Matrix / Read vs write

Which sales MCP servers can send email?

Quoted group lines checked 2026-11-02. A date on a row is the day that listing was checked.

14 of 98 official listings have vendor docs that say the server can send email, checked 2026-11-02. 4 send messages, launch, or move money. 2 enroll or launch a sequence. Gmail creates drafts. 18 listings are read-only. Gong's docs also name an mcp:write scope. 5 are not confirmed.

"Not confirmed" means the vendor's docs don't settle the question. It doesn't mean no.

75 of 98 official listings are recorded as read and write, 18 as read-only, and 5 as not confirmed. 6 of these rows are variants of another listing. LinkedIn Sales Navigator is tracked without an official server and is not in these counts. This site's own server is not in these counts either.

Sends, enrolls, drafts, or reads

Each row is an official listing. The change list comes from that listing. It is not retyped for this page. The source link and the checked date are the ones on the listing. "Checked" means we read the vendor page. It does not mean the listing was edited that day. A source that is a vendor blog is labeled with that vendor's blog.

The groups other than "Writes data" are the listings whose vendor pages we quoted for this page on 2026-11-02. Every other read-and-write listing stays in "Writes data" until that kind of wording is quoted. Filter the table, or jump to send, messages, launches, and money, enroll, drafts, or read-only.

Showing 98. The filter needs JavaScript. Without it, every row is still on the page.

Which ones can send email?

These 14 are the ones whose vendor docs, re-read on 2026-11-02, say the server can send. One line each, based on the vendor's wording. Some listings in "Writes data", such as SalesBlink and HeyReach, also record send or launch actions. Their vendor pages were not quoted for this page. A line taken from a vendor blog is labeled with that blog.

• Apollo: can create and send one-off emails, and enroll contacts into a sequence. It can also buy sending domains and email accounts. Source: docs.apollo.io, checked 2026-11-02
• Reply.io: starting or resuming a sequence begins sending. Approving a draft sends it immediately. It can also enroll contacts into a sequence. Source: docs.reply.io, checked 2026-11-02
• lemlist: starting a campaign begins sending to leads. It can send a reply, buy a domain, and remove a lead from a campaign. Source: help.lemlist.com, checked 2026-11-02
• Instantly: can reply to and forward email, and can activate a campaign. It can also manage workspace billing and API keys. Source: developer.instantly.ai, checked 2026-11-02
• Hunter: starting a sequence begins sending real emails. It can also permanently delete an API key. Source: hunter.io, checked 2026-11-02
• Snov.io: can create and launch email campaigns, and run LinkedIn outreach. Source: snov.io, checked 2026-11-02
• Seamless.AI: can draft, send, and bulk-send email. Source: docs.seamless.ai, checked 2026-11-02
• Reevo: enrolling contacts in a sequence sends real outreach emails. Source: help.reevo.ai, checked 2026-11-02
• Dynamics 365 CX MCP Server - Sales: can draft and send email. Source: microsoft.com, checked 2026-11-02 Dynamics 365 CX MCP Server - Sales's blog.
• Microsoft 365 (Work IQ): can send an email and can delete Microsoft 365 entities. Source: learn.microsoft.com, checked 2026-11-02
• Resend: can batch send emails. Source: resend.com, checked 2026-11-02
• Emailit: can send, schedule, reschedule, cancel, retry, and forward email. Source: emailit.com, checked 2026-11-02
• Selzy: the send itself requires your explicit confirmation in the chat. A confirmation step is not a read-only mode. Source: selzy.com, checked 2026-11-02 Selzy's blog.
• Pipedream: lists send emails among the tasks an assistant can perform. Source: pipedream.com, checked 2026-11-02

Which ones send a message, launch, or move money?

These 4 are not in the email list. Each line is a vendor quote for a message, a launch, or moving money, checked 2026-11-02.

• Slack: can send messages to any type of conversation, and can schedule a message to be sent later. Source: docs.slack.dev, checked 2026-11-02
• PartnerStack: can send the first invite to a network partner. Source: support.partnerstack.com, checked 2026-11-02
• PhantomBuster: can launch Phantoms, check what is running, and stop them. Source: hub.phantombuster.com, checked 2026-11-02
• Stripe: can send money from a Treasury account to a recipient. That entry also says human confirmation. Source: docs.stripe.com, checked 2026-11-02

Which ones can enroll people in a sequence?

These 2 enroll or launch a sequence or campaign. They are not in the send list above. Some tools in the send list also enroll. Their lines above say so.

• Outreach: can enroll prospects in a sequence. Create is on by default, and delete is off by default. Source: developers.outreach.io, checked 2026-11-02Source: support.outreach.io, checked 2026-11-02
• UserGems: can enroll contacts in sequences, including Outreach and Salesloft sequences. Source: help.usergems.com, checked 2026-11-02

Which ones draft email instead of sending it?

Gmail is in the drafts bucket. Close, HubSpot and Artisan also draft, and they do other writes. They stay in "Writes data" in the table, because they can do more than draft.

• Gmail: creates draft emails and can label messages. Source: developers.google.com, checked 2026-11-02
• Close: saves an email as an unsent draft, and creates a workflow in draft status. It can also permanently delete a lead. That is not a drafts-only server. Source: developer.close.com, checked 2026-11-02
• HubSpot: creates and updates marketing email drafts. It can also create, edit, and publish landing pages, website pages, and blog posts. Source: developers.hubspot.com, checked 2026-11-02
• Artisan: says Claude can't launch or publish a campaign from the connector. Sequence changes are saved as a draft. A live campaign can be paused, resumed, stopped, renamed, or archived. Source: support.artisan.co, checked 2026-11-02

Read-only servers

These 18 listings are recorded as read-only. The names come from the listings. Each row above links the vendor page and the date it was checked. You can also filter the directory for read-only tools.

• AI Research: Exa, Perplexity, Perplexity (local stdio), Tavily
• Conversation Intelligence: Gong, Granola
• Data Enrichment & Orchestration: SalesQL
• Intent & Company Signals: 6sense, Demandbase, Warmly
• Market Research: Similarweb, Wynter
• Partner Ecosystem: Crossbeam
• Prospecting & Lead Data: Cognism, Explorium AgentSource, Prospeo, Wiza
• Sales Engagement: Salesloft

Gong's about article says the server is read-only. Gong's setup article also names an mcp:write scope. This listing has no write actions. Source: help.gong.io, checked 2026-11-02Source: help.gong.io, checked 2026-11-02

How to connect read-only when the server can write

Only the switches we could quote are listed. If a vendor is missing, the switch is not confirmed. It is not a claim that no switch exists. Outreach is not in this list. Its delete actions are off by default, and create stays on, so that is not a read-only path.

• Close: mcp.read scope. Source: developer.close.com, checked 2026-11-02
• OnePageCRM: crm.readonly scope. Source: developer.onepagecrm.com, checked 2026-11-02
• Reevo: Grant only the scopes you choose. Source: help.reevo.ai, checked 2026-11-02

A chat app that asks before it acts is a safeguard, not a read-only mode. Claude's help says: "Claude can invoke tools from your connectors automatically without further approval" Source: support.claude.com, checked 2026-11-02

For CRM servers, see HubSpot, Salesforce, and Gong, and the CRM category. HubSpot drafts marketing email and can publish pages. Salesforce's listing records creates, updates, and deletes. Close can delete a lead and also offers the read-only scope above.

Other writes to know about

Close can permanently delete a lead. lemlist can delete a lead from a campaign. Outreach can delete, and delete is off by default. Insightly's docs say: "The MCP Server can't delete Insightly records" Source: documentation.insightly.com, checked 2026-11-02 Microsoft 365 can delete Microsoft 365 entities.

Apollo can buy sending domains and email accounts. lemlist can buy a domain. Those spend money.

HubSpot can publish landing pages, website pages, and blog posts. That is a public write, separate from drafting a marketing email.

Instantly can manage workspace billing and API keys. Hunter can permanently delete an API key.

How we check

A listing is read and write when the vendor's docs list a tool that creates, updates, deletes, sends, or enrolls. It is read-only when the docs say so, or when the documented tool list has no write. If the docs don't settle it, the listing stays not confirmed. The about page has the full method. The same rows are in the listings JSON.

Whether an endpoint answered the daily check is separate from what it can change. See status for HubSpot, Salesforce, Gong, Pipedrive, Zapier, and Notion.

Questions

Which sales MCP servers can send email?

As of the check on 2026-11-02, 14 official listings have vendor docs that say the server can send email. 4 more have vendor docs for a message, a launch, or moving money. The lists are in the sections above. Gmail's server creates drafts. 2 listings enroll or launch a sequence and are not in the send list.

Which sales MCP servers are read-only?

This directory records 18 official listings as read-only. Gong's about article says the server does not create, update, or delete data, and Gong's setup article names an mcp:write scope. 5 listings are not confirmed. Not confirmed does not mean no.

Can I connect a sales MCP server read-only?

Some vendors document a way. Close has an mcp.read scope. OnePageCRM's docs say the smallest connection is mcp plus crm.readonly, which reads the CRM and cannot change it. Reevo says you grant only the scopes you are comfortable with. Outreach is not a read-only path: delete is off by default, and create stays on. A chat app that asks before it acts is not a read-only mode either.

Get the weekly email

The weekly email covers new listings and changed values, including when a vendor's docs change what a server can write. It does not send a separate alert for one tool. Newsletter details.