Insightly MCP server for AI agents

Live

API KEY

CRM

CRM & Sales

Insightly gives your agent CRM work across your Insightly instance: search and update contacts, leads, organisations, and opportunities, move deals through pipeline stages, and manage projects, tasks, notes, and tags.

  • Per-user credentials: each call uses the actual user's API key, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
Insightly
agent · Acme Q3
Run
Which opportunities did we win this month?
S
insightly_search_opportunities
116ms
CRM agent
4 opportunities were won this month, worth $96,500 combined. The largest is the Contoso annual plan at $42,000.
Sources: Insightly, 4 opportunities
insightly
4 opportunities
18:29
Message Claude...

Tools your CRM agent reaches for on Insightly, scoped per user.

CALL ANY TOOL
108 tools for CRM in Insightly: search and update contacts, leads, organisations, and opportunities, change pipeline stages and states, and manage projects, tasks, events, notes, and tags.
insightly_add_contact_note
Add contact note
Add a note to one contact in Insightly. Returns the created note record including its NOTE_ID. Use this to log a call, meeting or comment against a contact; use insightly_update_note to edit a note later.
Parameters
Name
Type
Required
Description
id
integer
Required
Numeric ID of the contact to attach the note to.
title
string
Required
Short title of the note (max 255 characters).
body
string
Optional
Text body of the note.
insightly_add_lead_tag
Add lead tag
insightly_add_organisation_note
Add organisation note
insightly_create_contact
Create contact
insightly_create_opportunity
Create opportunity
insightly_delete_contact
Delete contact
insightly_delete_opportunity
Delete opportunity
insightly_get_contact
Get contact
insightly_get_email
Get email
insightly_get_lead
Get lead
insightly_get_opportunity_state_history
Get opportunity state history
insightly_get_project
Get project
insightly_list_contact_emails
List contact emails
insightly_list_contacts
List contacts
insightly_list_events
List events
insightly_list_lead_statuses
List lead statuses
insightly_list_milestones
List milestones
insightly_list_opportunity_emails
List opportunity emails
insightly_list_opportunity_tasks
List opportunity tasks
insightly_list_organisations
List organisations
insightly_list_products
List products
insightly_list_projects
List projects
insightly_list_task_categories
List task categories
insightly_search_contacts
Search contacts
insightly_search_events
Search events
insightly_search_opportunities
Search opportunities
insightly_search_projects
Search projects
insightly_update_contact
Update contact
insightly_update_note
Update note
insightly_update_organisation
Update organisation

For more tools, view docs.

Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// Insightly tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["insightly"], toolNames: [
    "insightly_search_opportunities",
    "insightly_update_opportunity_state",
    "insightly_add_opportunity_note"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Mark the Contoso annual plan opportunity as won and add a note" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["insightly"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Mark the Contoso annual plan opportunity as won and add a note" }],
  tools,
});

// Execute the tool call with the user's vaulted Insightly API key
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["insightly"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Mark the Contoso annual plan opportunity as won and add a note" }],
  tools,
});

// Tool call runs with the user's vaulted Insightly API key
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["insightly"] }, pageSize: 100,
});

const agent = new Agent({
  name: "crm_agent",
  model: "gemini-2.5-pro",
  instruction: "Insightly tools scoped to this user",
  tools,
});

await agent.run("Mark the Contoso annual plan opportunity as won and add a note");
Try these prompts
Copy any prompt into your agent. Each maps directly to a Insightly tool. Click to copy, paste into your agent, done.
Contacts and leads
Copy the prompt
Copied
Find contacts at contoso.com in Insightly.
Copy the prompt
Copied
Create a lead for Maria Lopez from Fabrikam.
Copy the prompt
Copied
List the leads tagged webinar-oct.
Opportunities
Copy the prompt
Copied
Which opportunities are in the Proposal stage?
Copy the prompt
Copied
Mark the Contoso annual plan opportunity as won.
Copy the prompt
Copied
Add a note to the Northwind opportunity summarizing today's call.
Projects and tasks
Copy the prompt
Copied
List the open tasks linked to the Fabrikam organisation.
Copy the prompt
Copied
Create a task to send the Northwind proposal by Friday.
Copy the prompt
Copied
Move the Contoso onboarding project to the next pipeline stage.
SEE HOW AUTH WORKS
Each user connects their own Insightly API key once, and Scalekit sends it with every call. Keys stay vaulted, every call is scope checked, and every action is logged.
1
Authorize
Your user connects
Insightly
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Insightly
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Insightly
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Insightly
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other CRM and sales connectors.
GTM and RevOps Teams
CRM AI agent
Reads the Granola transcript after every call, extracts next steps and updates the HubSpot record, drafts the follow-up in Gmail, and confirms in Slack, all on the rep's own delegated OAuth.
GTM and RevOps Teams
Deal intelligence agent
Pulls recent Gong calls, scores deal risk with an LLM, cross-references the record in Attio, and DMs each owner their at-risk deals in Slack. Every read is scoped to that rep's own access.
GTM and RevOps Teams
Revenue forecast commentary
Pulls open pipeline from Salesforce and HubSpot, calculates coverage against quota, flags at-risk stages, posts commentary to Slack, and logs every snapshot to Google Sheets.
Test other agents
See the same per-user auth pattern across other CRM and sales connectors.
GTM
CRM AI agent
Turn each Granola call transcript into a HubSpot record update, a drafted Gmail follow-up, and a Slack recap.
SALES
Deal intelligence agent
Score Gong call risk with an LLM, cross-reference the Attio record, and DM each owner their at-risk deals in Slack.
GTM
Revenue forecast agent
Score pipeline coverage against quota across Salesforce and HubSpot, post forecast commentary to Slack, log snapshots to Sheets.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared Insightly API key looks fine in a demo. In production every record change looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared key
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Insightly today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access Insightly as the user or through a shared API key?
As the user. Each user connects their own Insightly API key once, and Scalekit sends it with every call. Audit logs attribute every record change and note to that user, not a shared service account.
Where is the Insightly API key stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. To rotate it, the user reconnects with a new API key. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.
Can I limit what the agent does in Insightly?
Yes. Filter by tool name in listScopedTools to expose only what you want, for example read and search tools without insightly_delete_opportunity or insightly_delete_contact, which delete records from the CRM. Scalekit also enforces scope checks before every API call.
What happens when a user revokes Insightly access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Which Insightly instance does the agent work on?
The instance the user's Insightly API key belongs to. insightly_get_current_user returns the user that owns the key, and insightly_get_instance returns the instance name and plan. Every record the agent reads or changes is in that instance.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""insightly"": {
""url"": ""https://mcp.scalekit.com/insightly"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.insightly]
url = ""https://mcp.scalekit.com/insightly""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""insightly"": {
""url"": ""https://mcp.scalekit.com/insightly"",
""type"": ""http""
}
}
}