Marketing automation is handing operation to agents, while its two fastest feeds build elsewhere

The week in marketing-automation

The whole sector spent the week teaching its software to be operated by an agent rather than a person. Customer.io put its AI agent inside Slack; AWeber and Flodesk shipped Claude and ChatGPT connectors that answer questions against live account data; Sender and Kit stood up MCP servers; MailerLite packaged its know-how as an installable agent skill; Formaloo let a project be created from inside ChatGPT or Claude; and Formidable Forms wired itself into WordPress's Abilities API with an MCP adapter. Read together, the changelogs describe one move made a dozen ways: the dashboard is no longer assumed to be the front door.

The interesting part is where the products diverge once the door is open. Most connectors are read-only — Flodesk spends its announcement on what the assistants cannot do — while Kit's MCP has crossed into producing published output, and Gumloop lets any inbound webhook start an unattended run. MailerLite went further than access and shipped a policy: its skill tells an agent to create drafts, confirm audience size, refuse purchased lists and never re-add unsubscribes. Against all of it, the two highest-velocity feeds in the sector — Pushwoosh and Mailtrap — are building something else entirely.

Leaders

Customer.io is the clearest expression of the week's pattern: its AI agent now runs in Slack, reachable with an @-mention in the thread where campaigns already get discussed, and reusable knowledge sources moved prompt context into a workspace library the agent draws on. Underneath, the journey builder keeps gaining expressiveness — a rebuilt Wait Until block folds chains of wait steps, time windows and nested And/Or groups into one. Timing is becoming a first-class control rather than something assembled from primitives.

MailerLite shipped the sharpest version of the agent idea: not an API key but an installable email-marketing skill, distributed to Claude, Cursor and roughly seventy tools, that encodes how an agent may send mail — drafts first, verified senders only, no purchased lists. It is an opinion about agent behaviour, not just an access path, and it is the one entry this week that treats sending guardrails as the product itself.

Kit shows where read-only connectors are heading. Its MCP crossed from querying a creator's list to building and editing landing pages, turning the agent from analyst into author — the payoff for a June editor rebuilt around plug-and-play sections an agent can compose. The rest of the window was ordinary subscriber-page cleanup, which reads as consolidation around that jump rather than a new direction.

Pushwoosh carries the sector's top velocity by ignoring the agent story. A spark let journeys read a webhook's response mid-run and act on it, while a larger wave pulled Shopify storefront events — product views, add-to-cart, checkout — into the platform and began reporting revenue per product. Having added a Product Catalog, Pushwoosh is now collecting the behaviour that catalog is meant to act on; triggered abandoned-cart and browse-abandonment journeys are the obvious next assembly.

Mailtrap is the other high-velocity outlier, hardening the trust layer around a now-complete email lifecycle. With local development, sending, Inbound receiving and Automated Domain Reputation Monitoring all in place, recent work targets abuse: a recipient-domain allowlist to cap a stolen credential's blast radius, and lightweight domain verification to keep legitimate white-label senders from being suspended. Both currently run through support tickets rather than the dashboard.

Wildcards

Formidable Forms shows the messy side of the agent land-grab. Its Forms API 2.0 exposed forms and entries through the WordPress Abilities API and an MCP adapter — then a patch a week later had to make that adapter coexist with older ones bundled inside WooCommerce and Rank Math. Multiple plugins are already competing to own the agent surface in a single install, and each new access path is arriving paired with a permissions tightening.

Optimove is quietly rebuilding itself as an API surface while the sector chases assistants, and gamification is where the work lands: new Gamify endpoints for gameplay limits and campaign participation tokens, plus preference-center and data-share schema versions. It is platform plumbing aimed at developers, not a conversational front door.

Themes that compounded

• Assistant connectors and MCP servers were table stakes this week, shipped by Customer.io, AWeber, Flodesk, Sender, Kit and Formaloo.
• The frontier moved from read to write: Kit builds pages and Gumloop starts unattended runs from any inbound webhook.
• MailerLite reframed the question from access to policy, encoding sending rules into the agent skill itself.
• Commerce data, not list data, drove the non-agent work at Pushwoosh and GetResponse.
• Trust and containment shipped alongside exposure at Mailtrap and Formidable Forms.

Watch this week

The open question every connector left unanswered is write access. Flodesk and Sender named subscriber management and campaign creation as the next phase; AWeber's connector already analyses automations message by message and only needs permission to act on what it finds. Watch whether any of them lets an assistant change a live campaign unattended, and whether the sending guardrails MailerLite wrote into its skill stay advisory or get enforced server-side — because the moment write access lands, the gap between a suggestion and an enforced policy becomes the whole safety story.