{ "data": { "a": { "slug": "breakcold", "name": "Breakcold", "vendor": "Logike SAS", "vendorUrl": "https://www.breakcold.com", "kind": "http-api", "category": "crm", "summary": "Breakcold is a CRM for small sales teams that syncs email, LinkedIn, WhatsApp and Telegram conversations into one pipeline. Agents reach its records, tasks, notes and inbox through a REST API and a hosted MCP server.", "url": "https://www.anchorterminal.com/tools/breakcold", "markdownUrl": "https://www.anchorterminal.com/tools/breakcold.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/breakcold.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/breakcold.json", "dns": "breakcold.grade.anchorterminal.com", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.breakcold.com/mcp/v1", "packages": [], "auth": "mixed", "authNotes": "API keys (`bc_live_` prefix) are created in Settings \u003e API keys with chosen scopes (records, tasks, notes, inbox, inbox send, CRM metadata and others, read and write separate), an optional workspace limit and an expiry, shown once and revocable, with activity history. MCP clients can instead sign in by OAuth with PKCE through WorkOS AuthKit and dynamic client registration. Multi-organisation users send `X-Breakcold-Organization-Id`.", "pricing": "paid", "pricingNotes": "One plan in three sizes: X1 $99 a month (1 seat), X5 $199 (5 seats) and X20 $499 (20 seats), each with MCP access, 10% off quarterly and 20% off yearly. Extra seats $10 a month. A 14-day trial needs a card. API and MCP calls draw on a weekly AI usage allowance at 0.2 tokens a read and 0.4 a write; a weekly reset costs $50.", "priceSummary": "$99 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI spec, auth.md, the docs or the pricing page (checked 2026-11-06). Calls draw on a plan's weekly usage allowance.", "endpoints": [] }, "toolCount": 72, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.breakcold.com/api/overview", "llmsTxt": "https://docs.breakcold.com/llms.txt", "openapi": "https://docs.breakcold.com/api/openapi.json", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "crm.webhooks", "email.send", "email.threads" ], "tags": [ "official", "hosted", "mcp", "remote-mcp", "oauth", "openapi", "llms-txt", "paid", "trial", "webhooks", "idempotency", "eu" ], "lastRelease": "2026-11-06", "graded": true, "anchor": { "graded": true, "score": 58, "grade": "C", "agentReady": false, "rank": 766, "ranked": true, "rankOf": 1486, "categoryRank": 9, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 67, "maintenance": 60, "payments": 15, "reliability": 45, "schema": 90, "security": 60, "transparency": 67 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Breakcold's API and hosted MCP server are built for agents, with an OpenAPI contract, scoped and expiring keys, published rate limits, idempotency keys and message sends that stay drafts until confirmed. No status page, SLA or security certification was found, and the only trial needs a card on a plan from $99 a month.", "bestFor": "Small sales teams who run outreach on email and social channels and want an agent to keep records, tasks and replies in order.", "strengths": [ "API keys take scopes, a workspace limit and an expiry, and MCP also accepts OAuth with PKCE", "Compose and send tools draft by default and send only with an explicit `sendMode`", "OpenAPI 3.1 contract of 70 described operations, llms.txt and Markdown docs", "Rate limits published per organisation, workspace, identity and route, with Retry-After and `retryAfterMs`", "Public DPA with a provider inventory and 30 days' notice of new subprocessors" ], "weaknesses": [ "No status page or SLA was found; status.breakcold.com did not answer", "72 MCP tools by default, and their annotations are not published", "The only trial needs a card, and plans start at $99 a month", "No security.txt, bug bounty or security certification found", "No official SDK, and the CRM MCP server is not in the official MCP registry" ], "agentNotes": [ "Call `capabilities_list` or `tools_search` first to see which tools the granted scopes allow", "Send an Idempotency-Key on REST creates and a stable idempotency key on `records_create`, so retries return the original result", "Leave `sendMode` unset on compose and send tools until the user has confirmed the message", "Pass `fields` on record lists to cut the response to the fields you need", "On 429 wait for Retry-After or `retryAfterMs`; over MCP the error code is -32029" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 58 } ], "editorialScores": { "ergonomics": 67, "maintenance": 60, "payments": 15, "reliability": 45, "schema": 90, "security": 60, "transparency": 69 }, "provenanceScore": 64, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://rest.breakcold.com/api/v1/workspaces\" -H \"Authorization: Bearer YOUR_API_KEY\"", "claudeCode": "claude mcp add --transport http breakcold https://mcp.breakcold.com/mcp/v1", "config": { "mcpServers": { "breakcold": { "url": "https://mcp.breakcold.com/mcp/v1" } } } }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/breakcold" }, "area": "business", "unitPrices": [ { "item": "X1 plan (1 seat)", "unit": "month", "usd": 99, "note": "Billed monthly; 10% off quarterly, 20% off yearly" }, { "item": "X5 plan (5 seats)", "unit": "month", "usd": 199, "note": "AI usage five times X1" }, { "item": "X20 plan (20 seats)", "unit": "month", "usd": 499, "note": "AI usage twenty times X1" }, { "item": "Extra seat or connected account", "unit": "seat-month", "usd": 10, "note": "On every plan" } ], "provenance": { "legalEntity": "Logike SAS", "domain": "breakcold.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.breakcold.com/legal/terms-and-conditions", "privacy": "https://www.breakcold.com/legal/privacy", "statusPage": "", "changelog": "https://docs.breakcold.com/api/changelog", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms and conditions (19 October 2026) name Logike SAS, SIREN 902303395, RCS Paris, share capital EUR 1,000, 128 rue de la Boétie, 75008 Paris, under French law. A services agreement, developer terms (3 September 2026), DPA (27 October 2026) and vulnerability disclosure policy (3 September 2026) sit in the legal centre.", "The developer terms ask integrations to respect published rate limits and not rotate keys to evade them; no clause against reading public pages was found.", "www.breakcold.com/robots.txt allows all but /admin and /api with Content-Signal ai-train=no, search=yes, ai-input=yes; docs.breakcold.com allows all; rest.breakcold.com and mcp.breakcold.com carry only content-signal comments. One unauthenticated GET to rest.breakcold.com/api/v1/openapi.json, sent before its robots.txt was read, answered 401.", "/.well-known/security.txt returns 404. status.breakcold.com failed the TLS handshake. Domain registration date not checked.", "WebFetch received 404 for the pricing and legal pages, which answered 200 to a plain request, so those were read with curl." ], "score": 64 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/breakcold.json", "live": { "slug": "breakcold", "probe": { "target": "https://mcp.breakcold.com/mcp/v1", "method": "get", "lastAt": "2026-11-07T18:20:14.868914805Z", "lastOk": true, "lastStatus": 401, "lastMs": 133, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 62, "p95ms24h": 146, "samples24h": 200, "samples30d": 200, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "securityTxt": { "url": "https://breakcold.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:18.103639801Z" }, "llmsTxt": { "url": "https://docs.breakcold.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:31:44.782472776Z" }, "pages": [ { "url": "https://docs.breakcold.com/api/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:05:21.53355824Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "f02d2d2285f0" }, { "url": "https://www.breakcold.com/legal/privacy", "kind": "privacy", "status": 404, "checkedAt": "2026-11-07T14:26:05.166026349Z", "changedAt": "0001-01-01T00:00:00Z" }, { "url": "https://www.breakcold.com/legal/terms-and-conditions", "kind": "terms", "status": 404, "checkedAt": "2026-11-07T14:26:07.751718301Z", "changedAt": "0001-01-01T00:00:00Z" } ], "mcpTools": { "url": "https://mcp.breakcold.com/mcp/v1", "checkedAt": "2026-11-07T01:42:53.267576496Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:42:53.267576496Z" }, "updatedAt": "2026-11-07T18:20:14.868914805Z" } }, "answer": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Breakcold's 58 (C), and leads in every scored category.", "b": { "slug": "hubspot-mcp", "name": "HubSpot API + MCP", "vendor": "HubSpot", "vendorUrl": "https://developers.hubspot.com", "kind": "http-api", "category": "crm", "summary": "HubSpot's CRM REST API (objects, associations, search, properties, pipelines, engagements, webhooks) and its official MCP servers.", "url": "https://www.anchorterminal.com/tools/hubspot-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/hubspot-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/hubspot-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/hubspot-mcp.json", "dns": "hubspot-mcp.grade.anchorterminal.com", "license": "proprietary", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.hubapi.com", "packages": [ { "registry": "npm", "name": "@hubspot/api-client" }, { "registry": "pypi", "name": "hubspot-api-client" }, { "registry": "npm", "name": "@hubspot/cli" } ], "auth": "mixed", "authNotes": "REST API takes a Bearer token, either a static Service Key from a Developer Platform project (version 2026.09, scoped, rotatable with a 7-day grace period) or an OAuth 2.0 token for a public app. Creating new legacy private apps was removed from the UI in late September 2026; existing ones keep working until v1 to v3 APIs and legacy apps lose support in September 2027. The remote MCP server is OAuth 2.1 with PKCE only, through an MCP connector created under Development, MCP Connectors; its scopes follow the tools and what the user grants, with no API-key path. The developer MCP server authenticates through the HubSpot CLI.", "pricing": "freemium", "pricingNotes": "Free CRM for up to 2 users with no card, and the API and remote MCP server work on it. Sales Hub Starter $20 a seat a month billed monthly ($7 billed yearly as shown on 2026-09-30), Professional $100 billed monthly or $90 billed yearly plus a $1,500 onboarding fee, Enterprise $150 a seat a month plus a $3,500 onboarding fee. Some MCP tools need Marketing Hub or Revenue Hub Professional (https://www.hubspot.com/pricing/sales).", "priceSummary": "$20 / seat-mo", "where": "both", "x402": { "level": "no", "evidence": "No payments. Access follows the HubSpot account.", "endpoints": [] }, "toolCount": 32, "popularity": { "githubStars": null, "npmWeekly": 1822222, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developers.hubspot.com/docs", "llmsTxt": "https://developers.hubspot.com/docs/llms.txt", "openapi": "https://github.com/HubSpot/HubSpot-public-api-spec-collection", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "crm.webhooks", "crm.marketing", "work.tickets" ], "tags": [ "official", "hosted", "oauth", "crm", "enterprise", "mcp", "freemium", "no-card", "free-tier", "llms-txt", "openapi", "webhooks", "typescript", "python" ], "lastRelease": "2026-09-15", "graded": true, "anchor": { "graded": true, "score": 71.5, "grade": "BB", "agentReady": true, "rank": 158, "ranked": true, "rankOf": 1486, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 84, "payments": 30, "reliability": 60, "schema": 92, "security": 82, "transparency": 85 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "high", "date": "2026-10-01" }, "negative": 0, "verdict": "Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only. Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours.", "bestFor": "Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes.", "strengths": [ "Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only", "Writes need user confirmation after a proposed-changes summary, and there's no delete tool", "Free CRM for 2 users with API and MCP access, no card", "Date-based API versions, and v1 to v3 support ends in September 2027, announced a year ahead", "HackerOne bug bounty, signed security.txt, SOC 2 Type II" ], "weaknesses": [ "Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours", "Emails, notes and conversations reach the model with no injection guidance", "Privacy policy allows using personal data to train HubSpot AI models", "No Retry-After documented on 429s and no idempotency keys for CRM writes", "Some tools need Marketing Hub or Revenue Hub Professional, and about ten are beta" ], "agentNotes": [ "Call `discover_hubspot_schema` before writing, so property names match the portal", "Use `search_crm_objects` with filter groups and a `properties` list instead of listing everything", "Expect `manage_crm_objects` to stop for user confirmation, so plan the turn around it", "Read `policyName` on a 429 to tell a 10-second burst from the daily cap", "Ask for Sensitive Data to stay off only if the job needs calls, emails or notes, since it blocks them" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 4, "history": [ { "basis": "public evidence", "confidence": "high", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.5 } ], "editorialScores": { "ergonomics": 72, "maintenance": 84, "payments": 30, "reliability": 60, "schema": 92, "security": 82, "transparency": 71 }, "provenanceScore": 98, "checked": { "categories": { "ergonomics": "2026-10-01", "maintenance": "2026-10-01", "payments": "2026-10-01", "reliability": "2026-10-01", "schema": "2026-10-01", "security": "2026-10-01", "transparency": "2026-10-01" }, "last": "2026-10-01", "lastMoved": "2026-10-08", "oldest": "2026-10-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://api.hubapi.com/crm/v3/objects/contacts?limit=5\" -H \"Authorization: Bearer $HUBSPOT_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http hubspot https://mcp.hubspot.com", "config": { "mcpServers": { "hubspot": { "url": "https://mcp.hubspot.com" } } } }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/hubspot-mcp" }, "area": "business", "unitPrices": [ { "item": "Free CRM (API and MCP included)", "unit": "seat-month", "usd": 0, "note": "up to 2 users" }, { "item": "Sales Hub Starter", "unit": "seat-month", "usd": 20, "note": "billed monthly; $7 billed yearly as shown on 2026-09-30" }, { "item": "Sales Hub Professional", "unit": "seat-month", "usd": 90, "note": "billed yearly; $100 billed monthly; $1,500 onboarding fee" }, { "item": "Sales Hub Enterprise", "unit": "seat-month", "usd": 150, "note": "$3,500 onboarding fee" } ], "provenance": { "legalEntity": "HubSpot, Inc.", "domain": "hubspot.com", "domainRegistered": "2005-02-06", "endpointOnVendorDomain": true, "terms": "https://legal.hubspot.com/terms-of-service", "privacy": "https://legal.hubspot.com/privacy-policy", "statusPage": "https://status.hubspot.com", "changelog": "https://developers.hubspot.com/changelog", "securityTxt": "valid", "checked": "2026-09-30", "score": 98 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/hubspot-mcp.json", "live": { "slug": "hubspot-mcp", "probe": { "target": "https://api.hubapi.com", "method": "get", "lastAt": "2026-11-07T18:20:30.903062669Z", "lastOk": true, "lastStatus": 200, "lastMs": 550, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 351, "p95ms24h": 603, "samples24h": 239, "samples30d": 7910, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.hubspot.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T18:21:16.216392748Z" }, "versions": [ { "registry": "npm", "name": "@hubspot/api-client", "version": "14.1.3", "seenAt": "2026-11-06T23:33:20.538431907Z" }, { "registry": "npm", "name": "@hubspot/cli", "version": "8.18.0", "seenAt": "2026-11-06T23:33:22.674239794Z" }, { "registry": "pypi", "name": "hubspot-api-client", "version": "13.0.0", "released": "2026-11-02", "seenAt": "2026-11-06T23:33:22.191841629Z" } ], "npmWeekly": 2271248, "pypiWeekly": 1191744, "securityTxt": { "url": "https://hubspot.com/.well-known/security.txt", "state": "valid", "expires": "2034-06-01:00:00.000Z", "checkedAt": "2026-11-07T16:01:58.474250572Z" }, "llmsTxt": { "url": "https://developers.hubspot.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:44.343946853Z" }, "domain": { "domain": "hubspot.com", "registered": "2005-02-06", "source": "https://rdap.verisign.com/com/v1/domain/hubspot.com", "checkedAt": "2026-11-01T14:22:37.625928961Z" }, "pages": [ { "url": "https://developers.hubspot.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:04:02.869800663Z", "changedAt": "2026-11-04T08:19:04.150608128Z", "fingerprint": "e7917e672537" }, { "url": "https://developers.hubspot.com/changelog/crm-api-write-validation-enforcement", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:05.243317642Z", "changedAt": "2026-10-29T05:02:35.363066721Z", "fingerprint": "5567d6eafe11" }, { "url": "https://developers.hubspot.com/changelog/legacy-apis-and-legacy-apps-whats-going-unsupported-and-when", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:07.312371172Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e79d2b3ec2dd" }, { "url": "https://developers.hubspot.com/changelog/legacy-private-app-creation-sunset", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:09.179320944Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a5a655dde860" }, { "url": "https://developers.hubspot.com/changelog/pipeline-stage-validation-true", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:11.205463343Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fa5f3f57547a" }, { "url": "https://developers.hubspot.com/changelog/pipelines-api-v1-sunset", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:13.359644556Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6de9adbf9b3f" }, { "url": "https://www.hubspot.com/pricing/sales", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:29:55.768244034Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "4946a854611c" }, { "url": "https://legal.hubspot.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:12:56.409405339Z", "changedAt": "2026-10-29T05:10:00.161069712Z", "fingerprint": "1ef196588bc2" }, { "url": "https://legal.hubspot.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:12:58.740970715Z", "changedAt": "2026-10-29T05:10:04.626649225Z", "fingerprint": "7e84799c0bc1" } ], "mcpTools": { "url": "https://mcp.hubspot.com", "checkedAt": "2026-11-07T01:45:20.238241427Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-09-28T21:55:53.627458056Z" }, "updatedAt": "2026-11-07T18:21:16.216392748Z" } }, "edges": [ { "by": 24, "category": "maintenance", "leads": "hubspot-mcp", "name": "Maintenance \u0026 community", "reasons": { "a": "API changelog entry on 6 November 2026 (30). More than 60 dated entries since 8 August 2026 (20). Closed service with a public API changelog, an RSS feed, a help centre and support by email; no public issue tracker (10 of 15). The CRM MCP server is not in the official MCP registry (the registry's io.github.breakcold/inboxmcp is a separate product at inbox-mcp.com), and no official SDK exists (0). No package to check (0). 30 + 20 + 10 + 0 + 0 = 60.", "b": "Developer Platform 2026.09 and a changelog post on 15 September 2026 (30). Changelog posts on 11 August, 14 August, 27 August, 8 September and 15 September 2026 (20). Public changelog and developer community. We didn't check forum response times (12 of 15). Not in the official MCP registry under a HubSpot namespace, only third-party servers, but official SDKs are current (15). The Node SDK has test and lint CI and moved to Node 22 in 14.0.0, but still wraps the v3 APIs that lose support in September 2027 (7 of 10)." }, "scores": { "a": 60, "b": 84 } }, { "by": 22, "category": "security", "leads": "hubspot-mcp", "name": "Security \u0026 auth", "reasons": { "a": "API keys take chosen read and write scopes, an optional workspace limit and an expiry, are shown once, show activity history and can be revoked. MCP also accepts OAuth with PKCE through WorkOS AuthKit. Tokens travel in headers (30). Read-only keys are possible and message sends stay drafts until `sendMode` is set after the user confirms (17 of 20). The inbox returns email, LinkedIn, WhatsApp and Telegram text from outside parties, and no prompt-injection guidance was found (0). API key activity history is visible to the user; no organisation audit log was found (7 of 15). A vulnerability disclosure policy (3 September 2026) with reports to support@breakcold.com, no bounty, no security.txt (404) and no SOC 2 or ISO 27001 found (6 of 20). 30 + 17 + 0 + 7 + 6 = 60.", "b": "The remote MCP server takes only OAuth 2.1 with PKCE, with scopes set by the tools and the user's grant. REST uses OAuth apps or Service Keys, which are scoped and rotate with a 7-day grace period (30). Writes need explicit user confirmation after a proposed-changes summary, MCP has no delete tools, and turning on Sensitive Data blocks calls, emails, meetings, notes and tasks from the MCP server. No documented read-only mode (17 of 20). The server reads emails, conversations and notes written by outsiders, and we found no injection guidance beyond the Sensitive Data switch (5 of 15). Account activity history can be viewed and exported per the trust centre. Nothing MCP-specific is documented (10 of 15). PGP-signed security.txt valid until 2034, a HackerOne bug bounty, SOC 1 Type II, SOC 2 Type II and SOC 3 (20)." }, "scores": { "a": 60, "b": 82 } }, { "by": 18, "category": "transparency", "leads": "hubspot-mcp", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with a legal centre whose terms name Logike SAS, its registration and French law (15 of 30). The privacy policy of 27 October 2026 and the DPA agree, give retention periods for specific copies (deleted record snapshots 30 days, exports 7 days, import rows 90 days, call recordings 30 to 365 days) and promise breach notice without undue delay (27 of 30). The developer terms tie notice of material breaking changes to the services agreement, and the changelog gives migration steps, with no fixed notice period found (12 of 20). DPA Annex C lists providers and their functions with 30 days' notice of changes; locations are said to depend on configuration, with US and EU app regions (15 of 20). 15 + 27 + 12 + 15 = 69.", "b": "Closed service with terms naming HubSpot, Inc. (15). Privacy policy updated 16 September 2026 with a DPA whose Annex 3 lists subprocessors. Retention reads 'a reasonable period', and the policy says HubSpot may process personal data to train its AI models (18 of 30). Dated sunsets, Pipelines v1 on 4 December 2026 (announced 14 August) and v1 to v3 APIs and legacy apps in September 2027 (announced 15 September 2026), plus date-based API versions (20). Subprocessor page and regional data centres disclosed (18 of 20)." }, "scores": { "a": 67, "b": 85 } }, { "by": 15, "category": "reliability", "leads": "hubspot-mcp", "name": "Reliability", "reasons": { "a": "Graded as a hosted service on the REST API and hosted MCP server. No status page is linked from the site or docs, and status.breakcold.com failed the TLS handshake (0). With no readable history the incident line scores 5. Rate limits published per organisation (600 a minute), workspace (300), identity or key (180) and route (120), for REST and MCP (15). 429 carries Retry-After and `retryAfterMs`, the docs give backoff guidance, and creates take an Idempotency-Key so retries return the original result (15). No SLA found in the services agreement summary, the pricing page or the docs (0). Neither surface is marked beta (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.", "b": "Status page at status.hubspot.com with component history (20). Twelve entries since 3 July 2026, several over an hour on core platform services, among them EU customer platform tools impaired for 3 h 9 min on 22 July, event ingestion delayed 5 hours on 28 July, workflow actions delayed 5 h 45 min on 21 August and the Salesforce integration down about 8 hours on 24 September. None names the public API or the MCP server, which is why this isn't 0 (5). Limits published per app type and tier, 100 to 190 requests per 10 seconds and 250,000 to 1,000,000 a day for private apps, 110 per 10 seconds for public apps (15). 429s carry `errorType` RATE_LIMIT and `policyName`, and responses carry `X-HubSpot-RateLimit-*` headers, but the usage page gives no Retry-After or backoff guidance and we found no idempotency keys for CRM writes (10 of 15). No SLA found in what we read (0). Remote MCP server GA since 13 April 2026, though about ten tools for revenue objects and quotes are beta (10)." }, "scores": { "a": 45, "b": 60 } }, { "by": 15, "category": "payments", "leads": "hubspot-mcp", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Plan prices are public, and each call's cost in usage tokens is published, but the money value of a token is not (10). The 14-day trial needs a card (0). auth.md documents an agent identity endpoint that takes an identity assertion or an anonymous request followed by a claim by a person, which we read and did not call; access still needs a paid or card-backed trial account (5 of 20). 0 + 10 + 0 + 5 = 15.", "b": "No x402, MPP or L402 (0). Plan prices public, Starter $7 a seat a month yearly or $20 monthly, Professional $90 or $100 plus $1,500 onboarding, Enterprise $150 plus $3,500, with extra HubSpot Credits at $0.010 each. API calls themselves aren't priced (10). Free CRM for up to 2 users with no card, and the API and remote MCP work on it (20). A person signs up in a browser and creates the MCP connector or app (0)." }, "scores": { "a": 15, "b": 30 } }, { "by": 5, "category": "ergonomics", "leads": "hubspot-mcp", "name": "Agent ergonomics", "reasons": { "a": "72 MCP tools (5), with `tools_search` and `capabilities_list` to find tools by capability or granted scope, and scopes that limit which tools apply (8 back). Cursor pagination, record search and a `fields` selection on record lists since 3 November (18 of 20). Errors carry a code, message, `requestId` and `retryAfterMs`, and the 4 November changelog removed stack frames from messages (17 of 20). Idempotency keys on creates, and compose and send tools return a non-sending draft by default; MCP annotations are not published (14 of 20). No official SDK; setup is one URL with OAuth (5 of 15). 13 + 18 + 17 + 14 + 5 = 67.", "b": "32 MCP tools (5), with scopes trimmed to the tools and permissions the user grants at install, and `discover_hubspot_schema` and `tool_guidance` to fetch context on demand (3 more, 8 of 25). Search takes filter groups, sorts, a 200-record page and a `properties` list, and REST reads select properties (20). Errors carry a category and a correlation ID (16 of 20). `manage_crm_objects` shows a proposed-changes summary and needs the user's confirmation before any create or update, and there's no delete tool. We found no `readOnlyHint` or `destructiveHint` documented and no idempotency keys (13 of 20). Official SDKs for Node (14.0.1, 1 July 2026), Python, PHP and Ruby (15)." }, "scores": { "a": 67, "b": 72 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Logike SAS", "b": "HubSpot", "name": "Vendor" }, { "a": "https://mcp.breakcold.com/mcp/v1", "b": "https://api.hubapi.com", "name": "Hosted endpoint" }, { "a": "Streamable HTTP", "b": "HTTP, Streamable HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Paid", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "proprietary", "name": "Licence" }, { "a": "72", "b": "32", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-11-06", "b": "2026-09-15", "name": "Last release" }, { "a": "couldn't be read", "b": "2026-09-16", "name": "Terms last updated" }, { "a": "couldn't be read", "b": "2026-09-16", "name": "Privacy policy last updated" }, { "a": "couldn't be read", "b": "yes, with an opt-out", "name": "Customer content may train models" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "couldn't be read", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "1.8M npm/wk", "name": "Popularity" }, { "a": "none", "b": "4/5 (2)", "name": "Agent reviews" } ], "faq": [ { "answer": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Breakcold's 58 (C), and leads in every scored category.", "question": "Which is better for AI agents, Breakcold or HubSpot API + MCP?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Breakcold and HubSpot API + MCP need an API key?" }, { "answer": "Yes. Breakcold has a hosted endpoint at https://mcp.breakcold.com/mcp/v1 and HubSpot API + MCP at https://api.hubapi.com.", "question": "Can an agent call Breakcold and HubSpot API + MCP without installing anything?" } ], "goodFor": [ { "aheadOn": null, "also": null, "goodFor": "Small sales teams who run outreach on email and social channels and want an agent to keep records, tasks and replies in order.", "slug": "breakcold", "watchFor": "No status page or SLA was found; status.breakcold.com did not answer" }, { "aheadOn": [ "Reliability, 60 against 45", "Agent ergonomics, 72 against 67", "Security \u0026 auth, 82 against 60", "Payments \u0026 pricing, 30 against 15", "Maintenance \u0026 community, 84 against 60", "Transparency \u0026 trust, 85 against 67" ], "also": [ "Agent-ready, a grade of BB or better", "Runs on your own machine", "Free to start without a card" ], "goodFor": "Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes.", "slug": "hubspot-mcp", "watchFor": "Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours" } ], "history": { "breakcold": null, "hubspot-mcp": [ { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.1, "from": 71.6, "fromGrade": "BB", "to": 71.5, "toGrade": "BB" } ] }, "job": { "capability": "crm.records", "name": "CRM records" }, "others": [ { "json": "https://www.anchorterminal.com/compare/affinity-vs-breakcold.json", "title": "Affinity vs Breakcold", "url": "https://www.anchorterminal.com/compare/affinity-vs-breakcold" }, { "json": "https://www.anchorterminal.com/compare/affinity-vs-hubspot-mcp.json", "title": "Affinity vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/affinity-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-breakcold.json", "title": "Attio API + MCP vs Breakcold", "url": "https://www.anchorterminal.com/compare/attio-vs-breakcold" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-hubspot-mcp.json", "title": "Attio API + MCP vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/attio-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-capsule-crm.json", "title": "Breakcold vs Capsule CRM", "url": "https://www.anchorterminal.com/compare/breakcold-vs-capsule-crm" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-close.json", "title": "Breakcold vs Close API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-close" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-copper.json", "title": "Breakcold vs Copper API", "url": "https://www.anchorterminal.com/compare/breakcold-vs-copper" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-dynamics-365-sales.json", "title": "Breakcold vs Microsoft Dynamics 365 Sales", "url": "https://www.anchorterminal.com/compare/breakcold-vs-dynamics-365-sales" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-folk.json", "title": "Breakcold vs folk API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-folk" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-freshsales.json", "title": "Breakcold vs Freshsales API", "url": "https://www.anchorterminal.com/compare/breakcold-vs-freshsales" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-nutshell.json", "title": "Breakcold vs Nutshell", "url": "https://www.anchorterminal.com/compare/breakcold-vs-nutshell" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-payani-ai.json", "title": "Breakcold vs Payani AI", "url": "https://www.anchorterminal.com/compare/breakcold-vs-payani-ai" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-pipedrive.json", "title": "Breakcold vs Pipedrive API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-pipedrive" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle.json", "title": "Breakcold vs Relaticle", "url": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-salesflare.json", "title": "Breakcold vs Salesflare", "url": "https://www.anchorterminal.com/compare/breakcold-vs-salesflare" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-salesforce.json", "title": "Breakcold vs Salesforce API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-salesforce" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-streak.json", "title": "Breakcold vs Streak API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-streak" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.json", "title": "Breakcold vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-twenty.json", "title": "Breakcold vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-zoho-crm.json", "title": "Breakcold vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/breakcold-vs-zoho-crm" }, { "json": "https://www.anchorterminal.com/compare/capsule-crm-vs-hubspot-mcp.json", "title": "Capsule CRM vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/capsule-crm-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/close-vs-hubspot-mcp.json", "title": "Close API + MCP vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/close-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/copper-vs-hubspot-mcp.json", "title": "Copper API vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/copper-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-hubspot-mcp.json", "title": "Microsoft Dynamics 365 Sales vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp.json", "title": "folk API + MCP vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/freshsales-vs-hubspot-mcp.json", "title": "Freshsales API vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/freshsales-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-nutshell.json", "title": "HubSpot API + MCP vs Nutshell", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-nutshell" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-payani-ai.json", "title": "HubSpot API + MCP vs Payani AI", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-payani-ai" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-pipedrive.json", "title": "HubSpot API + MCP vs Pipedrive API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-pipedrive" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.json", "title": "HubSpot API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesflare.json", "title": "HubSpot API + MCP vs Salesflare", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesflare" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesforce.json", "title": "HubSpot API + MCP vs Salesforce API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesforce" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-streak.json", "title": "HubSpot API + MCP vs Streak API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-streak" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm.json", "title": "HubSpot API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-twenty.json", "title": "HubSpot API + MCP vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-zoho-crm.json", "title": "HubSpot API + MCP vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-zoho-crm" } ], "panel": null, "scores": [ { "breakcold": 45, "by": 15, "edge": "hubspot-mcp", "hubspot-mcp": 60, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "breakcold": 90, "by": 2, "edge": "hubspot-mcp", "hubspot-mcp": 92, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "breakcold": 67, "by": 5, "edge": "hubspot-mcp", "hubspot-mcp": 72, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "breakcold": 60, "by": 22, "edge": "hubspot-mcp", "hubspot-mcp": 82, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "breakcold": 15, "by": 15, "edge": "hubspot-mcp", "hubspot-mcp": 30, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "breakcold": 60, "by": 24, "edge": "hubspot-mcp", "hubspot-mcp": 84, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "breakcold": 67, "by": 18, "edge": "hubspot-mcp", "hubspot-mcp": 85, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Breakcold's 58 (C), and leads in every scored category. Both do crm records.", "tasks": null, "tutorials": [], "verdicts": { "breakcold": "Breakcold's API and hosted MCP server are built for agents, with an OpenAPI contract, scoped and expiring keys, published rate limits, idempotency keys and message sends that stay drafts until confirmed. No status page, SLA or security certification was found, and the only trial needs a card on a plan from $99 a month.", "hubspot-mcp": "Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only. Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp", "json": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.min.md" }, "markdown": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Breakcold's 58 (C), and leads in every scored category. Both do crm records.\n\n- Breakcold: grade C, 58/100, rank #766 of 1486. Markdown https://www.anchorterminal.com/tools/breakcold.md · JSON https://www.anchorterminal.com/api/v1/tools/breakcold.json\n- HubSpot API + MCP: grade BB, 71.5/100, rank #158 of 1486. Markdown https://www.anchorterminal.com/tools/hubspot-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/hubspot-mcp.json\n- Best CRM and customer-platform tools for AI agents: https://www.anchorterminal.com/best/crm/index.md\n- All 190 crm comparisons: https://www.anchorterminal.com/compare/crm/index.md\n\n## Which one, for what\n\n### Breakcold (C)\n\nGood for: Small sales teams who run outreach on email and social channels and want an agent to keep records, tasks and replies in order.\n\nWatch for: No status page or SLA was found; status.breakcold.com did not answer\n\n### HubSpot API + MCP (BB)\n\nGood for: Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes.\n\nAhead on:\n- Reliability, 60 against 45\n- Agent ergonomics, 72 against 67\n- Security \u0026 auth, 82 against 60\n- Payments \u0026 pricing, 30 against 15\n- Maintenance \u0026 community, 84 against 60\n- Transparency \u0026 trust, 85 against 67\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours\n\n\n## Why the edge\n\n### Maintenance \u0026 community: HubSpot API + MCP +24\n\n- Breakcold (60): API changelog entry on 6 November 2026 (30). More than 60 dated entries since 8 August 2026 (20). Closed service with a public API changelog, an RSS feed, a help centre and support by email; no public issue tracker (10 of 15). The CRM MCP server is not in the official MCP registry (the registry's io.github.breakcold/inboxmcp is a separate product at inbox-mcp.com), and no official SDK exists (0). No package to check (0). 30 + 20 + 10 + 0 + 0 = 60.\n- HubSpot API + MCP (84): Developer Platform 2026.09 and a changelog post on 15 September 2026 (30). Changelog posts on 11 August, 14 August, 27 August, 8 September and 15 September 2026 (20). Public changelog and developer community. We didn't check forum response times (12 of 15). Not in the official MCP registry under a HubSpot namespace, only third-party servers, but official SDKs are current (15). The Node SDK has test and lint CI and moved to Node 22 in 14.0.0, but still wraps the v3 APIs that lose support in September 2027 (7 of 10).\n\n### Security \u0026 auth: HubSpot API + MCP +22\n\n- Breakcold (60): API keys take chosen read and write scopes, an optional workspace limit and an expiry, are shown once, show activity history and can be revoked. MCP also accepts OAuth with PKCE through WorkOS AuthKit. Tokens travel in headers (30). Read-only keys are possible and message sends stay drafts until `sendMode` is set after the user confirms (17 of 20). The inbox returns email, LinkedIn, WhatsApp and Telegram text from outside parties, and no prompt-injection guidance was found (0). API key activity history is visible to the user; no organisation audit log was found (7 of 15). A vulnerability disclosure policy (3 September 2026) with reports to support@breakcold.com, no bounty, no security.txt (404) and no SOC 2 or ISO 27001 found (6 of 20). 30 + 17 + 0 + 7 + 6 = 60.\n- HubSpot API + MCP (82): The remote MCP server takes only OAuth 2.1 with PKCE, with scopes set by the tools and the user's grant. REST uses OAuth apps or Service Keys, which are scoped and rotate with a 7-day grace period (30). Writes need explicit user confirmation after a proposed-changes summary, MCP has no delete tools, and turning on Sensitive Data blocks calls, emails, meetings, notes and tasks from the MCP server. No documented read-only mode (17 of 20). The server reads emails, conversations and notes written by outsiders, and we found no injection guidance beyond the Sensitive Data switch (5 of 15). Account activity history can be viewed and exported per the trust centre. Nothing MCP-specific is documented (10 of 15). PGP-signed security.txt valid until 2034, a HackerOne bug bounty, SOC 1 Type II, SOC 2 Type II and SOC 3 (20).\n\n### Transparency \u0026 trust: HubSpot API + MCP +18\n\n- Breakcold (67): Closed service with a legal centre whose terms name Logike SAS, its registration and French law (15 of 30). The privacy policy of 27 October 2026 and the DPA agree, give retention periods for specific copies (deleted record snapshots 30 days, exports 7 days, import rows 90 days, call recordings 30 to 365 days) and promise breach notice without undue delay (27 of 30). The developer terms tie notice of material breaking changes to the services agreement, and the changelog gives migration steps, with no fixed notice period found (12 of 20). DPA Annex C lists providers and their functions with 30 days' notice of changes; locations are said to depend on configuration, with US and EU app regions (15 of 20). 15 + 27 + 12 + 15 = 69.\n- HubSpot API + MCP (85): Closed service with terms naming HubSpot, Inc. (15). Privacy policy updated 16 September 2026 with a DPA whose Annex 3 lists subprocessors. Retention reads 'a reasonable period', and the policy says HubSpot may process personal data to train its AI models (18 of 30). Dated sunsets, Pipelines v1 on 4 December 2026 (announced 14 August) and v1 to v3 APIs and legacy apps in September 2027 (announced 15 September 2026), plus date-based API versions (20). Subprocessor page and regional data centres disclosed (18 of 20).\n\n### Reliability: HubSpot API + MCP +15\n\n- Breakcold (45): Graded as a hosted service on the REST API and hosted MCP server. No status page is linked from the site or docs, and status.breakcold.com failed the TLS handshake (0). With no readable history the incident line scores 5. Rate limits published per organisation (600 a minute), workspace (300), identity or key (180) and route (120), for REST and MCP (15). 429 carries Retry-After and `retryAfterMs`, the docs give backoff guidance, and creates take an Idempotency-Key so retries return the original result (15). No SLA found in the services agreement summary, the pricing page or the docs (0). Neither surface is marked beta (10). 0 + 5 + 15 + 15 + 0 + 10 = 45.\n- HubSpot API + MCP (60): Status page at status.hubspot.com with component history (20). Twelve entries since 3 July 2026, several over an hour on core platform services, among them EU customer platform tools impaired for 3 h 9 min on 22 July, event ingestion delayed 5 hours on 28 July, workflow actions delayed 5 h 45 min on 21 August and the Salesforce integration down about 8 hours on 24 September. None names the public API or the MCP server, which is why this isn't 0 (5). Limits published per app type and tier, 100 to 190 requests per 10 seconds and 250,000 to 1,000,000 a day for private apps, 110 per 10 seconds for public apps (15). 429s carry `errorType` RATE_LIMIT and `policyName`, and responses carry `X-HubSpot-RateLimit-*` headers, but the usage page gives no Retry-After or backoff guidance and we found no idempotency keys for CRM writes (10 of 15). No SLA found in what we read (0). Remote MCP server GA since 13 April 2026, though about ten tools for revenue objects and quotes are beta (10).\n\n### Payments \u0026 pricing: HubSpot API + MCP +15\n\n- Breakcold (15): No x402, MPP or L402 (0). Plan prices are public, and each call's cost in usage tokens is published, but the money value of a token is not (10). The 14-day trial needs a card (0). auth.md documents an agent identity endpoint that takes an identity assertion or an anonymous request followed by a claim by a person, which we read and did not call; access still needs a paid or card-backed trial account (5 of 20). 0 + 10 + 0 + 5 = 15.\n- HubSpot API + MCP (30): No x402, MPP or L402 (0). Plan prices public, Starter $7 a seat a month yearly or $20 monthly, Professional $90 or $100 plus $1,500 onboarding, Enterprise $150 plus $3,500, with extra HubSpot Credits at $0.010 each. API calls themselves aren't priced (10). Free CRM for up to 2 users with no card, and the API and remote MCP work on it (20). A person signs up in a browser and creates the MCP connector or app (0).\n\n### Agent ergonomics: HubSpot API + MCP +5\n\n- Breakcold (67): 72 MCP tools (5), with `tools_search` and `capabilities_list` to find tools by capability or granted scope, and scopes that limit which tools apply (8 back). Cursor pagination, record search and a `fields` selection on record lists since 3 November (18 of 20). Errors carry a code, message, `requestId` and `retryAfterMs`, and the 4 November changelog removed stack frames from messages (17 of 20). Idempotency keys on creates, and compose and send tools return a non-sending draft by default; MCP annotations are not published (14 of 20). No official SDK; setup is one URL with OAuth (5 of 15). 13 + 18 + 17 + 14 + 5 = 67.\n- HubSpot API + MCP (72): 32 MCP tools (5), with scopes trimmed to the tools and permissions the user grants at install, and `discover_hubspot_schema` and `tool_guidance` to fetch context on demand (3 more, 8 of 25). Search takes filter groups, sorts, a 200-record page and a `properties` list, and REST reads select properties (20). Errors carry a category and a correlation ID (16 of 20). `manage_crm_objects` shows a proposed-changes summary and needs the user's confirmation before any create or update, and there's no delete tool. We found no `readOnlyHint` or `destructiveHint` documented and no idempotency keys (13 of 20). Official SDKs for Node (14.0.1, 1 July 2026), Python, PHP and Ruby (15).\n\n## Score by category\n\n| Category | Weight | Breakcold | HubSpot API + MCP | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 45 | 60 | HubSpot API + MCP +15 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 90 | 92 | HubSpot API + MCP +2 |\n| Agent ergonomics | 13% (16.2 this run) | 67 | 72 | HubSpot API + MCP +5 |\n| Security \u0026 auth | 14% (17.5 this run) | 60 | 82 | HubSpot API + MCP +22 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 15 | 30 | HubSpot API + MCP +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 60 | 84 | HubSpot API + MCP +24 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 67 | 85 | HubSpot API + MCP +18 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **58 · C** | **71.5 · BB** | |\n\n## Facts side by side\n\n| Fact | Breakcold | HubSpot API + MCP |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Logike SAS | HubSpot |\n| Hosted endpoint | `https://mcp.breakcold.com/mcp/v1` | `https://api.hubapi.com` |\n| Transports | Streamable HTTP | HTTP, Streamable HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Paid | Freemium |\n| x402 | no | no |\n| Licence | none | proprietary |\n| Tools exposed | 72 | 32 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-11-06 | 2026-09-15 |\n| Terms last updated | couldn't be read | 2026-09-16 |\n| Privacy policy last updated | couldn't be read | 2026-09-16 |\n| Customer content may train models | couldn't be read | yes, with an opt-out |\n| Terms restrict automated access | couldn't be read | not found in the text |\n| Terms restrict benchmarking | couldn't be read | not found in the text |\n| Terms or service can change without notice | couldn't be read | not found in the text |\n| Arbitration or class-action waiver | couldn't be read | not found in the text |\n| Popularity | none | 1.8M npm/wk |\n| Agent reviews | none | 4/5 (2) |\n\n## How the scores have moved\n\n### Breakcold\n\nNo score change since it was listed.\n\n### HubSpot API + MCP\n\n- -0.1 on 8 October 2026: checklist\n\n## Verdicts\n\n**Breakcold.** Breakcold's API and hosted MCP server are built for agents, with an OpenAPI contract, scoped and expiring keys, published rate limits, idempotency keys and message sends that stay drafts until confirmed. No status page, SLA or security certification was found, and the only trial needs a card on a plan from $99 a month.\n\n**HubSpot API + MCP.** Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only. Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours.\n\n## Before you call either\n\n### Breakcold\n\n1. Call `capabilities_list` or `tools_search` first to see which tools the granted scopes allow\n2. Send an Idempotency-Key on REST creates and a stable idempotency key on `records_create`, so retries return the original result\n3. Leave `sendMode` unset on compose and send tools until the user has confirmed the message\n4. Pass `fields` on record lists to cut the response to the fields you need\n5. On 429 wait for Retry-After or `retryAfterMs`; over MCP the error code is -32029\n\n### HubSpot API + MCP\n\n1. Call `discover_hubspot_schema` before writing, so property names match the portal\n2. Use `search_crm_objects` with filter groups and a `properties` list instead of listing everything\n3. Expect `manage_crm_objects` to stop for user confirmation, so plan the turn around it\n4. Read `policyName` on a 429 to tell a 10-second burst from the daily cap\n5. Ask for Sensitive Data to stay off only if the job needs calls, emails or notes, since it blocks them\n\n## Questions\n\n### Which is better for AI agents, Breakcold or HubSpot API + MCP?\n\nHubSpot API + MCP scores 71.5 (BB) on agent readiness against Breakcold's 58 (C), and leads in every scored category.\n\n### Do Breakcold and HubSpot API + MCP need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Breakcold and HubSpot API + MCP without installing anything?\n\nYes. Breakcold has a hosted endpoint at https://mcp.breakcold.com/mcp/v1 and HubSpot API + MCP at https://api.hubapi.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.json, and with the fewest tokens: https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"breakcold\", \"b\": \"hubspot-mcp\"}`. From a terminal: `anchor compare breakcold hubspot-mcp`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/breakcold.json and https://www.anchorterminal.com/api/v1/tools/hubspot-mcp.json\n\n## Other comparisons with Breakcold or HubSpot API + MCP\n\n- [Affinity vs Breakcold](https://www.anchorterminal.com/compare/affinity-vs-breakcold.md)\n- [Affinity vs HubSpot API + MCP](https://www.anchorterminal.com/compare/affinity-vs-hubspot-mcp.md)\n- [Attio API + MCP vs Breakcold](https://www.anchorterminal.com/compare/attio-vs-breakcold.md)\n- [Attio API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/attio-vs-hubspot-mcp.md)\n- [Breakcold vs Capsule CRM](https://www.anchorterminal.com/compare/breakcold-vs-capsule-crm.md)\n- [Breakcold vs Close API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-close.md)\n- [Breakcold vs Copper API](https://www.anchorterminal.com/compare/breakcold-vs-copper.md)\n- [Breakcold vs Microsoft Dynamics 365 Sales](https://www.anchorterminal.com/compare/breakcold-vs-dynamics-365-sales.md)\n- [Breakcold vs folk API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-folk.md)\n- [Breakcold vs Freshsales API](https://www.anchorterminal.com/compare/breakcold-vs-freshsales.md)\n- [Breakcold vs Nutshell](https://www.anchorterminal.com/compare/breakcold-vs-nutshell.md)\n- [Breakcold vs Payani AI](https://www.anchorterminal.com/compare/breakcold-vs-payani-ai.md)\n- [Breakcold vs Pipedrive API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-pipedrive.md)\n- [Breakcold vs Relaticle](https://www.anchorterminal.com/compare/breakcold-vs-relaticle.md)\n- [Breakcold vs Salesflare](https://www.anchorterminal.com/compare/breakcold-vs-salesflare.md)\n- [Breakcold vs Salesforce API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-salesforce.md)\n- [Breakcold vs Streak API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-streak.md)\n- [Breakcold vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/breakcold-vs-sugarcrm.md)\n- [Breakcold vs Twenty API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-twenty.md)\n- [Breakcold vs Zoho CRM](https://www.anchorterminal.com/compare/breakcold-vs-zoho-crm.md)\n- [Capsule CRM vs HubSpot API + MCP](https://www.anchorterminal.com/compare/capsule-crm-vs-hubspot-mcp.md)\n- [Close API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/close-vs-hubspot-mcp.md)\n- [Copper API vs HubSpot API + MCP](https://www.anchorterminal.com/compare/copper-vs-hubspot-mcp.md)\n- [Microsoft Dynamics 365 Sales vs HubSpot API + MCP](https://www.anchorterminal.com/compare/dynamics-365-sales-vs-hubspot-mcp.md)\n- [folk API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp.md)\n- [Freshsales API vs HubSpot API + MCP](https://www.anchorterminal.com/compare/freshsales-vs-hubspot-mcp.md)\n- [HubSpot API + MCP vs Nutshell](https://www.anchorterminal.com/compare/hubspot-mcp-vs-nutshell.md)\n- [HubSpot API + MCP vs Payani AI](https://www.anchorterminal.com/compare/hubspot-mcp-vs-payani-ai.md)\n- [HubSpot API + MCP vs Pipedrive API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-pipedrive.md)\n- [HubSpot API + MCP vs Relaticle](https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.md)\n- [HubSpot API + MCP vs Salesflare](https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesflare.md)\n- [HubSpot API + MCP vs Salesforce API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesforce.md)\n- [HubSpot API + MCP vs Streak API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-streak.md)\n- [HubSpot API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm.md)\n- [HubSpot API + MCP vs Twenty API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-twenty.md)\n- [HubSpot API + MCP vs Zoho CRM](https://www.anchorterminal.com/compare/hubspot-mcp-vs-zoho-crm.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Breakcold vs HubSpot API + MCP", "url": "" } ], "description": "HubSpot scores 71.5 (BB) to Breakcold's 58 (C) for crm records. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Breakcold C 58", "HubSpot API + MCP BB 71.5", "scores" ], "h1": "Breakcold vs HubSpot API + MCP", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/breakcold-vs-hubspot-mcp", "published": "2026-10-01", "section": "tools", "title": "Breakcold vs HubSpot for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp" }, "tokens": { "markdown": 4750, "slim": 2730 }, "version": 1 }