Skip to main content
Glama
TNE736

LQABR MCP HubSpot Server

by TNE736

LQABR_MCP

Der zentrale HubSpot-MCP-Server von LQABR. Basierend auf FastMCP und eigenständig – keine Abhängigkeit vom LQABR-Mono-Repo.

RUNNING.md – wie man ihn ausführt: Einrichtung, Anmeldedaten, beide Transporte, Agentgateway, Fehlerbehebung. CONSUMING.md – wie die E-Mail-/Sprach-/Planungsagenten ihn aufrufen: ADK McpToolset, Authentifizierung, der Wire-Contract, Tool-Scoping. Diese Datei enthält die Design-Grundlage; die beiden anderen sind die Verfahrensanleitungen.

LQABR_MCP/
├── hubspot-crm-mcp-server/
│   ├── __init__.py              (empty, per mcp.odt Step 4)
│   ├── hubspot_crm_server.py    the launcher — mcp.odt Step 5
│   ├── test_server.py           remote smoke test — handoff S8
│   ├── hubspot_mcp/             THE IMPLEMENTATION (vendored)
│   │   ├── __init__.py          provenance + drift warning — read this
│   │   ├── server.py            the FastMCP object + the two tools
│   │   ├── secrets.py           Secret Manager access
│   │   ├── obs/                 the four logs: system/process/audit/tokens
│   │   │   ├── __init__.py
│   │   │   ├── context.py       RunContext, run_id, lead_ref_id
│   │   │   └── loggers.py
│   │   └── hubspot/
│   │       ├── __init__.py
│   │       ├── crm.py           upsert_lead_profiles / get_lead_profile
│   │       ├── auth.py          get_hubspot_token(), short-lived M2M
│   │       ├── schema.py        LeadProfile, PushResult, property mapping
│   │       └── failures.py      failure taxonomy + CircuitBreaker
│   └── tests/                   61 tests ported from the mono-repo
├── .vscode/hubspot_mcp.json     stdio config — mcp.odt Steps 7–8
├── Dockerfile                   Cloud Run image — handoff S4
├── .dockerignore
├── pytest.ini
├── .python-version              3.12, matching the Dockerfile
├── .env.example                 mode switches + secret IDs (no values)
├── pyproject.toml
├── RUNNING.md                   step-by-step runbook — start here
├── CONSUMING.md                 client integration guide for other agents
└── README.md

Dies ist ein Fork, kein Umzug

hubspot_mcp/ ist eine Kopie der Implementierung aus dem Mono-Repo. Nur die Import-Zeilen wurden umgeschrieben; keine Logik, Feldname oder HubSpot-Property-Name wurde geändert. Durch Diff verifiziert – die einzigen abweichenden Zeilen in allen neun Dateien sind:

- from lqabr_core.obs import get_obs, utc_now_iso
+ from ..obs import get_obs, utc_now_iso
- from lqabr_core.leadgen.secrets import ...
+ from ..secrets import ...

Das Mono-Repo benötigt weiterhin seine Kopie. Nicht löschen.

Modul

Auch verwendet von

lqabr_core.obs

8 Dateien in lead_profile/src, 2 in text_voice/src, lqabr_core/crm

lqabr_core.leadgen.*

12 lead_profile-Dateien inkl. call_mcp.py, plus evals/run_eval.py

lqabr_core.leadgen.secrets

lead_profile model.py, 2 Testdateien

Die Konsequenz: Es gibt nun zwei Schreibpfade zu HubSpot, die dieselben Feldnamen und dieselben HubSpot-Property-Namen tragen – und der Datenvertrag besagt, dass diese Namen der Vertrag sind. Jede Korrektur in crm.py, jede Auth-Änderung, jede HubSpot-Property-Umbenennung muss in beiden Umgebungen manuell angewendet werden. Nichts erzwingt dies. Planen Sie Budget dafür ein, oder planen Sie, eine Seite auszumustern.

Related MCP server: LQABR HubSpot MCP Server

Warum dies außerhalb des Mono-Repos lebt

Das LQABR-Repo hat ein Top-Level-Paket, das buchstäblich mcp an seiner Wurzel heißt, was das mcp-SDK überschattet, von dem FastMCP abhängt. Die Ausführung innerhalb des Repos unterbricht FastMCPs eigene Importe.

Fügen Sie die LQABR-Repo-Wurzel nicht zu PYTHONPATH hinzu.

Bibliothek: FastMCP, nicht das offizielle SDK

Die Abhängigkeit ist fastmcp>=3.4.7. Fügen Sie mcp>=2.0 nicht hinzu – die beiden schließen sich gegenseitig aus:

  • fastmcp 3.4.7 pinnt mcp<2.0,>=1.24.0 transitiv (es installiert mcp 1.29).

  • MCPServer, die Server-Klasse des offiziellen SDKs, existiert nur in mcp>=2.0.

Ein Projekt kann also FastMCP oder MCPServer verwenden, niemals beide. Dieses verwendet FastMCP. Nichts hier importiert MCPServer.

Zwei wissenswerte Konsequenzen:

  • Transportnamen unterscheiden sich. FastMCPs HTTP-Transport heißt "http" ("streamable-http" wird als Alias akzeptiert) und das Endpunkt-Pfad-Kwarg ist path=. Das offizielle SDK schreibt das als streamable_http_path=.

  • Typfelder unterscheiden sich. Da mcp auf 1.x gepinnt ist, verwenden die gebündelten Typen camelCase: Tool.inputSchema, nicht input_schema.

Das lqabr_core/leadgen/server.py des Mono-Repos verwendet weiterhin MCPServer. Das ist nun eine zweite Abweichung zwischen den beiden Codebasen, zusätzlich zum Fork.

Ausführung

uv sync

# stdio — local ADK MCPToolset, or the VSCode config in .vscode/
uv run python hubspot-crm-mcp-server/hubspot_crm_server.py

# HTTP — what Cloud Run runs
uv run python hubspot-crm-mcp-server/hubspot_crm_server.py \
    --transport http --host 0.0.0.0 --port 8080

Anmeldedaten

tools/list benötigt nichts. Ein Tool-Aufruf benötigt das HubSpot-Token, und das kommt aus dem Secret Manager – Kontext §7.6 / CLAUDE.md §5: Secrets sind niemals hartcodiert und werden niemals committet.

cp .env.example .env                    # holds mode switches + secret IDs only
gcloud auth application-default login
uv sync --extra gcp --extra test        # both extras; --extra gcp alone drops pytest
export UV_ENV_FILE=.env

uv sync --extra <x> synchronisiert genau diese zusätzliche Gruppe, also deinstalliert --extra gcp allein pytest. test_server.py läuft als CLI ohne pytest, aber uv run pytest benötigt es offensichtlich.

.env enthält keine Secret-Werte – nur HUBSPOT_AUTH_MODE, LQABR_SECRET_PROJECT und die ID des Secrets. Das Token selbst wird zur Laufzeit über die Secret-Manager-API abgerufen, im Speicher gehalten, niemals protokolliert (die Audit-Zeile zeichnet nur Länge und die letzten vier Zeichen auf) und für 900s zwischengespeichert, sodass eine Rotation keine erneute Bereitstellung erfordert.

auth.py und secrets.py schlagen beide geschlossen fehl – nicht gesetzt bedeutet einen expliziten Fehler, niemals einen stillen Standardwert.

LQABR_SECRET_BACKEND=env existiert als letzter Ausweg für Offline-Arbeit oder CI. secrets.py beschränkt es auf "lokale Entwicklung, CI und Tests nur" und es gibt keinen automatischen Fallback darauf – Sie müssen es eingeben. Es legt eine Live-Anmeldeinformation in einer Datei auf der Festplatte ab. Setzen Sie es niemals in Cloud Run.

Jedes Flag hat einen Umgebungsvariablen-Standardwert (MCP_TRANSPORT, MCP_HOST, PORT, MCP_PATH), sodass der Container ohne Argumente startet – Cloud Run injiziert PORT.

Tests

uv run pytest              # 61 tests, all passing, none touch real HubSpot

pytest.ini setzt hubspot-crm-mcp-server/ in den Pfad, sodass import hubspot_mcp aufgelöst wird – der Ordner selbst kann aufgrund des Bindestrichs kein Paket sein.

Der Vertrag besteht aus ZEHN Feldern, nicht neun

LeadProfile trägt zehn: die neun, die jeder dokumentiert, plus contact_name (hinzugefügt für die Vorname/Nachname-Zuordnung). Das test_wrapper_shape_is_the_nine_fields_plus_ids des Mono-Repos behauptete immer noch 9 und war dort fehlgeschlagen – schema.py ist byte-identisch, also hat dieses Projekt es geerbt.

Behoben am 18.08.2026: Der Code war richtig, die Zahl war veraltet. Der Test ist umbenannt in test_wrapper_shape_is_the_contract_fields_plus_ids und behauptet nun die Feld Namen anstelle einer Anzahl, sodass die nächste Hinzufügung mit etwas Lesbarem fehlschlägt.

Die gleiche Korrektur ist dem Mono-Repo noch geschuldet – diese Behauptung ist dort unverändert und immer noch rot. Die Dokumente, die "9 Felder" sagen, sollten ebenfalls korrigiert werden.

Testen eines bereitgestellten Servers

# local
uv run python hubspot-crm-mcp-server/test_server.py

# Cloud Run — mints a Google ID token via ADC
uv run python hubspot-crm-mcp-server/test_server.py \
    --url https://lqabr-mcp-server-xxxx.a.run.app/mcp --auth google

# one real read against HubSpot — writes nothing
... --auth google --employee-id EMP-00042

Schreibgeschützt von Natur aus: Es ruft niemals upsert_lead_profile auf. Sendet X-LQABR-Run-Id, sodass die Audit-Logs des Servers den Aufruf zuordnen (der B10-Fix).

Die ID-Token-Zielgruppe ist die Service-Basis-URL ohne /mcp. Das Skript entfernt es für Sie.

Der Client verwendet fastmcp.Client, der den Initialize-Handshake übernimmt, sodass es keine Session-Infrastruktur in dieser Datei gibt. Header reiten auf einem StreamableHttpTransport. Dies entspricht nun der Bibliothek des Referenzbeispiels.

Bereitstellung auf Cloud Run

Zweistufiger uv-Build, nicht-root mcp-Benutzer, PID 1 ist Python, sodass SIGTERM sauber abfließt. In sich geschlossen: kein Geschwisterordner, keine Git-Abhängigkeit.

docker build -t lqabr-mcp-server .

Committen Sie eine uv.lock und wechseln Sie die Synchronisierung vor der Produktion auf --frozen.

Dann S5–S8: Erstellen Sie mcp-server-sa, gewähren Sie secretmanager.secretAccessor auf lqabr-hubspot-access-token, stellen Sie --no-allow-unauthenticated bereit, gewähren Sie den drei Agenten-Servicekonten roles/run.invoker, richten Sie test_server.py darauf aus.

Verfügbare Tools

Tool

Richtung

Anmerkungen

upsert_lead_profile

schreiben

Company-Upsert → Contact-Upsert → Assoziation. Idempotent.

get_lead_profile

lesen

Vertragsfelder + contact_hs_id + company_hs_id.

Deduplizierung: Contact auf employee_id, Company auf company_id. E-Mail lebt in der benutzerdefinierten email_id-Property.

Offener Punkt. Der registrierte Tool-Name ist upsert_lead_profile (Singular), aber die Design-Dokumente, die Session-Übergabe und die Projektanweisungen sagen alle upsert_lead_profiles (Plural), und die zugrunde liegende Funktion ist Plural. Dies ist ein Wire-Contract – klären Sie es, bevor ein Client sich anschließt.

Anmeldedaten

Zwei, niemals verwechselt:

  • Google-ID-Token beweist Agent → dieser Server (Cloud-Run-Dienst-zu-Dienst).

  • HubSpot-M2M-Token beweist dieser Server → HubSpot, pro Aufruf innerhalb des Servers ausgestellt. Aufrufer sehen es niemals.

Dieser Dienst ist der alleinige Inhaber der HubSpot-Anmeldeinformation.

Verifiziert

In einer sauberen venv, die nur fastmcp 3.4.7 (das mcp 1.29 mitbrachte), requests und pytest enthielt – mit abwesendem lqabr_core (bestätigt ModuleNotFoundError) und abwesendem MCPServer (bestätigt ImportError):

  • null lqabr_core-Importe irgendwo im Projekt

  • portierte Test-Suite: 61 bestanden, 0 fehlgeschlagen

  • stdio – tools/list gibt beide Tools zurück, PYTHONPATH vollständig entfernt

  • --transport http – bindet Host/Port/Pfad, vollständige fastmcp.Client-Session

  • --transport streamable-http – Alias akzeptiert, bedient denselben Endpunkt

  • test_server.py – BESTANDEN gegen den laufenden Server, Exit 0

  • test_server.py unter pytest – 3 bestanden mit einem Server, 3 übersprungen ohne

  • Live call_tool erreichte die echte Kette: Transport → Tool → crm.py → auth.py → secrets.py, fehlschlagend nur an den absichtlichen AuthConfigError / SecretConfigError-Sicherungen (keine GCP-Konfiguration in der Testumgebung). Die Verkabelung ist Ende-zu-Ende nachgewiesen.

Nicht verifiziert: Das Docker-Image wurde nie erstellt – kein Docker-Daemon war verfügbar, wo diese Dateien zusammengestellt wurden. Nichts hat echtes HubSpot berührt; jeder Test verwendet einen Fake.

Available Tools

4 tools
get_blog_summaryA

Read one blog summary row by its publication timestamp. Read-only. Returns the seven contract fields plus ticket_hs_id. Not-found is a VALID result — found is false and summary is null — never an error. Check warnings: a non-empty list means more than one row shares this timestamp and the first was returned.

NameRequiredDescriptionDefault
blog_published_atYes

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description takes full responsibility for behavioral transparency. It clearly states the tool is read-only, describes the return fields and the non-error 'not-found' behavior, and warns about potential ambiguity with shared timestamps. The only minor omission is not specifying the exact return structure or whether it includes pagination.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences, each with distinct value: purpose, safety, error handling, and edge-case warning. It is front-loaded with the core action, no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simple single-parameter tool and presence of an output schema (which handles return structure), the description covers purpose, behavioral edges, and warnings adequately. The omission of timestamp format detail is minor and acceptable for a tool with just one parameter and no nested objects.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It explains that the single parameter 'blog_published_at' is a publication timestamp for identifying the row, which aligns with the schema. However, it does not provide format details (e.g., ISO 8601) or validation constraints beyond that, leaving the agent to infer from context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description specifies a clear verb ('read'), a specific resource ('blog summary row'), and the unique identifier ('publication timestamp'). It also distinguishes from siblings like 'upsert_blog_summary' and 'get_lead_profile' by focusing on reading a blog summary.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides context on when to use this tool: reading a single blog summary by timestamp. It does not explicitly mention when not to use it or alternatives, but the sibling list and the read-only nature imply a contrast with upsert_blog_summary. Some guidance on the 'not-found' and 'warnings' behavior aids correct usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_lead_profileA

Read one lead's current state from HubSpot. Read-only. Returns the nine contract fields plus contact_hs_id and company_hs_id so you can write status back without re-searching. Check company_resolved: when false, the company fields are unpopulated and warnings explains why.

NameRequiredDescriptionDefault
emailNo
employee_idNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden for behavioral disclosure. It covers read-only safety, enumerates the returned fields, and explains the company_resolved flag and warnings. This is substantial context for a read tool, though it does not cover error cases or edge behaviors in detail.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no redundancy. The first sentence states the core purpose and safety, and the second adds essential behavioral details. Every word contributes value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read tool with an output schema, the description covers the main aspects: purpose, return fields, and a key data-quality flag. However, it omits parameter usage, which is a notable gap given the low schema coverage. The output schema likely documents return values, so that is not a deficiency.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It does not mention email or employee_id at all, nor explain how the lead is identified, whether identifiers are mutually exclusive, or what happens if neither is provided. The schema only provides types and defaults, leaving the semantic meaning entirely unexplained.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Read one lead's current state from HubSpot.' It uses a specific verb and resource, and explicitly declares read-only behavior. It differentiates from siblings by focusing on leads rather than blog summaries and by contrasting with upsert operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage context by stating the returned IDs are 'so you can write status back without re-searching,' suggesting it is the read-before-write companion to upsert_lead_profile. It also instructs to check company_resolved for interpreting data. However, it does not explicitly name alternatives or provide when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

upsert_blog_summaryA

Put one published blog post into HubSpot: the ONLY writer to the blog summary store. Searches on blog_published_at, then updates that row or creates one — a single upsert, so calling it twice for the same post is safe and does not duplicate. Returns the ticket id and whether the row was created or updated. blog_industry must be exactly one of FINANCIAL_SERVICES, LEGAL_SERVICES, HEALTHCARE — a near-miss selects zero leads and raises no error. Bad data is recorded and reported as failed, never silently dropped.

NameRequiredDescriptionDefault
subjectYes
blog_summaryYes
blog_industryYes
summary_ref_idNo
blog_published_atYes

Output Schema

NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and excels: it reveals the upsert logic (no duplicates), mentions the return value (ticket id and created/updated status), warns about exact value requirements for blog_industry, and states that bad data is recorded and reported as failed. This is comprehensive behavioral disclosure beyond what any annotation could provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, every sentence adds critical information, and key points are front-loaded. It covers purpose, safety, return value, parameter constraints, and error handling without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 5 parameters, an output schema, and no annotations, the description provides all necessary behavioral context including upsert semantics, exact enum values, and failure behavior. The return value is described, and the output schema structure is implied but not needed in detail. This is complete for an agent to use the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage, so the description must compensate. It explicitly explains the blog_industry parameter's allowed values and failure behavior, and implies the meaning of blog_published_at as the search key. It does not detail subject, blog_summary, or summary_ref_id, but the overall intent is clear enough given the tool's purpose.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool puts a blog post into HubSpot using an upsert strategy, specifies it is the only writer to the blog summary store, and distinguishes itself from siblings by focusing on blog summaries rather than lead profiles. The verb 'put' combined with 'published blog post' and 'upsert' gives a concrete, specific purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states this is for published blog posts and mentions that calling it twice is safe due to upsert behavior. It does not explicitly list when not to use it or name alternatives among siblings, but the sibling tools (upsert_lead_profile, get_lead_profile, get_blog_summary) have different focuses, so the usage context is clear enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

upsert_lead_profileA

Create or update one lead in HubSpot: upserts the Company, upserts the Contact, and associates them. Creating and updating are ONE upsert, so calling this twice for the same lead is safe and does not duplicate. Returns the HubSpot ids. Bad data is recorded and reported as failed, never silently dropped.

NameRequiredDescriptionDefault
emailNo
phoneNo
industryNo
job_titleNo
company_idYes
employee_idYes
lead_ref_idNo
annual_revenue_mNo
decision_maker_flagYes
frequency_of_purchaseNo

Output Schema

NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of disclosing behavior. It reveals the internal operations (upsert Company, upsert Contact, associate), idempotency, return value (IDs), and error handling (bad data recorded and reported, never silently dropped). This is comprehensive for safety and side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, each earning its place: first sentence defines the action, second sentence emphasizes idempotency, third sentence covers error handling and return values. No redundancy or unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description adequately covers purpose, safety, and error behavior, and the output schema covers return values. However, given the high parameter count (10) and zero schema descriptions, the lack of parameter guidance leaves the description incomplete for correct invocation. It is sufficient for understanding what the tool does but not for parameter selection.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain the purpose or format of any of the 10 parameters (e.g., what employee_id, company_id, decision_maker_flag represent). The description must compensate for the lack of schema parameter descriptions, but it fails to do so, leaving the agent to guess parameter semantics from names alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Create or update one lead'), the resource ('lead in HubSpot'), and specifics that it upserts both Company and Contact and associates them. It distinguishes itself from sibling tools like 'get_lead_profile' (read-only) and 'upsert_blog_summary' (different entity).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains that calling the tool twice is safe and does not duplicate, indicating idempotency. However, it does not provide explicit guidance on when to use this tool versus alternatives (e.g., get_lead_profile for reads) or when not to use it, leaving usage context implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv0.1.0
    • First observedget_blog_summary
    • First observedget_lead_profile
    • First observedupsert_blog_summary
    • First observedupsert_lead_profile

TDQS

A3.8/5.0

Scored across 4 tools

Disambiguation2/5

The tools clearly separate lead and blog summary domains, but within each domain the upsert and get tools have high semantic overlap in purpose, though descriptions help distinguish read vs. write.

Naming Consistency4/5

All tool names follow a consistent verb_noun pattern (upsert/get + lead_profile/blog_summary) with snake_case, very predictable. Minor point: 'upsert' is a valid term but less common than 'create_or_update'.

Tool Count4/5

4 tools is a reasonable count for a focused HubSpot integration covering two entities (lead and blog summary) with basic CRUD. It's slightly thin but appropriate for a narrow scope.

Completeness3/5

Coverage is incomplete: lead profiles have upsert+get but no ability to delete or list/filter leads. Blog summaries similarly lack delete and listing. The domain surface has notable missing operations that could hinder workflows.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    C
    maintenance
    Exposes HubSpot CRM data and actions as tools for AI agents, enabling contact lookup, company search, contact creation, and activity logging via natural language.
    4
    904 npm
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables interaction with HubSpot CRM through two tools (upsert_lead_profile and get_lead_profile) for managing lead profiles, using FastMCP with Secret Manager-based authentication and supporting both stdio and HTTP transports.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables AI assistants to interact with HubSpot CRM data, providing tools to create and retrieve contacts, companies, activities, and conversations, plus semantic search across previously retrieved data. Built-in vector storage and caching help overcome HubSpot API limitations and improve response times.
    -
  • F
    license
    Not graded
    quality
    A
    maintenance
    Enables AI assistants to interact with HubSpot CRM data for creating and retrieving contacts, companies, activity, and conversations, with built-in vector storage and caching for faster semantic search.
    -