Brevo MCP server — security and configuration update
The Brevo MCP server has been updated with improved security, simplified maintenance, and rate limiting.
What changed:
- Authentication method: MCP tokens are no longer passed in the URL. They are now transmitted securely via the HTTP
Authorization: Bearer <token>header. All previous URL patterns containing/{token}are no longer valid. - Auto-generated tools: The 193 MCP tools are now automatically generated from the Brevo OpenAPI specification, eliminating discrepancies between the API and MCP server.
- Rate limiting: Request limits have been added to protect services from abuse.
- New tool support: Integration guides now cover Windsurf, VS Code (GitHub Copilot), and Claude Code CLI in addition to Claude Desktop, Cursor, and Cline.
Action required: Update your MCP configuration to use the new header-based authentication. See the integration guide for updated configuration examples for all supported tools.