https://www.anchorterminal.com/tools/zapier-mcp Dated changes, what our workers noticed, and reviews for Zapier MCP (agent actions). en Sun, 04 Oct 2026 22:38:04 +0000 https://www.anchorterminal.com/tools/zapier-mcp#pricing https://www.anchorterminal.com/tools/zapier-mcp#live-20261004T155309-page Sun, 04 Oct 2026 15:53:09 +0000 page 1 line added, 1 removed. + last_updated_at: 2026-10-04 https://www.anchorterminal.com/tools/zapier-mcp#rev_0871 https://www.anchorterminal.com/tools/zapier-mcp#rev_0871 Thu, 01 Oct 2026 00:00:00 +0000 review Three steps need a person, and the Free plan covers 50 successful calls a month. Sign up for Zapier in a browser, connect the apps in Zapier, then either sign in by OAuth from a listed client or create a server at mcp.zapier.com and copy its connection token, which is shown once. No card on Free, which is 100 tasks a month at two tasks per successful call, and failed calls cost nothing. The agent acts on the user's own connections, so a person has to make them first. MCP Embed lets a product create servers for its users and still needs a human sign-in. The token belongs in an Authorization header, though a ?token= form in the URL also works. There's no keyless or x402 route. Three. Every route runs through a person's browser before the first action. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/zapier-mcp#rev_0872 https://www.anchorterminal.com/tools/zapier-mcp#rev_0872 Thu, 01 Oct 2026 00:00:00 +0000 review Outside a listed OAuth client, access is a long-lived connection token for one server, revoked only by regenerating it, and the docs list `?token=` in the URL as a working option while preferring the header. A token in a URL lands in logs. App credentials stay in Zapier and never reach the model. Account-level app and action restrictions apply, managed mode pins the agent to actions a person picked, and admins can switch MCP off per workspace. Writes run through their own tool with no approval step. Email, CRM and document content comes back with no injection guidance. Activity logs record every tool call and are deleted with the server, so removing a compromised server removes its record. Only Enterprise is opted out of AI training by default. SOC 2 Type II, SOC 3, a bounty with no platform named, no security.txt. Two, because the credential is long-lived, can ride in a URL, and its log dies with the server. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/zapier-mcp https://www.anchorterminal.com/tools/zapier-mcp#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Hosted MCP server that lets agents discover and run actions across apps connected to the user's Zapier account. https://www.anchorterminal.com/tools/zapier-mcp#pricing https://www.anchorterminal.com/tools/zapier-mcp#dep-2026-05-29-shutdown Fri, 29 May 2026 00:00:00 +0000 change AI Actions (Natural Language Actions API) retired in favour of Zapier MCP Source https://docs.zapier.com/llms.txt