{"id":17821,"date":"2026-09-13T09:20:00","date_gmt":"2026-09-13T07:20:00","guid":{"rendered":"https:\/\/www.lukaswojcik.com\/blog\/?p=17821"},"modified":"2026-10-25T21:26:28","modified_gmt":"2026-10-25T20:26:28","slug":"connecting-claude-code-to-google-tag-manager-three-mcp-integrations-and-their-limits","status":"publish","type":"post","link":"https:\/\/www.lukaswojcik.com\/blog\/en\/cloud-ai\/connecting-claude-code-to-google-tag-manager-three-mcp-integrations-and-their-limits\/","title":{"rendered":"Connecting Claude Code to Google Tag Manager: Three MCP Integrations and Their Limits"},"content":{"rendered":"

An AI assistant can prepare a Google Tag Manager tag for completed purchases. The integration needs access to the correct container. A container groups tags, triggers and variables; a JSON export describes those settings as text. Access rights matter more than the number of available tools.<\/p>\n

This comparison covers three MCP packages. MCP is a protocol through which an assistant can call tools. The original measurement dated 9 September 2026 reports tool counts and response sizes for specific package versions. The original raw logs are unavailable for this review. Those figures remain labelled as historical reports; current API rules and package source code were checked separately.<\/p>\n

\"Google
Google scopes, account permissions and Claude Code rules check different parts of access. Tool-list size does not directly measure context use.<\/figcaption><\/figure>\n

Tools, direct API calls and skills<\/h2>\n

An MCP server might offer a tool for reading a tag. Claude Code sends the arguments, the server calls the Tag Manager API, and the result comes back. A local server can communicate through its process input and output, called stdio<\/code>; a remote server can use HTTP.<\/p>\n

A direct curl<\/code> request needs no MCP server. The API address, access token and data format still need to be correct. Instructions and results consume context through this route too. An access token is a time-limited credential; its OAuth scopes specify the requested kinds of access.<\/p>\n

A skill can include instructions, checks and helper scripts. Claude Code skill settings can also pre-approve tool calls. A skill does not create missing Google permissions. The actual tools, credentials and account permissions still determine the available access.<\/p>\n

What the historical sizes mean<\/h2>\n\n\n\n\n\n\n\n
Historical figures from 9 September 2026; raw logs not available for this review.<\/caption>\n
Package version<\/th>\nReported tools<\/th>\nReported tools\/list bytes<\/th>\n<\/tr>\n<\/thead>\n
google-tag-manager-mcp-server 5.1.1<\/code><\/td>\n18<\/td>\n108201<\/td>\n<\/tr>\n
gtm-mcp 1.0.0<\/code><\/td>\n104<\/td>\n49656<\/td>\n<\/tr>\n
@theethosteam\/gtm-mcp 1.1.1<\/code><\/td>\n33<\/td>\n19797<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

The byte figures describe the originally reported tools\/list<\/code> response: the descriptions of all offered tools. A definition includes its name, description and input fields. A few tools can therefore require more text than many small tools.<\/p>\n

The original comparison describes the first server as a collection of tools by entity type: gtm_tag<\/code>, for example, combines reading and editing through an action<\/code> parameter. The second separates substantially more API calls into individual tools. The checked third package source confirms task recipes and gtm_raw<\/code> for direct API methods.<\/p>\n

The earlier figures of roughly 27,000, 12,400 and 4,900 tokens are only rough estimates from byte size, not measurements with a particular model\u2019s tokenizer. Tokens are the text units processed by a model. JSON formatting, character encoding and the tokenizer affect the result.<\/p>\n

Claude Code can now use tool search to load MCP definitions when needed. Not every complete definition therefore enters every model request automatically. Settings, client version and platform determine the actual behavior. A 108,201-byte tool list establishes neither a fixed context footprint nor a fixed price per turn.<\/p>\n

Prompt caching can reduce the price of repeated inputs that have already been loaded. A cache hit does not reduce the number of context tokens processed. Hits, cache-writing costs and savings depend on the model, request and cache configuration. Actual usage figures are more useful for cost comparisons than byte estimates.<\/p>\n

Drafts and publication<\/h2>\n

The public API description retrieved on 25 October 2026 has revision 20261021<\/code>. The document contains 270,858 bytes and 106 methods: 38 GET, 38 POST, 15 PUT and 15 DELETE. This counts API methods, not an MCP server\u2019s tools.<\/p>\n

A workspace is a draft inside a container. Editing its tag configuration does not automatically replace the published default version. Typically, workspaces.create_version<\/code> first creates a version, and versions.publish<\/code> publishes one. Preview and custom environments require separate consideration.<\/p>\n

This workflow does not make other API permissions harmless. Deleting containers, changing user permissions and editing environments are not merely tag drafts. Exactly two methods use the tagmanager.publish<\/code> scope in the checked discovery document. This does not mean every other method lacks consequences for a running system.<\/p>\n

Reading workspace tags and the published version<\/h2>\n

Listing a workspace\u2019s tags requires its ID. The published version can instead be read through versions:live<\/code>; that response also contains the version\u2019s tags. The following example only reads data. IDs and token stand for values from an authorized setup.<\/p>\n

# Example IDs; TOKEN must contain an authorized access token.\nACC=6012345678\nCONT=123456789\nWS=42\n: "${TOKEN:?Access token required}"\n\n# Draft tags in one workspace\ncurl --silent --show-error --fail-with-body \\\n  --connect-timeout 10 --max-time 30 \\\n  -H "Authorization: Bearer $TOKEN" \\\n  "https:\/\/tagmanager.googleapis.com\/tagmanager\/v2\/accounts\/$ACC\/containers\/$CONT\/workspaces\/$WS\/tags"\n\n# Published version, including its tags; no workspace ID\ncurl --silent --show-error --fail-with-body \\\n  --connect-timeout 10 --max-time 30 \\\n  -H "Authorization: Bearer $TOKEN" \\\n  "https:\/\/tagmanager.googleapis.com\/tagmanager\/v2\/accounts\/$ACC\/containers\/$CONT\/versions:live"\n<\/code><\/pre>\n
A missing or expired token and insufficient permissions can produce different errors. One error message is not a guarantee for every API method. --fail-with-body<\/code> exposes HTTP errors through the exit code while retaining the response body; it requires a suitable curl version.<\/p>\n
Three checks on access<\/h2>\n
First, the access token needs the required OAuth scope. Second, the associated Google account needs the appropriate Tag Manager permissions. A publishing scope alone does not grant publishing access to an account without that permission. Both checks apply outside Claude Code too.<\/p>\n
Third, Claude Code can block particular tool calls or request approval. A rule for mcp__gtm__gtm_version<\/code> applies to that tool. A PreToolUse<\/code> hook can also inspect input fields such as action<\/code>. A hook is a script that returns a decision before the call.<\/p>\n
A tool-name rule does not control a separate curl<\/code> call. If the same credentials are accessible through the shell, Google scopes and account permissions still apply there, but that MCP name rule does not. An unrestricted raw-call tool can also substitute for blocked specialized tools. All reachable routes need to be considered together.<\/p>\n
GTM_SCOPES does not affect every authentication mode<\/h2>\n
The checked CLI version google-tag-manager-mcp-server@5.1.1<\/code> uses a version range for its core package starting at 2.1.1. In the specifically inspected core 2.1.1, GTM_SCOPES<\/code> reaches token generation only for service-account authentication. Without an explicit selection, seven Tag Manager scopes are requested.<\/p>\n
In the refresh-token or access-token branch, the same environment variable does not change existing permissions. Restriction requires a Google credential with the intended scope. The configuration below illustrates only the service-account variant. The key is a placeholder; real keys do not belong in a public repository.<\/p>\n
In this configuration, Claude Code expands ${GTM_SERVICE_ACCOUNT_KEY}<\/code> from its environment. The value must be the complete service-account key JSON, not a path to a file. The account also needs the appropriate Tag Manager access.<\/p>\n
{\n  "mcpServers": {\n    "gtm": {\n      "command": "npx",\n      "args": [\n        "-y",\n        "google-tag-manager-mcp-server@5.1.1"\n      ],\n      "env": {\n        "GOOGLE_SERVICE_ACCOUNT_KEY": "${GTM_SERVICE_ACCOUNT_KEY}",\n        "GTM_SCOPES": "https:\/\/www.googleapis.com\/auth\/tagmanager.readonly"\n      }\n    }\n  }\n}<\/code><\/pre>\n
A fixed CLI version makes the comparison easier to reproduce, but does not automatically fix every dependency version. Exact reproduction also requires a recorded dependency resolution. The different MCP packages additionally use different credential names and authentication procedures.<\/p>\n
Changes without accidental data loss<\/h2>\n
An update starts by reading the current object. The intended field is then changed and the complete object required by that method is sent. A PUT request is not automatically a partial addition. The particular method and server determine which fields may be omitted.<\/p>\n
A fingerprint<\/code> identifies the object state that was read. The API makes this check optional for tags.update<\/code>. If the previous fingerprint is supplied after the stored value has changed, the values no longer match. Without supplying it, that protection is absent. A matching fingerprint still does not prove that a tag configuration is logically correct.<\/p>\n
Tag parameters can contain lists and nested objects. A measurement ID, variable reference and tag reference are different values. A current export of the correct tag type is therefore a better starting point than an arbitrary GA4 JSON example. Referenced variables and triggers must also exist in the target container.<\/p>\n
Browser checks and change descriptions<\/h2>\n
quick_preview<\/code> creates a preview version. The call does not open a website or prove that a purchase event arrives at the right time. Browser checks need to cover triggers, data-layer values and consent states. An additional browser integration can help, but an API call alone does not perform those checks.<\/p>\n
A version name and description can record the reason for a change. Those details do not arise automatically from a prompt and can also be changed later through version management. Exports before and after the change additionally show the actual difference. Comparing them needs no further Google credentials once both files are available.<\/p>\n
\n
Questions and answers<\/h2>\n
Is a smaller tool list always better?<\/h3>\n
No. Short definitions can provide less guidance about valid inputs. Detailed definitions can prevent mistakes. The task, description quality and actually loaded context matter. No fixed API response time follows from the size.<\/p>\n
Can one tool both read and publish?<\/h3>\n
Yes. When actions are bundled, a name-only rule may block both. Checking the action parameter is more precise, but must match the installed server version. A separate publishing tool is easier to block individually.<\/p>\n
Why use a separate workspace?<\/h3>\n
A separate draft groups related changes and makes review or disposal easier. Changes from other workspaces can still require synchronization and conflict resolution. workspaces.sync<\/code> supports that synchronization. The number of simultaneous workspaces available depends on the Tag Manager offering.<\/p>\n
What does a failed package start prove?<\/h3>\n
A startup error about missing database or key configuration initially establishes only that the attempted start lacked prerequisites. It does not establish that the package can never run locally. Package documentation and required services determine the deployment options.<\/p>\n<\/div>\n
Sources<\/h2>\n