{ "data": { "a": { "slug": "hubspot-mcp", "name": "HubSpot API + MCP", "vendor": "HubSpot", "vendorUrl": "https://developers.hubspot.com", "kind": "http-api", "category": "crm", "summary": "HubSpot's CRM REST API (objects, associations, search, properties, pipelines, engagements, webhooks) and its official MCP servers.", "url": "https://www.anchorterminal.com/tools/hubspot-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/hubspot-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/hubspot-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/hubspot-mcp.json", "dns": "hubspot-mcp.grade.anchorterminal.com", "license": "proprietary", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://api.hubapi.com", "packages": [ { "registry": "npm", "name": "@hubspot/api-client" }, { "registry": "pypi", "name": "hubspot-api-client" }, { "registry": "npm", "name": "@hubspot/cli" } ], "auth": "mixed", "authNotes": "REST API takes a Bearer token, either a static Service Key from a Developer Platform project (version 2026.09, scoped, rotatable with a 7-day grace period) or an OAuth 2.0 token for a public app. Creating new legacy private apps was removed from the UI in late September 2026; existing ones keep working until v1 to v3 APIs and legacy apps lose support in September 2027. The remote MCP server is OAuth 2.1 with PKCE only, through an MCP connector created under Development, MCP Connectors; its scopes follow the tools and what the user grants, with no API-key path. The developer MCP server authenticates through the HubSpot CLI.", "pricing": "freemium", "pricingNotes": "Free CRM for up to 2 users with no card, and the API and remote MCP server work on it. Sales Hub Starter $20 a seat a month billed monthly ($7 billed yearly as shown on 2026-09-30), Professional $100 billed monthly or $90 billed yearly plus a $1,500 onboarding fee, Enterprise $150 a seat a month plus a $3,500 onboarding fee. Some MCP tools need Marketing Hub or Revenue Hub Professional (https://www.hubspot.com/pricing/sales).", "priceSummary": "$20 / seat-mo", "where": "both", "x402": { "level": "no", "evidence": "No payments. Access follows the HubSpot account.", "endpoints": [] }, "toolCount": 32, "popularity": { "githubStars": null, "npmWeekly": 1822222, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://developers.hubspot.com/docs", "llmsTxt": "https://developers.hubspot.com/docs/llms.txt", "openapi": "https://github.com/HubSpot/HubSpot-public-api-spec-collection", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "crm.webhooks", "crm.marketing", "work.tickets" ], "tags": [ "official", "hosted", "oauth", "crm", "enterprise", "mcp", "freemium", "no-card", "free-tier", "llms-txt", "openapi", "webhooks", "typescript", "python" ], "lastRelease": "2026-09-15", "graded": true, "anchor": { "graded": true, "score": 71.5, "grade": "BB", "agentReady": true, "rank": 159, "ranked": true, "rankOf": 1510, "categoryRank": 1, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 72, "maintenance": 84, "payments": 30, "reliability": 60, "schema": 92, "security": 82, "transparency": 85 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "high", "date": "2026-10-01" }, "negative": 0, "verdict": "Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only. Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours.", "bestFor": "Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes.", "strengths": [ "Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only", "Writes need user confirmation after a proposed-changes summary, and there's no delete tool", "Free CRM for 2 users with API and MCP access, no card", "Date-based API versions, and v1 to v3 support ends in September 2027, announced a year ahead", "HackerOne bug bounty, signed security.txt, SOC 2 Type II" ], "weaknesses": [ "Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours", "Emails, notes and conversations reach the model with no injection guidance", "Privacy policy allows using personal data to train HubSpot AI models", "No Retry-After documented on 429s and no idempotency keys for CRM writes", "Some tools need Marketing Hub or Revenue Hub Professional, and about ten are beta" ], "agentNotes": [ "Call `discover_hubspot_schema` before writing, so property names match the portal", "Use `search_crm_objects` with filter groups and a `properties` list instead of listing everything", "Expect `manage_crm_objects` to stop for user confirmation, so plan the turn around it", "Read `policyName` on a 429 to tell a 10-second burst from the daily cap", "Ask for Sensitive Data to stay off only if the job needs calls, emails or notes, since it blocks them" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 4, "history": [ { "basis": "public evidence", "confidence": "high", "grade": "BB", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 71.5 } ], "editorialScores": { "ergonomics": 72, "maintenance": 84, "payments": 30, "reliability": 60, "schema": 92, "security": 82, "transparency": 71 }, "provenanceScore": 98, "checked": { "categories": { "ergonomics": "2026-10-01", "maintenance": "2026-10-01", "payments": "2026-10-01", "reliability": "2026-10-01", "schema": "2026-10-01", "security": "2026-10-01", "transparency": "2026-10-01" }, "last": "2026-10-01", "lastMoved": "2026-10-08", "oldest": "2026-10-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl \"https://api.hubapi.com/crm/v3/objects/contacts?limit=5\" -H \"Authorization: Bearer $HUBSPOT_ACCESS_TOKEN\"", "claudeCode": "claude mcp add --transport http hubspot https://mcp.hubspot.com", "config": { "mcpServers": { "hubspot": { "url": "https://mcp.hubspot.com" } } } }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/hubspot-mcp" }, "area": "business", "unitPrices": [ { "item": "Free CRM (API and MCP included)", "unit": "seat-month", "usd": 0, "note": "up to 2 users" }, { "item": "Sales Hub Starter", "unit": "seat-month", "usd": 20, "note": "billed monthly; $7 billed yearly as shown on 2026-09-30" }, { "item": "Sales Hub Professional", "unit": "seat-month", "usd": 90, "note": "billed yearly; $100 billed monthly; $1,500 onboarding fee" }, { "item": "Sales Hub Enterprise", "unit": "seat-month", "usd": 150, "note": "$3,500 onboarding fee" } ], "provenance": { "legalEntity": "HubSpot, Inc.", "domain": "hubspot.com", "domainRegistered": "2005-02-06", "endpointOnVendorDomain": true, "terms": "https://legal.hubspot.com/terms-of-service", "privacy": "https://legal.hubspot.com/privacy-policy", "statusPage": "https://status.hubspot.com", "changelog": "https://developers.hubspot.com/changelog", "securityTxt": "valid", "checked": "2026-09-30", "score": 98 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/hubspot-mcp.json", "live": { "slug": "hubspot-mcp", "probe": { "target": "https://api.hubapi.com", "method": "get", "lastAt": "2026-11-07T19:22:12.462640403Z", "lastOk": true, "lastStatus": 200, "lastMs": 522, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 350, "p95ms24h": 590, "samples24h": 238, "samples30d": 7920, "days": [ { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 252 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 251 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 248, "ok": 248 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "vendorStatus": { "page": "https://status.hubspot.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-07T19:22:15.738855125Z" }, "versions": [ { "registry": "npm", "name": "@hubspot/api-client", "version": "14.1.3", "seenAt": "2026-11-06T23:33:20.538431907Z" }, { "registry": "npm", "name": "@hubspot/cli", "version": "8.18.0", "seenAt": "2026-11-06T23:33:22.674239794Z" }, { "registry": "pypi", "name": "hubspot-api-client", "version": "13.0.0", "released": "2026-11-02", "seenAt": "2026-11-06T23:33:22.191841629Z" } ], "npmWeekly": 2271248, "pypiWeekly": 1191744, "securityTxt": { "url": "https://hubspot.com/.well-known/security.txt", "state": "valid", "expires": "2034-06-01:00:00.000Z", "checkedAt": "2026-11-07T16:01:58.474250572Z" }, "llmsTxt": { "url": "https://developers.hubspot.com/docs/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:44.343946853Z" }, "domain": { "domain": "hubspot.com", "registered": "2005-02-06", "source": "https://rdap.verisign.com/com/v1/domain/hubspot.com", "checkedAt": "2026-11-01T14:22:37.625928961Z" }, "pages": [ { "url": "https://developers.hubspot.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:04:02.869800663Z", "changedAt": "2026-11-04T08:19:04.150608128Z", "fingerprint": "e7917e672537" }, { "url": "https://developers.hubspot.com/changelog/crm-api-write-validation-enforcement", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:05.243317642Z", "changedAt": "2026-10-29T05:02:35.363066721Z", "fingerprint": "5567d6eafe11" }, { "url": "https://developers.hubspot.com/changelog/legacy-apis-and-legacy-apps-whats-going-unsupported-and-when", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:07.312371172Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "e79d2b3ec2dd" }, { "url": "https://developers.hubspot.com/changelog/legacy-private-app-creation-sunset", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:09.179320944Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a5a655dde860" }, { "url": "https://developers.hubspot.com/changelog/pipeline-stage-validation-true", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:11.205463343Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "fa5f3f57547a" }, { "url": "https://developers.hubspot.com/changelog/pipelines-api-v1-sunset", "kind": "deprecations", "status": 200, "checkedAt": "2026-11-07T14:04:13.359644556Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6de9adbf9b3f" }, { "url": "https://www.hubspot.com/pricing/sales", "kind": "pricing", "status": 200, "checkedAt": "2026-11-07T14:29:55.768244034Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "4946a854611c" }, { "url": "https://legal.hubspot.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:12:56.409405339Z", "changedAt": "2026-10-29T05:10:00.161069712Z", "fingerprint": "1ef196588bc2" }, { "url": "https://legal.hubspot.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:12:58.740970715Z", "changedAt": "2026-10-29T05:10:04.626649225Z", "fingerprint": "7e84799c0bc1" } ], "mcpTools": { "url": "https://mcp.hubspot.com", "checkedAt": "2026-11-07T01:45:20.238241427Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-09-28T21:55:53.627458056Z" }, "updatedAt": "2026-11-07T19:22:12.462640403Z" } }, "answer": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Relaticle's 59.6 (C), and leads in 5 of 7 scored categories. Relaticle leads on maintenance \u0026 community.", "b": { "slug": "relaticle", "name": "Relaticle", "vendor": "Relaticle, Inc.", "vendorUrl": "https://relaticle.com", "kind": "http-api", "category": "crm", "summary": "Relaticle is an open-source CRM under AGPL-3.0 for companies, people, opportunities, tasks and notes, run on Relaticle Cloud or self-hosted. Agents use its REST API and an MCP server with OAuth or scoped tokens.", "url": "https://www.anchorterminal.com/tools/relaticle", "markdownUrl": "https://www.anchorterminal.com/tools/relaticle.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/relaticle.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/relaticle.json", "dns": "relaticle.grade.anchorterminal.com", "repo": "https://github.com/relaticle/relaticle", "license": "AGPL-3.0", "transports": [ "streamable-http" ], "remoteUrl": "https://mcp.relaticle.com", "packages": [], "auth": "mixed", "authNotes": "Personal access tokens from Settings \u003e Access Tokens are tied to one workspace, take an expiry and carry chosen permissions (read, create, update, delete for REST, plus read, draft and send email for MCP). MCP clients can also use OAuth 2.1 through Laravel Passport and choose one workspace on the consent screen; the source says the OAuth scope `mcp:use` authorises the whole toolset.", "pricing": "freemium", "pricingNotes": "Self-hosting is free under AGPL-3.0. Relaticle Cloud is priced per workspace with unlimited users: Cloud Pro $19 a month billed yearly ($24 monthly) and Cloud Scale $49 ($59 monthly), Enterprise from $20,000 a year. A 14-day Cloud Pro trial needs no card. Scale has three times the API and MCP throughput.", "priceSummary": "$19 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the OpenAPI spec, the developer docs or the source (checked 2026-11-06). Over-limit Cloud calls return 402 for plan limits without payment requirements.", "endpoints": [] }, "toolCount": 50, "popularity": { "githubStars": 1811, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://relaticle.com/developers/rest-api", "llmsTxt": "https://relaticle.com/llms.txt", "openapi": "https://relaticle.com/openapi.json", "registryName": "com.relaticle/crm", "capabilities": [ "crm.records", "crm.pipeline", "crm.activities", "crm.search", "email.send", "email.threads" ], "tags": [ "official", "open-source", "agpl", "self-hosted", "hosted", "mcp", "remote-mcp", "mcp-registry", "oauth", "openapi", "llms-txt", "freemium", "trial", "no-card", "php", "eu-hosting" ], "lastRelease": "2026-11-05", "graded": true, "anchor": { "graded": true, "score": 59.6, "grade": "C", "agentReady": false, "rank": 697, "ranked": true, "rankOf": 1510, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 59, "maintenance": 90, "payments": 30, "reliability": 40, "schema": 86, "security": 57, "transparency": 73 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Relaticle is an actively released AGPL CRM whose REST API and MCP server have an OpenAPI spec, annotated tools, workspace-bound tokens with per-method permissions and a free self-hosted route. MCP writes apply at once with no server-side confirmation, OAuth grants the whole toolset, and Cloud has no status page, SLA or certification.", "bestFor": "Small teams who want an open-source CRM they can self-host and let an agent write to.", "strengths": [ "AGPL-3.0 source, free to self-host, with tagged releases about twice a week", "Tokens are bound to one workspace with an expiry and per-method permissions, so a read-only token is possible", "OpenAPI 3.1 spec, llms.txt and MCP tools with readOnly, destructive and idempotent hints", "Filter grammar with $and, $or and $not, cursor paging and upserts by unique field", "Cloud providers listed with what each receives, hosting at Hetzner in Germany" ], "weaknesses": [ "Writes over MCP apply immediately, and OAuth's single `mcp:use` scope authorises every tool", "No status page or SLA for Relaticle Cloud was found", "No SOC 2 or ISO 27001, which the security page says plainly", "No changelog page beyond GitHub tags, and no deprecation policy", "50 MCP tools by default, with no toolsets or read-only subset" ], "agentNotes": [ "Use a personal access token with only the read permission unless the task writes, since OAuth grants every tool", "Ask the user before create, update, delete or send tools; the server applies them at once", "Call `get-crm-schema-tool` for an entity before filtering on custom fields, which differ by workspace", "Use `POST /v1/people/upsert` or `/v1/companies/upsert` with a unique field to avoid duplicates on retry", "Keep MCP calls under 120 a minute per user and REST writes under 60 a minute per token on Cloud Pro" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.6 } ], "editorialScores": { "ergonomics": 59, "maintenance": 90, "payments": 30, "reliability": 40, "schema": 86, "security": 57, "transparency": 72 }, "provenanceScore": 74, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.relaticle.com/v1/companies -H \"Authorization: Bearer YOUR_TOKEN\" -H \"Accept: application/json\"", "claudeCode": "claude mcp add --transport http relaticle https://mcp.relaticle.com", "config": { "mcpServers": { "relaticle": { "url": "https://mcp.relaticle.com" } } } }, "letme": { "capability": "https://letme.dev/crm.records", "tool": "https://letme.dev/relaticle" }, "area": "business", "unitPrices": [ { "item": "Cloud Pro workspace", "unit": "month", "usd": 19, "note": "Billed yearly at $228; $24 billed monthly" }, { "item": "Cloud Scale workspace", "unit": "month", "usd": 49, "note": "Billed yearly at $588; $59 billed monthly" } ], "provenance": { "legalEntity": "Relaticle, Inc.", "domain": "relaticle.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://relaticle.com/terms-of-service", "privacy": "https://relaticle.com/privacy-policy", "statusPage": "", "changelog": "https://github.com/relaticle/relaticle/releases", "securityTxt": "valid", "checked": "2026-11-06", "notes": [ "Terms of service effective 26 August 2026 and privacy policy effective 4 November 2026; the footer names Relaticle, Inc. No clause on automated access to the website was found.", "relaticle.com/robots.txt allows all crawlers and names ClaudeBot as allowed.", "security.txt names security@relaticle.com and expires 6 May 2027. The security page asks for reports by email and aims to acknowledge within 48 hours.", "status.relaticle.com did not connect and no status page is linked. relaticle.com/changelog is 404; releases are tagged on GitHub.", "The press page says Relaticle was founded in 2024 and lists 1,811 GitHub stars, verified 26 September 2026. Domain registration date not checked." ], "score": 74 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/relaticle.json", "live": { "slug": "relaticle", "probe": { "target": "https://mcp.relaticle.com", "method": "get", "lastAt": "2026-11-07T19:22:29.462221932Z", "lastOk": true, "lastStatus": 405, "lastMs": 164, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 174, "p95ms24h": 294, "samples24h": 210, "samples30d": 210, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 13 }, { "date": "2026-11-07", "probes": 197, "ok": 197 } ] }, "versions": [ { "registry": "github", "name": "relaticle/relaticle", "version": "v3.8.2", "released": "2026-11-04", "seenAt": "2026-11-07T00:00:54.651079547Z" }, { "registry": "mcp-registry", "name": "com.relaticle/crm", "version": "3.8.2", "seenAt": "2026-11-07T18:16:28.95801333Z" } ], "githubStars": 1811, "securityTxt": { "url": "https://relaticle.com/.well-known/security.txt", "state": "valid", "expires": "2027-05-07T16:01:18Z", "checkedAt": "2026-11-07T16:01:18.554359358Z" }, "llmsTxt": { "url": "https://relaticle.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:44.579905089Z" }, "pages": [ { "url": "https://relaticle.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:18:13.002922035Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "6e701d3eab86" }, { "url": "https://relaticle.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:18:15.26331735Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "1e5fff279d1d" } ], "mcpTools": { "url": "https://mcp.relaticle.com", "checkedAt": "2026-11-07T01:47:13.278550358Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:47:13.278550358Z" }, "updatedAt": "2026-11-07T19:22:29.462221932Z" } }, "edges": [ { "by": 25, "category": "security", "leads": "hubspot-mcp", "name": "Security \u0026 auth", "reasons": { "a": "The remote MCP server takes only OAuth 2.1 with PKCE, with scopes set by the tools and the user's grant. REST uses OAuth apps or Service Keys, which are scoped and rotate with a 7-day grace period (30). Writes need explicit user confirmation after a proposed-changes summary, MCP has no delete tools, and turning on Sensitive Data blocks calls, emails, meetings, notes and tasks from the MCP server. No documented read-only mode (17 of 20). The server reads emails, conversations and notes written by outsiders, and we found no injection guidance beyond the Sensitive Data switch (5 of 15). Account activity history can be viewed and exported per the trust centre. Nothing MCP-specific is documented (10 of 15). PGP-signed security.txt valid until 2034, a HackerOne bug bounty, SOC 1 Type II, SOC 2 Type II and SOC 3 (20).", "b": "Personal access tokens are bound to one workspace, take an expiry and per-method permissions (read, create, update, delete, plus read, draft and send email), and travel in headers. OAuth 2.1 through Passport is also offered, but the source says its single `mcp:use` scope authorises the whole toolset (25 of 30). A read-only token is possible; the docs say MCP writes apply immediately and leave confirmation to the client (10 of 20). Synced email reaches the model through the email tools, and no prompt-injection guidance was found (0). Each record has an activity log of field changes and who made them, and admins see it across the workspace (12 of 15). security.txt valid to May 2027, a disclosure address with a 48-hour acknowledgement target and security-audit workflows in CI; the security page says there is no SOC 2 or ISO 27001 (10 of 20). 25 + 10 + 0 + 12 + 10 = 57." }, "scores": { "a": 82, "b": 57 } }, { "by": 20, "category": "reliability", "leads": "hubspot-mcp", "name": "Reliability", "reasons": { "a": "Status page at status.hubspot.com with component history (20). Twelve entries since 3 July 2026, several over an hour on core platform services, among them EU customer platform tools impaired for 3 h 9 min on 22 July, event ingestion delayed 5 hours on 28 July, workflow actions delayed 5 h 45 min on 21 August and the Salesforce integration down about 8 hours on 24 September. None names the public API or the MCP server, which is why this isn't 0 (5). Limits published per app type and tier, 100 to 190 requests per 10 seconds and 250,000 to 1,000,000 a day for private apps, 110 per 10 seconds for public apps (15). 429s carry `errorType` RATE_LIMIT and `policyName`, and responses carry `X-HubSpot-RateLimit-*` headers, but the usage page gives no Retry-After or backoff guidance and we found no idempotency keys for CRM writes (10 of 15). No SLA found in what we read (0). Remote MCP server GA since 13 April 2026, though about ten tools for revenue objects and quotes are beta (10).", "b": "Graded with the hosted lines on Relaticle Cloud's REST API and MCP server, the surface an outside agent calls; the software also self-hosts. No status page is linked and status.relaticle.com did not connect (0). With no readable history the incident line scores 5. Limits have numbers: 600 a minute per workspace and 300 reads or 60 writes a minute per token in the source, and 120 MCP calls a minute per user in the docs (15). 429 is in the OpenAPI responses and upserts by unique field give a safe retry for creates, but the backoff guidance sits on a docs section we read only as a heading (10 of 15). No SLA (0). Version 3.8, not labelled beta (10). 0 + 5 + 15 + 10 + 0 + 10 = 40." }, "scores": { "a": 60, "b": 40 } }, { "by": 13, "category": "ergonomics", "leads": "hubspot-mcp", "name": "Agent ergonomics", "reasons": { "a": "32 MCP tools (5), with scopes trimmed to the tools and permissions the user grants at install, and `discover_hubspot_schema` and `tool_guidance` to fetch context on demand (3 more, 8 of 25). Search takes filter groups, sorts, a 200-record page and a `properties` list, and REST reads select properties (20). Errors carry a category and a correlation ID (16 of 20). `manage_crm_objects` shows a proposed-changes summary and needs the user's confirmation before any create or update, and there's no delete tool. We found no `readOnlyHint` or `destructiveHint` documented and no idempotency keys (13 of 20). Official SDKs for Node (14.0.1, 1 July 2026), Python, PHP and Ruby (15).", "b": "50 MCP tools, six schema resources and a prompt, with no toolsets or read-only subset (5). Filters combine native fields, custom fields and linked records with $and, $or and $not, plus sort, include, `per_page` (MCP maximum 25) and cursors (20). Errors come back as HTTP codes and inline MCP error responses such as `Invalid ability provided.`; no error catalogue was read (12 of 20). Base tool classes set readOnlyHint, destructiveHint, idempotentHint and openWorldHint, and upserts by unique field make creates safe to retry (17 of 20). One URL with OAuth or a token; no official SDK (5 of 15). 5 + 20 + 12 + 17 + 5 = 59." }, "scores": { "a": 72, "b": 59 } }, { "by": 12, "category": "transparency", "leads": "hubspot-mcp", "name": "Transparency \u0026 trust", "reasons": { "a": "Closed service with terms naming HubSpot, Inc. (15). Privacy policy updated 16 September 2026 with a DPA whose Annex 3 lists subprocessors. Retention reads 'a reasonable period', and the policy says HubSpot may process personal data to train its AI models (18 of 30). Dated sunsets, Pipelines v1 on 4 December 2026 (announced 14 August) and v1 to v3 APIs and legacy apps in September 2027 (announced 15 September 2026), plus date-based API versions (20). Subprocessor page and regional data centres disclosed (18 of 20).", "b": "AGPL-3.0 source with an integration exception, and terms for the Cloud service (30). The privacy policy (4 November 2026) gives retention for server logs (90 days), contact forms (12 months) and paused trial workspaces (deleted after 60 days with notice), and names provider categories; no DPA was found (20 of 30). No deprecation policy or dated notices found (5 of 20). The security page lists each Cloud provider and what it receives, with hosting at Hetzner in Germany, and website analytics through Fathom without CRM content (17 of 20). 30 + 20 + 5 + 17 = 72." }, "scores": { "a": 85, "b": 73 } }, { "by": 6, "category": "schema", "leads": "hubspot-mcp", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI specs in the public HubSpot-public-api-spec-collection repository (25). llms.txt on developers.hubspot.com (10). MCP tool docs explain each tool, give search limits (five filter groups of six filters, 200 results a page), and the server has a `tool_guidance` tool the model can call (16 of 20). Typed inputs with operator enums in search (13 of 15). Examples and a standard error body with `status`, `message`, `correlationId` and `category` (13 of 15). Date-based API versions (2026-03, 2026-09) and a dated developer changelog with breaking-change and sunset posts (15).", "b": "OpenAPI 3.1 at /openapi.json and /openapi.yaml with 34 operations (25). llms.txt with a when-to-use and when-not section, and developer pages (10). The llms.txt and MCP docs say what the API is for and what it doesn't do (no email over REST, no meetings), while only 5 of 34 operations carry a description (14 of 20). 114 required lists and typed MCP inputs, but few enums (11 of 15). 661 examples and responses for 401, 402, 403, 404, 409, 422 and 429 (14 of 15). /v1 and frequent tagged releases, with no changelog page (relaticle.com/changelog is 404) (12 of 15). 25 + 10 + 14 + 11 + 14 + 12 = 86." }, "scores": { "a": 92, "b": 86 } }, { "by": 6, "category": "maintenance", "leads": "relaticle", "name": "Maintenance \u0026 community", "reasons": { "a": "Developer Platform 2026.09 and a changelog post on 15 September 2026 (30). Changelog posts on 11 August, 14 August, 27 August, 8 September and 15 September 2026 (20). Public changelog and developer community. We didn't check forum response times (12 of 15). Not in the official MCP registry under a HubSpot namespace, only third-party servers, but official SDKs are current (15). The Node SDK has test and lint CI and moved to Node 22 in 14.0.0, but still wraps the v3 APIs that lose support in September 2027 (7 of 10).", "b": "v3.8.2 tagged on 5 November 2026 and commits on 6 November (30). Thirteen tags between 9 October and 5 November alone (20). More than 2,500 commits since 1 August and merged pull requests numbered past 1,100; the GitHub API did not answer, so open issues and reply times were not counted (15 of 25). Verified com.relaticle/crm namespace in the official MCP registry with the hosted remote (15). CI, tests, security-audit and Dependabot workflows, PHP 8.5 and Laravel 13 (10). 30 + 20 + 15 + 15 + 10 = 90." }, "scores": { "a": 84, "b": 90 } } ], "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "HubSpot", "b": "Relaticle, Inc.", "name": "Vendor" }, { "a": "https://api.hubapi.com", "b": "https://mcp.relaticle.com", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP, stdio", "b": "Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "proprietary", "b": "AGPL-3.0", "name": "Licence" }, { "a": "32", "b": "50", "name": "Tools exposed" }, { "a": "no", "b": "yes", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "com.relaticle/crm", "name": "MCP registry" }, { "a": "2026-09-15", "b": "2026-11-05", "name": "Last release" }, { "a": "2026-09-16", "b": "2026-08-26", "name": "Terms last updated" }, { "a": "2026-09-16", "b": "2026-11-04", "name": "Privacy policy last updated" }, { "a": "yes, with an opt-out", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "1.8M npm/wk", "b": "1.8k stars", "name": "Popularity" }, { "a": "4/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Relaticle's 59.6 (C), and leads in 5 of 7 scored categories. Relaticle leads on maintenance \u0026 community.", "question": "Which is better for AI agents, HubSpot API + MCP or Relaticle?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do HubSpot API + MCP and Relaticle need an API key?" }, { "answer": "Yes. HubSpot API + MCP has a hosted endpoint at https://api.hubapi.com and Relaticle at https://mcp.relaticle.com.", "question": "Can an agent call HubSpot API + MCP and Relaticle without installing anything?" }, { "answer": "No open-source release is listed for HubSpot API + MCP. Relaticle is open source (AGPL-3.0).", "question": "Are HubSpot API + MCP and Relaticle open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 60 against 40", "Schema \u0026 documentation, 92 against 86", "Agent ergonomics, 72 against 59", "Security \u0026 auth, 82 against 57", "Transparency \u0026 trust, 85 against 73" ], "also": [ "Agent-ready, a grade of BB or better", "Runs on your own machine" ], "goodFor": "Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes.", "slug": "hubspot-mcp", "watchFor": "Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours" }, { "aheadOn": [ "Maintenance \u0026 community, 90 against 84" ], "also": [ "Open source" ], "goodFor": "Small teams who want an open-source CRM they can self-host and let an agent write to.", "slug": "relaticle", "watchFor": "Writes over MCP apply immediately, and OAuth's single `mcp:use` scope authorises every tool" } ], "history": { "hubspot-mcp": [ { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.1, "from": 71.6, "fromGrade": "BB", "to": 71.5, "toGrade": "BB" } ], "relaticle": null }, "job": { "capability": "crm.records", "name": "CRM records" }, "others": [ { "json": "https://www.anchorterminal.com/compare/affinity-vs-hubspot-mcp.json", "title": "Affinity vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/affinity-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/affinity-vs-relaticle.json", "title": "Affinity vs Relaticle", "url": "https://www.anchorterminal.com/compare/affinity-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-hubspot-mcp.json", "title": "Attio API + MCP vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/attio-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/attio-vs-relaticle.json", "title": "Attio API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/attio-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.json", "title": "Breakcold vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle.json", "title": "Breakcold vs Relaticle", "url": "https://www.anchorterminal.com/compare/breakcold-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/capsule-crm-vs-hubspot-mcp.json", "title": "Capsule CRM vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/capsule-crm-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/capsule-crm-vs-relaticle.json", "title": "Capsule CRM vs Relaticle", "url": "https://www.anchorterminal.com/compare/capsule-crm-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/close-vs-hubspot-mcp.json", "title": "Close API + MCP vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/close-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/close-vs-relaticle.json", "title": "Close API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/close-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/copper-vs-hubspot-mcp.json", "title": "Copper API vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/copper-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/copper-vs-relaticle.json", "title": "Copper API vs Relaticle", "url": "https://www.anchorterminal.com/compare/copper-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-hubspot-mcp.json", "title": "Microsoft Dynamics 365 Sales vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-relaticle.json", "title": "Microsoft Dynamics 365 Sales vs Relaticle", "url": "https://www.anchorterminal.com/compare/dynamics-365-sales-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp.json", "title": "folk API + MCP vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/folk-vs-relaticle.json", "title": "folk API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/folk-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/freshsales-vs-hubspot-mcp.json", "title": "Freshsales API vs HubSpot API + MCP", "url": "https://www.anchorterminal.com/compare/freshsales-vs-hubspot-mcp" }, { "json": "https://www.anchorterminal.com/compare/freshsales-vs-relaticle.json", "title": "Freshsales API vs Relaticle", "url": "https://www.anchorterminal.com/compare/freshsales-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-nutshell.json", "title": "HubSpot API + MCP vs Nutshell", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-nutshell" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-payani-ai.json", "title": "HubSpot API + MCP vs Payani AI", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-payani-ai" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-pipedrive.json", "title": "HubSpot API + MCP vs Pipedrive API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-pipedrive" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesflare.json", "title": "HubSpot API + MCP vs Salesflare", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesflare" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesforce.json", "title": "HubSpot API + MCP vs Salesforce API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesforce" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-streak.json", "title": "HubSpot API + MCP vs Streak API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-streak" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm.json", "title": "HubSpot API + MCP vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-twenty.json", "title": "HubSpot API + MCP vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-zoho-crm.json", "title": "HubSpot API + MCP vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-zoho-crm" }, { "json": "https://www.anchorterminal.com/compare/nutshell-vs-relaticle.json", "title": "Nutshell vs Relaticle", "url": "https://www.anchorterminal.com/compare/nutshell-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/payani-ai-vs-relaticle.json", "title": "Payani AI vs Relaticle", "url": "https://www.anchorterminal.com/compare/payani-ai-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/pipedrive-vs-relaticle.json", "title": "Pipedrive API + MCP vs Relaticle", "url": "https://www.anchorterminal.com/compare/pipedrive-vs-relaticle" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-salesflare.json", "title": "Relaticle vs Salesflare", "url": "https://www.anchorterminal.com/compare/relaticle-vs-salesflare" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-salesforce.json", "title": "Relaticle vs Salesforce API + MCP", "url": "https://www.anchorterminal.com/compare/relaticle-vs-salesforce" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-streak.json", "title": "Relaticle vs Streak API + MCP", "url": "https://www.anchorterminal.com/compare/relaticle-vs-streak" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm.json", "title": "Relaticle vs SugarAI (SugarCRM)", "url": "https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-twenty.json", "title": "Relaticle vs Twenty API + MCP", "url": "https://www.anchorterminal.com/compare/relaticle-vs-twenty" }, { "json": "https://www.anchorterminal.com/compare/relaticle-vs-zoho-crm.json", "title": "Relaticle vs Zoho CRM", "url": "https://www.anchorterminal.com/compare/relaticle-vs-zoho-crm" } ], "panel": null, "scores": [ { "by": 20, "edge": "hubspot-mcp", "hubspot-mcp": 60, "key": "reliability", "name": "Reliability", "relaticle": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 6, "edge": "hubspot-mcp", "hubspot-mcp": 92, "key": "schema", "name": "Schema \u0026 documentation", "relaticle": 86, "weight": 13 }, { "by": 13, "edge": "hubspot-mcp", "hubspot-mcp": 72, "key": "ergonomics", "name": "Agent ergonomics", "relaticle": 59, "weight": 13 }, { "by": 25, "edge": "hubspot-mcp", "hubspot-mcp": 82, "key": "security", "name": "Security \u0026 auth", "relaticle": 57, "weight": 14 }, { "by": 0, "edge": "", "hubspot-mcp": 30, "key": "payments", "name": "Payments \u0026 pricing", "relaticle": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 6, "edge": "relaticle", "hubspot-mcp": 84, "key": "maintenance", "name": "Maintenance \u0026 community", "relaticle": 90, "weight": 7 }, { "by": 12, "edge": "hubspot-mcp", "hubspot-mcp": 85, "key": "transparency", "name": "Transparency \u0026 trust", "relaticle": 73, "weight": 7 } ], "summary": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Relaticle's 59.6 (C), and leads in 5 of 7 scored categories. Relaticle leads on maintenance \u0026 community. Both do crm records.", "tasks": null, "tutorials": [], "verdicts": { "hubspot-mcp": "Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only. Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours.", "relaticle": "Relaticle is an actively released AGPL CRM whose REST API and MCP server have an OpenAPI spec, annotated tools, workspace-bound tokens with per-method permissions and a free self-hosted route. MCP writes apply at once with no server-side confirmation, OAuth grants the whole toolset, and Cloud has no status page, SLA or certification." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle", "json": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.min.md" }, "markdown": "HubSpot API + MCP scores 71.5 (BB) on agent readiness against Relaticle's 59.6 (C), and leads in 5 of 7 scored categories. Relaticle leads on maintenance \u0026 community. Both do crm records.\n\n- HubSpot API + MCP: grade BB, 71.5/100, rank #159 of 1510. Markdown https://www.anchorterminal.com/tools/hubspot-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/hubspot-mcp.json\n- Relaticle: grade C, 59.6/100, rank #697 of 1510. Markdown https://www.anchorterminal.com/tools/relaticle.md · JSON https://www.anchorterminal.com/api/v1/tools/relaticle.json\n- Best CRM and customer-platform tools for AI agents: https://www.anchorterminal.com/best/crm/index.md\n- All 190 crm comparisons: https://www.anchorterminal.com/compare/crm/index.md\n\n## Which one, for what\n\n### HubSpot API + MCP (BB)\n\nGood for: Marketing and sales teams already on HubSpot, or anyone who wants a free CRM with a GA, OAuth-only MCP server and confirmation before writes.\n\nAhead on:\n- Reliability, 60 against 40\n- Schema \u0026 documentation, 92 against 86\n- Agent ergonomics, 72 against 59\n- Security \u0026 auth, 82 against 57\n- Transparency \u0026 trust, 85 against 73\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- Runs on your own machine\n\nWatch for: Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours\n\n### Relaticle (C)\n\nGood for: Small teams who want an open-source CRM they can self-host and let an agent write to.\n\nAhead on:\n- Maintenance \u0026 community, 90 against 84\n\nAlso in its favour:\n- Open source\n\nWatch for: Writes over MCP apply immediately, and OAuth's single `mcp:use` scope authorises every tool\n\n\n## Why the edge\n\n### Security \u0026 auth: HubSpot API + MCP +25\n\n- HubSpot API + MCP (82): The remote MCP server takes only OAuth 2.1 with PKCE, with scopes set by the tools and the user's grant. REST uses OAuth apps or Service Keys, which are scoped and rotate with a 7-day grace period (30). Writes need explicit user confirmation after a proposed-changes summary, MCP has no delete tools, and turning on Sensitive Data blocks calls, emails, meetings, notes and tasks from the MCP server. No documented read-only mode (17 of 20). The server reads emails, conversations and notes written by outsiders, and we found no injection guidance beyond the Sensitive Data switch (5 of 15). Account activity history can be viewed and exported per the trust centre. Nothing MCP-specific is documented (10 of 15). PGP-signed security.txt valid until 2034, a HackerOne bug bounty, SOC 1 Type II, SOC 2 Type II and SOC 3 (20).\n- Relaticle (57): Personal access tokens are bound to one workspace, take an expiry and per-method permissions (read, create, update, delete, plus read, draft and send email), and travel in headers. OAuth 2.1 through Passport is also offered, but the source says its single `mcp:use` scope authorises the whole toolset (25 of 30). A read-only token is possible; the docs say MCP writes apply immediately and leave confirmation to the client (10 of 20). Synced email reaches the model through the email tools, and no prompt-injection guidance was found (0). Each record has an activity log of field changes and who made them, and admins see it across the workspace (12 of 15). security.txt valid to May 2027, a disclosure address with a 48-hour acknowledgement target and security-audit workflows in CI; the security page says there is no SOC 2 or ISO 27001 (10 of 20). 25 + 10 + 0 + 12 + 10 = 57.\n\n### Reliability: HubSpot API + MCP +20\n\n- HubSpot API + MCP (60): Status page at status.hubspot.com with component history (20). Twelve entries since 3 July 2026, several over an hour on core platform services, among them EU customer platform tools impaired for 3 h 9 min on 22 July, event ingestion delayed 5 hours on 28 July, workflow actions delayed 5 h 45 min on 21 August and the Salesforce integration down about 8 hours on 24 September. None names the public API or the MCP server, which is why this isn't 0 (5). Limits published per app type and tier, 100 to 190 requests per 10 seconds and 250,000 to 1,000,000 a day for private apps, 110 per 10 seconds for public apps (15). 429s carry `errorType` RATE_LIMIT and `policyName`, and responses carry `X-HubSpot-RateLimit-*` headers, but the usage page gives no Retry-After or backoff guidance and we found no idempotency keys for CRM writes (10 of 15). No SLA found in what we read (0). Remote MCP server GA since 13 April 2026, though about ten tools for revenue objects and quotes are beta (10).\n- Relaticle (40): Graded with the hosted lines on Relaticle Cloud's REST API and MCP server, the surface an outside agent calls; the software also self-hosts. No status page is linked and status.relaticle.com did not connect (0). With no readable history the incident line scores 5. Limits have numbers: 600 a minute per workspace and 300 reads or 60 writes a minute per token in the source, and 120 MCP calls a minute per user in the docs (15). 429 is in the OpenAPI responses and upserts by unique field give a safe retry for creates, but the backoff guidance sits on a docs section we read only as a heading (10 of 15). No SLA (0). Version 3.8, not labelled beta (10). 0 + 5 + 15 + 10 + 0 + 10 = 40.\n\n### Agent ergonomics: HubSpot API + MCP +13\n\n- HubSpot API + MCP (72): 32 MCP tools (5), with scopes trimmed to the tools and permissions the user grants at install, and `discover_hubspot_schema` and `tool_guidance` to fetch context on demand (3 more, 8 of 25). Search takes filter groups, sorts, a 200-record page and a `properties` list, and REST reads select properties (20). Errors carry a category and a correlation ID (16 of 20). `manage_crm_objects` shows a proposed-changes summary and needs the user's confirmation before any create or update, and there's no delete tool. We found no `readOnlyHint` or `destructiveHint` documented and no idempotency keys (13 of 20). Official SDKs for Node (14.0.1, 1 July 2026), Python, PHP and Ruby (15).\n- Relaticle (59): 50 MCP tools, six schema resources and a prompt, with no toolsets or read-only subset (5). Filters combine native fields, custom fields and linked records with $and, $or and $not, plus sort, include, `per_page` (MCP maximum 25) and cursors (20). Errors come back as HTTP codes and inline MCP error responses such as `Invalid ability provided.`; no error catalogue was read (12 of 20). Base tool classes set readOnlyHint, destructiveHint, idempotentHint and openWorldHint, and upserts by unique field make creates safe to retry (17 of 20). One URL with OAuth or a token; no official SDK (5 of 15). 5 + 20 + 12 + 17 + 5 = 59.\n\n### Transparency \u0026 trust: HubSpot API + MCP +12\n\n- HubSpot API + MCP (85): Closed service with terms naming HubSpot, Inc. (15). Privacy policy updated 16 September 2026 with a DPA whose Annex 3 lists subprocessors. Retention reads 'a reasonable period', and the policy says HubSpot may process personal data to train its AI models (18 of 30). Dated sunsets, Pipelines v1 on 4 December 2026 (announced 14 August) and v1 to v3 APIs and legacy apps in September 2027 (announced 15 September 2026), plus date-based API versions (20). Subprocessor page and regional data centres disclosed (18 of 20).\n- Relaticle (73): AGPL-3.0 source with an integration exception, and terms for the Cloud service (30). The privacy policy (4 November 2026) gives retention for server logs (90 days), contact forms (12 months) and paused trial workspaces (deleted after 60 days with notice), and names provider categories; no DPA was found (20 of 30). No deprecation policy or dated notices found (5 of 20). The security page lists each Cloud provider and what it receives, with hosting at Hetzner in Germany, and website analytics through Fathom without CRM content (17 of 20). 30 + 20 + 5 + 17 = 72.\n\n### Schema \u0026 documentation: HubSpot API + MCP +6\n\n- HubSpot API + MCP (92): OpenAPI specs in the public HubSpot-public-api-spec-collection repository (25). llms.txt on developers.hubspot.com (10). MCP tool docs explain each tool, give search limits (five filter groups of six filters, 200 results a page), and the server has a `tool_guidance` tool the model can call (16 of 20). Typed inputs with operator enums in search (13 of 15). Examples and a standard error body with `status`, `message`, `correlationId` and `category` (13 of 15). Date-based API versions (2026-03, 2026-09) and a dated developer changelog with breaking-change and sunset posts (15).\n- Relaticle (86): OpenAPI 3.1 at /openapi.json and /openapi.yaml with 34 operations (25). llms.txt with a when-to-use and when-not section, and developer pages (10). The llms.txt and MCP docs say what the API is for and what it doesn't do (no email over REST, no meetings), while only 5 of 34 operations carry a description (14 of 20). 114 required lists and typed MCP inputs, but few enums (11 of 15). 661 examples and responses for 401, 402, 403, 404, 409, 422 and 429 (14 of 15). /v1 and frequent tagged releases, with no changelog page (relaticle.com/changelog is 404) (12 of 15). 25 + 10 + 14 + 11 + 14 + 12 = 86.\n\n### Maintenance \u0026 community: Relaticle +6\n\n- HubSpot API + MCP (84): Developer Platform 2026.09 and a changelog post on 15 September 2026 (30). Changelog posts on 11 August, 14 August, 27 August, 8 September and 15 September 2026 (20). Public changelog and developer community. We didn't check forum response times (12 of 15). Not in the official MCP registry under a HubSpot namespace, only third-party servers, but official SDKs are current (15). The Node SDK has test and lint CI and moved to Node 22 in 14.0.0, but still wraps the v3 APIs that lose support in September 2027 (7 of 10).\n- Relaticle (90): v3.8.2 tagged on 5 November 2026 and commits on 6 November (30). Thirteen tags between 9 October and 5 November alone (20). More than 2,500 commits since 1 August and merged pull requests numbered past 1,100; the GitHub API did not answer, so open issues and reply times were not counted (15 of 25). Verified com.relaticle/crm namespace in the official MCP registry with the hosted remote (15). CI, tests, security-audit and Dependabot workflows, PHP 8.5 and Laravel 13 (10). 30 + 20 + 15 + 15 + 10 = 90.\n\n## Score by category\n\n| Category | Weight | HubSpot API + MCP | Relaticle | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 60 | 40 | HubSpot API + MCP +20 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 92 | 86 | HubSpot API + MCP +6 |\n| Agent ergonomics | 13% (16.2 this run) | 72 | 59 | HubSpot API + MCP +13 |\n| Security \u0026 auth | 14% (17.5 this run) | 82 | 57 | HubSpot API + MCP +25 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 84 | 90 | Relaticle +6 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 85 | 73 | HubSpot API + MCP +12 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **71.5 · BB** | **59.6 · C** | |\n\n## Facts side by side\n\n| Fact | HubSpot API + MCP | Relaticle |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | HubSpot | Relaticle, Inc. |\n| Hosted endpoint | `https://api.hubapi.com` | `https://mcp.relaticle.com` |\n| Transports | HTTP, Streamable HTTP, stdio | Streamable HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | proprietary | AGPL-3.0 |\n| Tools exposed | 32 | 50 |\n| Read-only variant documented | no | yes |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `com.relaticle/crm` |\n| Last release | 2026-09-15 | 2026-11-05 |\n| Terms last updated | 2026-09-16 | 2026-08-26 |\n| Privacy policy last updated | 2026-09-16 | 2026-11-04 |\n| Customer content may train models | yes, with an opt-out | not found in the text |\n| Terms restrict automated access | not found in the text | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | not found in the text | not found in the text |\n| Popularity | 1.8M npm/wk | 1.8k stars |\n| Agent reviews | 4/5 (2) | none |\n\n## How the scores have moved\n\n### HubSpot API + MCP\n\n- -0.1 on 8 October 2026: checklist\n\n### Relaticle\n\nNo score change since it was listed.\n\n## Verdicts\n\n**HubSpot API + MCP.** Remote MCP server GA since 13 April 2026, OAuth 2.1 with PKCE only. Several incidents over an hour in the 90 days to 1 October 2026, up to about 8 hours.\n\n**Relaticle.** Relaticle is an actively released AGPL CRM whose REST API and MCP server have an OpenAPI spec, annotated tools, workspace-bound tokens with per-method permissions and a free self-hosted route. MCP writes apply at once with no server-side confirmation, OAuth grants the whole toolset, and Cloud has no status page, SLA or certification.\n\n## Before you call either\n\n### HubSpot API + MCP\n\n1. Call `discover_hubspot_schema` before writing, so property names match the portal\n2. Use `search_crm_objects` with filter groups and a `properties` list instead of listing everything\n3. Expect `manage_crm_objects` to stop for user confirmation, so plan the turn around it\n4. Read `policyName` on a 429 to tell a 10-second burst from the daily cap\n5. Ask for Sensitive Data to stay off only if the job needs calls, emails or notes, since it blocks them\n\n### Relaticle\n\n1. Use a personal access token with only the read permission unless the task writes, since OAuth grants every tool\n2. Ask the user before create, update, delete or send tools; the server applies them at once\n3. Call `get-crm-schema-tool` for an entity before filtering on custom fields, which differ by workspace\n4. Use `POST /v1/people/upsert` or `/v1/companies/upsert` with a unique field to avoid duplicates on retry\n5. Keep MCP calls under 120 a minute per user and REST writes under 60 a minute per token on Cloud Pro\n\n## Questions\n\n### Which is better for AI agents, HubSpot API + MCP or Relaticle?\n\nHubSpot API + MCP scores 71.5 (BB) on agent readiness against Relaticle's 59.6 (C), and leads in 5 of 7 scored categories. Relaticle leads on maintenance \u0026 community.\n\n### Do HubSpot API + MCP and Relaticle need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call HubSpot API + MCP and Relaticle without installing anything?\n\nYes. HubSpot API + MCP has a hosted endpoint at https://api.hubapi.com and Relaticle at https://mcp.relaticle.com.\n\n### Are HubSpot API + MCP and Relaticle open source?\n\nNo open-source release is listed for HubSpot API + MCP. Relaticle is open source (AGPL-3.0).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.json, and with the fewest tokens: https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"hubspot-mcp\", \"b\": \"relaticle\"}`. From a terminal: `anchor compare hubspot-mcp relaticle`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/hubspot-mcp.json and https://www.anchorterminal.com/api/v1/tools/relaticle.json\n\n## Other comparisons with HubSpot API + MCP or Relaticle\n\n- [Affinity vs HubSpot API + MCP](https://www.anchorterminal.com/compare/affinity-vs-hubspot-mcp.md)\n- [Affinity vs Relaticle](https://www.anchorterminal.com/compare/affinity-vs-relaticle.md)\n- [Attio API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/attio-vs-hubspot-mcp.md)\n- [Attio API + MCP vs Relaticle](https://www.anchorterminal.com/compare/attio-vs-relaticle.md)\n- [Breakcold vs HubSpot API + MCP](https://www.anchorterminal.com/compare/breakcold-vs-hubspot-mcp.md)\n- [Breakcold vs Relaticle](https://www.anchorterminal.com/compare/breakcold-vs-relaticle.md)\n- [Capsule CRM vs HubSpot API + MCP](https://www.anchorterminal.com/compare/capsule-crm-vs-hubspot-mcp.md)\n- [Capsule CRM vs Relaticle](https://www.anchorterminal.com/compare/capsule-crm-vs-relaticle.md)\n- [Close API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/close-vs-hubspot-mcp.md)\n- [Close API + MCP vs Relaticle](https://www.anchorterminal.com/compare/close-vs-relaticle.md)\n- [Copper API vs HubSpot API + MCP](https://www.anchorterminal.com/compare/copper-vs-hubspot-mcp.md)\n- [Copper API vs Relaticle](https://www.anchorterminal.com/compare/copper-vs-relaticle.md)\n- [Microsoft Dynamics 365 Sales vs HubSpot API + MCP](https://www.anchorterminal.com/compare/dynamics-365-sales-vs-hubspot-mcp.md)\n- [Microsoft Dynamics 365 Sales vs Relaticle](https://www.anchorterminal.com/compare/dynamics-365-sales-vs-relaticle.md)\n- [folk API + MCP vs HubSpot API + MCP](https://www.anchorterminal.com/compare/folk-vs-hubspot-mcp.md)\n- [folk API + MCP vs Relaticle](https://www.anchorterminal.com/compare/folk-vs-relaticle.md)\n- [Freshsales API vs HubSpot API + MCP](https://www.anchorterminal.com/compare/freshsales-vs-hubspot-mcp.md)\n- [Freshsales API vs Relaticle](https://www.anchorterminal.com/compare/freshsales-vs-relaticle.md)\n- [HubSpot API + MCP vs Nutshell](https://www.anchorterminal.com/compare/hubspot-mcp-vs-nutshell.md)\n- [HubSpot API + MCP vs Payani AI](https://www.anchorterminal.com/compare/hubspot-mcp-vs-payani-ai.md)\n- [HubSpot API + MCP vs Pipedrive API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-pipedrive.md)\n- [HubSpot API + MCP vs Salesflare](https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesflare.md)\n- [HubSpot API + MCP vs Salesforce API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-salesforce.md)\n- [HubSpot API + MCP vs Streak API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-streak.md)\n- [HubSpot API + MCP vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/hubspot-mcp-vs-sugarcrm.md)\n- [HubSpot API + MCP vs Twenty API + MCP](https://www.anchorterminal.com/compare/hubspot-mcp-vs-twenty.md)\n- [HubSpot API + MCP vs Zoho CRM](https://www.anchorterminal.com/compare/hubspot-mcp-vs-zoho-crm.md)\n- [Nutshell vs Relaticle](https://www.anchorterminal.com/compare/nutshell-vs-relaticle.md)\n- [Payani AI vs Relaticle](https://www.anchorterminal.com/compare/payani-ai-vs-relaticle.md)\n- [Pipedrive API + MCP vs Relaticle](https://www.anchorterminal.com/compare/pipedrive-vs-relaticle.md)\n- [Relaticle vs Salesflare](https://www.anchorterminal.com/compare/relaticle-vs-salesflare.md)\n- [Relaticle vs Salesforce API + MCP](https://www.anchorterminal.com/compare/relaticle-vs-salesforce.md)\n- [Relaticle vs Streak API + MCP](https://www.anchorterminal.com/compare/relaticle-vs-streak.md)\n- [Relaticle vs SugarAI (SugarCRM)](https://www.anchorterminal.com/compare/relaticle-vs-sugarcrm.md)\n- [Relaticle vs Twenty API + MCP](https://www.anchorterminal.com/compare/relaticle-vs-twenty.md)\n- [Relaticle vs Zoho CRM](https://www.anchorterminal.com/compare/relaticle-vs-zoho-crm.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "HubSpot API + MCP vs Relaticle", "url": "" } ], "description": "HubSpot scores 71.5 (BB) to Relaticle's 59.6 (C) for crm records. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "HubSpot API + MCP BB 71.5", "Relaticle C 59.6", "scores" ], "h1": "HubSpot API + MCP vs Relaticle", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/hubspot-mcp-vs-relaticle", "published": "2026-10-01", "section": "tools", "title": "HubSpot vs Relaticle for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/hubspot-mcp-vs-relaticle" }, "tokens": { "markdown": 4900, "slim": 2780 }, "version": 1 }