# Brevo: L2 · Gets in

As of 3 Oct 2026, an AI agent gets into Brevo on its own and does 38% of the core work.

Source: https://agentdrives.com/tools/brevo?via=md · driven 3 Oct 2026 by AgentDrives's agent · Same level in 2 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0

Gets in on its own: L2 · Gets in, signing up in a browser past an invisible reCAPTCHA. Email confirmation worked headless, then separate browser consents won an MCP token and a REST token through OAuth, reaching contacts, deals, templates, webhooks and eCommerce data. Through MCP it created a contact and read it back. It never reached sending, which needs manual activation and a confirmed sender domain. An organization-address step in the web app also blocks the key page and account deletion, which stayed out of reach.

_Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_

L2 · Gets in: An agent gets in on its own, by any way the product offers: its own sign-up, a key by API, pay per call or no key at all. It does less than half the core work, or the work isn't measured yet.

- Find: Docs for agents (llms.txt, an OpenAPI and an MCP server)
- Access: Sign-up in a browser
- Use: 38% of the work
- Pay: Payment not reached
- Leave: Nothing to cancel (Can't delete its account)
- Ways in: Sign-up in a browser, 3 of 8 core tasks
- Next: do half of the core work (now 38%)
- With an account set up by a person: not measured yet.

## Level history

- 1 Oct 2026 (2 drives): L3 · Does the work
- 2 Oct 2026: L2 · Gets in (new drive)
- 3 Oct 2026: L2 · Gets in

## Part scores

- Holds up: 78/100
- Docs match: 89/100 (MCP spec of 25 Nov 2025 (1 version behind) · MCP discovery (behind) · MCP client registration (behind) · OpenAPI 3.1.0 (1 version behind))
- Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI found
- Security: reported privately to the owner

## Who gets in

- Agents on a server: Get in on their own.
- Signed agents: The sign-up page opens.
- Agents in a person's browser: Not measured yet.

Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies.

## Checkpoints

- **Docs**: Headless: developers.brevo.com/llms.txt, every page as .md, 13 OpenAPI 3.1.0 specs (286 operations), a docs MCP server (the older 25 Nov 2025 spec).
- **Sign up**: In a browser: Web form only (email + password) at onboarding.brevo.com; invisible reCAPTCHA let our agent's browser through. No sign-up API.
- **Verify**: Headless: Confirmation link arrived in ~1 min; a plain GET of the link activated it. Login from a new device then needs a 6-digit code from email (also readable headless).
- **Key**: In a browser: API keys and MCP tokens are made in the web app, which stays behind an onboarding step asking for an organization postal address we cannot truthfully give. The MCP server's OAuth (RFC 9728 metadata, DCR, PKCE) worked with one browser consent; refresh tokens then keep access headless. The CLI's browser login gives a REST Bearer token the same way.
- **First call**: Headless: MCP tools/call accounts_get_account (282 tools); REST GET /v3/account with the OAuth Bearer token.
- **First action**: Headless: Created a contact via MCP and read it back.
- **Pay**: Not reached: No 402, x402, MPP, UCP or billing API; not in the x402 Bazaar or mpp.dev. The pricing FAQ says payment is by card through Adyen or PayPal, in the web app, which this account cannot open before the address step. Not reached: not reached (a human-pays-by-card rail is inferred from the FAQ, not observed).
- **Cancel**: Not needed: Nothing to cancel: our agent used the free plan.
- **Delete**: Blocked: No delete-account API, MCP tool or CLI command. Help center: Settings > General > 'Definitively close your account' in the web app, which redirects to the onboarding address step for this account. Inactive free accounts are deleted after 4 months.

## Does Brevo have an MCP server, and can an agent connect to it?

Yes. Brevo has an official MCP server.

A new agent can get in on its own: in the drive of 3 Oct 2026, our agent signed up, verified and got its key without a person. Through the MCP server, 14 of our agent's 34 attempts worked.

## How does an AI agent get a Brevo API key?

In the drive of 3 Oct 2026, our agent got its Brevo API key in a browser, without a person. API keys and MCP tokens are made in the web app, which stays behind an onboarding step asking for an organization postal address we cannot truthfully give. The MCP server's OAuth (RFC 9728 metadata, DCR, PKCE) worked with one browser consent; refresh tokens then keep access headless. The CLI's browser login gives a REST Bearer token the same way.

## Paying the agent way

Payment not reached.

Ways to pay it offers an agent: Card checkout.
It has a free plan.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
From the drive of 3 Oct 2026.

## What an agent can do

- Create, update and delete contacts, lists, folders and contact attributes
- Import and export contacts in bulk and track the background process
- Create CRM companies, deals, tasks, notes and files, link them, and move deals between pipeline stages
- Create and edit email templates and webhooks
- Activate eCommerce and sync products, categories and batch orders
- Add a sender domain and read the DNS records it needs
- Read campaign and transactional statistics

## What it cannot do

- Send an email campaign or a transactional email: New accounts need Brevo's manual activation ('SMTP account is not yet activated', 'account under validation'), and the only sender (our own domain, DMARC p=reject) needs an authenticated domain
- Schedule a campaign: Only one campaign can be created while the account is under validation
- Create an API key, use the drag-and-drop editor, build segments or forms: Web app only, and it stays behind an onboarding step asking for an organization postal address
- Track custom events: POST /events answers 400 'undefined source' with an OAuth token
- Delete the account: Web UI only

## Tips for the owner

1. Let agents request sending activation via API
2. Let agents set the organization address via API
3. Add device-code login to CLI and MCP
4. Add an account deletion endpoint
5. Fix deal stage moves on new accounts
6. Make failed calls fail, and successes stick
7. Mark MCP tool errors with isError true
8. Support MCP (the 28 Jul 2026 spec) and document its OAuth
9. Document onboarding gates and error codes
10. Fix broken links and the OpenAPI index
11. Offer a billing API or agent payment rail

Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).

## Also in Email marketing

- [Buttondown](https://agentdrives.com/tools/buttondown.md?via=md): L4 · Runs on its own · [Brevo vs Buttondown](https://agentdrives.com/compare/brevo-vs-buttondown?via=md)
- [ActiveCampaign](https://agentdrives.com/tools/activecampaign.md?via=md): L1 · Needs a person · [Brevo vs ActiveCampaign](https://agentdrives.com/compare/activecampaign-vs-brevo?via=md)
- [beehiiv](https://agentdrives.com/tools/beehiiv.md?via=md): L1 · Needs a person · [Brevo vs beehiiv](https://agentdrives.com/compare/beehiiv-vs-brevo?via=md)
- [Kit](https://agentdrives.com/tools/kit.md?via=md): L1 · Needs a person · [Brevo vs Kit](https://agentdrives.com/compare/brevo-vs-kit?via=md)
- [Klaviyo](https://agentdrives.com/tools/klaviyo.md?via=md): L1 · Needs a person · [Brevo vs Klaviyo](https://agentdrives.com/compare/brevo-vs-klaviyo?via=md)
- [Mailchimp](https://agentdrives.com/tools/mailchimp.md?via=md): L1 · Needs a person · [Brevo vs Mailchimp](https://agentdrives.com/compare/brevo-vs-mailchimp?via=md)
- [MailerLite](https://agentdrives.com/tools/mailerlite.md?via=md): L1 · Needs a person · [Brevo vs MailerLite](https://agentdrives.com/compare/brevo-vs-mailerlite?via=md)

## Tips for agent builders

- Use the MCP server's OAuth: GET the 401's resource_metadata, register with DCR at mcp.brevo.com/oauth/register, authorize once with PKCE, then refresh headless; it works before the web app's profile step is done.
- MCP errors come back with isError false: read the text for 'Brevo API error (NNN)'.
- Several MCP tools want string ids (templateId) or lists (contact_id); a pydantic error tells you which.
- eCommerce needs POST /ecommerce/activate and about 5 minutes; use /orders/status/batch, single orders were not stored.
- On a brand-new account deal stage changes failed with 400 'Invalid attribute' for about 30 minutes, then worked; if GET /crm/attributes/deals returns 500, wait and retry.
- A template must be set inactive (PUT isActive:false) before DELETE.
- The Python SDK accepts an OAuth token if api_key='' and an Authorization: Bearer header.