BYO-UI
HubSpot

HubSpot

Curated anchor platform in crm, marketing, service, and cms with material relevance to the Marcom operating stack and a first-party developer surface.

CRM, revenue & customerSystem of recordBYO-UI-ready platform
Representative source ↗Product site ↗
System roleSystem of record
Access maturityBYO-UI-ready platform
Agent postureFirst-party provider
Reference updatedApr 17, 2026
BYO-UI reviewedJul 10, 2026

Concrete capability record

Data, retrieval, actions, identity, and operating limits

A field-by-field summary of what the reviewed first-party references actually support. Publisher update dates and BYO-UI review dates are shown separately below.

01 · Records and state owned

Read contacts, companies, deals, tickets, commerce objects, activities and content; write selected CRM records and activities under existing user permissions

02 · Data you can retrieve

Read contacts, companies, deals, tickets, commerce objects, activities and content; write selected CRM records and activities under existing user permissions

03 · Actions and write paths

The targeted review confirmed this HubSpot capability surface: Read contacts, companies, deals, tickets, commerce objects, activities and content; write selected CRM records and activities under existing user permissions. It did not normalize every mutation tool. Treat writes as unapproved until each current tool, scope, plan and approval behavior is verified.

04 · Authentication and permissions

HubSpot's remote server became GA in April 2026 and uses OAuth 2.1 with PKCE. Existing vendor identity, account, tenant, and permission controls should be treated as the authorization boundary.

05 · Monitoring, approval, and recovery

Require explicit human confirmation for costly, externally visible, destructive, or hard-to-reverse actions. HubSpot's remote server became GA in April 2026 and uses OAuth 2.1 with PKCE. Distinguish it from the local Developer MCP. Sensitive Data settings can block activity objects specifically through MCP.

06 · Gaps and implementation limits

HubSpot's remote server became GA in April 2026 and uses OAuth 2.1 with PKCE. Distinguish it from the local Developer MCP. Sensitive Data settings can block activity objects specifically through MCP.

First-party MCP tool catalog

12 named MCP tools · Remote CRM-data server

The exact tool list published for HubSpot's remote account-data MCP server at mcp.hubspot.com; it does not describe HubSpot's separate local developer MCP server. Reviewed Jul 10, 2026. Available scopes depend on the installed tool set and the user's granted HubSpot permissions. Sensitive Data settings can block activity objects from this MCP surface.

First-party exact listComplete list on cited pageHubSpot remote MCP server
Identity, records, properties, and owners7
get_user_detailsreadsearch_crm_objectsreadget_crm_objectsreadmanage_crm_objectswritesearch_propertiesreadget_propertiesreadsearch_ownersread
Campaign data and service feedback5
get_campaign_contacts_by_typereadget_campaign_analyticsreadget_campaign_asset_typesreadget_campaign_asset_metricsreadsubmit_feedbackwrite
Catalog evidence: HubSpot remote MCP server: Available tools

First-party MCP tool catalog

21 named MCP tools · Local Developer MCP server

The exact tools published for HubSpot's local Developer MCP used to research documentation, build and deploy HubSpot projects, inspect developer accounts and apps, and create CMS assets. This is separate from HubSpot's remote CRM-data MCP server. Reviewed Jul 10, 2026. Project upload and deployment can change a HubSpot account and require explicit user intent. list-cms-serverless-functions and list-cms-remote-contents are deprecated in the cited catalog.

First-party exact listComplete list on cited pageHubSpot Developer MCP server
21 shown
Documentation and guided development3
guided-walkthrough-clireadsearch-docsreadfetch-docread
Projects, builds, and deployment9
get-feature-config-schemareadget-build-statusreadget-build-logsreadcreate-projectwriteadd-feature-to-projectwritevalidate-projectreadupload-projectconsequential writedeploy-projectconsequential writefind-projectsread
Developer accounts and apps3
create-test-accountwriteget-api-usage-patterns-by-app-idreadget-apps-inforead
CMS assets and serverless functions6
create-cms-templatewritecreate-cms-modulewritecreate-cms-functionwriteget-cms-serverless-function-logsreadlist-cms-serverless-functionsreadlist-cms-remote-contentsread
Catalog evidence: HubSpot Developer MCP: Tools

First-party connector catalog

6 named connectors · Selected named Marketplace integrations

A concise set of integrations named in the HubSpot Marketplace landing page's current featured sections. This selected sample is not the complete Marketplace and does not establish the exact permissions or data flow of any installation. Reviewed Jul 10, 2026. These are product integrations, not HubSpot MCP tools. Installation scopes, sync direction, plans, and write behavior must be checked on each current listing before use.

First-party exact listVerified partial listHubSpot Marketplace
Meetings, collaboration, CRM, and prospecting6
Zoomread/writeMicrosoft Teamsread/writeSlackread/writeSalesforceread/writeLinkedIn Sales NavigatorreadGoogle Chatwrite
Catalog evidence: HubSpot Marketplace: Getting attention today

First-party access

Documented surfaces

Limited HubSpot GraphQL ↗HubSpot documents GraphQL for data-driven Content Hub pages and eligible Sales or Service Enterprise UI extensions. This is not a universal GraphQL endpoint for every HubSpot account or product object.Source: Query HubSpot data using GraphQLMCP / agent surface ↗Verified first-party provider MCPAPI ↗Developer accessDeveloper docs ↗SDKs and platform guidanceEvents / extensions ↗Webhooks, apps, or extensionsProduct ↗Native platform experience

Agent access

MCP and adjacent posture

Verified first-party provider MCPVendor-hosted remote CRM MCP plus separate local developer MCPGeneral availability

Role: provider

Read scope: Read contacts, companies, deals, tickets, commerce objects, activities and content; write selected CRM records and activities under existing user permissions

Write scope: 10 of 33 reviewed named tools have a write, draft, or mixed action label, including manage_crm_objects, submit_feedback, create-project, add-feature-to-project, upload-project, and others. Read each catalog boundary before enabling them.

Authentication: HubSpot's remote server became GA in April 2026 and uses OAuth 2.1 with PKCE.

Approval boundary: Require explicit human confirmation for costly, externally visible, destructive, or hard-to-reverse actions.

Protocol does not erase product boundaries.

Confirm the current tool catalog, plan, region, scopes, rate limits, terms, and write behavior before implementation.

Editorial assessment

Access-maturity dimensions

A comparative architecture lens—not a quality score, market ranking, or buying recommendation. Scale: 1–5.

Data access4
Action access4
Event access4
Identity4
Governance4
Agent access4
UI extensibility3
Portability4
Observability3
Documentation5

Proposed interfaces

What customers could build on top.

These are design proposals derived from documented access—not claims that HubSpot ships these experiences.

Single-platform patterns

  • Unified account, campaign, and service cockpit
  • Account journey room
  • Pipeline-quality debugger
  • Customer expansion cockpit
Use in the brief composer →

Multi-platform compositions

  • HubSpot + marketing or intent platform: account journey room
  • HubSpot + conversation or support system + analytics or warehouse: cross-system decision workspace
Explore composition recipes →

Evidence and dates

First-party references, with publisher and review dates separated

“Publisher updated” is shown only when the page exposes an update date. “BYO-UI reviewed” records when this research checked the reference. A missing publisher date is reported as missing—not replaced with the review date.

9 recorded sources
MCPSource inventory
https://developers.hubspot.com/ai-tools/mcp ↗

First-party MCP documentation or product announcement recorded for this platform.

Publisher updated
Not stated by publisher
BYO-UI reviewed
Jul 10, 2026

Inventory source: structurally normalized; content was not individually reopened in this pass.

APISource inventory
https://developers.hubspot.com/docs/api/overview ↗

First-party API reference or API overview recorded for this platform.

Publisher updated
Mar 31, 2026
BYO-UI reviewed
Jul 10, 2026

Inventory source: structurally normalized; content was not individually reopened in this pass.

Developer docsSource inventory
https://developers.hubspot.com/ ↗

First-party developer documentation or platform overview.

Publisher updated
Not stated by publisher
BYO-UI reviewed
Jul 10, 2026

Inventory source: structurally normalized; content was not individually reopened in this pass.

Webhooks / extensionsSource inventory
https://developers.hubspot.com/docs/api/webhooks ↗

First-party webhook, event, SDK, embedded-app, or extension documentation.

Publisher updated
Not stated by publisher
BYO-UI reviewed
Jul 10, 2026

Inventory source: structurally normalized; content was not individually reopened in this pass.

HomepageSource inventory
https://www.hubspot.com/ ↗

First-party product homepage used to confirm product identity and current positioning.

Publisher updated
Not stated by publisher
BYO-UI reviewed
Jul 10, 2026

Inventory source: structurally normalized; content was not individually reopened in this pass.

Limited HubSpot GraphQLTargeted review
Query HubSpot data using GraphQL ↗

HubSpot documents GraphQL for data-driven Content Hub pages and eligible Sales or Service Enterprise UI extensions. This is not a universal GraphQL endpoint for every HubSpot account or product object.

Publisher updated
Not stated by publisher
BYO-UI reviewed
Jul 10, 2026

Targeted first-party access review

MCP tool catalogTargeted review
HubSpot Developer MCP: Tools ↗

Named catalog evidence used on this profile.

Publisher updated
May 8, 2026
BYO-UI reviewed
Jul 10, 2026

Targeted first-party catalog review

Verified fact

Tied to the representative first-party source or targeted access review.

Source inventory

Official links recorded for deeper research but not necessarily reopened endpoint by endpoint.

Editorial assessment

System role, maturity interpretation, and architectural boundary.

Proposed design

Interface patterns and compositions—not vendor product claims.