A

Intercom MCP (Official)

Official Intercom remote MCP server for accessing conversations and contacts

Overall Score90/100

Score Breakdown

Server Info

Package
Registry
Maintainer
IntercomVendor
Category
Customer Support
Tags
supportmessagingcustomer-success
Last Scanned
7 Apr 2026

Findings

4 issues

Authentication & Identity

LOWImplements MCP OAuth spec for per-user authentication

Remote-only MCP server hosted by Intercom at mcp.intercom.com. Supports OAuth flow (recommended) and Bearer token auth. Streamable HTTP at /mcp and legacy SSE at /sse. Follows the authenticated remote MCP specification. No source code available in repo -- only README and branding assets. Tool details documented in README only. US-hosted workspaces only.

Remediation

Document the required OAuth scopes for each tool.

Tool Schema Quality

MEDIUMOnly 0 of 6 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

LLM Safety

MEDIUMOverlapping tool descriptions may cause wrong selection

Similar descriptions between tools could cause the LLM to pick the wrong one.

Remediation

Differentiate descriptions with unique use cases.

Data Exposure

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Tools

6 total
NameDescriptionRisk
searchUniversal search tool for finding conversations and contacts using a query DSL approachread
fetchRetrieve complete detailed information for specific resourcesread
search_conversationsSearch conversations by specific IDs with advanced filtering options including source type, author details, state, and timing statisticsread
get_conversationRetrieve a single conversation by ID with complete details including all conversation parts and metadataread
search_contactsSearch contacts by IDs, name, email, phone, custom attributes, or email domain with flexible matching optionsread
get_contactGet complete contact information including custom attributes, location data, and activity timestampsread

Deploy Intercom MCP (Official) securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow