How is this different from connecting HubSpot MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the HubSpot MCP API changes?

We track the HubSpot MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different HubSpot tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in HubSpot?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the HubSpot MCP server myself?

No. TrustGate connects to the HubSpot MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to HubSpot directly.

Connect HubSpot MCP to your AI agents, securely.

Q: Is HubSpot MCP secure?

The server itself exposes 32 tools, and some of them can write to your HubSpot account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches HubSpot.

One secured endpoint for every HubSpot call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try HubSpot MCP now

What your agents can ask once HubSpot MCP is connected.

Select the tools your AI agents can call

32 tools from the HubSpot MCP schema.

Showing 32 tools

get_user_detailsreadReturns the authenticated user's information, account details and per-object read and write access.
get_organization_detailsreadLists organization-wide teams, job titles, seat counts and account information such as timezone, currency and account type.
manage_onboardingwriteAssesses an account's CRM onboarding status and guides users through onboarding steps.
tool_guidancereadRetrieves usage instructions and guidance for one or more HubSpot MCP tools.
submit_feedbackwriteSends feedback about the MCP server experience to HubSpot.
discover_hubspot_schemareadSearches the HubSpot schema to discover available object types and their read and write access.
search_crm_objectsreadSearches and filters CRM records using filter groups, text queries, sorting and pagination.
get_crm_objectsreadFetches up to 100 CRM objects by ID in a single request.
manage_crm_objectswriteCreates or updates CRM records or activities after the user confirms a proposed-changes summary.
query_crm_datareadQueries CRM data using SQL with HubSpot-specific extensions, supporting filtering, aggregation and sorting.
search_ownersreadFinds CRM record owners by name or email, or looks them up by ID.
manage_segmentwriteCreates static and dynamic segments and adds or removes records from static segments.
search_propertiesreadFinds property definitions for an object type by keyword.
get_propertiesreadGets full property definitions, including data types and enumeration values.
manage_custom_propertieswriteCreates custom properties for CRM objects.
manage_custom_pipelineswriteCreates and manages pipelines for supported objects.
get_campaign_attribution_reportsreadGets revenue and closed-won deal attribution data for campaigns.
read_campaign_datareadReads campaign analytics, asset metrics or contact data.
manage_campaign_objectswriteCreates or updates marketing campaigns and manages their asset associations.
search_intent_signalsreadSearches and analyzes buyer intent signals for companies and contacts.
get_marketing_email_analyticsreadGets analytics for marketing emails based on sends within a date range.
manage_marketing_emailwriteManages marketing email settings and content, including creating, updating and cloning email drafts.
search_conversationsreadSearches conversations and messages from HubSpot inboxes by CRM object, time range or keyword.
get_conversation_channel_metadatareadLists the inboxes, channels and channel instances available in the account.
get_content_analytics_reportreadRuns content analytics across landing pages, website pages and blog posts.
manage_landing_pagewriteCreates, edits, styles, publishes, clones and inspects landing pages.
manage_website_pagewriteCreates, edits, styles, publishes, clones and inspects website pages and edits site navigation menus.
render_assetreadDisplays a read-only preview card for a landing page, website page or blog post.
manage_blog_postwriteCreates, updates, publishes and inspects HubSpot blog posts.
get_aeo_metricsreadGets brand-level AEO analytics, including share of voice, prompt performance trends and competitor comparisons.
manage_aeo_promptswriteViews and creates tracked AEO prompts and their performance details, including AI engine responses.
manage_aeo_recommendationswriteReviews brand recommendations and acts on them, including starting content generation actions.

What HubSpot MCP exposes

HubSpot MCP groups its 32 tools into 8 categories, each with a suggested starting policy.

All 32 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
CRM Objects	Generic read, create, update, archive and search across contacts, companies, deals, tickets and custom objects	Read / Write	Require approval for archive; audit record changes
Properties & Pipelines	Property schemas, pipelines and their stages	Read / Write	Allow schema discovery
Associations & Lists	Associations between records, and static or dynamic lists	Read / Write	Audit list membership changes
Account & Guidance	User and organization details, onboarding guidance, tool usage guidance and feedback to HubSpot	Read / Write	Discovery tools; get_user_details shows which objects are writable
Marketing & Campaigns	Campaign data and attribution, marketing email analytics and management, and buyer intent signals	Read / Write	Review marketing emails and campaign changes before saving
Conversations	Searching inbox conversations and messages, and listing inboxes and channels	Read	Conversations contain customer messages; restrict and log
Content	Landing pages, website pages and blog posts, content analytics and asset previews	Read / Write	Approve publishing; it makes content public
AEO	Answer engine optimisation metrics, tracked prompts and brand recommendations	Read / Write	Review recommendations before starting content generation

Connect HubSpot MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect HubSpot
Find HubSpot in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow HubSpot MCP or block it. You allow the exact tools each agent can call, one by one.

HubSpot MCP	32 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 32 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is HubSpot MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	HubSpot MCP32 documented tools.
Coding assistants	Connection & credentialsper user	CRM Objects6 tools
Internal copilots	Tool access policiesdeny by default	Marketing & Campaigns6 tools
Workflow automations	Request & response inspectioninline	Account & Guidance5 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools15 tools