Hubspot (shinzolabs) MCP Server
@shinzolabs/hubspot-mcp
npm
v2.0.5
Source verified
Published by shinzo-labs — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
Hubspot MCP - An extensive MCP server for the HubSpot API
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 0 = 100. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
✓ No adoption-risk deductions — minimal blast radius, verified enough, and fully inspected.
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 112
Each tool and what it can reach — statically extracted from the published source.
calls_archiveno sensitive capabilitycalls_batch_archiveno sensitive capabilitycalls_batch_createno sensitive capabilitycalls_batch_readno sensitive capabilitycalls_batch_updateno sensitive capabilitycalls_createno sensitive capabilitycalls_getno sensitive capabilitycalls_listno sensitive capabilitycalls_searchno sensitive capabilitycalls_updateno sensitive capability
Show 102 more tools ↓
communications_get_preferencesno sensitive capabilitycommunications_get_subscription_definitionsno sensitive capabilitycommunications_get_subscription_statusno sensitive capabilitycommunications_subscribe_contactno sensitive capabilitycommunications_unsubscribe_contactno sensitive capabilitycommunications_update_preferencesno sensitive capabilitycommunications_update_subscription_statusno sensitive capabilitycrm_archive_associationno sensitive capabilitycrm_archive_objectno sensitive capabilitycrm_batch_archive_associationsno sensitive capabilitycrm_batch_archive_objectsno sensitive capabilitycrm_batch_create_associationsno sensitive capabilitycrm_batch_create_companiesno sensitive capabilitycrm_batch_create_contactsno sensitive capabilitycrm_batch_create_leadsno sensitive capabilitycrm_batch_create_objectsno sensitive capabilitycrm_batch_read_objectsno sensitive capabilitycrm_batch_update_companiesno sensitive capabilitycrm_batch_update_contactsno sensitive capabilitycrm_batch_update_leadsno sensitive capabilitycrm_batch_update_objectsno sensitive capabilitycrm_create_associationno sensitive capabilitycrm_create_companyno sensitive capabilitycrm_create_company_propertyno sensitive capabilitycrm_create_contactno sensitive capabilitycrm_create_contact_propertyno sensitive capabilitycrm_create_leadno sensitive capabilitycrm_create_lead_propertyno sensitive capabilitycrm_create_objectno sensitive capabilitycrm_get_associationsno sensitive capabilitycrm_get_companyno sensitive capabilitycrm_get_company_propertiesno sensitive capabilitycrm_get_contactno sensitive capabilitycrm_get_contact_propertiesno sensitive capabilitycrm_get_leadno sensitive capabilitycrm_get_lead_propertiesno sensitive capabilitycrm_get_objectno sensitive capabilitycrm_list_association_typesno sensitive capabilitycrm_list_objectsno sensitive capabilitycrm_search_companiesno sensitive capabilitycrm_search_contactsno sensitive capabilitycrm_search_leadsno sensitive capabilitycrm_search_objectsno sensitive capabilitycrm_update_companyno sensitive capabilitycrm_update_contactno sensitive capabilitycrm_update_leadno sensitive capabilitycrm_update_objectno sensitive capabilityemails_archiveno sensitive capabilityemails_batch_archiveno sensitive capabilityemails_batch_createno sensitive capabilityemails_batch_readno sensitive capabilityemails_batch_updateno sensitive capabilityemails_createno sensitive capabilityemails_getno sensitive capabilityemails_listno sensitive capabilityemails_searchno sensitive capabilityemails_updateno sensitive capabilityengagement_details_archiveno sensitive capabilityengagement_details_createno sensitive capabilityengagement_details_getno sensitive capabilityengagement_details_get_associatedno sensitive capabilityengagement_details_listno sensitive capabilityengagement_details_updateno sensitive capabilitymeetings_archiveno sensitive capabilitymeetings_batch_archiveno sensitive capabilitymeetings_batch_createno sensitive capabilitymeetings_batch_updateno sensitive capabilitymeetings_createno sensitive capabilitymeetings_getno sensitive capabilitymeetings_listno sensitive capabilitymeetings_searchno sensitive capabilitymeetings_updateno sensitive capabilitynotes_archiveno sensitive capabilitynotes_batch_archiveno sensitive capabilitynotes_batch_createno sensitive capabilitynotes_batch_readno sensitive capabilitynotes_batch_updateno sensitive capabilitynotes_createno sensitive capabilitynotes_getno sensitive capabilitynotes_listno sensitive capabilitynotes_searchno sensitive capabilitynotes_updateno sensitive capabilityproducts_archiveno sensitive capabilityproducts_batch_archiveno sensitive capabilityproducts_batch_createno sensitive capabilityproducts_batch_readno sensitive capabilityproducts_batch_updateno sensitive capabilityproducts_createno sensitive capabilityproducts_listno sensitive capabilityproducts_readno sensitive capabilityproducts_searchno sensitive capabilityproducts_updateno sensitive capabilitytasks_archiveno sensitive capabilitytasks_batch_archiveno sensitive capabilitytasks_batch_createno sensitive capabilitytasks_batch_readno sensitive capabilitytasks_batch_updateno sensitive capabilitytasks_createno sensitive capabilitytasks_getno sensitive capabilitytasks_listno sensitive capabilitytasks_searchno sensitive capabilitytasks_updateno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (112 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v2.0.5 latest |
A 100/100 | 0 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @shinzolabs/hubspot-mcp --onlineOther implementations of Hubspot 18
Independent packages implementing the same tool, scanned with the same engine. Compare all 19 side by side →
MCP Server for developers building HubSpot Apps
HubSpot MCP server — CRM objects, associations, properties, marketing, files, workflows, and account diagnostics
HubSpot MCP server for AI assistants like Claude: contacts, deals, pipelines, owners, custom objects, engagements, and CRM automation. Built by Nubiia.
HubSpot MCP server for CRM operations
Hubspot MCP Server - A server implementation for HubSpot integration using Model Context Protocol
MCP server for HubSpot CRM API integration
More in Marketing & Social
Official Abyssfall game info, newsletter double opt-in, and merch reservation tools.
AdCritter ads platform: docs, API reference, app scaffolding, and white-label integration.
Google AdSense MCP Server - Monitor earnings, reports, and account health via Claude/AI
Operational empathy for technical founders + PE/VC operators navigating high-stakes B2B interactions. 28 MCP tools + CLI: ICP scoring, persona simulation, battlecards, deal classification, prospect discovery, investor matching, founder wellness, plus mark
MCP server for Bing Webmaster Tools — SEO site management, URL submission, sitemaps, stats, keywords
MCP (Model Context Protocol) server that helps AI agents use Primer Brand (@primer/react-brand) correctly when building GitHub marketing and landing pages.