HubSpot MCP

Live

OAUTH 2.0

CRM & SALES

Marketing

Connect to HubSpot MCP. Manage CRM contacts, companies, deals, landing pages, campaigns, and analytics from your AI workflows.

  • Acts as the user: Every tool call runs as the authorizing user. Access and audit trail stay intact.
  • Credentials stay vaulted: AES-256 encrypted, resolved at request time, never stored in LLM context.
  • Scoped before every call: Per-user permissions enforced automatically. 90-day audit trail included.
HubSpot MCP
agent · Acme Q3
Run
Get Campaign Analytics in HubSpot MCP
S
hubspotmcp_get_campaign_analytics
85ms
HubSpot MCP agent
Retrieve engagement analytics (sessions, new contacts, influenced contacts) for one or more hubspot campaigns..
Sources: HubSpot MCP
hubspotmcpmcp
1 tool call
18:29
Message Claude...

HubSpot MCP tools for AI agents

CALL ANY TOOL
12 tools covering get.
hubspotmcp_get_campaign_analytics
Retrieve engagement analytics (sessions, new contacts, influ
Retrieve engagement analytics (sessions, new contacts, influenced contacts) for one or more hubspot campaigns.
Parameters
Name
Type
Required
Description
requests
array
Optional
Required: List of analytics requests to process. Each entry is a full CampaignAnalyticsRequest. Maximum 20 requests per batch.
hubspotmcp_get_campaign_asset_metrics
Retrieve performance metrics for assets (emails, landing pag
hubspotmcp_get_campaign_contacts_by_type
Retrieve paginated contact ids for a campaign filtered by at
hubspotmcp_get_content_analytics_report
Run a content analytics report across hubspot landing pages,
hubspotmcp_get_crm_objects
Fetch multiple crm objects of the same type in a single requ
hubspotmcp_get_organization_details
Retrieve organization-wide details including teams, job titl
hubspotmcp_get_properties
Fetch property definitions for a crm object type, including
hubspotmcp_get_user_details
Return details for the current user including team membershi
hubspotmcp_manage_crm_objects
Create or update crm objects with properties and association
hubspotmcp_manage_landing_page
Read from or write to hubspot landing pages. specify the act
hubspotmcp_query_crm_data
Query hubspot crm data using sql with hubspot-specific exten
hubspotmcp_render_landing_page_ui
Display the landing page card (preview image and open-in-edi
Build your Agent
Same auth pattern across every framework.
Python · LlamaIndex
from langchain_mcp_adapters.client import MultiServerMCPClient
from scalekit import ScalekitClient

client = ScalekitClient(env_url=ENV_URL, client_id=CLIENT_ID, client_secret=SECRET)
token = client.agent.get_token(user_id="user_id", connector="hubspotmcp")

mcp = MultiServerMCPClient({
"hubspotmcp": {
"url": "https://mcp.scalekit.com/hubspotmcp",
"headers": {"Authorization": "Bearer " + token}
}
})
tools = await mcp.get_tools()
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const client = new ScalekitClient({ envUrl, clientId, clientSecret });
const token = await client.agent.getToken({ userId: "user_id", connector: "hubspotmcp" });

const openai = new OpenAI();
// Connect to MCP at https://mcp.scalekit.com/hubspotmcp
// Pass: Authorization: Bearer + token
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const client = new ScalekitClient({ envUrl, clientId, clientSecret });
const token = await client.agent.getToken({ userId: "user_id", connector: "hubspotmcp" });

const anthropic = new Anthropic();
// Connect to MCP at https://mcp.scalekit.com/hubspotmcp
// Pass: Authorization: Bearer + token
from google.adk.agents import LlmAgent
from scalekit import ScalekitClient

client = ScalekitClient(env_url=ENV_URL, client_id=CLIENT_ID, client_secret=SECRET)
token = client.agent.get_token(user_id="user_id", connector="hubspotmcp")
# Connect to MCP at https://mcp.scalekit.com/hubspotmcp
# Pass: Authorization: Bearer + token
Try these prompts
Paste any prompt into your agent to get started.
Get started
Copy the prompt
Copied
Retrieve usage instructions and guidance for one or more HubSpot MCP tools?
Copy the prompt
Copied
Submit user feedback about the HubSpot MCP connector to HubSpot?
Advanced
Copy the prompt
Copied
Find the most relevant CRM property definitions using keyword-based search?
Copy the prompt
Copied
Display the landing page card (preview image and open-in-editor link) in the chat UI?
SEE HOW AUTH WORKS
User authorises once. Every agent call after uses their token with scope enforcement.
1
Authorize
Your user connects
HubSpot MCP
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
HubSpot MCP
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
HubSpot MCP
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
HubSpot MCP
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other connectors.
SALES
Outbound prospecting agent
Build targeted prospect lists with Apollo, enrich with firmographic data, and draft personalised outreach. Runs on a schedule.
GTM
HubSpot to Slack updates agent
Watch HubSpot deal stage changes and post structured updates to the right Slack channel. Reps stop checking the CRM all day.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
Other connector libraries treat auth as a demo afterthought.
01.
Shared tokens break per-user analytics
A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential.
// shared token
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
One connector today. Ten tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions

Does the agent access HubSpot as the user or as a shared key?
As the user. Each workspace member authorizes once and Scalekit resolves their credential at request time. Audit logs attribute every action to that user, not a shared service account.

Where is the HubSpot OAuth token stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. Refresh is automatic. Revocation is a single dashboard action. Tokens never appear in prompts, logs, or LLM context.

Can I limit what the agent is allowed to do in HubSpot?
Yes. Pass a tool name filter to listScopedTools so the marketing agent only sees the subset you authorize. Pre-API-call scope checks block out-of-policy actions before the request reaches HubSpot.

What happens when a user revokes HubSpot access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.

Can the agent work across multiple HubSpot portals?
Yes. Each portal is its own connected account with per-user, per-portal vault namespacing. Campaign analytics and CRM reads inherit the user's HubSpot seat permissions.

Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""hubspotmcp"": {
""url"": ""https://mcp.scalekit.com/hubspotmcp"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.hubspotmcp]
url = ""https://mcp.scalekit.com/hubspotmcp""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""hubspotmcp"": {
""url"": ""https://mcp.scalekit.com/hubspotmcp"",
""type"": ""http""
}
}
}