01 · Records and state owned
Sources, destinations, live events, warehouse uploads, delivery errors, audit logs, transformations and templates, tracking plans, validation metrics, Data Catalog metadata, and documentation.
RudderStack
RudderStack
RudderStack's hosted MCP combines pipeline observability with a narrow action surface: transformation authoring, testing, and destination connection, while masking event values before assistant access.
Marketing automation, lifecycle & CDPSystem of engagementExtensible SaaSReverse ETL / activation
Concrete capability record
Data, retrieval, actions, identity, and operating limits
A field-by-field summary of what the reviewed first-party references actually support. Publisher update dates and BYO-UI review dates are shown separately below.
02 · Data you can retrieve
Inspect connections and configurations, pipeline errors, warehouse uploads, live events, audit logs, event metrics, duplicate names, tracking plans, transformation performance, and documentation.
03 · Actions and write paths
Create or update transformations, test them against sample events, and connect transformations to destinations. The MCP cannot create or delete sources or destinations.
04 · Authentication and permissions
Browser-based OAuth authenticates the user and refreshes access automatically. MCP visibility remains limited to workspaces and resources that the signed-in account can access.
05 · Monitoring, approval, and recovery
RudderStack masks event property values, traits, and request bodies before assistant access; retain user workspace permissions and review transformation code, tests, and destination attachment.
06 · Limits and caveats
Only transformation creation, updates, testing, and destination connection are writable; source and destination creation or deletion remain outside the MCP surface.
First-party access
Documented surfaces
Reverse ETL SQL models ↗RudderStack documents custom SQL models executed against the customer's data cloud for downstream synchronization. This is warehouse-mediated SQL, not SQL access to RudderStack's internal store.Source: Reverse ETL PipelinesRudderStack Reverse ETL ↗RudderStack explicitly supports table, upsert, mirror, scheduled, and orchestrated Reverse ETL syncs to downstream tools. This native capability is broader than the documented hosted MCP server's scope.Source: Reverse ETL PipelinesMCP / agent surface ↗Verified first-party provider MCPAPI ↗Developer accessDeveloper docs ↗SDKs and platform guidanceProduct ↗Native platform experience
Agent access
MCP support
Official MCP serverRudderStack hosted MCPPrivate Beta
Support: Official MCP server
Read scope: Expose pipeline health, configurations, event structure, tracking governance, transformations, logs, and documentation within the signed-in user's workspace access, with event values masked.
Write scope: Permit transformation authoring and updates, sample-event tests, and explicit destination connection only; do not present source or destination lifecycle management as available MCP actions.
Authentication: The hosted server starts a browser OAuth login and refreshes authorization automatically; RudderStack says credentials are not stored in the MCP client configuration.
Approval boundary: Confirm transformation identity, code diff, sample-event test result, and target destination before update or connection; keep diagnostics and documentation retrieval non-mutating.
Protocol does not erase product boundaries.
Confirm the current tool catalog, plan, region, scopes, rate limits, terms, and write behavior before implementation.
Editorial assessment
Access-maturity dimensions
A comparative architecture lens—not a quality score, market ranking, or buying recommendation. Scale: 1–5.
Data access4
Action access4
Event access1
Identity4
Governance4
Agent access4
UI extensibility4
Portability3
Observability3
Documentation4
Proposed customer-shaped experiences
What customers could create on top.
The output could be an export, report, graph, artifact, application, agent, workflow, or downstream feed. These proposals are derived from documented access—not claims that RudderStack ships them.
Single-platform patterns
- Event pipeline, identity, and activation console
- Lifecycle journey debugger
- Audience activation workbench
- Campaign QA and approval room
Multi-platform compositions
- RudderStack + CRM or commerce system: lifecycle journey debugger
- RudderStack + warehouse or CDP + content-production platform: cross-system decision workspace
Evidence and dates
First-party references, with publisher and review dates separated
“Publisher updated” is shown only when the page exposes an update date. “BYO-UI reviewed” records when this research checked the reference. A missing publisher date is reported as missing—not replaced with the review date.
7 recorded sources
MCP / agent-role validationRepresentative source
https://www.rudderstack.com/product/rudderai/ ↗RudderStack documents a hosted OAuth server for sources, destinations, transformations, event context, and documentation.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 12, 2026
Targeted first-party MCP/agent-role review; broader API inventory retained
APISource inventory
https://www.rudderstack.com/docs/api/ ↗First-party API reference or API overview recorded for this platform.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Inventory source: structurally normalized; content was not individually reopened in this pass.
Developer docsSource inventory
https://www.rudderstack.com/docs/ ↗First-party developer documentation or platform overview.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Inventory source: structurally normalized; content was not individually reopened in this pass.
Developer docsSource inventory
https://www.rudderstack.com/product/reverse-etl/ ↗Reverified the named access facet exactly as bounded by the reviewed first-party record.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 12, 2026
Full-profile first-party re-verification on 2026-07-12; see the private audit ledger.
HomepageSource inventory
https://www.rudderstack.com/ ↗First-party product homepage used to confirm product identity and current positioning.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 10, 2026
Inventory source: structurally normalized; content was not individually reopened in this pass.
Release notesSource inventory
https://www.rudderstack.com/blog/ai-agents-cli-mcp-design-pattern/ ↗Reverified a retired or moved source and preserved its capability/date boundary.
- Publisher updated
- Mar 18, 2026
- BYO-UI reviewed
- Jul 12, 2026
Full-profile first-party re-verification on 2026-07-12; see the private audit ledger.
Release notesSource inventory
https://www.rudderstack.com/learn/customer-data/data-platform-for-ai-agents/ ↗Reverified a retired or moved source and preserved its capability/date boundary.
- Publisher updated
- Not stated by publisher
- BYO-UI reviewed
- Jul 12, 2026
Full-profile first-party re-verification on 2026-07-12; see the private audit ledger.
Verified fact
Tied to cited first-party evidence reviewed for this profile.
Source inventory
Official links recorded for deeper research but not necessarily reopened endpoint by endpoint.
Editorial assessment
System role, maturity interpretation, and architectural boundary.
Proposed design
Interface patterns and compositions—not vendor product claims.