google-tag-manager-mcp

A Model Context Protocol (MCP) server for the Google Tag Manager API, built for personal use with Claude Desktop and Claude Code.

Runs as a local stdio subprocess — no hosted server, no OAuth proxy, no Docker. Auth is handled once via a browser flow and tokens are stored locally.

Built by Max Västhav Derived from paolobietolini/gtm-mcp-server (MIT) — the original HTTP server with OAuth proxy was rewritten as a stdio-based personal-use server.

What you can do

Once connected, Claude can read and manage your entire GTM workspace through natural language.

50 Tools

Reading data

Creating & updating

Publishing

Deleting (all require confirm: true)

Utility

6 Resources

URI-based read access to live GTM data:

• gtm://accounts — All accounts
• gtm://accounts/{accountId}/containers — Containers in an account
• gtm://accounts/{accountId}/containers/{containerId}/workspaces — Workspaces
• gtm://accounts/{accountId}/containers/{containerId}/workspaces/{workspaceId}/tags — Tags
• gtm://accounts/{accountId}/containers/{containerId}/workspaces/{workspaceId}/triggers — Triggers
• gtm://accounts/{accountId}/containers/{containerId}/workspaces/{workspaceId}/variables — Variables

4 Prompts

Guided multi-step workflows Claude can follow:

Setup

Prerequisites

• Go 1.24+ — install from go.dev/dl
• A Google Cloud project with the Tag Manager API enabled
• OAuth 2.0 credentials (Desktop app type)

1. Clone and build

git clone https://github.com/VasthavM/google-tag-manager-mcp
cd google-tag-manager-mcp
go build -o google-tag-manager-mcp .

2. Create Google Cloud credentials

1. Go to Google Cloud Console → APIs & Services → Enable APIs and Services
2. Search for Tag Manager API and enable it
3. Go to APIs & Services → Credentials → Create Credentials → OAuth client ID
4. Choose Desktop app as the application type
5. Download the JSON file

3. Save your credentials

mkdir -p ~/.config/google-tag-manager-mcp
cp ~/Downloads/client_secret_*.json ~/.config/google-tag-manager-mcp/credentials.json

4. Authenticate (one-time browser flow)

./google-tag-manager-mcp

The server will print a URL. Open it in your browser, grant GTM access, and the token is saved automatically to ~/.config/google-tag-manager-mcp/token.json. After that, the server starts up — you can close it with Ctrl+C.

Tokens refresh automatically. You won't need to repeat this unless you revoke access.

5. Register with Claude Code

claude mcp add --scope user google-tag-manager /path/to/google-tag-manager-mcp

Or for Claude Desktop, add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "google-tag-manager": {
      "command": "/path/to/google-tag-manager-mcp"
    }
  }
}

Configuration

Security

• credentials.json and token.json are listed in .gitignore and must never be committed
• The token file is stored with 0600 permissions (owner read/write only)
• All destructive operations (delete_*, disable_built_in_variables, publish_version) require an explicit confirm: true parameter
• All update operations use fingerprint-based concurrency control to prevent accidental overwrites

Attribution

The GTM API client, tool handlers, resources, and prompts are derived from paolobietolini/gtm-mcp-server (MIT License).

This fork rewrites the transport layer: the original HTTP server with OAuth 2.1 proxy (designed for hosted multi-user deployment) is replaced with a stdio transport and local OAuth2 browser flow, making it suitable for personal use with Claude Desktop and Claude Code.

License

MIT — see LICENSE.