Skip to main content
Glama
116,626 servers. Updated
20 Best CRM MCP Servers: compared and ranked, November 2026Ranked from 898 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to access a CRM over stdio, with Microsoft Entra device-code sign-in so queries run as the signed-in user, and tools to start/check login and search CRM accounts.
    2 npm
    ISC
  • A
    license
    Not graded
    quality
    D
    maintenance
    A reference MCP server demonstrating safe agent access to multi-tenant CRM data with tenant isolation enforced in the data layer, role-based permissions, and human confirmation on writes.
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    A remote MCP server deployable to Cloudflare Workers with built-in Google OAuth authentication, providing tools like addition and serving as a reference for OAuth integration.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    A secure MCP server for CRM operations (contacts and deals) with Auth0 OIDC authentication, role-based access control (sales-rep read-only vs sales-manager full access), and on-behalf-of token exchange.
    -
  • A
    license
    A
    quality
    A
    maintenance
    Enables governed access to a canonical Customer Graph across CRM and customer-service records, with per-field provenance, propose-only identity merges, field-level masking, records-only reply drafting, tiered policy and kill-switch enforcement, and hash-chained receipts for auditable reads and internal writes.
    9
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides safe, read-only CRM access for AI assistants with per-key scopes, field masking, rate limits, and a full audit log of allowed and blocked actions.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to autonomously scan repositories and staged changes for leaked secrets, move exposed credentials into environment files, purge secrets from Git history, and verify remediation through deterministic tools.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to securely access and act on CRM, order, support, and automation systems through the Model Context Protocol, with authentication, authorization, audit logging, and guardrails.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to access corporate HR and CRM APIs on behalf of a specific user through OAuth 2.1 token verification, deny-by-default RBAC, token exchange, audit logging, PII masking, and untrusted-output envelopes.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables EU Cyber Resilience Act compliance assessments, including classifying product obligations, auditing pipelines for gaps, generating hash-chained attestations, and cross-referencing NIS2.
    34 PyPI
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An MCP server that helps software makers meet EU Cyber Resilience Act obligations, including scope classification, Article 13(2) risk assessment, Annex I requirements with evidence, vulnerability and incident tracking with Article 14 reporting clocks, and Annex VII technical file assembly.
    AGPL 3.0
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables an AI agent to turn a messy CRM account list into a ranked list of accounts to work, with every step authorized, scoped, rate limited, and replayable from an audit log.
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    MCP server for Siebel CRM with HTTP/SSE transport, enabling secure access to Siebel data and operations like accounts, contacts, opportunities, and queries. Designed to be deployed on Phala Cloud TEE for credential protection.
    -
  • A
    license
    A
    quality
    C
    maintenance
    WaxSeal MCP gives AI agents cryptographic identity — verify any WaxSeal fingerprint, check Ed25519 signatures, and gate irreversible actions with human-signed approval tokens before execution. It connects Claude Desktop, Cursor, and Windsurf to the WaxSeal trust network so agents can prove who authorized an action and reject tampered credentials in under a second.
    6
    8 npm
    2
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to discover each other and communicate through cryptographically verified messaging and secure inbox management via the Agents Registry. It provides tools for Ed25519-based identity authentication, message signing, and agent discovery across domains.
    6
    2 npm
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    MCP server for Thales CipherTrust Secrets Management (powered by Akeyless) enabling secrets, DFC keys, authentication methods, roles, targets, analytics management, and intelligent app development with hardcoded secret migration.
    12
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents and their hosts to record actions, tool calls, and human approvals in an append-only, hash-chained log; verify tamper evidence; mask secrets; retrieve recent events; and export audit-ready JSON or CSV on self-hosted infrastructure.
    4
    Apache 2.0
  • A
    license
    B
    quality
    A
    maintenance
    Recued is a server you run yourself. It sits between AI agents and your accounts. Your mail, calendar, files, and CRM records stay on a machine you control. An agent gets in over MCP, through a contract that lists exactly what it may do. Every action it takes passes one gate. By default, anything that writes or deletes waits for your yes.
    46
    2
    AGPL 3.0
  • A
    license
    C
    quality
    C
    maintenance
    Free email for AI agents with hardware attestation, real SMTP/IMAP/JMAP, and real-time notifications.
    2
    32 PyPI
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Lets AI assistants manage software license keys end to end, including issuing, suspending, revoking, freeing machines and IPs, blocking leaked keys, looking up customers, building automations, reading validation stats, and adding license checks to code.
    MIT No Attribution
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI assistants to pull live free proxy lists filtered by country, protocol, and anonymity, run real liveness and anonymity checks against candidate proxies, and look up geolocation, ASN, and network details for public IP addresses. All tools are read-only and require no API key or installation.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to discover governed capabilities, inspect machine-readable contracts, and request policy-checked procurements with signed receipts and audit trails.
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enforces security policies between AI assistants and Splunk by inspecting every search, mapping users to roles, and requiring human approval for write actions.
    1
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables network security scanning using Nmap through MCP protocol. Supports quick port scans, full port scans with service detection, and custom Nmap commands with async task management.
    3
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables LLM agents to securely use credentials like passwords and API keys without exposing them in the context window, through encrypted storage and proxy-based injection.
    4 npm
    3
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Provides AI agents with free, keyless QA and LLM-testing tools over Streamable HTTP, including prompt-injection and PII scans, TLS/header/CORS audits, hallucination and RAG checks, eval contracts, and JSON/YAML/CSV utilities across the full server or three focused packs. Every tool returns an actionable verdict such as a pass/fail, score, or diff.
    MIT