

Draft a broadcast with the subject 'Monthly Newsletter - June' and schedule it for next Monday at 9am.

Copy the prompt

Copied

Show me the open rate and click rate for my last 5 broadcasts.

Copy the prompt

Copied

List all active sequences and tell me how many subscribers are enrolled in each.

Copy the prompt

Copied

Enroll all subscribers tagged 'New Signup' into the 'Welcome Series' sequence.

SEE HOW AUTH WORKS

Scalekit vaults and refreshes Kit credentials so your agent never handles tokens directly.

Authorize

Your user connects

Kit MCP

once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access

Who:

user ‘A’

when:

Once per user

access:

Limited to user

Store

Their

Kit MCP

token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection

vault:

encrypted

scope:

per-user

tokens:

auto-refreshed

Resolve

When your agent calls a

Kit MCP

tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs

speed:

~40ms

check:

before every call

seen by:

nobody

Audit

Every

Kit MCP

tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it

history:

90 days

export:

SIEM-ready

logged:

every call

Test other agents

More MCP connectors with the same auth model.

SALES

Outbound prospecting agent

Search Apollo for ICP matches, rank them, draft personalised Gmail outreach, and log every send to Google Sheets.

GTM

HubSpot to Slack updates agent

Watch HubSpot deal stage changes and post structured updates to the right Slack channel. Reps stop checking the CRM all day.

HubSpot

Slack

View agent

Why Scalekit

Secure your agent's access. Connectors ship in minutes

Why teams build on Scalekit instead of rolling their own.

01.

Shared tokens break per-user analytics

A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential.

// shared token
 audit → bot_service_account

 // scalekit
 audit → user_abc ✓

02.

Authentication is not authorization

“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”

Venu Madhav Kattagoni

Head of Engineering / Von

FAQs

Frequently Asked Questions

Does the agent access Kit as the user or as a shared service account?

As the user. Scalekit resolves the OAuth token for the specific person who authorized the agent. Every subscriber update, tag assignment, and sequence action is performed under their Kit account — not a shared API key or service credential.

What data can the agent access through Kit MCP?

The agent can access subscriber profiles (email, name, custom fields, tags), email sequences, broadcast drafts, forms, automations, and account-level analytics. Access is scoped to whatever Kit OAuth scopes were granted at authorization time — the agent cannot reach data outside those permissions.

Are agent actions in Kit reversible?

Some are, some are not. Adding or removing tags, updating subscriber custom fields, and unsubscribing contacts can generally be reversed manually in Kit. However, sending a broadcast or triggering an automation sequence cannot be undone once dispatched — those emails are delivered immediately. Use listScopedTools to block destructive or send-capable tools if you want the agent to operate in a read-only or draft-only mode.

How does Scalekit secure the Kit MCP connection?

Scalekit vaults the Kit OAuth token with AES-256 encryption at rest. The token is resolved at request time and never written into LLM context, agent memory, or logs. If the user revokes access in Kit, the next tool call fails immediately with an auth error — Scalekit does not cache stale tokens past revocation.

Kit charges per subscriber. Can the agent accidentally import contacts and increase my bill?

Yes, if the agent has access to subscriber-creation tools. You can prevent this by using listScopedTools to expose only read and tag-management tools while blocking kit_create_subscriber and kit_import_subscribers. This way the agent can manage and segment your existing list without ever adding new contacts that would push you into a higher billing tier.

On this page

Tool and actions Framework Compatibility Starter Prompt Auth Lifecycle Try Other Agents Why Scalekit