C

HubSpot MCP Server

Community HubSpot CRM MCP server with contacts, companies, tickets, conversations, and semantic search via FAISS

Overall Score68/100

Score Breakdown

Server Info

Package
mcp-server-hubspot
Registry
pypi
Maintainer
HubSpotVendor
Category
CRM & Sales
Tags
crmmarketingsales
Last Scanned
7 Apr 2026

Findings

4 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Uses a static HubSpot access token via HUBSPOT_ACCESS_TOKEN env var or --access-token CLI argument. Stdio transport only via mcp.server.stdio. No OAuth flow, no HTTP/SSE transport. Token must have crm.objects.contacts, crm.objects.companies, and sales-email-read scopes. For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

Tool Schema Quality

MEDIUMOnly 4 of 16 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

LLM Safety

MEDIUM1 tool descriptions are too vague

Short or generic descriptions make tool selection unreliable.

Remediation

Expand descriptions with specific actions, data types, and side effects.

Maintenance & Trust

LOWCommunity-maintained by buryhuang (community)

No official vendor backing.

Remediation

Seek vendor verification.

Tools

16 total
NameDescriptionRisk
hubspot_create_companyCreate a new company in HubSpotwrite
hubspot_get_company_activityGet activity history for a specific companyread
hubspot_get_active_companiesGet most recently active companies from HubSpotread
hubspot_get_companyGet a specific company by ID from HubSpotread
hubspot_update_companyUpdate an existing company record in HubSpotwrite
hubspot_create_contactCreate a new contact in HubSpotwrite
hubspot_get_active_contactsGet most recently active contacts from HubSpotread
hubspot_get_contactGet a specific contact by ID from HubSpotread
hubspot_update_contactUpdate an existing contact record in HubSpotwrite
hubspot_get_recent_conversationsGet recent conversation threads from HubSpot with their messagesread
hubspot_get_ticketsGet tickets from HubSpot based on configurable selection criteriaread
hubspot_get_ticket_conversation_threadsGet conversation threads associated with a specific ticketread
hubspot_search_dataSearch for similar data in stored HubSpot API responsesread
hubspot_get_propertyGet details of a specific HubSpot property definitionread
hubspot_update_propertyUpdate a HubSpot property definition (e.g., add dropdown options)admin
hubspot_create_propertyCreate a new custom property in HubSpotadmin

Deploy HubSpot MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow