klaviyo-developer

klaviyo-developer is a cursor rule for Cursor from thatrebeccarae/claude-marketing. It costs 82 tokens per session (4,346 once invoked), scanned A, original, MIT.

A guide to building software integrations with Klaviyo, a platform for customer profiles, email, and text-message marketing. It covers the Klaviyo API, software development kits, webhooks, event tracking, and catalog data.

In plain words
What is it for?
Use it to track customer actions, manage profiles, handle webhooks, synchronize product catalogs, and build scheduled or production data pipelines.
Why use it?
It helps developers choose the right way to connect an application to Klaviyo and avoid common integration problems such as incorrect event data or missed webhook events.

Cursor rule for Cursor

Written for Cursor: a Cursor rule (.mdc).

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is python scripts/klaviyo_client.py --action track-event \.

Good fit Use it to track customer actions, manage profiles, handle webhooks, synchronize product catalogs, and build scheduled or production data pipelines.

Compare 6 cursor rules from other repositories ↓
Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/thatrebeccarae/claude-marketing
agentmods
npx agentmods add rules/thatrebeccarae/claude-marketing/klaviyo-developer

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for klaviyo-developer

README.md
[![agentmods](https://agentmods.dev/badge/rules/thatrebeccarae/claude-marketing/klaviyo-developer/github.svg)](https://agentmods.dev/rules/thatrebeccarae/claude-marketing/klaviyo-developer)
Your own site
<a href="https://agentmods.dev/rules/thatrebeccarae/claude-marketing/klaviyo-developer"><img src="https://agentmods.dev/badge/rules/thatrebeccarae/claude-marketing/klaviyo-developer/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for klaviyo-developer

Your own site · 80×15
<a href="https://agentmods.dev/rules/thatrebeccarae/claude-marketing/klaviyo-developer"><img src="https://agentmods.dev/badge/rules/thatrebeccarae/claude-marketing/klaviyo-developer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 82 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 4,346 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00082 $0.04346
Opus 5 $0.00041 $0.02173
Sonnet 5 $0.00016 $0.00869
Haiku 4.5 $0.00008 $0.00435

Measured 9d ago against content hash 474077e6cc4a, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

klaviyo-developer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

integrations/cursor/klaviyo-developer.mdc · 377 lines

How it starts

The opening of the file, as written. The whole thing — 377 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Klaviyo Developer

Expert-level guidance for building with the Klaviyo API — custom event tracking, profile management, SDK integration, webhooks, catalog sync, and data pipeline architecture.

For marketing strategy, flow auditing, segmentation, deliverability, and campaign optimization, see the klaviyo-analyst skill.

MCP vs. SDK: When to Use Which

This skill is SDK-first by design — you're building production integrations against the Klaviyo API, not running ad-hoc queries. That said, Klaviyo's official MCP server is the right tool for parts of integration work, and you should know when to reach for it.

Use the SDK (klaviyo-api) when… Use the MCP (https://mcp.klaviyo.com/mcp) when…
Writing production event-tracking code Exploring an account's event schema before writing the integration
Building bulk import / sync pipelines Sanity-checking that events landed with the right property shape
Implementing webhook handlers Pulling a quick property inventory during integration design
Catalog sync jobs Inspecting flow trigger conditions while debugging why an event isn't firing a flow
Anything in CI, cron, or a deployed service Iterating on event schema design with the marketing analyst in the room

The MCP wraps the same API this skill targets, so the schema rules, rate limits, and nesting constraints below apply equally to MCP-driven calls. The MCP is currently pinned to API revision 2026-04-15 — keep that in mind if you're versioning your own SDK code against an older revision.

For the full MCP tool inventory, OAuth setup, and read-only mode flag, see REFERENCE.md. For audit/analyst work, see the klaviyo-analyst skill — it's built around the MCP.

Core Capabilities

API Authentication & Versioning

  • Private API key setup and key management best practices
  • Public API key usage for client-side tracking (klaviyo.js)
  • OAuth 2.0 authorization flow for third-party apps
  • API revision headers and version lifecycle management

Read the full file on GitHub · 377 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 377 lines · 82 tokens per session scan A 474077e6cc4a

Subscribe to this mod's changes

klaviyo-developer is a cursor rule published in the GitHub repository thatrebeccarae/claude-marketing (133 stars, last pushed 3mo ago), licensed MIT. It adds 82 tokens to every session and 4,346 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.