Skip to main content

MCP Servers for Sales and CRM: Official Servers to Try

Short answer

HubSpot, Salesforce, Attio, Intercom and Pipedrive each publish their own MCP server, and all five are hosted by the vendor. You connect by URL and sign in with your own account, so the server can see what that account can see. Most of them can also create and change records, so check the read-only options before you connect. I couldn't find an official Zendesk server, so Zendesk isn't on this list.

Tested withVendor documentation, checked 2026-10-20Checked 20 Oct 2026

By Tony LewisHow we test these guides

How to read this list​

Each entry links to the vendor's own documentation, which is what we checked on 2026-10-20. All five servers here are remote. That means the server runs on the vendor's side, and your AI app connects to it with a URL. Nothing runs on your computer. Read-only means the vendor documents a way to turn writes off. Where the docs don't describe one, the entry says so.

HubSpot​

HubSpot's remote MCP server gives an AI client read and write access to CRM data such as contacts, companies, deals, tickets and engagements. The endpoint is mcp.hubspot.com. You create a user-level app in the HubSpot developer platform, then connect with the OAuth credentials that app produces.

  • Sign-in: OAuth, through the user-level app. The HubSpot account admin connects first, and other users in the account connect after that.
  • Read-only: Choose read scopes when you create the app. The docs describe that as the way to limit the server to reading.
  • Risk: With write scopes, the server can change contacts, deals and other CRM records. Grant only the scopes the agent needs.
  • Source: HubSpot MCP server

Salesforce​

Salesforce Hosted MCP Servers run inside your Salesforce org. The standard sobject-all server covers every standard and custom object, with tools to create, read, update, delete, query and search records. For a production org, its URL is https://api.salesforce.com/platform/mcp/v1/platform/sobject-all. Salesforce says the feature is for customers with Flex Credits, and that you may be billed for server usage.

  • Sign-in: OAuth through an External Client App in your org. The docs ask for the mcp_api and refresh_token scopes. Connected Apps aren't supported.
  • Read-only: Yes. Salesforce's reference describes SObject Reads as the query-only server.
  • Risk: sobject-all can delete records as well as read them. Field-level security and sharing rules still apply to every call, so the agent can't act beyond what the signed-in user can do.
  • Source: Hosted MCP Servers overview and SObject All server reference

Attio​

Attio's hosted MCP server at https://mcp.attio.com/mcp gives an AI client access to people, companies, deals, tasks, notes, lists and reports in your Attio workspace.

  • Sign-in: OAuth, as your Attio user.
  • Read-only: No separate mode is documented. Read operations run without a prompt, and write operations ask you to confirm.
  • Risk: The confirmation prompt is your main check. Read what a write will change before you approve it.
  • Source: Attio MCP overview

Intercom​

Intercom hosts a remote MCP server at https://mcp.intercom.com/mcp. Its standard tools search and retrieve conversations, contacts and companies, and workspaces with Fin Operator also get the Fin Operator tools. Connect with OAuth, which acts as you. The docs say a bearer token also connects, but a bearer token doesn't get the Fin Operator tools.

  • Sign-in: OAuth, which acts as the signed-in user.
  • Read-only: I didn't find a read-only setting in the docs. The search and retrieve tools read data, but the Fin Operator tools include apply_proposals, which applies changes to your live workspace configuration.
  • Risk: Conversations contain customer messages, so the server exposes personal data to whichever AI client you connect. apply_proposals changes how your workspace behaves for customers.
  • Source: Intercom MCP server guide

Pipedrive​

Pipedrive's native MCP server at https://mcp.pipedrive.ai/mcp covers deals, contacts, organizations, leads, products, activities and notes. Pipedrive documents setup for ChatGPT and Claude. Sign in with OAuth, and the assistant can only do what your Pipedrive user can do. ChatGPT needs Developer Mode and a Pro, Business, Enterprise or Edu plan.

  • Sign-in: OAuth, with your Pipedrive permissions.
  • Read-only: Not documented. The tool list includes getX and searchX tools next to addX and updateX tools.
  • Risk: The addX and updateX tools create and edit deals, contacts and notes. Pipedrive says usage counts against your plan's token limits.
  • Source: Pipedrive MCP for Claude and Pipedrive MCP tools

Support desks​

Intercom above is the support-desk server on this list. For Zendesk, the help article on MCP describes Zendesk as an MCP client: admins connect Zendesk to other MCP servers and use their tools in action flows. The article also says Zendesk can act as a server in some cases, but it doesn't give an endpoint or setup steps for that. I couldn't find a published Zendesk server, so Zendesk isn't listed. Connecting to MCP servers in Zendesk has the details.

Search the MCPBundles directory​

The MCPBundles directory lists MCP servers, and you can search it by service name. For a CRM, try www.mcpbundles.com/?q=hubspot. MCPBundles isn't affiliated with the listed services unless a listing says so, so check the publisher before you connect. The directory is for finding servers. The vendor's own docs above tell you what each server can do. Browsing the catalog covers the directory view, and setting up credentials explains how your sign-in is stored. Before you connect a CRM server to real customer data, read MCP security best practices.

FAQ​

Is there an official HubSpot MCP server?

Yes. HubSpot hosts a remote server at mcp.hubspot.com. You create a user-level app in the HubSpot developer platform and connect with the OAuth credentials it produces.

How do I stop an AI client from changing CRM records?

Use a read-only option where the vendor documents one. HubSpot lets you create the app with read scopes only, and Salesforce offers the SObject Reads server for query-only access. Where no read-only option is documented, check the tool list before you connect and approve writes one at a time.

Do any of these servers run on my computer?

No. All five servers on this page are hosted by the vendor. You connect to each one with a URL and sign in with OAuth.

Why is Zendesk not on this list?

I couldn't find a published Zendesk server with an endpoint and setup steps. Zendesk's official MCP support is a client that calls other servers from its action flows.