Quick answer
MCP (Model Context Protocol) is an open standard that lets an AI assistant like Claude or ChatGPT plug into another app. When a sales tool has an MCP server, your assistant can search it, read records and, where the vendor allows it, change things, so you stop copying data between tabs. On 15 October 2026, these 13 GTM tools publish an official one: HubSpot, Salesforce, Pipedrive and Attio for your CRM; Clay and ZoomInfo for finding and enriching contacts; Apollo, Outreach, lemlist, Instantly and Salesforge for sequences and campaigns; Smartlead and HeyReach with thinner docs. What separates them is whether the assistant can write or only read, whose permissions it runs under, which plan you need and what it costs in credits.
How I checked and sorted them
I set up outbound for B2B teams as a GTM consultant, and "can our AI assistant use this?" is now part of every stack decision. For each tool I read the vendor's own docs, help center or pricing page on 15 October 2026. I left out community-built servers: several popular "MCP servers" for these tools aren't made by the vendor at all.
The list is sorted by the job you'd hand the assistant: update the CRM, find and enrich contacts or run sequences. "Read" means the assistant can look. "Write" means it can create, change or delete records, enroll people or send.
Disclosure. Salesforge is the sending tool I set up for clients, and I've written guest articles for Salesforge's blog. No tool in this article pays me and there are no affiliate links. Where another tool fits a job better, I say so.
The 13 tools at a glance
| Tool | What your AI can do | Plan you need | Watch for |
|---|---|---|---|
| HubSpot | Read, create and update CRM records and activities | Any HubSpot plan, paid Claude plan | No delete, 10 records per write |
| Salesforce | Read data, run flows, Apex actions and queries | Enterprise Edition and above | An admin has to enable it first |
| Pipedrive | Search, create and update deals, contacts, leads and activities | All plans | Token limits by plan |
| Attio | Search, create and update records, lists, notes and tasks; read-only SQL | All plans | SQL not on every plan |
| Clay | Find and enrich people and companies, run approved Functions | Any account to search; Launch or higher for admin controls | 100 results per search |
| ZoomInfo | Search, enrich, intent signals, account research | ZoomInfo licence with data credits | Model training must be off |
| Apollo | Search, enrich, create contacts, build sequences, enroll, send one-off emails | Any plan, free included | Still in beta for Claude |
| Outreach | Read meetings and emails, create sequences and records, add prospects to sequences | Amplify add-on | No update tools |
| lemlist | Campaign stats, create and update sequences, find, enrich and import leads | All plans | ChatGPT web needs Business or Enterprise |
| Instantly | Create, update and pause campaigns, add leads, reply to emails | All Outbound plans | API key sign-in |
| Salesforge | Contacts, sequences, enrollments, sender profiles, plus the other Forge products | Growth plan | One API key per product |
| Smartlead | Campaign stats, deliverability checks, lead and account data | API key needed | Claude Desktop only |
| HeyReach | LinkedIn outreach workspace (no published tool list) | Growth, Agency or Unlimited | Key sits in the connection URL |
Update your CRM from a chat
These four can write to your pipeline, so set them up with the most care.
HubSpot
The Claude connector reads, creates and updates contacts, leads, companies, deals, tickets, custom objects and activities (calls, meetings, notes, tasks and emails), plus marketing emails, pages and blog posts. It can't delete anything, writes are capped at 10 records at a time and every write shows in HubSpot's audit log under the user and the connector. It works on any HubSpot plan, but Claude needs Pro, Max, Team or Enterprise, and a Super Admin approves it for anyone without App Marketplace access. HubSpot recommends setting write tools to "Needs approval". The ChatGPT app has the same 10-record cap. Sources: HubSpot's pages for Claude and ChatGPT.
Salesforce
Hosted MCP servers went generally available in April 2026 for Enterprise Edition and above. They expose your org's data, flows, Apex actions and queries, and every call runs as the signed-in user, so field-level security and sharing rules still apply and that person's name shows in the audit trail. Servers stay off until an admin enables them in Setup (API Catalog, then MCP Servers) and creates an External Client App. Salesforce suggests starting with the read-only sobject-reads server in a sandbox.
Pipedrive
Pipedrive launched its server on 30 June 2026, on every plan. The assistant can search deals, contacts, organizations and leads, create and update records, convert leads into deals and turn meeting notes into records and follow-up tasks. It follows the user's permissions and actions land in the change log. Usage counts against token limits that depend on your plan, and in ChatGPT you need a Pro, Business, Enterprise or Edu plan with developer mode on. In Claude you add it as a custom connector with the URL mcp.pipedrive.ai/mcp.
Attio
Attio's server is available on all plans to every workspace member. It searches, creates and updates records, lists, notes, comments and tasks, searches calls, meetings and emails (transcripts included) and runs read-only SQL, which isn't on every plan. It can't delete records or lists. Reads go through without asking, writes ask the user to confirm and the assistant gets the same permissions as that Attio user (developer docs). If you're still picking a CRM, see Attio vs HubSpot.
Find and enrich contacts
Clay
Clay's server finds people and companies, enriches them with emails, phone numbers and work history, researches accounts and runs Functions, the workflows your ops team builds in Clay and approves for reps. Search is free. Enrichments and Functions cost the same credits they would inside Clay, and new users get 500 credits on first connect. Results come in pages of 20, up to 100, and Clay positions MCP for 1 to 20 contacts at a time. Credit limits per rep, usage tracking and Functions for reps need Launch, Growth or Enterprise, per Clay's MCP settings page. Setup and the controls to set first are in my Clay MCP guide.
ZoomInfo
ZoomInfo's server searches companies and contacts, enriches records, pulls buyer intent signals and writes account research. Claude, ChatGPT and Perplexity have native connectors. You need a licence with data credits: Sales, Copilot, Studio and ZI Lite qualify, but some older subscriptions only carry recurring monthly credits, which MCP can't use. A free ZoomInfo account comes with 1,000 data credits and 1,000 AI credits (ZoomInfo MCP docs). ZoomInfo prohibits training AI models on MCP data and asks you to switch model training off in your AI tool before you connect (setup guide).
Build sequences and run campaigns
This is where an assistant can start contacting real people, so check what each server lets it do without asking.
Apollo
Apollo's Claude integration is in beta. It can find prospects, enrich people and companies, create or update contacts, draft and send one-off emails, create sequences, add contacts to a sequence, manage tasks and pull team analytics. Apollo says any plan qualifies, free included, at no extra cost, though some actions spend credits. You sign in with a work email, you must turn off model training in Claude first and each person connects it for themselves. Every action can be set to Always allow, Approval required or Blocked, and Apollo recommends approval on anything that uses credits.
Outreach
Outreach's server needs the Amplify add-on with active credits, and an admin switches it on for the org. It searches recorded meetings and transcripts, reads emails, creates and deletes sequences, adds or removes prospects, creates tasks, accounts, prospects and opportunities and answers questions about an account or deal. It has no update tools on purpose: Outreach says LLMs behaved unpredictably when editing existing records in its testing. Create is on by default, delete is off by default and API throttle limits apply.
lemlist
lemlist includes its MCP server and CLI on all plans. The assistant can audit campaigns and stats, create or update sequences and find, enrich, dedupe and import leads, signing in with OAuth or an API key. The limits sit on the AI side, per lemlist's setup guide: Claude Free allows one custom connector, on Claude Team or Enterprise only Owners can add one and in ChatGPT's web app full MCP apps are limited to Business, Enterprise and Edu.
Instantly
The server comes free with the subscription, and API access is on all Outbound plans. The help center lists 31 tools: create, update and pause campaigns, add and move leads, view and reply to emails, verify emails, pull analytics and manage sending accounts, warmup included. It signs in with an API key, in a header or, if your client can't do headers, in the URL itself. API v2 lets you create keys with different scopes, so give the assistant its own key with only what it needs.
Salesforge
Salesforge runs one server for its product family: Salesforge, Leadsforge, Primeforge, Mailforge, Infraforge and Warmforge. For Salesforge it covers workspaces, contacts, sequences, nodes, branches, enrollments, sender profiles and webhooks, and from the same chat you can search Leadsforge for leads or check Warmforge warmup stats. MCP is on the Growth plan, not Pro. You connect with one API key per product in the request headers, and the setup docs cover Claude Desktop, Claude Code, Cursor, Windsurf and VS Code but not ChatGPT.
Smartlead and HeyReach: thinner docs
Smartlead's help center describes a server that pulls campaign stats, runs deliverability and health checks and reads lead, account and performance data. For now it only works in Claude Desktop over SSE with your API key in the URL, and web support is listed as coming later.
HeyReach, for LinkedIn outreach, includes MCP on its Growth, Agency and Unlimited plans, with a separate connection URL and key for each workspace, which suits agencies running several clients. Its help center covers setup but publishes no tool list, so ask the assistant to list its tools and test on a spare workspace before it touches live campaigns.
Six checks before you connect one
- Read or write? Start read-only where you can: Salesforce's sobject-reads server, or Outreach with create switched off.
- Whose permissions? HubSpot, Salesforce, Pipedrive, Attio, Outreach and Apollo run as the signed-in user. Instantly, Salesforge, Smartlead and HeyReach run on an API key, so the key's access is the assistant's access.
- Approval on anything that writes, sends or spends credits. Claude and ChatGPT let you set each tool to ask first, and HubSpot and Apollo both recommend it.
- Which AI account? On Claude Free, Pro and Max the user chooses whether chats can train Anthropic's models; Team, Enterprise and the API fall under commercial terms. OpenAI doesn't train on ChatGPT Business, Enterprise or Edu data by default. Prospect data from your stack ends up in those chats.
- Where does the key live? A key pasted into a URL ends up in config files and screenshots. Give the assistant its own key and rotate it when someone leaves.
- How do you cut access? Outreach points you to your identity provider, Clay to removing the rep or setting their credit limit to 0 and Attio to revoking sessions in account settings. Know the off switch before you need it.
Rule of thumb. Let the assistant read freely, make it ask before it writes and never let it send or spend credits without a click from a person. Automate the work, not the thinking.
Which one to connect first
- Your CRM's server if reps lose time updating records and prepping calls. HubSpot and Pipedrive are the quickest to switch on. Salesforce needs an admin first, though it puts setup at under 30 minutes.
- Clay or ZoomInfo for research on a handful of accounts before a call. Neither replaces a list build in a table.
- Your sequencer's server if you want campaign reports and lead uploads from chat. Keep enrollment and sending behind approval.
- Wait if your team shares logins, nobody owns the CRM or reps use personal AI accounts. The assistant inherits whatever state your permissions are in.
Coding agents need a different setup, which I cover in connecting Claude Code to your CRM. For the jobs I'd keep away from any assistant, see what GTM tasks you should never automate.
Key takeaways
- Each of the 13 tools here publishes an official MCP server, checked on its own docs on 15 October 2026. Community-built servers for the same tools are a different thing.
- HubSpot, Salesforce, Pipedrive and Attio can write to your CRM. Clay and ZoomInfo find and enrich. Apollo, Outreach, lemlist, Instantly and Salesforge can touch sequences.
- Most servers come with the plan you already pay for. The exceptions: Outreach needs Amplify, Salesforge needs Growth, Salesforce needs Enterprise Edition and ZoomInfo needs data credits.
- OAuth servers run as the signed-in user. API-key servers run with whatever the key can do, so scope and rotate the key.
- Put writes, sends and credit spend behind approval, and connect from company AI accounts.
FAQ
What is an MCP server in a sales tool?
It's the vendor's official connection point for AI assistants. Through it, Claude, ChatGPT or another MCP client can search the tool, read records and, if the vendor allows it, create or change things on your behalf.
Which CRMs have an official MCP server?
HubSpot, Salesforce (Enterprise Edition and above), Pipedrive and Attio all publish one. HubSpot, Pipedrive and Attio can create and update records from a chat; Salesforce exposes the servers your admin enables and suggests starting with a read-only one.
Do MCP servers cost extra?
Mostly not. Apollo, lemlist, Instantly, Pipedrive, Attio and HubSpot include it in existing plans, though Pipedrive has token limits and HubSpot's Claude connector needs a paid Claude plan. Outreach needs its Amplify add-on, Salesforge needs the Growth plan and Clay and ZoomInfo charge credits for enrichment.
Can an AI assistant send cold emails through MCP?
Some can. Apollo can send one-off emails and add contacts to sequences, Instantly can reply to emails and Outreach can add prospects to sequences. Set these actions to require approval so a person confirms every send.
Is it safe to connect ChatGPT or Claude to my CRM?
It can be, if the assistant runs under each user's own permissions, writes need approval and people connect from company accounts. Start read-only, test in a sandbox where you can and know how to revoke access before rollout.