Best CRM MCPs tools, limits, and safe AI workflows
Salesforce, Zoho CRM, and HubSpot currently offer the broadest official CRM MCP surfaces, while Intercom is a strong customer-conversation and help-center option. Salesforce exposes governed hosted servers for data, queries, flows, and actions. Zoho separates read-only insights, record operations, module customization, and workflow automation into composable servers. HubSpot focuses on CRM records and engagements with read and write access, plus read-only marketing context. Intercom's official server is narrower, centered on conversations, contacts, companies, and help-center articles.
A CRM connection is only as useful as the objects and actions it exposes. This report measures first-party MCP capabilities documented by each vendor as of September 21, 2026. It does not assume that a normal REST API feature is available through MCP.
What CRM MCP support really means
A CRM may expose useful records without exposing workflow creation, schema changes, or deletion. These ratings measure the official MCP surface, not every capability in the normal product UI or API. They are a fit-for-workflow guide, not a security score or product-quality ranking.
Record context: access to the people, accounts, opportunities, tickets, activities, ownership, and associations needed for a sound decision.
Action-level control: scoped create, update, delete, merge, enrollment, or business-action tools instead of a single all-powerful connection.
Schema awareness: explicit support for custom fields, layouts, object definitions, and validation rules when structure must change.
Automation depth: a clear distinction between inspecting an existing workflow and creating or editing its logic.
Governance: identity, field-level permissions, audit trails, approvals, and boundaries around sensitive data.
Which CRM tools support MCP?
As of September 21, 2026, all four platforms below publish a first-party MCP option. Their capabilities are not interchangeable: a connection may read pipeline context, update records, modify schemas, publish articles, or run business actions while stopping short of a general automation builder. Availability can vary by edition, role, scope, region, sandbox, or server configuration.
Platform
What the official MCP documents
Automation and action support
Rating
Salesforce
Hosted MCP servers can expose Salesforce data, SOQL queries, records, flows, Apex actions, and custom tools, with existing CRUD, field-level security, sharing, and audit controls applied.
Broad governed reads, writes, and business actions; exact servers and org configuration determine the surface.
9.5/10
Zoho CRM
Four composable servers cover read-only data insights, full record operations, module and layout customization, and workflow or Blueprint automation.
Deepest explicitly separated CRM operations and automation surface.
9.5/10
HubSpot
Remote MCP provides read and write access to listed CRM objects and engagements. Campaigns, metrics, landing pages, website pages, and blog posts are documented as read-only.
Strong record operations; no broad remote workflow builder is documented here.
9.0/10
Intercom
Thirteen documented tools search and fetch conversations and contacts, list and fetch companies, and list, search, create, or update help-center articles.
Customer-support operations and article publishing, not a general sales CRM automation layer.
8.0/10
The strongest CRM MCP options
Salesforce, Zoho CRM, HubSpot, and Intercom each expose a different layer of customer operations. Choose by the objects and actions your process needs, not by the MCP label alone.
9.5/10
Salesforce
Salesforce's hosted MCP servers became generally available for Enterprise Edition orgs and above in the vendor's April 2026 announcement. The vendor documents standard hosted servers and custom patterns for data, queries, flows, Apex actions, API Catalog capabilities, Prompt Builder templates, and Agentforce agents. Transactions run as the authenticated user and inherit CRUD, field-level security, sharing rules, and auditability. An admin must enable a server, configure an External Client App, grant scopes, and choose the exact hosted or custom surface. Start with a read-only server such as `platform/sobject-reads` in a sandbox.
9.5/10
Zoho CRM
Zoho documents four servers with deliberately different roles: Data Insights is read-only for pipeline analysis and forecasts; Data Operations supports create, update, delete, and contact management; Module Customization can add fields and modify layouts; Workflow and Automation can create workflow rules, Blueprints, and process automation. The composable model is unusually practical for least privilege. Test in a developer edition or sandbox and require approval for deletion, schema changes, and workflow creation.
9.0/10
HubSpot
HubSpot's remote MCP documents read and write access to contacts, companies, deals, tickets, carts, products, orders, line items, invoices, quotes, subscriptions, segments, and engagements such as calls, emails, meetings, notes, and tasks. It documents read-only access to users, teams, ownership context, campaigns, campaign metrics, landing pages, website pages, and blog posts, and excludes custom sensitive data properties such as PHI. That makes it strong for record hygiene and pipeline operations, not a full marketing or workflow builder.
8.0/10
Intercom
Intercom hosts a remote MCP server with Streamable HTTP and a legacy SSE URL. Its documentation lists 13 tools for universal, conversation, and contact search; company listing and retrieval; and help-center article listing, search, creation, and updates. The server is narrower than a sales CRM connection: current documentation says it is available only for US-hosted workspaces, and it does not document broad deal, pipeline, or automation control. Choose it for support triage, customer context, and controlled knowledge-base publishing.
Clear limitations before you connect
A record write is not a workflow builder. HubSpot documents CRM writes but not a broad remote automation editor, while Intercom documents article writes but not sales-pipeline automation. Salesforce is configurable rather than one fixed catalog, so hosted server availability, org edition, External Client App scopes, and custom tools affect what an agent sees. Zoho's most powerful servers change structure and process and need stronger review than a read-only insight query.
Permissions are necessary but not sufficient. The user's role may allow an action that is still unsafe without checking duplicates, ownership, consent, stage definitions, or approval policy. Region and plan matter, and sensitive-data boundaries differ across vendors. Verify the live tool catalog, scopes, region, retention policy, and AI provider controls before working with personal or confidential data.
How can I use AI with a CRM?
1. Plan the outcome in Wireslate. Define the customer segment, lifecycle stage, owner, trigger, desired next action, escalation rule, and success metric before asking an agent to touch records.
2. Map and model the data flow. In a Wireslate Whiteboard, map source signals, CRM objects, field dependencies, validation rules, human approvals, and downstream handoffs. The map helps expose where a simple update could create duplicate records or move a customer into the wrong process.
3. Review the proposed operation. Have the owner confirm target records, field values, date windows, audience, rollback path, and expected audit trail. Keep PII, consent, and retention decisions explicit.
4. Implement in the specialist CRM tool. Use a read-only server first. Then grant only the specific record, schema, or workflow tools needed, with dry runs or previews where available. Require approval for delete, merge, bulk update, lifecycle changes, permission changes, or automation publication.
5. Measure the business result. Track data quality, speed to follow-up, conversion, support resolution, or revenue movement. Bring the result back to Wireslate so the team can decide whether to refine the plan or roll it back.
Wireslate MCP Server
Give your AI a Wireslate Whiteboard to think with.
Connect ChatGPT, Claude, Codex, or another AI tool to a Wireslate Whiteboard. Plan and review the customer process, permissions, approvals, and measurement, then send the approved scope to the CRM that implements it.
Official support and control matter
All four platforms in this report had first-party MCP documentation at the time of review. That is useful because the vendor can explain authentication, tool boundaries, roles, and region or edition limits.
Community servers may fill a gap, but they add another thing to evaluate: who built the server, where credentials go, how quickly it is updated, and whether its tools accurately match the underlying product. For record changes, bulk actions, schema edits, workflow publication, or sensitive customer context, start with the official server and the smallest useful permission set.
Questions to ask before connecting an AI assistant
CRM MCP support changes quickly. A hosted server, login method, scope, edition, or permission model can change without altering the platform's main API. Check the live docs and run a safe test for the exact action that matters.
Is the server official, and does the approved AI client support its authentication method?
Which objects, associations, fields, conversations, and activities can the current connection read?
Can you separate read, create, update, delete, schema, and workflow tools, or should you use a sandbox or smaller server?
Does each action run as a named user with the expected role, field-level security, sharing, and audit trail?
Who approves deletes, merges, lifecycle changes, permissions, workflow publication, and customer-facing messages?
Frequently asked
What is the best CRM MCP?
Salesforce is the strongest fit for enterprise teams that need governed data, queries, flows, and actions. Zoho CRM is the clearest fit when you want composable servers for insights, record operations, schema changes, and workflow automation. HubSpot is excellent for CRM record work with a narrower marketing context, while Intercom is best for customer conversations and help-center operations.
Which CRMs have official MCP support?
This report found first-party MCP documentation for Salesforce, Zoho CRM, HubSpot, and Intercom. Each vendor documents a different boundary. Salesforce and Zoho expose the broadest action and automation patterns; HubSpot focuses on CRM objects and engagements; Intercom focuses on conversations, contacts, companies, and articles.
Can an MCP agent update or delete CRM records?
Yes, where the vendor's MCP explicitly exposes those write actions and the authenticated user has permission. Zoho documents full record CRUD, HubSpot documents read and write CRM objects, and Salesforce documents hosted data and action surfaces with platform permissions. Deletion and bulk updates should stay behind explicit approval and a tested rollback plan.
Is a CRM MCP connection safe for personal data?
Not automatically. MCP inherits or applies vendor permissions, but an agent can still retrieve more context than the task needs or make a valid but harmful change. HubSpot documents that custom sensitive data properties are not available through its server. For every connection, verify the current tool catalog, scopes, region, retention policy, and AI provider data controls.
What role does Wireslate play in a CRM workflow?
Wireslate does not replace the CRM. It gives the team a shared visual layer to plan, map, model, review, and approve the process before implementation. Once the scope is agreed, an MCP-connected CRM can perform the permitted record or workflow operation, and the resulting metric can feed the next planning decision.
Sources and methodology
Claims were checked against public product and help material. A red X means the feature was not identified in the reviewed material; a yellow ~ means the tool has a related capability but not the same workflow. These are not claims about every plan or future release.
Make the CRM plan visible before it changes records.
Map the customer process, permissions, approval points, and success metric in a Wireslate Whiteboard. Then hand the reviewed scope to the CRM MCP server that can implement it with the least privilege necessary.