--- title: "HubSpot MCP Server: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/mcp-servers/hubspot/ description: "Query CRM context and perform permission-scoped CRM, content and marketing changes." --- # HubSpot MCP Server: review, setup & limitations · Undominated.ai > Query CRM context and perform permission-scoped CRM, content and marketing changes. [← Explore all mcp servers](/mcp-servers/) BUSINESS SYSTEMS AND DEVELOPMENT / HubSpot # HubSpot MCP Server Query CRM context and perform permission-scoped CRM, content and marketing changes. [See setup guidance ↓](#setup)[Original source ↗](https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server) SOURCE REVIEW Reviewed 2026-10-14 Evidence 2 linked sources Publisher HubSpot Licence Not established [Read what was—and wasn’t—checked ↓](#review) “… this remote server acts as a bridge between AI systems and HubSpot’s APIs …” [HubSpot · upstream description ↗](https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - Official hosted integration with documented authentication and account permissions. - Investigate a bounded set of deals or customer records and their associated activities. - HubSpot’s developer page says the remote MCP server acts only within the connecting user’s existing permissions, and that OAuth uses PKCE. - The product page says the CRM server can read and write standard records but does not allow access to custom sensitive-data properties. ### A good fit for - Investigate a bounded set of deals or customer records and their associated activities. - Prepare a proposed CRM or content update and verify the selected account before execution. - Reading or updating HubSpot CRM records the connected user can already access - Not for reading custom sensitive-data properties, which the product page says are not available ### Weigh up before choosing - The current server can create/edit CRM records and create, edit or publish content. It also exposes other administrative/content writes according to granted permissions. - When HubSpot Sensitive Data is enabled, activity and conversation data are blocked through this MCP even where standard APIs differ. - Connector scopes are determined by available tools and installation consent, not a manually defined static list; changed scopes can require reinstalling the connector. - CRM search is not vector search. Availability depends on subscription, account configuration and user permissions; inspect get_user_details rather than assuming every tool is enabled. - The product page says the HubSpot MCP server does not allow access to custom Sensitive Data Properties, including personal health information. - A client that does not handle PKCE has to implement it. The developer page does not say PKCE is optional. - No licence was stated on these pages, and none was inferred. - This review did not execute the resource. - The server was not called. - Quote/revenue features require additional optional scope and eligible subscription; a general CRM connection does not establish entitlement to every revenue tool. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server - https://developers.hubspot.com/ai-tools/mcp - Round 2 reread of acquired publisher setup and permission evidence; see immutable wave review. ### Our findings - The September 30 publisher guide documents current write surfaces and Sensitive Data restrictions; this record does not carry forward older read-only claims. - The remote CRM service is distinct from the local HubSpot developer MCP for building apps and CMS assets. - The integration guide says every action respects existing HubSpot user permissions, so users can only view and modify records they can already access. - OAuth uses PKCE for all authentication flows. If the client does not handle PKCE, the page says the integrator has to implement it. - The product page says the CRM MCP server provides read and write access to contacts, deals, and engagements, and that it does not allow access to custom sensitive-data properties, including personal health information. - Available scopes are determined by the server tools and user permissions, and existing installations must be reinstalled to approve newly introduced scopes. ### Not established by this review - Server startup, authentication, live tool execution and security isolation were not tested. - Published package/container parity with a source revision and hosted implementation internals were not tested. - The resource was not executed and its tools were not called. - The server was not called. A source review is not a runtime or security certification. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Connect a server deliberately. [Upstream setup instructions ↗](https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server) - Create an MCP connector under Development > MCP Connectors. Its scopes follow the server’s tools and the permissions the installing user grants. - Point the MCP client at https://mcp.hubspot.com and complete the OAuth flow with PKCE. - Review which tools are billable or tier-gated before enabling write tools. ### Before you start - A HubSpot account on the new Developer Platform. - An MCP client supporting OAuth 2.0 with PKCE. ### Compatibility MCP clients supporting remote Streamable HTTP servers with OAuth 2.0 and PKCE. · A HubSpot account on the new Developer Platform with an MCP connector. ### Transports Streamable HTTP ### CRM operations - Reads the CRM/content/activity data available to the authenticated user and account. - Granted tools can edit records, activities, pipelines, properties, segments, campaigns and publish content; account restrictions still apply. ### Cost model Publisher account entitlements and API usage limits apply separately from the MCP client and model subscription. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Publisher setup, capabilities and operating boundaries ↗](https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server) Checked 2026-10-14 https://developers.hubspot.com/docs/apps/developer-platform/build-apps/integrate-with-the-remote-hubspot-mcp-server Supports: summary, install, configExample, access, limitations, bestFor, review, compatibility, transports - [Publisher setup, capabilities and operating boundaries ↗](https://developers.hubspot.com/ai-tools/mcp) Checked 2026-10-14 https://developers.hubspot.com/ai-tools/mcp Supports: summary, install, configExample, access, limitations, bestFor, review, compatibility, transports KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### Attio MCP ↗ Attio's hosted MCP server giving AI tools secure access to the workspace: search, read, create and update people, companies, deals, tasks and notes, with meeting intelligence over call recordings and transcripts. OAuth as the Attio user; reads auto-approved, writes request confirmation.](/mcp-servers/attio/)[### Salesforce DX MCP ↗ A local Salesforce development connector scoped to explicitly authorized orgs, toolsets and individual tools.](/mcp-servers/salesforce/)[### Airtable MCP Server ↗ Hosted Airtable server exposing bases, records, tables, interfaces and automations as tools over Streamable HTTP. Every connection is scoped to authorised bases and the server enforces existing Airtable permissions, so a read-only base stays read-only through MCP.](/mcp-servers/airtable/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Inspect resource evidence](/tools/) - [Choose a host](/agents/) - [Inspect reusable workflows](/skills/) - [Use Undominated data](/api/)