LQABR MCP HubSpot Server
LQABR_MCP
LQABR の中央 HubSpot MCP サーバーです。FastMCP 上に構築されており、スタンドアロン で動作します — LQABR モノレポへの依存はありません。
RUNNING.md — 実行方法: セットアップ、認証情報、両方のトランスポート、agentgateway、トラブルシューティング。 CONSUMING.md — メール / 音声 / スケジューリングエージェントがこれを呼び出す方法: ADK
McpToolset、認証、ワイヤーコントラクト、ツールスコープ。 このファイルは設計の根拠です。上記の2つは手順書です。
LQABR_MCP/
├── hubspot-crm-mcp-server/
│ ├── __init__.py (empty, per mcp.odt Step 4)
│ ├── hubspot_crm_server.py the launcher — mcp.odt Step 5
│ ├── test_server.py remote smoke test — handoff S8
│ ├── hubspot_mcp/ THE IMPLEMENTATION (vendored)
│ │ ├── __init__.py provenance + drift warning — read this
│ │ ├── server.py the FastMCP object + the two tools
│ │ ├── secrets.py Secret Manager access
│ │ ├── obs/ the four logs: system/process/audit/tokens
│ │ │ ├── __init__.py
│ │ │ ├── context.py RunContext, run_id, lead_ref_id
│ │ │ └── loggers.py
│ │ └── hubspot/
│ │ ├── __init__.py
│ │ ├── crm.py upsert_lead_profiles / get_lead_profile
│ │ ├── auth.py get_hubspot_token(), short-lived M2M
│ │ ├── schema.py LeadProfile, PushResult, property mapping
│ │ └── failures.py failure taxonomy + CircuitBreaker
│ └── tests/ 61 tests ported from the mono-repo
├── .vscode/hubspot_mcp.json stdio config — mcp.odt Steps 7–8
├── Dockerfile Cloud Run image — handoff S4
├── .dockerignore
├── pytest.ini
├── .python-version 3.12, matching the Dockerfile
├── .env.example mode switches + secret IDs (no values)
├── pyproject.toml
├── RUNNING.md step-by-step runbook — start here
├── CONSUMING.md client integration guide for other agents
└── README.mdこれはフォークであり、移動ではありません
hubspot_mcp/ は、モノレポの実装のコピーです。インポート行のみが書き換えられました。ロジック、フィールド名、HubSpot プロパティ名は変更されていません。diff で確認済み — 9 ファイルすべてで差があるのは以下の行のみです:
- from lqabr_core.obs import get_obs, utc_now_iso
+ from ..obs import get_obs, utc_now_iso
- from lqabr_core.leadgen.secrets import ...
+ from ..secrets import ...モノレポ側にもまだコピーが必要です。削除しないでください。
モジュール | その他の使用先 |
| lead_profile/src 内 8 ファイル、text_voice/src 内 2 ファイル、 |
| lead_profile 内 12 ファイル( |
| lead_profile |
結果: 同じフィールド名と HubSpot プロパティ名を持つ HubSpot への書き込みパスが 2 つ存在することになり、データコントラクトはそれらの名前がコントラクトであると定義しています。crm.py への修正、認証の変更、HubSpot プロパティの名称変更はすべて、手動で両方の場所に適用する必要があります。それを強制するものは何もありません。そのための予算を組むか、どちらか片方を廃止する計画を立ててください。
Related MCP server: LQABR HubSpot MCP Server
なぜこれがモノレポの外に存在するのか
LQABR リポジトリのルートには、文字通り mcp という名前のトップレベルパッケージがあり、これが FastMCP が依存する mcp SDK を隠蔽(シャドウ)します。リポジトリ内から実行すると FastMCP 自身のインポートが壊れます。
LQABR リポジトリルートを PYTHONPATH に追加しないでください。
ライブラリ: FastMCP(公式 SDK ではありません)
依存関係は fastmcp>=3.4.7 です。mcp>=2.0 は追加しないでください — この2つは互いに排他的です:
fastmcp3.4.7 は推移的にmcp<2.0,>=1.24.0を固定します(mcp 1.29 をインストールします)。公式 SDK のサーバークラスである
MCPServerはmcp>=2.0にのみ存在します。
したがって、プロジェクトは FastMCP または MCPServer のどちらか一方のみを使用でき、両方は使用できません。こちらは FastMCP を使用します。ここでは MCPServer をインポートしません。
知っておくべき2つの結果:
トランスポート名が異なります。 FastMCP の HTTP トランスポートは
"http"です("streamable-http"はエイリアスとして受け入れられます)。エンドポイントパスのキーワード引数はpath=です。公式 SDK ではstreamable_http_path=と記述します。型のフィールドが異なります。 mcp が 1.x に固定されているため、バンドルされた型は camelCase を使用します:
Tool.inputSchema、input_schemaではありません。
モノレポの lqabr_core/leadgen/server.py は依然として MCPServer を使用しています。これは、フォークに加えて、2 つのコードベース間の2つ目の乖離点となっています。
実行方法
uv sync
# stdio — local ADK MCPToolset, or the VSCode config in .vscode/
uv run python hubspot-crm-mcp-server/hubspot_crm_server.py
# HTTP — what Cloud Run runs
uv run python hubspot-crm-mcp-server/hubspot_crm_server.py \
--transport http --host 0.0.0.0 --port 8080認証情報
tools/list には何も必要ありません。ツールの 呼び出し には HubSpot トークンが必要であり、それは Secret Manager から取得されます — コンテキスト §7.6 / CLAUDE.md §5: シークレットは決してハードコードされず、コミットもされません。
cp .env.example .env # holds mode switches + secret IDs only
gcloud auth application-default login
uv sync --extra gcp --extra test # both extras; --extra gcp alone drops pytest
export UV_ENV_FILE=.env
uv sync --extra <x>はそのエクストラセット のみ を同期するため、単独で--extra gcpを実行すると pytest がアンインストールされます。test_server.pyは pytest なしで CLI として実行できますが、uv run pytestでは明らかに pytest が必要です。
.env はシークレットの値を一切保持しません — HUBSPOT_AUTH_MODE、LQABR_SECRET_PROJECT、およびシークレットの ID だけです。トークン自体は実行時に Secret Manager API 経由で取得され、メモリ内に保持され、決してログに記録されず(監査行には長さと最後の4文字のみが記録されます)、900秒間キャッシュされるため、ローテーションに再デプロイは不要です。
auth.py と secrets.py はどちらもクローズドフェイルです — 未設定は明示的なエラーを意味し、暗黙のデフォルトはありません。
LQABR_SECRET_BACKEND=envは、オフライン作業や CI のための最後の手段として存在します。secrets.pyはこれを「ローカル開発、CI、およびテストのみ」に限定しており、自動的なフォールバックはありません — 明示的に入力する必要があります。これにより、生きている認証情報がディスク上のファイルに置かれます。Cloud Run では決して設定しないでください。
すべてのフラグには環境変数のデフォルト (MCP_TRANSPORT、MCP_HOST、PORT、MCP_PATH) があるため、コンテナは引数なしで起動します — Cloud Run が PORT を注入します。
テスト
uv run pytest # 61 tests, all passing, none touch real HubSpotpytest.ini は hubspot-crm-mcp-server/ をパスに追加するため、import hubspot_mcp が解決されます — フォルダ自体はハイフンが含まれているためパッケージにできません。
コントラクトは9フィールドではなく10フィールド
LeadProfile は10個持ちます: 全員が文書化する9つに加えて、contact_name(firstname/lastname マッピングのために追加)です。モノレポの test_wrapper_shape_is_the_nine_fields_plus_ids はまだ9をアサートしており、そこで失敗していました — schema.py はバイト単位で同一であるため、このプロジェクトはそれを引き継ぎました。
2026-08-18 に解決: コードは正しく、数値が古くなっていました。テストは test_wrapper_shape_is_the_contract_fields_plus_ids に改名され、カウントではなくフィールド名をアサートするようになったため、次の追加は読みやすい形で失敗します。
同じ修正がまだモノレポにも必要です — そこでのアサーションは変更されておらず、まだ赤です。「9フィールド」と記述しているドキュメントも修正されるべきです。
デプロイされたサーバーのテスト
# local
uv run python hubspot-crm-mcp-server/test_server.py
# Cloud Run — mints a Google ID token via ADC
uv run python hubspot-crm-mcp-server/test_server.py \
--url https://lqabr-mcp-server-xxxx.a.run.app/mcp --auth google
# one real read against HubSpot — writes nothing
... --auth google --employee-id EMP-00042設計上読み取り専用: upsert_lead_profile を呼び出すことはありません。X-LQABR-Run-Id を送信して、サーバーの監査ログが呼び出しを属性付けできるようにします(B10 修正)。
IDトークンのオーディエンスは、サービスベース URL の
/mcpを除いた部分です。スクリプトが自動的に除去します。
クライアントは fastmcp.Client を使用します。これは初期化ハンドシェイクを処理するため、このファイルにはセッション配管はありません。ヘッダーは StreamableHttpTransport に乗ります。これで参照サンプルのライブラリと一致しました。
Cloud Run へのデプロイ
2段階の uv ビルド、非rootの mcp ユーザー、PID1 は Python なので SIGTERM はきれいにドレインされます。自己完結型: 兄弟フォルダーや git 依存関係はありません。
docker build -t lqabr-mcp-server .uv.lock をコミットし、本番環境の前に同期を --frozen に切り替えてください。
次に S5–S8: mcp-server-sa を作成し、lqabr-hubspot-access-token に secretmanager.secretAccessor を付与し、--no-allow-unauthenticated でデプロイし、3つのエージェントサービスアカウントに roles/run.invoker を付与し、test_server.py をそのサーバーに向けます。
公開されるツール
ツール | 方向 | 備考 |
| 書き込み | 会社の upsert → 連絡先の upsert → 関連付け。冪等。 |
| 読み取り | コントラクトフィールド + |
重複排除: 連絡先は employee_id、会社は company_id で行います。メールはカスタム email_id プロパティに格納されます。
未解決項目。 登録されたツール名は
upsert_lead_profile(単数形)ですが、設計ドキュメント、セッションハンドオフ、プロジェクトの指示はすべてupsert_lead_profiles(複数形)と言っており、基盤となる関数も複数形です。これはワイヤーコントラクトです — クライアントが配線する前に解決してください。
認証情報
2種類あり、決して混同されません:
Google ID トークン は、エージェント → このサーバー(Cloud Run サービス間)を証明します。
HubSpot M2M トークン は、このサーバー → HubSpot を証明し、サーバー内部で呼び出しごとに発行されます。呼び出し元はこれを見ることはありません。
このサービスは HubSpot 認証情報の唯一の保持者です。
検証済み
fastmcp 3.4.7(これにより mcp 1.29 が導入された)、requests、pytest のみを含むクリーンな venv で — lqabr_core が存在せず(ModuleNotFoundError 確認済み)、MCPServer が存在せず(ImportError 確認済み):
プロジェクト内のどこにも
lqabr_coreのインポートはゼロ移植されたテストスイート: 61 パス、0 失敗
stdio —
tools/listが両方のツールを返し、PYTHONPATHは完全に除去--transport http— ホスト/ポート/パスにバインド、完全なfastmcp.Clientセッション--transport streamable-http— エイリアス受け入れ、同じエンドポイントを提供test_server.py— 実行中のサーバーに対して PASS、終了コード 0pytest下のtest_server.py— サーバーありで3パス、サーバーなしで3スキップ実際の
call_toolが本番チェーンに到達: トランスポート → ツール →crm.py→auth.py→secrets.py、意図的なAuthConfigError/SecretConfigErrorガードでのみ失敗(テスト環境に GCP 設定がない)。配線はエンドツーエンドで証明されました。
未検証: Docker イメージは一度もビルドされていません — これらのファイルが組み立てられた場所で Docker デーモンは利用できませんでした。実際の HubSpot に触れたものは何もなく、すべてのテストは偽の環境を使用しています。
Available Tools
4 toolsget_blog_summaryA
Read one blog summary row by its publication timestamp. Read-only. Returns the seven contract fields plus ticket_hs_id. Not-found is a VALID result — found is false and summary is null — never an error. Check warnings: a non-empty list means more than one row shares this timestamp and the first was returned.
| Name | Required | Description | Default |
|---|---|---|---|
| blog_published_at | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description takes full responsibility for behavioral transparency. It clearly states the tool is read-only, describes the return fields and the non-error 'not-found' behavior, and warns about potential ambiguity with shared timestamps. The only minor omission is not specifying the exact return structure or whether it includes pagination.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is four sentences, each with distinct value: purpose, safety, error handling, and edge-case warning. It is front-loaded with the core action, no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple single-parameter tool and presence of an output schema (which handles return structure), the description covers purpose, behavioral edges, and warnings adequately. The omission of timestamp format detail is minor and acceptable for a tool with just one parameter and no nested objects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains that the single parameter 'blog_published_at' is a publication timestamp for identifying the row, which aligns with the schema. However, it does not provide format details (e.g., ISO 8601) or validation constraints beyond that, leaving the agent to infer from context.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description specifies a clear verb ('read'), a specific resource ('blog summary row'), and the unique identifier ('publication timestamp'). It also distinguishes from siblings like 'upsert_blog_summary' and 'get_lead_profile' by focusing on reading a blog summary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context on when to use this tool: reading a single blog summary by timestamp. It does not explicitly mention when not to use it or alternatives, but the sibling list and the read-only nature imply a contrast with upsert_blog_summary. Some guidance on the 'not-found' and 'warnings' behavior aids correct usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_lead_profileA
Read one lead's current state from HubSpot. Read-only. Returns the nine contract fields plus contact_hs_id and company_hs_id so you can write status back without re-searching. Check company_resolved: when false, the company fields are unpopulated and warnings explains why.
| Name | Required | Description | Default |
|---|---|---|---|
| No | |||
| employee_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden for behavioral disclosure. It covers read-only safety, enumerates the returned fields, and explains the company_resolved flag and warnings. This is substantial context for a read tool, though it does not cover error cases or edge behaviors in detail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no redundancy. The first sentence states the core purpose and safety, and the second adds essential behavioral details. Every word contributes value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read tool with an output schema, the description covers the main aspects: purpose, return fields, and a key data-quality flag. However, it omits parameter usage, which is a notable gap given the low schema coverage. The output schema likely documents return values, so that is not a deficiency.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It does not mention email or employee_id at all, nor explain how the lead is identified, whether identifiers are mutually exclusive, or what happens if neither is provided. The schema only provides types and defaults, leaving the semantic meaning entirely unexplained.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Read one lead's current state from HubSpot.' It uses a specific verb and resource, and explicitly declares read-only behavior. It differentiates from siblings by focusing on leads rather than blog summaries and by contrasting with upsert operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context by stating the returned IDs are 'so you can write status back without re-searching,' suggesting it is the read-before-write companion to upsert_lead_profile. It also instructs to check company_resolved for interpreting data. However, it does not explicitly name alternatives or provide when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
upsert_blog_summaryA
Put one published blog post into HubSpot: the ONLY writer to the blog summary store. Searches on blog_published_at, then updates that row or creates one — a single upsert, so calling it twice for the same post is safe and does not duplicate. Returns the ticket id and whether the row was created or updated. blog_industry must be exactly one of FINANCIAL_SERVICES, LEGAL_SERVICES, HEALTHCARE — a near-miss selects zero leads and raises no error. Bad data is recorded and reported as failed, never silently dropped.
| Name | Required | Description | Default |
|---|---|---|---|
| subject | Yes | ||
| blog_summary | Yes | ||
| blog_industry | Yes | ||
| summary_ref_id | No | ||
| blog_published_at | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and excels: it reveals the upsert logic (no duplicates), mentions the return value (ticket id and created/updated status), warns about exact value requirements for blog_industry, and states that bad data is recorded and reported as failed. This is comprehensive behavioral disclosure beyond what any annotation could provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact, every sentence adds critical information, and key points are front-loaded. It covers purpose, safety, return value, parameter constraints, and error handling without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 5 parameters, an output schema, and no annotations, the description provides all necessary behavioral context including upsert semantics, exact enum values, and failure behavior. The return value is described, and the output schema structure is implied but not needed in detail. This is complete for an agent to use the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage, so the description must compensate. It explicitly explains the blog_industry parameter's allowed values and failure behavior, and implies the meaning of blog_published_at as the search key. It does not detail subject, blog_summary, or summary_ref_id, but the overall intent is clear enough given the tool's purpose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool puts a blog post into HubSpot using an upsert strategy, specifies it is the only writer to the blog summary store, and distinguishes itself from siblings by focusing on blog summaries rather than lead profiles. The verb 'put' combined with 'published blog post' and 'upsert' gives a concrete, specific purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states this is for published blog posts and mentions that calling it twice is safe due to upsert behavior. It does not explicitly list when not to use it or name alternatives among siblings, but the sibling tools (upsert_lead_profile, get_lead_profile, get_blog_summary) have different focuses, so the usage context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
upsert_lead_profileA
Create or update one lead in HubSpot: upserts the Company, upserts the Contact, and associates them. Creating and updating are ONE upsert, so calling this twice for the same lead is safe and does not duplicate. Returns the HubSpot ids. Bad data is recorded and reported as failed, never silently dropped.
| Name | Required | Description | Default |
|---|---|---|---|
| No | |||
| phone | No | ||
| industry | No | ||
| job_title | No | ||
| company_id | Yes | ||
| employee_id | Yes | ||
| lead_ref_id | No | ||
| annual_revenue_m | No | ||
| decision_maker_flag | Yes | ||
| frequency_of_purchase | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of disclosing behavior. It reveals the internal operations (upsert Company, upsert Contact, associate), idempotency, return value (IDs), and error handling (bad data recorded and reported, never silently dropped). This is comprehensive for safety and side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, each earning its place: first sentence defines the action, second sentence emphasizes idempotency, third sentence covers error handling and return values. No redundancy or unnecessary detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description adequately covers purpose, safety, and error behavior, and the output schema covers return values. However, given the high parameter count (10) and zero schema descriptions, the lack of parameter guidance leaves the description incomplete for correct invocation. It is sufficient for understanding what the tool does but not for parameter selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain the purpose or format of any of the 10 parameters (e.g., what employee_id, company_id, decision_maker_flag represent). The description must compensate for the lack of schema parameter descriptions, but it fails to do so, leaving the agent to guess parameter semantics from names alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Create or update one lead'), the resource ('lead in HubSpot'), and specifics that it upserts both Company and Contact and associates them. It distinguishes itself from sibling tools like 'get_lead_profile' (read-only) and 'upsert_blog_summary' (different entity).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains that calling the tool twice is safe and does not duplicate, indicating idempotency. However, it does not provide explicit guidance on when to use this tool versus alternatives (e.g., get_lead_profile for reads) or when not to use it, leaving usage context implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.0- First observed
get_blog_summary - First observed
get_lead_profile - First observed
upsert_blog_summary - First observed
upsert_lead_profile
TDQS
Scored across 4 tools
The tools clearly separate lead and blog summary domains, but within each domain the upsert and get tools have high semantic overlap in purpose, though descriptions help distinguish read vs. write.
All tool names follow a consistent verb_noun pattern (upsert/get + lead_profile/blog_summary) with snake_case, very predictable. Minor point: 'upsert' is a valid term but less common than 'create_or_update'.
4 tools is a reasonable count for a focused HubSpot integration covering two entities (lead and blog summary) with basic CRUD. It's slightly thin but appropriate for a narrow scope.
Coverage is incomplete: lead profiles have upsert+get but no ability to delete or list/filter leads. Blog summaries similarly lack delete and listing. The domain surface has notable missing operations that could hinder workflows.
Maintenance
Related MCP Connectors
The HubSpot MCP Server acts as a bridge that enables AI assistants and Large Language Models to securely interact with HubSpot CRM data through natural conversation, without requiring users to understand complex API structures. It provides read-only access to standard CRM objects (contacts, companies, deals, tickets, products, invoices, and more) and their associations, secured via OAuth 2.0, allowing AI agents to perform tasks like summarizing deals, fetching company updates, and looking up record changes.
Give AI agents real hands on LinkedIn: sourcing, AI qualification, HubSpot-native attribution.
34-tool GTM gateway: CRMs, ad platforms, analytics, Google Workspace, AWS, and LLM orchestration.
Run B2B outreach from your AI agent: 250+ tools for campaigns, leads, LinkedIn and email workflows.
Related MCP Servers
- AlicenseAqualityCmaintenanceExposes HubSpot CRM data and actions as tools for AI agents, enabling contact lookup, company search, contact creation, and activity logging via natural language.4904 npmMIT
- FlicenseNot gradedqualityCmaintenanceEnables interaction with HubSpot CRM through two tools (upsert_lead_profile and get_lead_profile) for managing lead profiles, using FastMCP with Secret Manager-based authentication and supporting both stdio and HTTP transports.-
- FlicenseNot gradedqualityAmaintenanceEnables AI assistants to interact with HubSpot CRM data, providing tools to create and retrieve contacts, companies, activities, and conversations, plus semantic search across previously retrieved data. Built-in vector storage and caching help overcome HubSpot API limitations and improve response times.-
- FlicenseNot gradedqualityAmaintenanceEnables AI assistants to interact with HubSpot CRM data for creating and retrieving contacts, companies, activity, and conversations, with built-in vector storage and caching for faster semantic search.-