Best of · Work & business apps
Best CRM and customer-platform tools for AI agents
The 10 highest-scoring of 17 CRM and customer-platform tools on the Anchor benchmark, with a pick for each need and where each one falls short. Scores come from public evidence, re-checked as vendors change.
- 17 ranked
- 2 agent-ready
- 13 hosted endpoints
- Updated 9 October 2026
Top three
Picks by need
Worked out from the scores, prices and facts, so they change when the research does.
Agent ergonomics
Microsoft Dynamics 365 Sales B
86/100 on agent ergonomics, against 72 for the overall leader.
Maintenance & community
97/100 on maintenance & community, against 84 for the overall leader.
The shortlist
| # | Tool | Grade | Best for | Price | Where |
|---|---|---|---|---|---|
| 1 | HubSpot API + MCP HubSpot |
BB 71.5 | Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes. | $20 / seat-mo | hosted and local |
| 2 | Zoho CRM Zoho |
BB 70.8 | Teams already on Zoho who want an agent to read and write leads, contacts, deals and activities with narrow scopes, and small teams that want a free edition with API access. | $14 / seat-mo | local |
| 3 | Microsoft Dynamics 365 Sales Microsoft |
B 69.7 | Organisations already on Dynamics 365 or Microsoft 365 that want an agent to work inside existing security roles. | $65 / seat-mo | local |
| 4 | Close API + MCP Close |
B 66.7 | Inside-sales teams that call, email and text from the CRM and want an agent to log, triage and draft without being able to send or delete by default. | $9 / seat-mo | hosted |
| 5 | Twenty API + MCP Twenty |
B 65.9 | Teams that want an open-source CRM they can self-host or extend with custom objects, and an MCP server that stays cheap in context. | $9 / seat-mo | hosted |
| 6 | Affinity Project Affinity, Inc. |
B 63.4 | Venture capital, private equity and other private capital firms that already run Affinity and want an agent to read relationship strength, pipeline lists, notes and meetings, then update fields and log notes. | $191.67 / seat-mo | hosted and local |
| 7 | Attio API + MCP Attio |
B 63.1 | Small teams and startups that want an agent to search across records, notes, emails and calls and then update the CRM, starting free. | $35 / seat-mo | hosted |
| 8 | folk API + MCP folk |
C 60.8 | Small teams running a relationship CRM (founders, agencies, investors) who want an agent to keep contacts, notes and follow-ups current. | $24 / seat-mo | hosted |
| 9 | Pipedrive API + MCP Pipedrive |
C 60.5 | Small and mid-size sales teams running deal pipelines who want an agent to update deals and log activities. | $24 / seat-mo | hosted |
| 10 | Salesforce API + MCP Salesforce |
C 60.5 | Organisations already on Salesforce that need an agent to read and update any object under existing security rules. | $125 / seat-mo | hosted |
7 more are ranked in the full table.
How to choose
- Record read and write scopeCheck whether an agent can read and write contacts, companies, deals and notes, or only some of them, since partial access limits what a workflow can complete.
- Pipeline stage changesCheck that an agent can move a deal between pipeline stages and read stage history, since a deal it cannot move leaves the pipeline stale.
- Search across record typesCheck whether search covers contacts, companies and deals in one query and how filters combine, because an agent that cannot find a record may create a duplicate.
- Scoped access for each agentCheck whether keys or tokens can be limited to certain objects and actions, so an agent given deal access cannot also export every contact.
Each one in detail
HubSpot API + MCP
BB 71.5/100HubSpot's CRM REST API (objects, associations, search, properties, pipelines, engagements, webhooks) and its official MCP servers.
Verdict Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only. Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours.
Choose it for Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes.
Strengths
- Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only
- Writes need user confirmation after a proposed-changes summary, and there's no delete tool
- Free CRM for 2 users with API and MCP access, no card
Weaknesses
- Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours
- Emails, notes and conversations reach the model with no injection guidance
- Privacy policy allows using personal data to train HubSpot AI models
Price $20 / seat-moAuth OAuth or keyx402 nohosted and local
Zoho CRM
BB 70.8/100Zoho CRM is a hosted sales CRM from Zoho. Agents reach it through the REST API v8, with record, search, query, bulk and notification endpoints behind OAuth 2.0, or through four pre-built remote MCP servers.
Verdict A public OpenAPI 3.1 description of 644 operations and OAuth scopes down to one module and one operation suit agent use, and the Free edition includes 5,000 API credits a day. The documented token refresh puts the client secret in the URL, and no SLA, deprecation policy or dated API changelog was found.
Choose it for Teams already on Zoho who want an agent to read and write leads, contacts, deals and activities with narrow scopes, and small teams that want a free edition with API access.
Strengths
- OpenAPI 3.1 files for 103 resources and 644 operations are public on GitHub, with a Markdown page per operation
- OAuth scopes narrow to one module and one operation, such as
ZohoCRM.modules.leads.READ - The
fieldsparameter is mandatory on list calls, so responses carry only the fields requested (50 at most)
Weaknesses
- The documented refresh and revoke calls put the refresh token and client secret in the URL query string
- No SLA, API deprecation policy or dated API changelog found in the reviewed pages
- 429 is documented without a Retry-After header or backoff guidance
Price $14 / seat-moAuth OAuthx402 nolocal
Microsoft Dynamics 365 Sales
B 69.7/100Microsoft's sales CRM for accounts, contacts, leads and opportunities. Its data is held in Dataverse and reached through the Dataverse Web API (OData v4), SDKs for .NET and Python, and the Dataverse MCP server.
Verdict Dynamics 365 Sales data sits in Dataverse, reached through the OData v4 Web API or the Dataverse MCP server with 15 tools. Service protection limits are published and 429 responses carry Retry-After. Access needs an Entra app registration and an administrator, and the public service health page showed no history to our reader.
Choose it for Organisations already on Dynamics 365 or Microsoft 365 that want an agent to work inside existing security roles.
Strengths
- Limits are published per user and web server. 6,000 requests and 20 minutes of execution time per five minutes, and 52 concurrent requests
- 429 responses carry Retry-After, and PATCH on an alternate key upserts, so a retried write does not create a duplicate
- OAuth 2.0 through Microsoft Entra ID only, with every call inside the Dataverse security roles of the user or application user
Weaknesses
- No public OpenAPI document. The contract is an OData CSDL $metadata document served by each environment behind sign-in
- A person registers an app in Entra ID and a Power Platform administrator enables it. No keyless route was found
- Service health for a tenant sits behind an admin sign-in, and status.cloud.microsoft showed no components or history to our reader
Price $65 / seat-moAuth OAuthx402 nolocal
Close API + MCP
B 66.7/100REST API and hosted MCP server for Close, a sales CRM built around calling, email and SMS.
Verdict Three MCP scopes chosen per connection, read (71 tools), safe write (87) and destructive (121). 121 MCP tools, and even the read scope loads 71.
Choose it for Inside-sales teams that call, email and text from the CRM and want an agent to log, triage and draft without being able to send or delete by default.
Strengths
- Three MCP scopes chosen per connection, read (71 tools), safe write (87) and destructive (121)
- Email tools create drafts only, never send
- No status incidents logged between 3 July and 1 October 2026
Weaknesses
- 121 MCP tools, and even the read scope loads 71
- OAuth for REST apps has a single full-access scope
- No public subprocessor list, no security.txt and no bug bounty found
Price $9 / seat-moAuth OAuth or keyx402 nohosted
Twenty API + MCP
B 65.9/100Open-source CRM, hosted at twenty.com or self-hosted with Docker.
Verdict Six MCP meta-tools by default with schemas loaded on demand, and ?mode=direct for clients that load lazily. No status page found.
Choose it for Teams that want an open-source CRM they can self-host or extend with custom objects, and an MCP server that stays cheap in context.
Strengths
- Six MCP meta-tools by default with schemas loaded on demand, and
?mode=directfor clients that load lazily - Per-workspace OpenAPI for core and metadata, custom objects included
- API keys carry a required expiry, revocation and an optional role binding
Weaknesses
- No status page found
execute_toolisn't flagged destructive even though it can delete records, objects and fields- Cloud limit of 100 requests a minute
Price $9 / seat-moAuth OAuth or keyx402 nohosted
Affinity
B 63.4/100Affinity is a relationship CRM for venture capital and private equity firms, from Project Affinity, Inc. Agents reach it through a versioned REST API with a public OpenAPI file and a hosted MCP server, on the Scale plan and above.
Verdict A public OpenAPI 3.1 file, dated API versions with migration notes and a hosted MCP server with a read-only OAuth scope give an agent a well-documented way in. Access needs a Scale plan at $2,300 a user a year, sold through sales, with no trial that includes the API, and 36 of the 112 v2 operations are marked beta.
Choose it for Venture capital, private equity and other private capital firms that already run Affinity and want an agent to read relationship strength, pipeline lists, notes and meetings, then update fields and log notes.
Strengths
- Public OpenAPI 3.1.1 files for three dated versions (2024-01-01, 2026-07-15, 2026-09-17), 112 operations in the newest, plus
llms.txtand Markdown copies of every docs page - Breaking changes ship only in new dated versions, selected per key or per request with
X-Affinity-Api-Version, each with written migration steps - Hosted MCP server at
https://mcp.affinity.co/mcptakes OAuth with a read-only scope chosen at consent, and admins can switch off any AI client for the whole firm
Weaknesses
- No self-serve access. Every plan button reads Contact sales, the Essential plan has no API, and trial accounts can't call the API
- 36 of 112 v2 operations are beta, among them create person, the three search endpoints and webhooks, and the docs say beta endpoints can break without notice or versioning
- API keys carry their owner's full permissions with no per-key scopes or expiry. An IP allowlist is the only narrowing
Price $191.67 / seat-moAuth OAuth or keyx402 nohosted and local
Attio API + MCP
B 63.1/100REST API and hosted MCP server for Attio, a CRM built on custom objects and lists.
Verdict API, webhooks and the hosted MCP server are on the Free plan (3 seats, 50,000 records), no card. 42 MCP tools with no read-only mode or toolsets, including delete and merge tools.
Choose it for Small teams and startups that want an agent to search across records, notes, emails and calls and then update the CRM, starting free.
Strengths
- API, webhooks and the hosted MCP server are on the Free plan (3 seats, 50,000 records), no card
- Three public OpenAPI files and an llms.txt with 289 links
- Published limits of 100 reads and 25 writes a second, with Retry-After on 429
Weaknesses
- 42 MCP tools with no read-only mode or toolsets, including delete and merge tools
- Email bodies and call transcripts come back through MCP with no prompt-injection guidance
- No official REST SDK; the npm
attiopackage is the App SDK CLI
Price $35 / seat-moAuth OAuth or keyx402 nohosted
folk API + MCP
C 60.8/100REST API and hosted MCP server for folk, a relationship CRM for small teams.
Verdict Dated API versions, a year's support and 6 months' deprecation notice with Deprecation and Sunset headers. MCP server in open beta since 1 July 2026.
Choose it for Small teams running a relationship CRM (founders, agencies, investors) who want an agent to keep contacts, notes and follow-ups current.
Strengths
- Dated API versions, a year's support and 6 months' deprecation notice with
DeprecationandSunsetheaders Idempotency-Keyon writes and a 429 body withretryAfter- Errors carry
code,message,documentationUrlandrequestId
Weaknesses
- MCP server in open beta since 1 July 2026
- REST API keys have no scopes and MCP gets the user's full access
- REST API only on Premium and Enterprise
Price $24 / seat-moAuth OAuth or keyx402 nohosted
Pipedrive API + MCP
C 60.5/100REST API (v1 and a faster v2) and a hosted MCP server for Pipedrive, the pipeline CRM.
Verdict Hosted MCP server on every plan, with actions recorded in the change log. MCP tool list not published, and the server is labelled beta.
Choose it for Small and mid-size sales teams running deal pipelines who want an agent to update deals and log activities.
Strengths
- Hosted MCP server on every plan, with actions recorded in the change log
- Detailed rate-limit docs with token costs per call type and remaining-budget headers
- Official Node (33.7.0, 8 September 2026) and PHP SDKs
Weaknesses
- MCP tool list not published, and the server is labelled beta
- Four incidents over an hour in September 2026, and no status component for API v2 or MCP
- Personal API tokens carry full user rights and can travel as a query parameter
Price $24 / seat-moAuth OAuth or keyx402 nohosted
Salesforce API + MCP
C 60.5/100Salesforce Sales Cloud through the platform REST API (sObjects, SOQL, SOSL, composite and bulk) and Salesforce Hosted MCP Servers, generally available since April 2026.
Verdict Per-user OAuth 2.0 with PKCE and only mcp_api and refresh_token scopes. No hosted MCP changelog yet.
Choose it for Organisations already on Salesforce that need an agent to read and update any object under existing security rules.
Strengths
- Per-user OAuth 2.0 with PKCE and only
mcp_apiandrefresh_tokenscopes - Separate Reads, Mutations and Deletes servers, all off until an admin enables them
- 11 tools reach every standard and custom object inside field-level security and sharing
Weaknesses
- No hosted MCP changelog yet
- API access needs the $25 add-on on Pro Suite or a Core seat at $195, and Free and Starter suites have none
- MCP usage may bill against Flex Credits at a rate we couldn't find
Price $125 / seat-moAuth OAuthx402 nohosted
Head to head
- HubSpot API + MCP vs Zoho CRM BB 71.5 vs BB 70.8
- Microsoft Dynamics 365 Sales vs HubSpot API + MCP B 69.7 vs BB 71.5
- Close API + MCP vs HubSpot API + MCP B 66.7 vs BB 71.5
- HubSpot API + MCP vs Twenty API + MCP BB 71.5 vs B 65.9
- Microsoft Dynamics 365 Sales vs Zoho CRM B 69.7 vs BB 70.8
- Close API + MCP vs Zoho CRM B 66.7 vs BB 70.8
- Twenty API + MCP vs Zoho CRM B 65.9 vs BB 70.8
- Close API + MCP vs Microsoft Dynamics 365 Sales B 66.7 vs B 69.7
- Microsoft Dynamics 365 Sales vs Twenty API + MCP B 69.7 vs B 65.9
- Close API + MCP vs Twenty API + MCP B 66.7 vs B 65.9
Questions
What are the highest-rated CRM and customer-platform tools for AI agents?
HubSpot API + MCP has the highest benchmark score of the 17 ranked CRM and customer-platform tools, 71.5 (BB). Zoho CRM is second with 70.8 (BB).
How many CRM and customer-platform tools are agent-ready?
2 of the 17 ranked here grade BB or better, the bar for agent-ready on the Anchor benchmark.
Which CRM and customer-platform tools accept x402 payments?
None of the ranked listings here accepts x402 for its main call yet.
How is this list ranked?
By the Anchor benchmark score out of 100, a weighted mean of the scored categories minus deductions for negative events, from public evidence re-checked as vendors change. Listings cannot pay for a place. The latest assessment behind this page is from 9 October 2026.
How this list is made
The order is the Anchor benchmark score, the same number as on each listing and in the top list. Each listing is graded from public evidence against the benchmark checklist, and the picks above are worked out from those grades, prices and facts. No listing pays for its place, and paid audits or listing help never change a score.
Full ranked table · 136 head-to-head comparisons · Best tools in every category