// SCAN REPORT

Hubspot

30 tools. 2 can modify or destroy data without limits.

2 write tools that can modify data. Rate limits recommended.

Last updated: 3 Jul 2026

2 can modify or destroy data

28 read-only

30 tools total

Community server · catalogue entry verified 03/07/2026

How to control Hubspot ↓

TOOL MAP

What Hubspot exposes to your agents

Read (28) Write / Execute (2) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Hubspot tools

Write · Medium hs_create_contact This tool creates new data (a contact record) in HubSpot's CRM system, which is a reversible write operation. Write · Medium hs_update_contact This tool modifies contact records in HubSpot's CRM by updating their properties.

2 of Hubspot's 30 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Hubspot

PolicyLayer is an MCP gateway — it sits between your AI agents and Hubspot, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "hs_create_contact": {
    "limits": [
      {
        "counter": "hs_create_contact_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "hs_contact_by_email": {
    "limits": [
      {
        "counter": "hs_contact_by_email_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Hubspot — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON HUBSPOT →

Instant setup, no code required.

FULL CATALOGUE

All 30 Hubspot tools

WRITE 2 tools

Write hs_create_contact Create a new HubSpot contact. Email is required; all other fields are optional. Write hs_update_contact Update one or more properties on an existing contact.

READ 28 tools

Read hs_contact_by_email Look up contacts by exact email address. Returns up to 5 matches. Read hs_crm_search Escape hatch: run a structured CRM search with custom filter conditions against any object type. Use when pres Read hs_deals_by_stage List deals in a specific pipeline stage, sorted by amount descending. Read hs_form_submissions Get recent submissions for a form including all field values and submission timestamps. Read hs_get_company Retrieve a single company by ID with all standard properties and associated contact/deal IDs. Read hs_get_contact Retrieve a single contact by ID with all standard properties and associated company/deal IDs. Read hs_get_deal Retrieve a single deal by ID with amount, stage, close date, and associated contacts/companies. Read hs_get_email_campaign_stats Get performance statistics (opens, clicks, bounces, unsubscribes) for a specific marketing email. Read hs_get_form Get full form definition including fields, required properties, and redirect settings. Read hs_get_list Get metadata for a specific contact list including membership count and list type. Read hs_get_property Get full definition of a single CRM property including options/enum values and validation rules. Read hs_get_workflow Get full details of a workflow including enrollment triggers, actions, and settings. Read hs_list_company_contacts List all contacts associated with a company. Read hs_list_email_campaigns List marketing email campaigns ordered by most recently updated. Read hs_list_forms List all HubSpot forms ordered by most recently updated. Read hs_list_lists List all HubSpot contact lists (static and active). Optionally filter by name substring. Read hs_list_marketing_emails List marketing emails, optionally filtered by publication state (DRAFT, SCHEDULED, PUBLISHED, ARCHIVED). Read hs_list_members Get contacts that are members of a specific list. Read hs_list_owners List HubSpot users (owners) that can be assigned to CRM records. Filter by email to look up a specific rep. Read hs_list_pipelines List all CRM pipelines (deals or tickets) with their stage IDs. Use stage IDs with hs_deals_by_stage. Read hs_list_properties List all properties defined for a CRM object type. Use customOnly=true to see only custom fields. Read hs_list_workflows List all HubSpot automation workflows with name, type, and enabled status. Read hs_pipeline_summary Deal counts and total amounts aggregated by pipeline stage — a quick funnel snapshot for a given pipeline. Read hs_recent_contacts Most recently created contacts, optionally filtered by lifecycle stage (lead, marketingqualifiedlead, opportun Read hs_recent_deals Most recently created deals. Pass openOnly=true to exclude closed deals. Read hs_search_companies Full-text search across companies by name, domain, or industry. Read hs_search_contacts Full-text search across contacts by name, email, company, or any indexed field. Read hs_search_deals Full-text search across deals by name.

FAQ

Questions about Hubspot

How do I prevent bulk modifications through Hubspot? +

The Hubspot server has 2 write tools including hs_create_contact, hs_update_contact. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Hubspot.

How many tools does the Hubspot MCP server expose? +

30 tools across 2 categories: Read, Write. 28 are read-only. 2 can modify, create, or delete data.

How do I enforce a policy on Hubspot? +

Register the Hubspot MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Hubspot tool call.

Deterministic rules across all 30 Hubspot tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON HUBSPOT →

Instant setup, no code required.

30 Hubspot tools catalogued and risk-classified — across an index of 43,000+ MCP servers.