Outreach MCP | OAuth 2.0 Outreach connector for AI agents

Tools your sales engagement agent reaches for on Outreach, scoped per user.

CALL ANY TOOL

List sequences and prospects, retrieve activity history, create new prospects, and track open tasks.

outreach_calls_get

Calls get

Retrieve a single call record by ID from Outreach, including direction, outcome, note, recording URL, and related prospect.

Parameters

Name

Type

Required

Description

call_id

integer

Required

The unique identifier of the call to retrieve

outreach_tags_list

Tags list

outreach_tasks_get

Tasks get

outreach_calls_list

Calls list

outreach_users_get

Users get

outreach_tasks_list

Tasks list

outreach_stages_get

Stages get

outreach_users_list

Users list

outreach_call_delete

Call delete

outreach_snippet_get

Snippet get

outreach_stages_list

Stages list

outreach_accounts_get

Accounts get

outreach_calls_create

Calls create

outreach_mailings_get

Mailings get

outreach_tasks_create

Tasks create

outreach_tasks_delete

Tasks delete

outreach_tasks_update

Tasks update

outreach_webhooks_get

Webhooks get

outreach_accounts_list

Accounts list

outreach_mailboxes_get

Mailboxes get

outreach_mailings_list

Mailings list

outreach_prospects_get

Prospects get

outreach_snippets_list

Snippets list

outreach_sequences_get

Sequences get

outreach_webhooks_list

Webhooks list

outreach_templates_get

Templates get

outreach_mailboxes_list

Mailboxes list

outreach_snippet_create

Snippet create

outreach_prospects_list

Prospects list

outreach_snippet_delete

Snippet delete

Build your Agent

Drop the toolkit in, point it at the user, and your sales engagement agent can use Outreach from the first run.

import { ScalekitClient } from "@scalekit-sdk/node";
import { DynamicStructuredTool } from "@langchain/core/tools";
import { createReactAgent } from "@langchain/langgraph/prebuilt";
import { z } from "zod";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["outreach"], toolNames: ["outreach_sequences_list", "outreach_prospects_list", "outreach_prospect_get"] },
  pageSize: 100,
});

const lcTools = tools.map((t) => new DynamicStructuredTool({
  name: t.tool.definition.name,
  description: t.tool.definition.description,
  schema: z.object({}).passthrough(),
  func: async (args) => {
    const { data } = await sk.tools.executeTool({
      toolName: t.tool.definition.name,
      identifier: "user_123",
      params: args,
    });
    return JSON.stringify(data);
  },
}));

const agent = createReactAgent({ llm, tools: lcTools });

import { ScalekitClient } from "@scalekit-sdk/node";
import OpenAI from "openai";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["outreach"], toolNames: ["outreach_sequences_list", "outreach_prospects_list", "outreach_prospect_get"] },
  pageSize: 100,
});

const llmTools = tools.map((t) => ({
  type: "function",
  function: {
    name: t.tool.definition.name,
    description: t.tool.definition.description,
    parameters: t.tool.definition.input_schema,
  },
}));

const resp = await openai.responses.create({
  model: "gpt-4o", input: prompt, tools: llmTools,
});

import { ScalekitClient } from "@scalekit-sdk/node";
import Anthropic from "@anthropic-ai/sdk";

const sk = new ScalekitClient(envUrl, clientId, clientSecret);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["outreach"], toolNames: ["outreach_sequences_list", "outreach_prospects_list", "outreach_prospect_get"] },
  pageSize: 100,
});

const llmTools = tools.map((t) => ({
  name: t.tool.definition.name,
  description: t.tool.definition.description,
  input_schema: t.tool.definition.input_schema,
}));

const msg = await anthropic.messages.create({
  model: "claude-sonnet-4-6", max_tokens: 1024,
  tools: llmTools,
  messages: [{ role: "user", content: prompt }],
});

import { Agent } from "@google/adk/agents";
import {
  MCPToolset, StreamableHTTPConnectionParams,
} from "@google/adk/tools/mcp";

const toolset = new MCPToolset({
  connectionParams: new StreamableHTTPConnectionParams({
    url: "https://mcp.scalekit.com/outreach",
    headers: { Authorization: `Bearer ${userScopedToken}` },
  }),
});

const agent = new Agent({
  name: "agent", model: "gemini-2.0-flash",
  tools: await toolset.getTools(),
});

Try these prompts

Paste any prompt into your agent to start using Outreach.

Sequences & prospects

Copy the prompt

Copied

List all active sequences.

Copy the prompt

Copied

Which sequences have reply rate above 10%?

Copy the prompt

Copied

List prospects in [sequence name].

Copy the prompt

Copied

Get activity for prospect [email].

Action & creation

Copy the prompt

Copied

Create a prospect: [name], [email], account [id].

Copy the prompt

Copied

List open tasks assigned to me.

Copy the prompt

Copied

Find prospects with no activity in 14 days.

Copy the prompt

Copied

Get stats for [sequence name].

Reporting

Copy the prompt

Copied

Top 3 sequences by reply rate this month.

Copy the prompt

Copied

Prospect reply rate by owner.

Copy the prompt

Copied

Which accounts have most active prospects?

Copy the prompt

Copied

Tasks overdue today.

SEE HOW AUTH WORKS

Users authorize Outreach once. Their credentials stay vaulted, every call is checked, and every action is logged.

Authorize

Your user connects

Outreach

once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access

Who:

user ‘A’

when:

Once per user

access:

Limited to user

Store

Their

Outreach

token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection

vault:

encrypted

scope:

per-user

tokens:

auto-refreshed

Resolve

When your agent calls a

Outreach

tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs

speed:

~40ms

check:

before every call

seen by:

nobody

Audit

Every

Outreach

tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it

history:

90 days

export:

SIEM-ready

logged:

every call

Test other agents

Same per-user auth pattern across other sales engagement agents and MCP connectors. Working code, live demos, fork what fits.

GTM and RevOps Teams

CRM AI agent

Reads the Granola transcript after every call, extracts next steps and updates the HubSpot record, drafts the follow-up in Gmail, and confirms in Slack, all on the rep's own delegated OAuth.

GTM and RevOps Teams

Deal intelligence agent

Pulls recent Gong calls, scores deal risk with an LLM, cross-references the record in Attio, and DMs each owner their at-risk deals in Slack. Every read is scoped to that rep's own access.

GTM and RevOps Teams

Sales call prep agent

Reads tomorrow's calls from Google Calendar, mines past Granola notes and Attio history for context, and delivers each rep a prep brief in Slack, scoped to the calls that rep actually owns.

GTM and RevOps Teams

Outbound prospecting agent

Searches Apollo for prospects matching your ICP, scores and ranks them, drafts personalized outreach in Gmail, and logs every send to Google Sheets. Mail goes out as the rep, not from a shared inbox.

Why Scalekit

Secure your agent's access. Connectors ship in minutes

01.

Shared tokens break per-user analytics

A shared token looks fine in a demo. In production every call looks like a service account. Scalekit resolves the real user credential so attribution, audit, and scope stay accurate.

// shared token
 audit → bot_service_account
 user_filter → broken

 // scalekit
 audit → user_abc
 scope → enforced ✓

02.

Authentication is not authorization

03.

Multi-tenancy is architectural

04.

Outreach today. Others tomorrow.

“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”

Venu Madhav Kattagoni

Head of Engineering / Von

FAQs

Frequently Asked Questions

Does the agent access Outreach as the user or as a shared key?

As the user. Each workspace member authorizes once and Scalekit resolves their credential at request time. Audit logs attribute every action to that user, not a shared service account.

Where is the Outreach oauth 2.0 stored?

In Scalekit's managed AES-256 token vault, namespaced per tenant. Refresh is automatic. Revocation is a single dashboard action. Tokens never appear in prompts, logs, or LLM context.

Can I limit what the agent is allowed to do in Outreach?

Yes. Pass a tool name filter to listScopedTools so the sales engagement agent only sees the subset you authorize. Pre-API-call scope checks block out-of-policy actions before the request reaches Outreach.

What happens when a user revokes Outreach access?

The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.

Can the agent enroll prospects into sequences owned by other reps?

Only if the authorizing user has the Outreach permissions to manage others' sequences. Admins and managers can enroll into team sequences; reps are limited to their own. Outreach role-based permissions carry over to every agent call.

On this page

Tool and actions Framework Compatibility Starter Prompt Auth Lifecycle Try Other Agents Why Scalekit