# Salesflare (slim)

> Salesflare is a sales CRM for small B2B teams that fills in contacts, companies and activity from email and calendars. Agents reach it through a REST API at api.salesflare.com and a hosted MCP server with OAuth.

- Full: https://www.anchorterminal.com/tools/salesflare.md (~7,050 tokens) · this version ~1,680 tokens · JSON https://www.anchorterminal.com/tools/salesflare.json · canonical https://www.anchorterminal.com/tools/salesflare
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-09

**D · 48.5/100 · rank #721 of 842 · #13 in CRM & customer platforms · not agent-ready · confidence medium**


Assessment: The REST API has a public Swagger 2.0 file covering 71 operations, with typed filters on every list call and a 30-day trial that needs no card. No rate limit numbers, API changelog, SDK or audit log were found in the reviewed documentation, and API keys carry no documented scopes.

## Facts

- Kind: HTTP API · vendor: Salesflare BVBA · category: CRM & customer platforms · legal entity: Salesflare BVBA · provenance 75/100
- Endpoint: `https://api.salesflare.com` (HTTP)
- Auth: OAuth or key · pricing: Paid · x402: no · licence: Proprietary service under Salesflare's Terms of Service
- Probe metrics: not measured yet (probes haven't run)
- APIs: REST at `https://api.salesflare.com` with JSON bodies and TLS 1.2 or higher. 71 operations in a Swagger 2.0 file, version 1.0.0, with no version in the path
- MCP server: Hosted at `https://mcp.salesflare.com/mcp`, OAuth. Reads and writes accounts, contacts, opportunities and tasks and reads account timelines, per the vendor's listing. Tool definitions were not read
- API plan: Every plan and the 30-day trial. No API tier was found on the pricing page
- Read and write: Accounts, contacts, opportunities, tasks, internal notes, meetings, calls, tags, custom fields and email workflows can be created and updated. Pipelines, stages, users, groups and currencies are read-only. 34 GET, 15 PUT, 14 POST and 8 DELETE operations
- Credentials: API key as a Bearer header for REST, with no documented scopes. OAuth authorisation code with PKCE and dynamic client registration for MCP, scopes `openid` and `offline_access`
- Rate limits: No numbers published. 429 is listed among the API's status codes
- Pagination and filters: `limit` (default 10 on accounts, 20 on contacts and tasks) and `offset`, `search`, `order_by`, typed field filters, `custom`, and a `q` rule builder with AND and OR conditions
- Webhooks: None in the API file. The vendor points to Zapier and Make for event triggers
- Errors: JSON with `statusCode`, `error` and `message`, as an unauthenticated call returned. The docs list 400, 401, 404, 429 and 500
- Permissions: Admin, manager, team member and viewer roles with team, group, own or no data scopes, on the Pro plan and above
- Security programme: CASA Tier 2 verification revalidated yearly, independent security testing and a disclosure programme with bounties, per the vendor. No SOC 2 or ISO 27001 of its own found. Reports go to security@salesflare.com
- Status: status.salesflare.com, hosted by Sorry. Notices in October 2023, June 2025, November 2025 and June 2026. None in the last 90 days
- Data handling: Google Cloud in St. Ghislain, Belgium, encrypted at rest and in transit, with daily backups. DPA on request. Belgian law governs the terms
- Prices: Growth (API and MCP included) $29 per seat per month; Pro (first plan with user permissions) $49 per seat per month; Enterprise (five-user minimum) $99 per seat per month

- Scores: Reliability 63, Performance pending, Schema & documentation 57, Agent ergonomics 49, Security & auth 44, Payments & pricing 30, Task success pending, Maintenance & community 25, Transparency & trust 58 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines. · Schema & documentation, Public Swagger 2.0 file with 71 operations, linked from the docs and from `llms.txt` (25). · Agent ergonomics, Graded on the REST API. · Security & auth, REST uses API keys sent as a Bearer header, created in Settings with no documented scopes, expiry or rotation. · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, No API changelog or release notes found, so recency rests on metadata. · Transparency & trust, Closed service with terms that name Salesflare BVBA in Antwerp and Belgian law (15).
- Sources: 24, open questions: 10, both in the full twin
- Capabilities: crm.records, crm.pipeline, crm.activities, crm.search
- JSON: https://www.anchorterminal.com/api/v1/tools/salesflare.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/salesflare.svg` or a link to https://www.anchorterminal.com/tools/salesflare from a page on salesflare.com or one of its subdomains, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Send `Authorization: Bearer <API key>` to `https://api.salesflare.com`. A person creates the key in Settings, API keys
2. Set `limit` on every list call. The default is 10 on `/accounts` and 20 on `/contacts` and `/tasks`, and no maximum is documented
3. Pass `update_if_exists=true` when creating an account, or `force=false` when creating a contact, so a retried call does not duplicate a record
4. Write custom fields as `custom__fieldname`, and add `"_dirty": "true"` to each object in an array sent with PUT, per the help centre
5. Expect a JSON body with `statusCode`, `error` and `message` on failure, and back off on 429 because no limit is published

## Connect

```bash
curl https://api.salesflare.com/me \
  --header "Authorization: Bearer $SALESFLARE_API_KEY"
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/salesflare

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| HubSpot API + MCP | BB | 71.5 | crm.records, crm.pipeline, crm.activities, crm.search | https://www.anchorterminal.com/tools/hubspot-mcp.min.md |
| Zoho CRM | BB | 70.8 | crm.records, crm.pipeline, crm.activities, crm.search | https://www.anchorterminal.com/tools/zoho-crm.min.md |
| Microsoft Dynamics 365 Sales | B | 69.7 | crm.records, crm.pipeline, crm.activities, crm.search | https://www.anchorterminal.com/tools/dynamics-365-sales.min.md |
| Close API + MCP | B | 66.7 | crm.records, crm.pipeline, crm.activities, crm.search | https://www.anchorterminal.com/tools/close.min.md |
| Twenty API + MCP | B | 65.9 | crm.records, crm.pipeline, crm.activities, crm.search | https://www.anchorterminal.com/tools/twenty.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)