Which CRMs have an official MCP server?

As of October 15, 2026: HubSpot, Salesforce, Zoho CRM, Attio, Pipedrive and Tommos each publish an official, hosted MCP server, according to their own documentation. Each signs you in with OAuth and acts with your CRM permissions.

Does HubSpot have an MCP server?

Yes. HubSpot's remote MCP server is at mcp.hubspot.com. It reads and writes CRM objects such as contacts, companies, deals and tickets, plus calls, emails, meetings, notes and tasks. The account's admin connects first, through a user-level app with OAuth 2.0 scopes. HubSpot's developer page, read October 15, 2026.

Is the Salesforce MCP server free?

Salesforce's announcement says hosted MCP servers are available to Enterprise Edition orgs and above. An admin enables them and creates an External Client App for the OAuth sign-in. Salesforce's developer blog, read October 15, 2026, through search because the page did not load for our reader.

Can an AI agent delete records through a CRM MCP server?

In Salesforce, only through the deletes server or the all-in-one server, which an admin must switch on. Zoho's Data Operations server can delete records. In Tommos, a Member's agent can delete a contact or a deal, and either can be restored within 30 days. HubSpot's, Attio's and Pipedrive's pages do not say.

What is a CRM MCP server?

It is a service the CRM vendor runs that exposes CRM actions, such as finding a contact or updating a deal, as tools an AI client can call over the Model Context Protocol. You add its address to Claude, ChatGPT or Cursor, sign in, and ask for CRM work in plain words.

Do I need an API key?

Not for a person: all six use OAuth sign-in. Tommos also takes an API key for an agent with no person behind it, such as a scheduled job, and that key cannot approve an outgoing email.

CRM MCP servers compared: HubSpot, Salesforce, Zoho, Attio

Six CRM MCP servers, side by side#

Each cell comes from the vendor’s own page; the number names it. “Not stated” means the page we read does not say, not that the answer is no.

What	Tommos	HubSpot	Salesforce	Zoho CRM	Attio	Pipedrive
Made by the vendor	Yes	Yes¹	Yes²	Yes³	Yes⁴	Yes⁵⁶
Address	`app.tommos.ai/api/mcp`	`mcp.hubspot.com`¹	One endpoint per server you switch on²	Made per account in the Zoho MCP Console³	`mcp.attio.com/mcp`⁴	`mcp.pipedrive.ai/mcp`⁵
Sign-in	OAuth 2.1 with PKCE; an API key for an agent with no person behind it	OAuth 2.0 through a user-level app¹	OAuth through an External Client App with the `mcp_api` scope²	OAuth in the browser³	OAuth, “no API keys required”⁴	Sign in to Pipedrive and approve⁵
Acts with	Your role in the workspace	The app’s scopes¹	Your profile, permission sets, field-level security and sharing rules²	Your Zoho CRM permissions³	Your Attio user⁴	Your Pipedrive role and visibility settings⁵
Reads	Contacts, deals, pipelines, timelines, emails, meetings, forms, bookings, the Playbook, a deal’s invoices	CRM objects, engagements, users and teams, campaigns, pages and blog posts¹	Records of standard and custom objects, by query and search²	Records across modules, by COQL query³	Contacts, companies, lists, notes, calls and emails⁴	Deals, activities, contacts, leads⁵⁶
Writes	Contacts, deals, stages, forms, events, booking pages, pipelines, the Playbook; decides cards	Contacts, companies, deals, tickets, quotes, invoices and other CRM objects, plus calls, emails, meetings, notes, tasks¹	Create and update, in the mutations server²	Create and update records, modules, fields, layouts and workflow rules³	Notes, tasks, lists, comments⁴	Contact details, notes, meeting notes, leads⁶
Deletes	Contacts and deals, restorable for 30 days	Not stated¹	Only in the deletes or the all-in-one server²	Yes, in the Data Operations server³	Not stated⁴	Not stated⁵⁶
Who sets it up	Any user: add the address, sign in	The account admin connects first; then each user¹	An admin enables the servers and creates the External Client App²	You create the server and pick its tools in the console³	Any user: add the address, sign in⁴	Any user, from Claude’s connector directory⁶
Agent can open a new account	Yes, `create_workspace`	Not stated	Not stated	Not stated	Not stated	Not stated

HubSpot's MCP server#

HubSpot runs a remote MCP server at mcp.hubspot.com. HubSpot’s developer page lists read and write access to CRM objects (contacts, companies, deals, tickets, carts, products, orders, line items, invoices, quotes, subscriptions and segments) and to engagements (calls, emails, meetings, notes and tasks). Users, teams, owners and roles, and marketing content such as campaigns, landing pages and blog posts, are read only.¹

Sign-in is OAuth 2.0 through a user-level app on HubSpot’s Developer Platform, given the scopes for the objects you want. The account’s admin must connect first; other users of the account connect after that.¹

HubSpot also offers a separate Developer MCP server that runs locally from its CLI, for building apps on its platform, not for working with CRM records.¹

Salesforce's hosted MCP servers#

Salesforce calls them Hosted MCP Servers. Salesforce announced them as generally available in April 2026, for Enterprise Edition orgs and above, after a beta in October 2025.²

Salesforce offers several servers instead of one. For records, there is a read-only server (query, search, relationships), a mutations server (create and update, no delete), a deletes server, and an all-in-one server with full create, read, update and delete. Salesforce also offers servers for Data 360, Tableau Next and custom servers that expose your own flows and Apex actions.²

Setup takes an admin: switch the servers on in Setup, under API Catalog and MCP Servers, then create an External Client App with the mcp_api and refresh_token scopes. Every call runs as the signed-in user, and Salesforce applies the same object permissions, field-level security and sharing rules as anywhere else in the org.²

Zoho CRM's MCP servers#

Zoho builds the servers for you in its MCP Console: you create a server, choose its tools, authorize it and connect it to your client. Zoho’s overview describes four pre-built servers: Data Insights (read only, queries in COQL), Data Operations (create, read, update and delete records, with bulk operations), Module Customization (custom modules, fields and layouts) and Workflow and Process Automation (workflow rules and their actions).³

The first call opens a browser window to sign in to Zoho, and every operation is scoped to your Zoho CRM permissions. Zoho names Cursor, Claude Desktop, VS Code and Windsurf in its setup guides and says the servers work with any MCP client.³

Attio's MCP server#

Attio’s hosted server is at mcp.attio.com/mcp. You sign in with your Attio account over OAuth, with no API keys. Attio lists Claude Desktop, Claude.ai, ChatGPT and Cursor as clients.⁴

Attio’s page describes looking up contacts and companies, logging notes and activity, creating and managing tasks, managing lists and pipelines, adding comments, finding information in calls and emails, and running report-style questions such as deal counts. The agent is authenticated as your Attio user.⁴

Pipedrive's MCP server#

Pipedrive’s server is at mcp.pipedrive.ai/mcp, and since August 18, 2026 it is also a listed connector in Claude’s directory, so you can connect it without typing the address.⁵⁶ Pipedrive says the connector can retrieve activities and deals, update contact information, add notes, capture meeting information, and create, retrieve and update leads. In its first month, 65% of the calls were reads and 35% writes or updates.⁶

Claude sees only what your Pipedrive user may see: permissions follow your role and visibility settings. Pipedrive’s help page also notes that Claude may not load every tool at the start of a conversation by default.⁵

Tommos's MCP server#

Tommos (tommos.ai) is a CRM whose AI agents, the tommos, take a B2B inquiry to a signed contract. Its MCP server at app.tommos.ai/api/mcp speaks streamable HTTP and signs a person in with OAuth 2.1 and PKCE; the agent then acts with that person’s role, from Viewer (reads only) to Owner. An agent with no person behind it, such as a nightly job, uses an API key the owner issues with only the scopes it needs.

Three things in Tommos’s server have no row in the other vendors’ docs:

The work, not only the records. where_the_work_stands returns, for each open job on a lead or a deal, the tommo’s last step, what it waits for and when it looks again. read_the_money_of_a_deal returns a won deal’s payment schedule and each invoice’s status.
Outward acts stay with a signed-in person. A card that sends something out, such as an email, is approved through MCP only by a person who signed in, and the record says who approved it and that it came through MCP. An API key can read cards and refuse them.
The agent can open the account. create_workspace needs no credential: it takes the company and the owner’s work address. Nothing leaves the workspace and nothing is charged until the owner confirms that address.

Every tool writes through the same code as the screen, with the same rules: a deal moved to Lost needs a reason from the company’s list. A deleted contact or deal can be restored within 30 days.

What Claude can do in Tommos, with examples

Three questions to ask before you connect any of them#

Who has to act before you can? If an admin must enable servers or approve an app, plan for that day. In Salesforce and HubSpot, an individual user cannot start alone.
Can the agent delete? Where reading, writing and deleting are separate servers, as in Salesforce, connect the read-only one first. Where one server holds everything, your CRM role is the limit, so connect with a role you would give a new colleague.
What does the agent find when it arrives? A server that exposes records lets the agent look things up and type them in. If the CRM also holds work in progress, the agent can ask where each deal stands and pick up from there.

For the steps to connect Claude itself, see how to connect Claude to your CRM.

Questions about CRM MCP servers#

Which CRMs have an official MCP server?: As of October 15, 2026: HubSpot, Salesforce, Zoho CRM, Attio, Pipedrive and Tommos each publish an official, hosted MCP server, according to their own documentation. Each signs you in with OAuth and acts with your CRM permissions.
Does HubSpot have an MCP server?: Yes. HubSpot's remote MCP server is at mcp.hubspot.com. It reads and writes CRM objects such as contacts, companies, deals and tickets, plus calls, emails, meetings, notes and tasks. The account's admin connects first, through a user-level app with OAuth 2.0 scopes. HubSpot's developer page, read October 15, 2026.
Is the Salesforce MCP server free?: Salesforce's announcement says hosted MCP servers are available to Enterprise Edition orgs and above. An admin enables them and creates an External Client App for the OAuth sign-in. Salesforce's developer blog, read October 15, 2026, through search because the page did not load for our reader.
Can an AI agent delete records through a CRM MCP server?: In Salesforce, only through the deletes server or the all-in-one server, which an admin must switch on. Zoho's Data Operations server can delete records. In Tommos, a Member's agent can delete a contact or a deal, and either can be restored within 30 days. HubSpot's, Attio's and Pipedrive's pages do not say.
What is a CRM MCP server?: It is a service the CRM vendor runs that exposes CRM actions, such as finding a contact or updating a deal, as tools an AI client can call over the Model Context Protocol. You add its address to Claude, ChatGPT or Cursor, sign in, and ask for CRM work in plain words.
Do I need an API key?: Not for a person: all six use OAuth sign-in. Tommos also takes an API key for an agent with no person behind it, such as a scheduled job, and that key cannot approve an outgoing email.

Sources#

HubSpot Developers, “HubSpot MCP server”, read Oct 15, 2026
Salesforce Developers: “Salesforce Hosted MCP Servers Are Now Generally Available” (April 2026), and the Hosted MCP Servers guide, read Oct 15, 2026 (both pages render by script; read through search results)
Zoho, “Zoho CRM MCP Servers: overview”, read Oct 15, 2026
Attio, “MCP”, read Oct 15, 2026
Pipedrive Knowledge Base, “Pipedrive MCP for Claude”, read Oct 15, 2026
Pipedrive newsroom, “Pipedrive MCP Connector Is Now Available in Claude’s Official Marketplace” (August 18, 2026), read Oct 15, 2026

CRM MCP servers compared: HubSpot, Salesforce, Zoho, Attio, Pipedrive and Tommos