HubSpot MCP server: setup & sharing

CRM contacts, deals, and engagements for remote teammates — writes need your approval.

Run on your machine

Start the server on your host machine. Tools not listed in --allow are completely hidden from the agent.

Terminal · Host machine

npx -y @mcpwire/cli share \
  --name hubspot \
  --allow "hubspot-get-user-details,hubspot-list-objects,hubspot-search-objects,hubspot-batch-read-objects,hubspot-get-schemas,hubspot-list-properties,hubspot-get-property,hubspot-get-association-definitions,hubspot-list-associations,hubspot-get-engagement,hubspot-list-workflows,hubspot-get-workflow,hubspot-get-link" \
  --redact-secrets \
  -- npx -y @hubspot/mcp-server@0.4.0

Exposes 13 default tools with pattern-based secret redaction. Optionally set an expiry with --ttl 30m, prompt for approvals with --confirm, or limit calls with --max-calls 20.

Connect your teammate’s agent

MCPWire prints a unique wire://... ticket in your terminal. Send it privately to your teammate to paste into their MCP client:

Claude Desktop · Cursor · Windsurf config

{
  "mcpServers": {
    "hubspot": {
      "command": "npx",
      "args": [
        "-y",
        "@mcpwire/cli",
        "join",
        "wire://<TICKET_FROM_HOST>"
      ]
    }
  }
}

Replace <TICKET_FROM_HOST> with the active session ticket. The agent can only discover and call the tools exposed above.

Scoped tool permissions

MCPWire acts as a Layer 7 JSON-RPC firewall. Requests for blocked tools are dropped on the wire before ever touching your machine.

Tool	Default Policy	Notes
`hubspot-get-user-details`	Allowed	Identifies the account behind the token.
`hubspot-list-objects`	Allowed	Lists CRM records of a type — contacts, companies, deals.
`hubspot-search-objects`	Allowed	Searches CRM records.
`hubspot-batch-read-objects`	Allowed	Reads records in bulk.
`hubspot-get-schemas`	Allowed	Reads object schemas.
`hubspot-list-properties`	Allowed	Lists record properties.
`hubspot-get-property`	Allowed	Reads one property definition.
`hubspot-get-association-definitions`	Allowed	Reads how object types relate.
`hubspot-list-associations`	Allowed	Lists records linked to a record.
`hubspot-get-engagement`	Allowed	Reads a call, email, or meeting record.
`hubspot-list-workflows`	Allowed	Lists automation workflows.
`hubspot-get-workflow`	Allowed	Reads workflow details.
`hubspot-get-link`	Allowed	Builds a HubSpot record link.
`hubspot-batch-create-objects`	Blocked (High risk)	Creates CRM records.
`hubspot-batch-update-objects`	Blocked (High risk)	Updates CRM records in bulk.
`hubspot-batch-create-associations`	Blocked (High risk)	Links records to each other.
`hubspot-create-engagement`	Blocked (High risk)	Logs calls, emails, and meetings.
`hubspot-update-engagement`	Blocked (High risk)	Edits engagement records.
`hubspot-create-property`	Blocked (High risk)	Adds record properties.
`hubspot-update-property`	Blocked (High risk)	Changes record property definitions.

Test and verify

Try these recommended prompts to confirm the agent receives expected outputs and that restricted actions fail safely.

Try HubSpot

Create a HubSpot private app with scopes covering only the objects you intend to share, and set PRIVATE_APP_ACCESS_TOKEN in the host environment. This is HubSpot’s official server; the token’s scopes are the real boundary, so keep them narrow — contact and company reads are enough for the defaults.

Ask the agent who it acts as with hubspot-get-user-details, then search contacts or deals with hubspot-search-objects. CRM contents are personal data about real people, and everything the token can see flows to the guest while the session is open. All create and update tools stay outside the default allowlist.

The generated command above contains the catalog’s explicit default allowlist. Check the guest’s tool list before making calls and use the server’s argument schema for required fields. See the CLI guide for guest configuration and session controls for approvals, redaction, and expiry.

Review the session in your browser: Add --record session.wirelog to your host command. Drop the resulting file into the Session Replay Viewer to inspect timestamps, latency, blocked attempts, and secret scrubbing.

← All server guides Open in command builder