Zapier

Record your Zapier connection as security automation evidence. Automated collection is not available for this provider yet.

Connect with an API token

1. In Zapier:

   1. Go to mcp.zapier.com and click Add MCP server.
   2. Under Choose your AI agent, search for and select the client you are connecting (Zapier's token guides use, for example, Anthropic API; clients that use OAuth instead do not get a token).
   3. Select the Connect tab and click Generate token.
   4. Copy the token from Or manually copy the token and store it right away: it is shown once. If it is lost, click Rotate token to get a new one; the previous token stops working immediately.

   Where to find the other values:

   • Base URL (optional): Zapier documents the connection-token endpoint as https://mcp.zapier.com/api/v1/connect (token sent as Authorization: Bearer, or as ?token= on the URL).

   Zapier shows the secret only once, so copy it before you leave the page.

   Zapier's public documentation does not cover every step.

   The only customer-created token found in Zapier's docs is the Zapier MCP connection token, which is tied to one MCP server and lets the holder run that server's tools and read what they return; Zapier says never to share a connection token or a connection-token URL and to give each user their own server and token. Access is limited by the tools added to that server, not by a read-only scope, and no read-only option is documented. Usage counts against the task allowance of the Zapier plan. In organization-managed accounts an admin or owner often has to approve a connector before members can add it. Zapier documents the connection-token endpoint as https://mcp.zapier.com/api/v1/connect, not /api/mcp/mcp. No account-level REST API token for Zapier customers was found (the Developer Platform Client ID/Client Secret under Embed > Settings > Credentials is for partner apps). Partial because the exact AI-agent choice for an unlisted client is not named in the docs and no organization or account identifier is documented.

   Source: docs.zapier.com, docs.zapier.com, docs.zapier.com, checked 2026-10-07.

2. On Compliance › Connectors, open Zapier, click Connect, choose API token and fill in:

   Field	What to enter
   API token / Personal access token	Required. Stored encrypted and never shown again.
   Base URL (optional)	—
   Account / Org / Workspace (optional)	—

3. Click Connect with token.

Connect with the MCP server

Choose MCP server: the address https://mcp.zapier.com/api/mcp/mcp is filled in. Sign in to Zapier when asked. It lets Griffin AI search Zapier.

Frameworks

No automated compliance test reads Zapier yet, so no framework lists it. How connectors provide evidence for frameworks: Frameworks and connectors.

Related

• Security Automation connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks