AI CRM: Connecting Your CRM to AI With MCP

Two kinds of AI CRM

Built-in AI: HubSpot and Salesforce

HubSpot's built-in assistant is Breeze Assistant. HubSpot says it is included with subscriptions at no additional cost. HubSpot's agents, such as Customer Agent, Prospecting Agent and Data Agent, are managed in Agent Hub.

Custom agents are metered. HubSpot says agents built in Agent Builder use HubSpot Credits every time they run.

Salesforce Agentforce is Salesforce's AI agent platform, pitched at autonomous customer support on the web, on the phone and in apps.

Built-in AI is the better pick when the whole job lives inside one CRM. There is nothing extra to connect.

Connected AI: MCP

The Model Context Protocol (MCP) is an open standard that lets an AI client call tools in other systems. A CRM MCP server exposes CRM actions as tools: search deals, read a contact, create a task. If it is new to you, start with what MCP is.

The gain is reach across tools. Deals live in HubSpot, ad spend in Google Ads, payments in Stripe or Xero. A connected model can pull from all three in one answer.

The CRM vendors now ship MCP servers themselves. HubSpot's remote MCP server became generally available on 13 April 2026. Salesforce's hosted MCP servers followed on 29 April 2026, for Enterprise Edition orgs and above.

How a CRM AI integration works with MCP

The model picks the tool. The MCP server turns the call into a CRM API request and passes the result back. For the layers underneath, see MCP vs API.

Whether anything asks you before a write depends on the server and the AI client. The HubSpot comparison below shows both cases.

8 AI CRM prompts and the tools behind them

The prompts work with any CRM MCP server. The tool names are from PopMCP's HubSpot server. Prompts 7 and 8 need a second connection.

Each one runs when you ask. PopMCP does not schedule prompts.

1. Pipeline review

List open deals over $10,000 with no logged activity in the last
14 days. Group them by owner and show stage, amount and close date.

Calls hubspot_deals_search and hubspot_owners_list. Read only. It can only see activity that was logged to the deal.

2. Pre-call account brief

Brief me on Acme Corp: main contacts, open deals, the last 5 emails
and meetings, and any open tickets. Keep it to one page.

Calls hubspot_companies_search, hubspot_associations_list, hubspot_deals_search and hubspot_tickets_search. Emails and meetings come from hubspot_emails_search and hubspot_objects_search. Read only.

The Service Key needs a read scope for each of those objects. Without one, that part of the brief fails.

3. Data hygiene check

Count contacts with no associated company, no lifecycle stage, or a
free webmail address. Show the three counts and 20 examples of each.

Calls hubspot_contacts_search and hubspot_associations_list. Read only.

Fixing them is a second step. hubspot_lists_memberships_add_update adds the contacts to a clean-up list, which is a write.

4. Follow-up drafts

For deals that moved to Proposal Sent this week, draft a short
follow-up email to the main contact on each. Put the drafts in this
chat. Do not send or log anything.

Calls hubspot_pipelines_stages_list, hubspot_deals_search, hubspot_associations_list and hubspot_contacts_get. Read only. The drafts stay in the chat, and a person sends them.

5. Log a note and a task

Log this call summary as a note on the Acme renewal deal, and create
a task for me to send pricing by Friday: [paste summary]

Calls hubspot_notes_create and hubspot_tasks_create, then hubspot_associations_default_create to attach both to the deal. This one writes, so it needs a paid plan.

In HubSpot's API, creating a record and associating it are separate calls. Check that the note shows on the deal.

6. Win and loss patterns

Compare closed-won and closed-lost deals from the last two quarters
by original source, amount band and days from create to close. What
differs most between the two groups?

Calls hubspot_deals_search. Read only.

The model is reading rows and summarizing them. Confirm anything you plan to act on in a HubSpot report.

7. Ad spend against won deals

List last quarter's closed-won deals with the original source of the
main contact. Then pull Google Ads cost by campaign for the same
quarter. What did paid search cost per won deal?

Needs HubSpot and Google Ads. Calls hubspot_deals_search, hubspot_associations_list and hubspot_contacts_batch_read, then a GAQL query through google_ads_search. Read only.

A deal only matches a campaign if the campaign name reached the contact record. Without that you get one blended cost per won deal for the channel.

8. Deals against payments

List deals marked closed-won in August with amount and company. For
each, is there a paid Stripe invoice or charge for that customer in
August or September? Flag the ones with none.

Needs HubSpot and Stripe. Calls hubspot_deals_search, then stripe_search_customers, stripe_list_invoices and stripe_list_charges. With Xero it is xero_get_invoices and xero_get_payments. Read only.

The match is by customer name or email, so expect a few false flags.

HubSpot MCP: HubSpot's own server vs PopMCP

HubSpot has its own MCP options, and they are good. Compare them before you add anything else.

HubSpot's remote MCP server runs at mcp.hubspot.com. It uses OAuth 2.1 with PKCE, acts as the signed-in user and respects that user's HubSpot permissions. HubSpot's docs list 32 tools as of 30 September 2026.

Several are broad: manage_crm_objects creates and updates records and activities, and query_crm_data takes SQL-style queries.

The HubSpot connector for Claude launched on 29 July 2025. It needs a paid Claude plan (Pro, Max, Team or Enterprise). It can view, create and update records, but not delete them.

Where HubSpot's server is the better pick

It is first-party and works with each user's own permissions. Its CRM write tool asks before it changes a record. It has purpose-built tools for landing pages, blog posts, campaigns and AEO metrics.

If HubSpot is your only tool and you run one portal, start there.

One limit for partners: HubSpot says the Claude connector connects one HubSpot account at a time. To work in another, you disconnect and reconnect.

Where PopMCP is the better pick

The Service Key opens HubSpot's public API, so the catalog reaches further: lists, HubDB, files, conversations and automation as well as CRM records.

It puts HubSpot next to your ads, analytics, store and finance tools on one URL. And an agency can give each client portal its own workspace. See the HubSpot MCP server page for the full tool list.

Where PopMCP does not help

PopMCP has no Salesforce connector. For Salesforce, use Salesforce's hosted MCP servers, or request the integration. PopMCP's other CRM servers include Pipedrive and Freshsales.

Data safety: try a read first

CRM data is customer data, so give an AI connection the same care as a new hire's login.

1. Try a read first. Every prompt above except 5 only reads. Check the answers against the CRM.
2. Give the least access that works. With HubSpot's server, connect as a user whose role fits the job. With PopMCP, create the Service Key with only the scopes the work needs: a key with read scopes cannot write, whatever the model tries.
3. Know what stops a write. HubSpot's manage_crm_objects asks for confirmation, and PopMCP does not hold writes. Claude shows a tool approval request, and ChatGPT developer mode asks for confirmation on write actions by default. Keep those prompts on.
4. Keep the credential out of the AI client. PopMCP stores the Service Key encrypted at rest with AES-256-GCM. The AI client signs in to PopMCP with OAuth and never receives the key. To cut access, remove the member, disconnect the connector, or re-run consent with fewer connectors ticked.
5. Plan for sensitive data. With HubSpot's Sensitive Data setting on, HubSpot's MCP server blocks activity and conversation data. HubSpot notes the block is specific to its MCP server and does not apply to the standard CRM APIs. A Service Key calls those APIs, so on PopMCP the key's scopes are the control.
6. Review usage. PopMCP's usage analytics show requests and outcomes by connection, teammate and tool.

Read more in MCP security best practices.