HubSpot connector: IT approval one-pager
HubSpot's MCP server can read and change data. An admin or IT has to act before anyone can connect it. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.
- Server URL
https://mcp.hubspot.comSource: StackMCP listing, checked 2026-10-16- Access
- Read + writeSource: developers.hubspot.com, checked 2026-10-16
- Sign-in
- OAuth 2.1 with PKCE (MCP connector) Source: StackMCP listing, checked 2026-10-16
- Admin approval
- YesSource: knowledge.hubspot.com, checked 2026-10-16
- Setup
- Needs admin or ITAn admin or IT has to act first, for example by approving or enabling the integration. Don't plan on connecting it alone. Source: knowledge.hubspot.com, checked 2026-10-16
- Credits
- Credits not confirmed
- Plan
- Free Source: hubspot.com, checked 2026-10-16
What data can it reach?
HubSpot's docs list these tools for its MCP server:
- CRM search/CRUD
- activities
- campaigns
- marketing emails
- conversations
- pages/blog
- AEO (Marketing Pro+)
- In Claude, the connector can reach contacts, companies, deals, tickets, custom objects, marketing emails, blogs, users, line items, quotes, invoices, orders, carts, products, subscriptions and segments, plus how they link together. Source: knowledge.hubspot.com, checked 2026-10-22
- It can also reach engagement history: emails, calls, meetings, tasks and notes. Source: knowledge.hubspot.com, checked 2026-10-22
- Each person only sees the CRM data their HubSpot permissions allow. Source: knowledge.hubspot.com, checked 2026-10-22
What can it read, and what can it change?
Read + write Some HubSpot MCP tools change data, not just read it.
Things it can do in your HubSpot account:
- creates and edits CRM records (contacts, companies, deals, tickets, etc.)
- logs activities (calls, emails, meetings, notes, tasks)
- creates, edits and publishes landing pages, website pages and blog posts
- creates and updates campaigns
- creates and updates marketing email drafts
- creates and manages pipelines
- creates custom properties
- creates segments and adds/removes records
- creates quotes (beta)
- creates AEO tracked prompts and starts content generation
Review each change before you approve it, especially anything that sends messages or edits records other people rely on.
Which actions should wait for a person's OK?
Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.
- HubSpot recommends that you set Write tools to Needs Approval in the connector's tool settings in Claude. Then it asks before it makes any update. Source: knowledge.hubspot.com, checked 2026-10-22
- If you set it to Always allow, it can make edits without asking. Source: knowledge.hubspot.com, checked 2026-10-22
How does it sign in?
Sign-in method (from the StackMCP listing): OAuth 2.1 with PKCE (MCP connector)
Does an admin need to approve it?
What HubSpot's docs confirm about admin controls:
- An admin must approve or enable the connectionYesSource: knowledge.hubspot.com, checked 2026-10-16
- Scopes or permissions can limit what it reachesYesSource: knowledge.hubspot.com, checked 2026-10-16
- Individual tools can be turned offNot confirmed
- MCP activity shows in an audit logYesSource: knowledge.hubspot.com, checked 2026-10-16
- Super Admins and users with App Marketplace Access permissions can connect without prior app approval. Source: knowledge.hubspot.com, checked 2026-10-22
- Everyone else needs a Super Admin to approve the connector first. During approval, the Super Admin picks which data it can reach and who can install it. Source: knowledge.hubspot.com, checked 2026-10-22
- In HubSpot audit logs, Super Admins can see who connected and when, plus every create and update made through the connector. Source: knowledge.hubspot.com, checked 2026-10-22
How do we turn it off?
In HubSpot
The HubSpot docs we checked only explain how to disconnect in the AI assistant (below). To remove the connector in HubSpot itself, ask your HubSpot admin.
In the AI assistant
- HubSpot's steps to disconnect in Claude: select your profile icon, then Settings, then Connectors, then HubSpot, then Disconnect. Source: knowledge.hubspot.com, checked 2026-10-22
- For other assistants, check that assistant's settings or ask your admin.
Does it use credits or quota?
Not confirmed HubSpot's docs don't say whether MCP calls use credits or paid usage.
Send this to IT
Copy this, fill in the parts in [brackets] and send it.
Subject: Request: connect HubSpot to [your AI assistant] for my sales work Hi [name], I'd like to connect HubSpot to [your AI assistant] using HubSpot's official MCP connector. I want to use it for [task, for example call prep or pipeline review]. What I'm asking for: - Approval to connect HubSpot. It signs in with OAuth. I'd only see the CRM data my HubSpot permissions allow. - Any admin step HubSpot needs before I can connect. How I'll use it: - I'll approve each action that creates, changes or sends something before it runs. - I'll disconnect it if you ask, or when I stop using it. Quick facts: - Access: Read + write - Sign-in: OAuth 2.1 with PKCE (MCP connector) - Setup: Needs admin or IT - Credits: Not confirmed The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/hubspot Thanks, [your name]
Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. We last checked the quotes on this page (vendor docs and the Claude help article) on Oct 22, 2026, and the StackMCP listing facts on Oct 16, 2026.
All the facts on one page, with sources: HubSpot MCP server. Setup steps: Connect HubSpot.
Other one-pagers: Salesforce · Gong · Apollo · Slack
Something out of date on this page? Report a correction, with a link to the vendor page that shows the right information.