C

Apollo.io MCP Server

MCP server for Apollo.io providing people search, enrichment, contact/account/deal CRM management, sequence automation, and admin tools

Overall Score64/100

Score Breakdown

Server Info

Package
apollo-mcp
Registry
npm
Maintainer
Community
Category
CRM & Sales
Tags
sales-intelligenceprospectingenrichment
Last Scanned
7 Apr 2026

Findings

5 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport. Single API key passed via environment variable. The client sends it as x-api-key header on every request to https://api.apollo.io/api/v1. Several tools require a 'master API key' (higher privilege tier) for access. No HTTP transport or MCP OAuth support. For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

LLM Safety

HIGHTool descriptions contain instructional language

Descriptions include directives that could influence LLM behavior beyond tool selection.

Remediation

Remove instructional language. Descriptions should be purely factual.

Data Exposure

MEDIUM5 list operations lack pagination

Seven search/list tools have page/per_page pagination with max 100 per page: search_people, search_organizations, search_contacts, search_accounts, search_sequences, list_deals, search_tasks. Five list tools lack pagination: list_contact_stages, list_account_stages, list_deal_stages, get_users, get_email_accounts. No field selection; full records are always returned.

Remediation

Add limit/offset or cursor-based pagination.

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Maintenance & Trust

LOWCommunity-maintained by Unknown (no author in package.json)

No official vendor backing.

Remediation

Seek vendor verification.

Tools

35 total
NameDescriptionRisk
search_peopleSearch Apollo's database of 275M+ people. Returns profile data without email/phone — use enrich_person to reveal contact info. Requires a master API key.read
enrich_personMatch and enrich a person using any available identifier (email, LinkedIn URL, name + company, etc.). Can reveal personal email addresses. Consumes enrichment credits.read
bulk_enrich_peopleEnrich up to 10 people in a single request. Each record needs at least one identifier. Consumes enrichment credits per matched record.read
search_organizationsSearch Apollo's database of companies. Returns firmographic data including headcount, industry, revenue, technologies, and more.read
enrich_organizationEnrich a company with full firmographic data: headcount, revenue, technologies, funding, location, and more. Consumes enrichment credits.read
get_organizationGet complete information about an organization by its Apollo ID, including all firmographic data and related contacts.read
get_organization_job_postingsRetrieve active job postings for an organization. Useful for understanding a company's growth areas and hiring signals.read
search_contactsSearch contacts saved in your Apollo account (not the global database). Supports filtering by name, email, account, stage, and more.read
get_contactRetrieve a single contact by ID from your Apollo account.read
create_contactCreate a new contact in your Apollo account.write
update_contactUpdate an existing contact in your Apollo account.write
bulk_create_contactsCreate multiple contacts at once in your Apollo account.write
list_contact_stagesList all available contact stages in your Apollo account.read
search_accountsSearch accounts (companies) saved in your Apollo account. Distinct from the global organization search.read
get_accountRetrieve a single account by ID from your Apollo account.read
create_accountCreate a new account (company) in your Apollo account.write
update_accountUpdate an existing account in your Apollo account.write
list_account_stagesList all available account stages in your Apollo account.read
search_sequencesSearch for email sequences (campaigns) in your Apollo account. Requires a master API key.read
add_contacts_to_sequenceAdd one or more contacts to an Apollo sequence (email campaign). Requires a master API key.write
update_contact_sequence_statusUpdate a contact's status within a sequence (e.g. pause, resume, or finish them). Requires a master API key.write
get_sequence_email_statsRetrieve email performance statistics for a sequence: opens, clicks, replies, bounces, etc. Requires a master API key.read
activate_sequenceActivate (enable) a sequence so it starts sending emails. Requires a master API key.write
deactivate_sequencePause/deactivate a sequence to stop sending emails. Requires a master API key.write
list_dealsList all deals (opportunities) in your Apollo account. Requires a master API key.read
get_dealRetrieve a single deal (opportunity) by ID. Requires a master API key.read
create_dealCreate a new deal (opportunity) in your Apollo account. Requires a master API key.write
update_dealUpdate an existing deal (opportunity) in your Apollo account. Requires a master API key.write
list_deal_stagesList all deal stages configured in your Apollo account. Requires a master API key.read
search_tasksSearch for tasks in your Apollo account. Requires a master API key.read
create_tasksCreate one or more tasks in your Apollo account. Requires a master API key.write
get_usersList all users in your Apollo organization. Useful for finding user IDs for owner assignment.read
get_email_accountsList all connected email accounts in your Apollo organization. Use these IDs when adding contacts to sequences.read
get_api_usageView your Apollo API usage statistics and rate limits per endpoint. Requires a master API key.read
get_custom_fieldsList all custom fields defined in your Apollo account.read

Deploy Apollo.io MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow