Back to Browse

Google Tagmanager MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for the Google Tag Manager API v2: containers, workspaces, tags, triggers, publishing.

About

MCP server for the Google Tag Manager API v2: containers, workspaces, tags, triggers, publishing.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (3 strong, 3 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. Trust signals: trusted author (17/17 approved).

6 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Google OAuth client id (refresh-token flow).Optional

Environment variable: GOOGLE_TAGMANAGER_CLIENT_ID

Google OAuth client secret (refresh-token flow). Treat it as a secret.Required

Environment variable: GOOGLE_TAGMANAGER_CLIENT_SECRET

Google OAuth refresh token; exchanged for access tokens automatically. Treat it as a secret.Required

Environment variable: GOOGLE_TAGMANAGER_REFRESH_TOKEN

Ready-made OAuth access token (~1h lifetime). Alternative to the client-id/secret/refresh-token trio.Required

Environment variable: GOOGLE_TAGMANAGER_ACCESS_TOKEN

API root host override.Optional

Environment variable: GOOGLE_TAGMANAGER_API_BASE

Per-request timeout in milliseconds.Optional

Environment variable: GOOGLE_TAGMANAGER_TIMEOUT_MS

Retries on transient errors (429, quota 403, and 5xx/network for reads).Optional

Environment variable: GOOGLE_TAGMANAGER_MAX_RETRIES

Minimum spacing between API requests, for the 0.25 QPS quota.Optional

Environment variable: GOOGLE_TAGMANAGER_MIN_INTERVAL_MS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-a1-x-tech-mcp-google-tagmanager": {
      "env": {
        "GOOGLE_TAGMANAGER_API_BASE": "your-google-tagmanager-api-base-here",
        "GOOGLE_TAGMANAGER_CLIENT_ID": "your-google-tagmanager-client-id-here",
        "GOOGLE_TAGMANAGER_TIMEOUT_MS": "your-google-tagmanager-timeout-ms-here",
        "GOOGLE_TAGMANAGER_MAX_RETRIES": "your-google-tagmanager-max-retries-here",
        "GOOGLE_TAGMANAGER_ACCESS_TOKEN": "your-google-tagmanager-access-token-here",
        "GOOGLE_TAGMANAGER_CLIENT_SECRET": "your-google-tagmanager-client-secret-here",
        "GOOGLE_TAGMANAGER_REFRESH_TOKEN": "your-google-tagmanager-refresh-token-here",
        "GOOGLE_TAGMANAGER_MIN_INTERVAL_MS": "your-google-tagmanager-min-interval-ms-here"
      },
      "args": [
        "-y",
        "mcp-google-tagmanager"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Google Tag Manager MCP

English | Русский

npm CI Glama License: MIT

A1 Google Tag Manager MCP lets an AI app inspect and manage Google Tag Manager containers in plain language. See what fires on a page, work with tags, triggers and variables in a draft workspace, then deliberately compile and publish a version when you are ready.

It connects to the Google Tag Manager API v2 through your Google account. The difference from asking an AI to guess a GTM setup is that it works with the actual container, workspace and version you choose.

  • 19 tools. 10 operations only read GTM data; 4 create drafts or change built-in variables; 5 can alter, delete, compile or publish live configuration.
  • Draft first. Tags, triggers and variables are created in a workspace. Publishing is a separate, explicitly destructive operation.
  • Quota-aware. GTM permits 0.25 requests per second per project; the server spaces requests by at least 4.2 seconds instead of overwhelming the API.
  • Your Google access. The server uses your OAuth credentials and requests only the Tag Manager scopes needed for reading, editing, versioning and publishing.

Start with a read-only question:

Which tags in my containers fire on the page-view trigger?

Connect the server · Explore use cases · Open technical documentation


See it work in a minute

You: List my GTM containers and show which tags fire on page view.

Assistant: Lists the containers, their workspaces, relevant triggers and the tags attached to them. Nothing changes.

You: In the Default Workspace of GTM-ABC123, prepare a GA4 configuration tag for measurement ID G-XXXXXXX on all pages.

Assistant: Shows the workspace, proposed tag and trigger configuration, then asks for confirmation before creating the draft.

You: Confirm the draft.

Assistant: Creates the tag in the workspace. It does not publish the container; compiling and publishing a version remains a separate step.

Contents

Quick start

You need Node.js 20+, a Google account with access to a GTM container and OAuth credentials from a Google Cloud project where the Tag Manager API is enabled.

  1. Prepare Google OAuth access.
  2. Add the server to your AI app.
  3. Start with the read-only question above.

In the app:

  1. Open Settings → MCP servers.
  2. Select Add server.
  3. Choose STDIO, then enter npx -y mcp-google-tagmanager@latest and the three environment variables below.
VariableValue
GOOGLE_TAGMANAGER_CLIENT_IDYour Google OAuth client ID
GOOGLE_TAGMANAGER_CLIENT_SECRETYour Google OAuth client secret
GOOGLE_TAGMANAGER_REFRESH_TOKENYour Google OAuth refresh token
  1. Select Save, then Restart.

From the command line:

codex mcp add google-tagmanager \
  --env GOOGLE_TAGMANAGER_CLIENT_ID=your_client_id \
  --env GOOGLE_TAGMANAGER_CLIENT_SECRET=your_client_secret \
  --env GOOGLE_TAGMANAGER_REFRESH_TOKEN=your_refresh_token \
  -- npx -y mcp-google-tagmanager@latest
codex mcp list

Codex MCP documentation

claude mcp add \
  --env GOOGLE_TAGMANAGER_CLIENT_ID=your_client_id \
  --env GOOGLE_TAGMANAGER_CLIENT_SECRET=your_client_secret \
  --env GOOGLE_TAGMANAGER_REFRESH_TOKEN=your_refresh_token \
  --transport stdio \
  --scope user \
  google-tagmanager \
  -- npx -y mcp-google-tagmanager@latest
claude mcp list

Claude Code MCP documentation

The current official path is Settings → Extensions. For a custom desktop extension, open Advanced settings → Extension Developer → Install Extension…, select a .mcpb file and follow the prompts.

This repository currently publishes an npm stdio package and does not contain a .mcpb bundle. For Claude Desktop builds that still support local configuration, use the following JSON stdio configuration as a fallback:

{
  "mcpServers": {
    "google-tagmanager": {
      "command": "npx",
      "args": ["-y", "mcp-google-tagmanager@latest"],
      "env": {
        "GOOGLE_TAGMANAGER_CLIENT_ID": "your_client_id",
        "GOOGLE_TAGMANAGER_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_TAGMANAGER_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

In those builds, save it to ~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%\Claude\claude_desktop_config.json on Windows.

Claude Desktop MCP documentation

Add a user-level server to ~/.cursor/mcp.json on macOS/Linux or %USERPROFILE%\.cursor\mcp.json on Windows:

{
  "mcpServers": {
    "google-tagmanager": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "mcp-google-tagmanager@latest"],
      "env": {
        "GOOGLE_TAGMANAGER_CLIENT_ID": "your_client_id",
        "GOOGLE_TAGMANAGER_CLIENT_SECRET": "your_client_secret",
        "GOOGLE_TAGMANAGER_REFRESH_TOKEN": "your_refresh_token"
      }
    }
  }
}

Cursor MCP documentation

Run MCP: Open User Configuration from the Command Palette and add:

{
  "servers": {
    "google-tagmanager": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "mcp-google-tagmanager@latest"],
      "env": {
        "GOOGLE_TAGMANAGER_CLIENT_ID": "${input:gtm_client_id}",
        "GOOGLE_TAGMANAGER_CLIENT_SECRET": "${input:gtm_client_secret}",
        "GOOGLE_TAGMANAGER_REFRESH_TOKEN": "${input:gtm_refresh_token}"
      }
    }
  },
  "inputs": [
    { "type": "promptString", "id": "gtm_client_id", "description": "Google OAuth client ID" },
    { "type": "promptString", "id": "gtm_client_secret", "description": "Google OAuth client secret", "password": true },
    { "type": "promptString", "id": "gtm_refresh_token", "description": "Google OAuth refresh token", "password": true }
  ]
}

Check it with MCP: List Servers.

VS Code MCP documentation

What you can ask it to do

Understand the current setup

  • List the GTM accounts and containers I can access.
  • Which tags fire on page view in this workspace?
  • Show the trigger and variable configuration for this tag.
  • Which built-in variables are enabled?

Prepare tracking changes in a draft

  • Create a workspace for the checkout tracking change.
  • Prepare a GA4 tag and a trigger for a specific event.
  • Enable the click variables needed for this trigger.
  • Update this tag after showing me the complete replacement configuration.

Release a version deliberately

  • Compile this workspace into a version named April release.
  • Show the compiler errors, if any.
  • Publish version 42 after I confirm the version and its changes.

How GTM changes are connected

GTM has a clear release path:

  1. An account contains one or more containers.
  2. A container has workspaces for draft changes.
  3. Tags, triggers and variables belong to a workspace.
  4. Compiling a workspace creates a container version and removes the source workspace. GTM provides a replacement workspace.
  5. Publishing makes a selected container version live.

This server can inspect each step. It does not treat a draft as a release: version creation and publishing are separate operations.

What can change

OperationWhat happensConfirmation boundary
List accounts, containers, workspaces, tags, triggers, variables and versionsReads GTM configurationNo change
Create a container or workspaceAdds a new GTM objectChanges GTM
Create a tag, trigger or variableAdds a draft object to a workspaceChanges a draft workspace
Enable or disable built-in variablesChanges the workspace configurationChanges a draft workspace
Update a tag, trigger or variableReplaces the complete resource, protected by its fingerprintPotentially destructive
Delete a tag, trigger or variableRemoves the selected objectDestructive
Compile a workspaceCreates a version and deletes the source workspaceDestructive
Publish a versionMakes a selected version liveDestructive
Raw API requestCan call API methods without a dedicated toolPotentially destructive

The AI client decides how it asks for confirmation. The server marks read-only, write and destructive operations so the client can distinguish inspection from a real change.

Getting access

The server uses Google OAuth 2.0. Google Tag Manager does not provide API keys for this user data.

  1. Create or select a Google Cloud project and enable the Tag Manager API. A project without that API enabled receives no quota.

  2. Configure the OAuth consent screen and create an OAuth client. A Desktop app client is suitable for local use.

  3. Authorize your Google account and obtain a refresh token. The OAuth 2.0 Playground can do this if you enable Use your own OAuth credentials.

  4. Request these scopes together:

    https://www.googleapis.com/auth/tagmanager.readonly
    https://www.googleapis.com/auth/tagmanager.edit.containers
    https://www.googleapis.com/auth/tagmanager.edit.containerversions
    https://www.googleapis.com/auth/tagmanager.publish
    

The scopes are separate: reading, editing, compiling versions and publishing each need their corresponding permission. Treat the client secret and refresh token as passwords.

Configuration

VariableRequiredDescription
GOOGLE_TAGMANAGER_CLIENT_IDYes*OAuth client ID.
GOOGLE_TAGMANAGER_CLIENT_SECRETYes*OAuth client secret.
GOOGLE_TAGMANAGER_REFRESH_TOKENYes*OAuth refresh token.
GOOGLE_TAGMANAGER_ACCESS_TOKENYes*Short-lived alternative to the OAuth trio.
GOOGLE_TAGMANAGER_API_BASENoTag Manager API base URL override.
GOOGLE_TAGMANAGER_TIMEOUT_MSNoPer-request timeout; default 60000 ms.
GOOGLE_TAGMANAGER_MAX_RETRIESNoMaximum retries on temporary failures; default 3.
GOOGLE_TAGMANAGER_MIN_INTERVAL_MSNoMinimum request spacing; default 4200 ms.

* Provide either the OAuth trio or an access token. Access tokens expire in about an hour and are not refreshed automatically.

Data and telemetry

The server runs locally and sends GTM API requests and OAuth refresh requests to Google. Its anonymous telemetry contains a random installation ID, package version, AI client and Node.js/operating-system versions, and tool names. It does not send OAuth tokens, GTM data, tool arguments or prompts.

Disable telemetry for A1 MCP servers with:

ASKADS_TELEMETRY=0

Limits and background work

  • GTM is rate-limited. The API allows 0.25 requests per second per project, so the server serializes calls at least 4.2 seconds apart. Broad audits can therefore take time.
  • Temporary limits are retried carefully. 429 and Google quota 403 responses use exponential backoff and Retry-After. Reads retry after network and 5xx failures; writes are not replayed after an uncertain failure.
  • There is no background monitoring. The server runs only when your AI app calls it. If the app supports scheduled tasks, it can periodically inspect a container or its live version.
  • A workspace disappears when compiled. Before calling create_version, save anything you need from the workspace and inspect the returned replacement workspace path.

Technical documentation

Support

Found a bug or need a scenario? Create an issue or write in Telegram.

Reviews

No reviews yet

Be the first to review this server!