Tag: Chatgpt

  • GPT-6 Astra: Pricing, Capabilities, and What Changes

    GPT-6 Astra: Pricing, Capabilities, and What Changes

    OpenAI shipped a new flagship model on 3 September 2026, and within a day the internet had produced several hundred summaries of it. This is not one of those. If you already run AI in production — an agent, a CRM sync, an automation layer — the questions that matter are narrower: what does GPT-6 Astra cost per completed task, which of your workloads justify it, and what new failure modes does it introduce into an unattended pipeline. This article answers those, and separates what OpenAI has demonstrated from what OpenAI has asserted.

    Quick Answer

    GPT-6 Astra is OpenAI’s flagship model, released 3 September 2026. It handles computer use, coding, research, and document creation, with a 1,050,000-token context window and an April 2026 knowledge cutoff. API pricing is $10 per million input tokens and $50 per million output. It is OpenAI’s first model classified at the Critical cybersecurity threshold under its Preparedness Framework.

    Last verified: 6 September 2026. We checked every price and rollout claim in this article against OpenAI’s published documentation on that date. Both change frequently.

    What is GPT-6 Astra?

    Astra is the first model in OpenAI’s GPT-6 generation, announced on Thursday 3 September 2026 and rolled out in stages beginning with a limited set of organisations. It succeeds GPT-5.6 Sol as the flagship. OpenAI has not withdrawn Sol, which remains available in the API at a lower rate.

    Unlike the GPT-5.6 generation, which shipped as three tiers — Sol, Terra, and Luna — the GPT-6 line currently consists of Astra and a higher tier called GPT-6 Astra Pro. The two are not the same product: Astra Pro is a separate tier available to users on the Pro, Business, and Enterprise plans, while OpenAI includes standard Astra access within existing subscription allowances.

    In short: GPT-6 Astra is a capability step in agentic and computer-use work, sold at a materially higher token price than the model it replaces.

    How GPT-6 Astra differs from GPT-5.6 Sol

    Three differences matter operationally. First, computer use. OpenAI positions GPT-6 Astra as able to take actions in a browser and on a desktop — filling forms, updating records in business software, running frontend checks — rather than only producing text about those actions.

    Second, price. GPT-6 Astra costs $10 per million input tokens and $50 per million output. Sol currently costs $4 and $20 under a promotional rate that OpenAI says runs at least through 21 November 2026, down from a $5/$30 list price. Measured against the rate you would actually pay for Sol today, Astra is 2.5 times more expensive on both input and output. Most launch coverage compared Astra to Sol’s list price and understated the gap.

    Third, the safety envelope. OpenAI classifies Astra at the Critical cybersecurity threshold under its own Preparedness Framework, and has deployed production monitoring that can interrupt tasks. That has consequences for automation, covered below.

    GPT-6 Astra specifications and pricing

    AttributeValue
    API model IDgpt-6-astra
    Context window1,050,000 tokens
    Maximum output128,000 tokens
    Knowledge cutoff30 April 2026
    ModalitiesText and image in, text out
    Reasoning effort levelslow, medium, high, xhigh, max
    Standard input$10.00 per million tokens
    Standard output$50.00 per million tokens
    Cached input$1.00 per million tokens
    Cache writes$12.50 per million tokens
    Long-prompt surchargeAbove 272,000 input tokens: 2x input and cache rates, 1.5x output, applied to the whole request
    Batch and Flex50% of Standard rates
    Fast mode2x Standard price for up to 2x Standard speed

    Astra also supports function calling, structured outputs, and MCP, so it slots into an existing tool layer without a rebuild — if you are standing that layer up, our walkthrough of building a production-ready MCP server with Node.js covers the server side. These figures come from OpenAI’s API model documentation. Astra also supports Zero Data Retention for eligible API customers — meaning OpenAI does not store request or response data — which matters if you are handling regulated records.

    GPT-6 Astra specifications and API pricing summary, showing the 1,050,000-token context window and $10 and $50 per million token rates
    GPT-6 Astra at a glance: context window, output ceiling, and Standard API rates as published by OpenAI.

    What the API actually costs per task

    Per-million-token rates are hard to reason about. Below are the same rates converted into task costs. All figures assume Standard processing with no caching, and are arithmetic on OpenAI’s published rates rather than measured spend. Re-run them with your own token counts.

    TaskTokensAstraSol (promo rate)
    Contract or report analysis40,000 in / 2,000 out$0.50$0.20
    Codebase review200,000 in / 8,000 out$2.40$0.96
    Long-context session300,000 in / 10,000 out$6.75$2.70

    Two levers change these numbers substantially. Batch processing halves them, taking the document analysis to $0.25 — worth using for anything that does not need a synchronous response. Prompt caching, which lets you pay a reduced rate to reuse an unchanged prompt prefix across requests, does more. In a 50-call agent loop with a 30,000-token stable system prompt and 2,000 fresh input tokens per call, caching the prefix cuts the run from roughly $19.75 to roughly $6.63 including the one-off cache write, about two-thirds off.

    In other words, on Astra’s rates, prompt caching stops being an optimisation and becomes a design constraint. Structure prompts with a large stable prefix and a small variable suffix, or accept a bill several times higher than necessary.

    Cost per task comparison chart for GPT-6 Astra versus GPT-5.6 Sol across document analysis, codebase review, and long-context sessions
    Cost per task on Standard processing with no caching, calculated from OpenAI’s published rates on 6 September 2026.

    The long-prompt cliff at 272,000 tokens

    This deserves separate attention because it is a discontinuity, not a gradient. Cross 272,000 input tokens and the entire request reprices at twice the input rate and 1.5 times the output rate — not just the tokens above the threshold.

    For example, a 270,000-token request with 10,000 output tokens costs about $3.20. Push it to 300,000 input tokens and it costs about $6.75. An 11% increase in input produces a 111% increase in cost.

    If you are architecting a long-context agent, this makes retrieval and chunking a cost decision rather than only a latency one, and it makes context budgeting something to enforce in code. We’d suggest a hard ceiling below 272,000 tokens with explicit compaction, and treating any crossing as an alert rather than a silent overage. This is the single most expensive detail in the pricing page and it is easy to miss.

    What GPT-6 Astra can do that previous models could not

    Computer use and browser control

    OpenAI describes computer use as a headline capability for GPT-6 Astra: browser and desktop actions including form completion, CRM record updates, online research, and frontend QA checks. On its own evaluations, OpenAI reports Astra scoring 72.6% on OSWorld 2.0 against 65.7% for GPT-5.6 Sol, and 92.7% on ScreenSpot-Pro against 76.9%. OpenAI also reports that in latency simulations Astra reached the higher OSWorld score in roughly 47% less time per task.

    Operationally, therefore, this shifts what is worth automating through a UI rather than an API. Systems without a usable API — legacy portals, government filing systems, vendor dashboards — become candidates for agent-driven work. That said, a UI agent is a fundamentally more brittle integration than an API call, and nothing in this launch changes that. Where an API exists, use it. If you are weighing that trade-off in a CRM context, our guide to building an AI agent for HubSpot CRM covers where structured API access beats screen-level automation, and our comparison of HubSpot MCP versus the HubSpot API for AI agents works through which access method suits which job.

    What remains unproven: OSWorld and ScreenSpot are benchmark environments. Neither number establishes reliability against your actual internal tooling, with your actual permission model.

    Software engineering and Codex changes

    OpenAI reports GPT-6 Astra at 57.9% on Terminal-Bench 4.0 against 37.3% for Sol, and 74.1% on DeepSWE v1.1 against 72.7%. The spread between those two figures is itself informative: the gain is large on some agentic coding tasks and marginal on others.

    Alongside the model, OpenAI updated the Codex harness so that Astra can keep notes across context windows rather than repeatedly compacting a long session into a single summary, with earlier context remaining searchable. OpenAI describes this as experimental, and you enable it through Codex configuration. For long refactors and debugging sessions, where compaction loss is a real source of wasted work, this is arguably more useful day-to-day than the benchmark deltas.

    Document, spreadsheet, and presentation output

    OpenAI states that Astra is trained to follow existing templates and produce documents, slides, and spreadsheets that match a house style, pulling only relevant context into outputs. On its internal AutomationBench evaluation OpenAI reports 41.4% for Astra against 18.1% for Sol.

    For teams producing recurring client deliverables from structured data, that is the most directly monetisable capability in the launch. Consistency is the open question. A model that formats correctly nine times in ten still needs a human review step, and the launch materials report no variance figures.

    How the benchmark claims should be read

    Every headline number above came from OpenAI’s own evaluation environment. That does not make them wrong. It does mean three specific things about how to read them.

    First, effort settings. OpenAI states that unless noted otherwise, evaluation scores are the maximum at any reasoning effort. Maximum effort increases latency and token consumption, so a benchmark score and a production cost estimate are not describing the same configuration.

    Second, cross-vendor comparisons were produced by OpenAI. The comparison table on OpenAI’s announcement includes competitor models, and OpenAI’s own footnotes disclose the caveats. OpenAI reproduced some competitor results in-house, some results reflect modifications to the evaluation, and for two benchmarks the reported Claude figures come from a variant OpenAI describes as having fewer safeguards. Read the table as one vendor’s account of a competitive field, not as a neutral leaderboard.

    Third, some comparisons carry disclosed artifacts. On OpenAI’s internal ExploitBench (June–August 2026) evaluation, OpenAI’s footnote states that Sol’s low score reflects a turn limit real customers would not encounter, and that the same model scored higher when hitting fewer limits. The headline gap between models on that benchmark is partly an artifact of the harness, and OpenAI says so.

    Still, none of this is a debunking. OpenAI documented every one of these caveats itself, in public, in footnotes. The point is that the footnotes materially change several readings, and almost no coverage reproduces them.

    Cybersecurity, alignment, and the safety trade-off

    OpenAI classifies GPT-6 Astra as reaching the Critical cybersecurity threshold under its Preparedness Framework. This is OpenAI’s internal risk designation applied by OpenAI, not an external certification. In practice it means the publicly available model refuses advanced offensive tasks such as writing proof-of-concept exploits, while OpenAI plans to extend less restrictive safeguards to vetted organisations through its Daybreak programme for defensive workflows including malware analysis and detection engineering. Full detail is in the GPT-6 Astra system card.

    Two disclosures deserve attention from anyone running unattended automation.

    Why a GPT-6 Astra API task can stop outright

    The first disclosure is an operational fact, not a risk assessment. OpenAI has deployed misalignment monitoring in production for Astra-class models, and states plainly that these extra safety checks can sometimes slow, pause, or stop legitimate work. In ChatGPT or Codex, a paused task may prompt you to review before continuing. In the API, the task stops. That is a new failure mode. If you run a scheduled pipeline where a step can now terminate for reasons unrelated to your code, your error handling needs to distinguish a safety stop from a timeout or a malformed response, and your retry logic needs to not loop forever against it. Teams building unattended AI agents and automation should treat this as a first-class case in the pipeline design, not an edge case discovered in production. If you run scheduled jobs, the pattern we describe for an n8n agent that updates HubSpot is the right place to add that branch, because the write step is where a silent stop does the most damage.

    What OpenAI disclosed about monitorability

    The second disclosure cuts against OpenAI’s own launch narrative. In its safety overview, OpenAI reports that Astra’s written reasoning was harder to monitor than Sol’s under tests that explicitly instructed the model to evade monitoring. OpenAI attributes this to Astra exercising greater control over its written reasoning and solving problems in fewer written steps, notes that its broader alignment evaluations show Astra less likely than Sol to violate safety restrictions overall, and says it takes the trend seriously. A vendor publishing a result that complicates its own release is worth crediting, and worth reading carefully rather than either dismissing or amplifying.

    On the other side of the ledger, OpenAI reports Astra as significantly more robust to prompt injection than Sol — the attack where instructions hidden in retrieved content hijack an agent’s behaviour. For any agent that reads untrusted web pages or inbound email, that is the more relevant safety property, and an improvement there is worth more than most of the benchmark deltas.

    Who can access GPT-6 Astra, and when

    Access rolled out in stages rather than all at once, which is why availability varies by account. OpenAI began with a limited set of organisations, then expanded to ChatGPT Plus, Pro, Business, and Enterprise users, the OpenAI API, Microsoft Azure, and Amazon Bedrock. Astra is generally available in Microsoft Foundry.

    If Astra is missing from your model selector, check three things before assuming a fault. On Enterprise plans, access is off by default and a workspace administrator has to enable it. Astra Pro is a separate tier limited to Pro, Business, and Enterprise. And staged rollouts do not reach every account simultaneously. OpenAI includes Astra usage within existing subscription allowances, and sells additional usage as credits.

    Should you migrate? A decision framework

    The useful question is not whether GPT-6 Astra is better. It is which of your workloads change outcome at 2.5 times the token cost. Four common cases:

    • High-volume classification, extraction, and field mapping. Do not migrate. At 10,000 records a month with 1,500 input and 300 output tokens each, Astra costs roughly $300 while GPT-5.6 Luna costs roughly $6.60 — about 45 times more for work where the cheaper model is already at ceiling accuracy. Luna and Terra remain available and were repriced downward on 30 July 2026.
    • Templated content and record enrichment. Do not migrate wholesale. Route by ambiguity instead: send the clean records to a cheap tier and escalate only the ones that fail a confidence or validation check. Most workflow automation spend sits here, and this is where a routing layer pays for itself fastest. Our guide to connecting ChatGPT to HubSpot CRM using MCP shows the plumbing that makes swapping the model behind a workflow a configuration change rather than a rewrite.
    • Multi-step agentic tasks with irreversible actions. Migrate and test. Creating deals, sending invoices, updating production records — anywhere a wrong answer costs more than the model does. The deciding variable is the cost of a mistake, not the difficulty of the task.
    • Anything that currently requires a human because the UI has no API. Test first. This is where computer use genuinely opens new ground, and also where reliability is least established.

    The deciding variable is cost of error, not task difficulty

    The general heuristic: Astra earns its price where inputs are ambiguous, steps are many, and errors are expensive. It does not earn its price on volume. If you are running one model for everything, the highest-return change available right now is a routing layer, not a model upgrade — and that holds whether or not you adopt Astra at all. The same logic applies to CRM integration work, where the majority of operations are deterministic and do not need a reasoning model at any tier.

    Model routing decision flowchart for when to migrate a workload to GPT-6 Astra based on input ambiguity and cost of error
    A routing heuristic: escalate to the frontier model on ambiguity and cost of error, not on task volume.

    Limitations and open questions

    Several things are not yet known, and it is worth being explicit about them.

    • No independent evaluation has confirmed the headline results. Every figure in the launch materials is OpenAI’s, run in OpenAI’s environment, at maximum effort unless noted.
    • OpenAI reports token-efficiency gains on several evaluations, but has not published enough data to establish whether those savings offset a 2.5x rate increase on real workloads.
    • Nobody has yet measured production reliability over long agentic sessions outside benchmark harnesses.
    • OpenAI has not published how often safety checks interrupt normal API use, and says it is still iterating to reduce unnecessary interruptions.
    • Rollout status changes daily, and the Sol promotional rate that anchors every price comparison here expires.
    • Better reasoning does not eliminate fabrication. If your system needs factual reliability, grounding and verification still do that work — the failure modes covered in our guide to preventing AI chatbots from hallucinating are unchanged by a model upgrade.

    Frequently Asked Questions

    Is GPT-6 Astra worth the price increase over GPT-5.6 Sol?

    It depends entirely on workload. At 2.5 times Sol’s current rate, Astra pays off where an error is expensive or a task previously needed a human. For high-volume, low-ambiguity work it does not pay off, and OpenAI has not published data showing its token-efficiency gains offset the rate increase.

    Why can’t I see GPT-6 Astra in my ChatGPT account?

    Access rolled out in stages rather than all at once. On Enterprise plans, Astra is off by default and a workspace administrator must enable it. If it is missing from your model selector, check your workspace policy and plan tier before assuming an account problem.

    What is the difference between GPT-6 Astra and GPT-6 Astra Pro?

    Astra Pro is a separate, higher tier available to users on Pro, Business, and Enterprise plans. OpenAI includes standard Astra access within existing subscription allowances and sells additional usage as credits. They are distinct products, not settings on the same one.

    What does the Critical cybersecurity classification mean in practice?

    It is OpenAI’s internal risk designation under its own Preparedness Framework, not an external certification. Practically, the publicly available model refuses advanced offensive tasks such as writing proof-of-concept exploits, and OpenAI instead routes less restrictive access to vetted organisations through its Daybreak programme.

    Can GPT-6 Astra control a computer?

    Yes. OpenAI positions computer use as a core capability covering browser and desktop actions — filling forms, updating records in business software, running checks on web applications — and reports state-of-the-art results on its own computer-use evaluations. Reliability against specific internal tooling remains untested publicly.

    How does prompt caching change GPT-6 Astra’s cost?

    Substantially. Cached input bills at $1 per million tokens against $10 standard, with cache writes at $12.50. On a repeated agent loop with a large stable prompt prefix, caching can cut a run by roughly two thirds. At Astra’s rates, prompt structure is a cost decision.

    Does GPT-6 Astra support Zero Data Retention?

    OpenAI states that Astra supports Zero Data Retention for eligible API customers, meaning request and response data is not stored. OpenAI determines eligibility rather than letting you select it in the API, so confirm your account’s status directly before assuming it applies to regulated workloads.

    Can an API task fail because of Astra’s safety monitoring?

    Yes. OpenAI has deployed misalignment monitoring in production and states that safety checks can slow, pause, or stop legitimate work. In ChatGPT and Codex you may be asked to review; in the API the task stops. Unattended pipelines need to handle this explicitly.

    What to do next

    GPT-6 Astra is a real capability step, priced accordingly, and the interesting question is workload selection rather than wholesale adoption. The genuinely new thing for most teams is delegating multi-step browser and desktop work that previously needed a person. The thing not yet proven is how the reported gains hold up outside OpenAI’s evaluation environment.

    So produce evidence instead of an opinion. Pick one existing automation — one you already run and already have quality data on. Run it on Astra and on your current model with identical inputs. Compare accuracy against cost per completed task, not cost per token. That takes an afternoon and gives you a decision.

    If it would help to have someone look at where model routing would cut cost across your current stack, we’re happy to review it.

  • HubSpot MCP vs HubSpot API: Which Should You Use for AI Agents?

    HubSpot MCP vs HubSpot API: Which Should You Use for AI Agents?

    Choosing between HubSpot MCP and the HubSpot API is not an either-or technical decision. Both can connect AI systems to HubSpot, but they solve different problems.

    Use HubSpot MCP when an AI assistant needs to understand a user’s natural-language request and safely interact with supported HubSpot data in real time. Use the HubSpot API when you need deterministic workflows, webhooks, custom objects, batch processing, or broader platform functionality. For many production AI agents, the best approach is a hybrid architecture that uses both.

    HubSpot MCP vs HubSpot API: Quick Answer

    HubSpot MCP is usually the better choice for conversational, human-in-the-loop AI experiences. For example, a sales rep could ask an assistant, “Show my open deals above $25,000 and summarize the latest activity,” and the assistant can use HubSpot’s available MCP tools to retrieve the answer.

    The HubSpot API is better for backend systems that must behave predictably. Examples include syncing thousands of records, subscribing to property-change events, updating custom objects, managing integrations, or running scheduled data-quality jobs.

    Choose When you need
    HubSpot MCP Conversational AI, CRM research, real-time summaries, guided record updates, and human approval before actions.
    HubSpot API Webhooks, batch operations, custom objects, scheduled jobs, marketplace apps, or precise backend control.
    Both A production AI agent that needs a natural chat interface as well as reliable automation behind the scenes.

    What Is HubSpot MCP?

    HubSpot MCP is HubSpot’s implementation of the Model Context Protocol, an open protocol that lets compatible AI applications discover and use external tools and data. Instead of building a separate custom integration layer for every AI client, MCP provides a common way for an AI client to connect to a service such as HubSpot.

    HubSpot’s Remote MCP Server allows supported AI clients to connect to HubSpot through OAuth authentication. The user authorizes access, the client discovers the available tools, and the AI can use those tools to answer questions or perform permitted actions.

    User request
        ↓
    AI assistant or agent
        ↓
    MCP client
        ↓
    HubSpot Remote MCP Server
        ↓
    HubSpot CRM

    This makes MCP especially useful when the input is open-ended. A user might ask for a deal summary, contact history, ticket overview, campaign performance insight, or a CRM update without needing to know which endpoint, object, filter, or property should be used.

    For a practical introduction to connecting AI tools, see our guide on how to connect ChatGPT to HubSpot CRM using MCP or our walkthrough for connecting Claude to HubSpot using MCP.

    What Can HubSpot MCP Access?

    HubSpot’s Remote MCP Server provides access to a growing set of HubSpot data and actions. Depending on the tools available and the permissions approved during installation, it can support work with CRM records, activities, marketing content, conversations, and marketing email information.

    Supported CRM access includes common objects such as contacts, companies, deals, tickets, line items, products, quotes, subscriptions, orders, invoices, users, and lists. It can also work with activities such as calls, emails, meetings, notes, and tasks.

    For supported write actions, an AI assistant can create or update selected CRM records and activities. This is useful for controlled tasks such as updating a deal note, creating a follow-up task, or correcting contact information after a user reviews the proposed action.

    Important: MCP capabilities are not the same as unrestricted API access. Tool availability, supported objects, permissions, and scopes can change as HubSpot evolves the Remote MCP Server. Always test the exact actions your AI agent needs before treating MCP as the only integration layer.

    What Is the HubSpot API?

    The HubSpot API is the broader developer interface for building integrations, applications, automations, and backend services on top of HubSpot. It provides structured endpoints for CRM objects, properties, associations, webhooks, marketing tools, CMS, files, analytics, and more.

    With the API, your application decides exactly what to do. You define the endpoint, request body, authentication, retry logic, validation, logging, and error handling. This makes it the stronger choice when an action must happen consistently every time.

    For example, a backend service can receive a webhook when a deal moves to a new pipeline stage, validate the data, update related custom records, notify another system, and record the result. That is a deterministic integration workflow; it does not depend on an LLM interpreting a prompt.

    HubSpot MCP vs HubSpot API: Key Differences

    Area HubSpot MCP HubSpot API
    Primary purpose Give AI clients discoverable HubSpot tools and context. Build custom integrations and application logic.
    Best for Conversational AI and user-led CRM actions. Backend automation, apps, syncs, and integrations.
    Control The AI selects from available tools based on the request. Your code selects every endpoint and action.
    Webhooks Not the primary pattern for event-driven automation. Designed for event-driven integrations.
    Batch processing Not ideal for high-volume operations. Well suited to bulk reads, updates, and synchronization.
    Custom objects Do not assume support without testing the current tools. Supports custom object APIs and schemas where permitted.
    Authentication OAuth with PKCE for compatible MCP clients. OAuth for public apps, or private-app access tokens for internal use cases.
    Reliability model AI-assisted and context-dependent. Deterministic and code-controlled.

    When HubSpot MCP Is the Better Choice

    1. You Are Building a Sales or CRM Copilot

    MCP is a strong fit when users ask questions in natural language and need answers based on live CRM information. A sales assistant can summarize deals, identify stalled opportunities, review contact engagement, or surface recent notes without requiring users to navigate multiple HubSpot screens.

    2. A Human Reviews AI Actions

    Use MCP when the agent proposes an action and a person can confirm it. For example, the agent can draft a follow-up task, prepare a note, suggest a contact update, or recommend next steps. The user remains accountable for approving important CRM changes.

    3. You Want Faster AI Tool Integration

    If HubSpot’s available MCP tools already cover your use case, MCP can reduce integration effort. You do not need to manually create a separate function wrapper for every common CRM query. This is useful for prototypes and focused AI experiences, provided you still apply proper permissions, testing, and guardrails.

    4. Your Agent Needs Live CRM Context

    AI responses are more useful when they are grounded in current CRM data rather than assumptions. MCP can let an assistant retrieve relevant information during a conversation, helping reduce outdated answers and unsupported claims.

    However, grounding alone does not eliminate risk. Your agent still needs clear instructions, permission boundaries, output validation, and a review path for sensitive actions. Our guide on preventing AI chatbot hallucinations explains the safeguards that matter most in production.

    When the HubSpot API Is the Better Choice

    1. You Need Webhook-Driven Automation

    Use the API when your system must react to HubSpot events. For example, when a contact changes lifecycle stage, a deal is created, or a ticket is updated, a webhook can trigger your backend immediately. This is more scalable and reliable than asking an AI agent to repeatedly check for changes.

    2. You Need High-Volume Data Processing

    For large imports, record synchronization, enrichment, nightly reconciliation, or bulk updates, the API is the right foundation. Batch endpoints, retry handling, rate-limit management, idempotency, and job queues give you control that conversational tool calls are not designed to provide.

    3. You Use Custom Objects or Specialized Endpoints

    Many businesses rely on custom objects, complex associations, private application logic, or specialized HubSpot endpoints. The HubSpot API offers substantially broader coverage for these scenarios. Do not build around MCP alone if your core process depends on functionality it does not currently expose.

    4. The Logic Must Be Deterministic

    LLMs are useful for interpreting language, summarizing information, classifying text, and proposing actions. They should not be the only decision-maker for strict business rules. If an automation must follow a fixed condition, calculation, compliance rule, or approval process, enforce it in backend code through the HubSpot API.

    5. You Are Building a Marketplace App or SaaS Product

    A marketplace app usually needs its own secure backend, OAuth flow, scope management, data model, observability, and error handling. MCP can be an excellent user-facing capability inside that product, but the API remains essential for the application’s core integration layer.

    Should You Use Both HubSpot MCP and the HubSpot API?

    Yes. A hybrid design is often the most practical architecture for a production AI agent.

    User asks a question
        ↓
    AI agent uses HubSpot MCP for live CRM context
        ↓
    Agent proposes an action
        ↓
    User approves the action
        ↓
    Backend validates business rules
        ↓
    HubSpot API performs specialized, bulk, or event-driven work
        ↓
    Logs, monitoring, and alerts record the result

    For example, an AI sales assistant can use MCP to summarize a deal and suggest the next action. Once approved, your backend can use the API to create related records, update custom properties, trigger a workflow, and log the event. This keeps the conversation natural while preserving operational control.

    If you are planning this type of system, our detailed guide on building an AI agent for HubSpot CRM covers the broader architecture, security, and implementation decisions.

    Authentication and Permissions: What Changes?

    HubSpot MCP and the HubSpot API both rely on authorization, but they are designed for different integration patterns.

    For the Remote MCP Server, compatible clients connect through OAuth and PKCE. The user grants access during installation, and the agent operates within that user’s HubSpot permissions. A user should only be able to access and modify records they could access directly in HubSpot.

    For the HubSpot API, public apps commonly use OAuth, while internal integrations may use private-app access tokens where appropriate. Your backend must securely store credentials, request only the scopes it needs, rotate secrets when required, and never expose secrets in browser-side code.

    Apply the principle of least privilege in both approaches. Do not grant an AI agent broad write access merely because it is convenient. Separate read-only research tools from write tools where possible, require confirmation for important changes, and keep a clear audit trail.

    Security Rules for HubSpot AI Agents

    • Limit permissions: Give the agent access only to the objects and actions it truly needs.
    • Require confirmation for writes: Especially for deal, contact, ticket, marketing, or data-deletion actions.
    • Validate actions on the backend: Check business rules before using the API for critical operations.
    • Protect sensitive data: Do not assume every HubSpot object or activity is suitable for AI access.
    • Log every tool call: Record the user, requested action, result, failure reason, and related HubSpot IDs.
    • Plan for failure: Add retries, rate-limit handling, timeouts, and a human escalation path.

    AI should make work easier, not weaken your CRM governance. The best systems are useful to users while remaining predictable to administrators and auditable to the business.

    Practical Decision Framework

    Choose HubSpot MCP if most of these statements are true:

    • Your main interface is ChatGPT, Claude, Cursor, or another compatible AI client.
    • Users ask open-ended questions about live HubSpot data.
    • The available MCP tools cover the objects and actions you need.
    • A human can review sensitive updates before they happen.
    • You want to reduce the amount of custom tool wiring for an AI assistant.

    Choose the HubSpot API if most of these statements are true:

    • You need scheduled, background, or event-driven automation.
    • You need webhooks, custom objects, bulk operations, or specialized endpoints.
    • Your integration must make the same decision every time.
    • You are building a SaaS product, marketplace app, or complex backend integration.
    • You need detailed control over retries, validation, logging, and performance.

    Choose a hybrid architecture if your AI agent needs both conversational CRM access and dependable backend automation. This is the right answer for many serious production implementations.

    Frequently Asked Questions

    Does HubSpot MCP replace the HubSpot API?

    No. HubSpot MCP makes supported HubSpot tools easier for AI clients to discover and use, but it does not replace the API’s broader functionality, backend control, webhook support, or batch-processing capabilities.

    Is HubSpot MCP better for AI agents?

    It is better for conversational, human-in-the-loop AI use cases where the agent needs live HubSpot context. The API is better for deterministic automation, large-scale data work, and custom application behavior.

    Can HubSpot MCP update CRM records?

    Yes, HubSpot’s Remote MCP Server supports selected write actions for supported CRM records and activities. The exact available tools and permissions should be verified in your environment before implementation.

    Can HubSpot MCP use custom objects?

    Do not assume custom-object support. HubSpot MCP tools and capabilities can change, so verify the current tool list and test your required object types before committing to an MCP-only architecture.

    Does HubSpot MCP support webhooks?

    Webhooks are an API integration pattern. If your system needs to respond automatically to HubSpot events, use the HubSpot API and webhook subscriptions rather than relying on MCP.

    What is the best approach for a production HubSpot AI agent?

    For most businesses, use MCP for live conversation and CRM research, then use a secure backend with the HubSpot API for validation, complex workflows, bulk operations, and event-driven automation.

    Final Recommendation

    Use HubSpot MCP to make your AI agent helpful in the moment. Use the HubSpot API to make your system dependable at scale.

    MCP is ideal when people ask natural-language questions and want assistance inside an AI interface. The API is essential when your business needs automation that is secure, repeatable, observable, and built around HubSpot’s full platform capabilities.

    For a simple CRM copilot, start with MCP. For an operational system, start with the API. For a production-grade AI agent, design for both from the beginning.

  • How to Connect ChatGPT to HubSpot CRM Using MCP

    How to Connect ChatGPT to HubSpot CRM Using MCP

    Updated for 2026: HubSpot now provides a generally available Remote MCP Server with read and write access to supported CRM data. HubSpot also provides an official HubSpot app for ChatGPT, so most users no longer need to manually build a custom MCP connection just to use HubSpot inside ChatGPT.

    If you need more control, are developing your own AI integration, or specifically want ChatGPT Developer Mode to connect directly to HubSpot’s Remote MCP Server, you can still create a HubSpot MCP Auth App and connect it to https://mcp.hubspot.com.

    This guide explains both approaches and, importantly, the difference between HubSpot’s Remote MCP Server and its separate Developer MCP Server.

    Quick Answer: Can You Connect ChatGPT to HubSpot Using MCP?

    Yes. HubSpot’s Remote MCP Server allows MCP-compatible AI clients to securely interact with supported HubSpot CRM data using OAuth 2.1 with PKCE. In 2026, the easiest option for most ChatGPT users is HubSpot’s official ChatGPT app. If you need a custom implementation, you can create a HubSpot MCP Auth App and connect ChatGPT Developer Mode directly to HubSpot’s remote MCP endpoint at https://mcp.hubspot.com.

    TL;DR

    • HubSpot’s Remote MCP Server connects AI clients to real HubSpot CRM data.
    • For most users, the official HubSpot app in ChatGPT is now the simplest setup.
    • For custom integrations, HubSpot provides MCP Auth Apps and the remote endpoint https://mcp.hubspot.com.
    • Authentication uses OAuth and HubSpot’s MCP connection requires PKCE.
    • Supported operations include reading CRM records and creating/updating selected CRM objects and activities.
    • Access is limited by both the permissions granted to the connection and the connected user’s existing HubSpot permissions.

    What Is MCP?

    Model Context Protocol (MCP) is an open standard that allows AI applications such as ChatGPT to connect to external data sources and tools through a consistent interface.

    Instead of teaching ChatGPT the details of every HubSpot API endpoint individually, an MCP server exposes defined tools that the AI client can discover and use.

    For example, an MCP tool might allow ChatGPT to search HubSpot deals, retrieve a company record, create a task, or update a contact.

    The official Model Context Protocol documentation describes MCP as a standardized way for AI applications to connect to external systems, data sources, tools, and workflows.

    Why use MCP instead of building a HubSpot API integration from scratch?

    MCP is useful when your main goal is conversational interaction. ChatGPT can discover available tools and decide which one to call based on your request.

    A traditional API integration is still better when you need deterministic automation, webhooks, complex business logic, scheduled processing, bulk synchronization, or complete control over every API request.

    HubSpot Remote MCP Server vs Developer MCP Server

    This distinction is important because HubSpot has two different MCP servers.

    ServerPurposeTypical Use
    HubSpot Remote MCP ServerAccess HubSpot CRM data and supported actionsChatGPT, AI agents, CRM querying and CRM updates
    HubSpot Developer MCP ServerWork with HubSpot’s developer platform locallyApps, UI extensions, CMS assets, CLI and development workflows

    The Remote MCP Server is the one relevant when you want to connect ChatGPT to HubSpot CRM.

    The Developer MCP Server runs locally and is installed through the HubSpot CLI. It is intended for development tools such as Codex CLI, Cursor, VS Code and other supported coding clients.

    HubSpot explicitly documents these as separate products. See the Remote MCP Server documentation and Developer MCP Server documentation.

    How ChatGPT + HubSpot MCP Works

    The basic architecture looks like this:

    User → ChatGPT → MCP Client → HubSpot Remote MCP Server → HubSpot CRM

    Imagine asking:

    “Show me all open HubSpot deals over $50,000 closing this month.”

    ChatGPT interprets your request and selects an appropriate HubSpot MCP tool. The HubSpot MCP Server searches the CRM using the authenticated user’s access, returns the relevant data, and ChatGPT summarizes the results.

    You do not need to know which HubSpot REST API endpoint or filter syntax is required.

    What You Need Before Starting

    The requirements depend on which connection method you use.

    RequirementOfficial HubSpot AppCustom MCP Connection
    HubSpot accountYesYes
    Eligible HubSpot tierAvailable across HubSpot tiersRemote MCP Server is GA for HubSpot accounts
    ChatGPT accountYes; availability can depend on plan, region and workspace controlsDeveloper Mode is documented for Plus, Pro, Business, Enterprise and Education on web
    ChatGPT Developer ModeNoYes
    HubSpot MCP Auth AppNoYes
    OAuth / PKCEHandled through the managed connectionRequired

    For HubSpot, the first installation of the official ChatGPT connector requires a Super Admin or a user with App Marketplace permissions. Individual users remain limited by their own HubSpot CRM permissions.

    How to Connect ChatGPT to HubSpot Using MCP: Step by Step

    Method 1: Use the Official HubSpot App in ChatGPT

    This is the recommended method if your goal is simply to access and work with HubSpot from ChatGPT. You do not need to create your own MCP Auth App.

    Step 1: Open ChatGPT Apps

    In ChatGPT, open your profile menu and go to:

    Settings → Apps

    As of July 9, 2026, OpenAI uses the Plugins Directory as the main discovery experience for integrations, while connected apps are still managed under Settings → Apps.

    Step 2: Find HubSpot

    Open HubSpot from the available apps and click Connect.

    You may also find HubSpot through the Plugins Directory depending on your ChatGPT interface and workspace configuration.

    Step 3: Continue to HubSpot

    Click Continue to HubSpot, sign in to HubSpot, and select the HubSpot account you want ChatGPT to access.

    Step 4: Review HubSpot Permissions

    HubSpot will show the permissions available to the connector. Review them carefully and enable only what your use case requires.

    The first connection must be completed by a HubSpot Super Admin or a user with App Marketplace permissions.

    Step 5: Complete the Connection

    Click Connect App. HubSpot redirects you back to ChatGPT after authorization.

    Step 6: Test the Integration

    Start with simple read-only requests:

    “Use HubSpot to find the company record for Acme Inc.”

    “Show me my five most recently created HubSpot deals.”

    “Summarize the open HubSpot deals in the Decision Maker Bought-In stage.”

    “Summarize the recent calls, notes and meetings associated with this HubSpot contact.”

    Step 7: Test a Write Action Carefully

    The current HubSpot ChatGPT connector supports creating and updating several CRM records and logging activities.

    For example:

    “Create a follow-up task in HubSpot for this contact for next Monday.”

    Review the proposed action before allowing ChatGPT to make the change.

    HubSpot recommends configuring write tools so they require approval. OpenAI’s newer general app-permission settings also provide options that require confirmation before changes are made.

    Advanced Method: Connect ChatGPT Directly to HubSpot’s Remote MCP Server

    Use this method when you specifically want your own developer-mode MCP connection rather than HubSpot’s managed ChatGPT app.

    Step 1: Enable Developer Mode in ChatGPT

    OpenAI currently documents Developer Mode on ChatGPT web for Plus, Pro, Business, Enterprise and Education accounts.

    For individual eligible accounts, navigate to:

    Settings → Security and login → Developer mode

    For managed Business, Enterprise or Education workspaces, administrator permissions and workspace controls may also apply.

    See the OpenAI Developer Mode documentation.

    Step 2: Start Creating a Developer-Mode MCP App

    Open the ChatGPT Plugins area, select the plus button, and start creating a developer-mode app.

    Your remote MCP endpoint is:

    https://mcp.hubspot.com

    HubSpot uses OAuth authentication, so the connection will also require HubSpot OAuth credentials and the exact redirect URL generated for your ChatGPT app.

    Do not guess the redirect URL. OpenAI documents the current callback format as https://chatgpt.com/connector/oauth/{callback_id}, with the exact URL shown in the app management experience.

    Step 3: Create an MCP Auth App in HubSpot

    In HubSpot, go to:

    Development → MCP Auth Apps → Create MCP auth app

    Enter:

    • App name: for example, ChatGPT HubSpot MCP.
    • Description: a short internal description of the connection.
    • Redirect URL: the exact OAuth callback URL provided by ChatGPT.
    • Icon: optional.

    After creation, HubSpot generates the OAuth client credentials for the MCP Auth App.

    You can view the Client ID, Client Secret and redirect URL from the app details page.

    Step 4: Configure OAuth in ChatGPT

    Return to your ChatGPT developer-mode app and select OAuth authentication.

    Use the credentials generated by the HubSpot MCP Auth App and ensure the configured redirect URL matches HubSpot exactly.

    HubSpot requires OAuth authentication with PKCE for the Remote MCP Server. ChatGPT’s MCP OAuth implementation supports authorization-code authentication with PKCE.

    Step 5: Scan the MCP Tools

    Use ChatGPT’s Scan Tools option to inspect the tools exposed by the HubSpot MCP Server.

    If OAuth authorization is requested, complete the HubSpot authorization flow and select the HubSpot account and permissions you want to grant.

    After the scan completes, create or save the developer-mode app.

    Step 6: Verify Permissions

    HubSpot MCP Auth Apps work slightly differently from traditional HubSpot OAuth apps: you do not manually hard-code every scope when creating the MCP Auth App.

    HubSpot determines the available permissions from:

    • The tools currently exposed by the HubSpot MCP Server.
    • The permissions selected by the user during installation.

    The user’s existing HubSpot permissions apply on top of this. If a sales representative can only see certain deals in HubSpot, connecting ChatGPT does not give that representative access to every deal.

    What Can ChatGPT Do With HubSpot After MCP Is Connected?

    Use CaseExample PromptAccess
    Find contacts“Find the HubSpot contact with email john@example.com.”Read
    Research companies“Summarize the HubSpot company record for Acme Inc.”Read
    Analyze deals“Summarize open deals above $25,000.”Read
    Review tickets“Show the latest tickets associated with this customer.”Read
    Review engagement history“Summarize the last three calls and notes for this account.”Read
    Create contacts“Create this person as a HubSpot contact.”Write
    Update deals“Update this HubSpot deal to the agreed stage.”Write
    Create tasks or notes“Create a HubSpot follow-up task for this contact.”Write
    Analyze campaigns“Summarize performance for this HubSpot campaign.”Read

    HubSpot’s Remote MCP documentation currently lists read access for contacts, companies, deals, tickets, users, carts, invoices, orders, line items, products, quotes, subscriptions, segments, activities, supported marketing/content data, and other documented sources.

    Write access is currently more limited. HubSpot documents create/update capabilities for contacts, companies, deals, tickets, line items, products and supported activities such as calls, emails, meetings, notes and tasks.

    Delete operations are not listed as supported CRM operations.

    There is also an important difference between the generic Remote MCP Server and the managed ChatGPT connector. HubSpot’s Remote MCP documentation includes marketing events among readable marketing data, while the current HubSpot ChatGPT connector’s published object table does not explicitly list marketing events. If marketing-event access is critical, verify the available tool set before designing your workflow around it.

    Practical ChatGPT + HubSpot Prompts

    Sales

    “Using HubSpot, show me open deals above $25,000 that have not had recent activity.”

    RevOps

    “Summarize our open HubSpot deals by stage and flag records that appear to be missing important deal information.”

    Account Management

    “Give me the latest HubSpot activity for Acme Inc. and summarize what has happened with the account.”

    Support

    “Summarize the most recent HubSpot tickets associated with this customer.”

    Pipeline Review

    “Using HubSpot, summarize deals in the Decision Maker Bought-In stage and group them by owner.”

    Follow-Up

    “Create a HubSpot task for me to follow up with this contact next Monday.”

    Data Quality

    “Review these HubSpot contacts and identify records with potentially incomplete or inconsistent information. Do not update anything.”

    HubSpot MCP vs Traditional HubSpot API Integration

    AreaHubSpot MCPTraditional HubSpot API
    Primary useAI-driven conversational accessApplication and system integrations
    Natural-language interactionBuilt for itRequires your own AI/application layer
    Development requiredLow with managed connector; moderate for custom MCPUsually higher
    ControlLimited to exposed MCP toolsMuch greater API-level control
    Custom business logicLimitedExcellent
    AuthenticationOAuth / MCP authorizationOAuth, app credentials or other supported HubSpot authentication
    Best forResearch, CRM questions and human-in-the-loop actionsProduction syncs, webhooks, bulk processes and deterministic automation

    MCP should not be treated as a replacement for every HubSpot integration.

    If you need to process thousands of records, react to webhooks, synchronize another platform continuously, implement strict business logic, or guarantee deterministic behavior, a traditional HubSpot API integration is usually a better architecture.

    Security and Permissions

    Connecting an AI assistant to CRM data should be handled like any other application integration.

    Use OAuth and PKCE

    HubSpot’s Remote MCP Server requires OAuth authentication with PKCE. PKCE helps protect the authorization-code flow against intercepted authorization codes.

    HubSpot Permissions Still Apply

    The MCP connection does not bypass HubSpot permissions. Users can only access or modify records that their HubSpot user account is permitted to access.

    Use Least Privilege

    Only enable the HubSpot permissions that users actually need. A user who only needs pipeline analysis may not need write permissions.

    Require Approval for Changes

    For CRM write operations, configure ChatGPT so changes require approval whenever possible. Review the exact record, property and value before approving an update.

    Be Careful With Prompt Injection

    OpenAI specifically warns that MCP integrations can be exposed to prompt-injection risks. Untrusted content encountered by the model could attempt to influence tool usage.

    This is another reason to require confirmation for meaningful write actions and avoid combining highly sensitive access with unnecessary external sources.

    Understand Sensitive Data Restrictions

    HubSpot does not expose custom Sensitive Data Properties through the MCP connection. If Sensitive Data is enabled in the HubSpot account, activity objects such as calls, emails, meetings, notes and tasks, as well as conversation data, can also be blocked from MCP access.

    Disconnect Unused Access

    Remove integrations that are no longer required. In ChatGPT, connected apps can be managed under Settings → Apps.

    Common Problems and Troubleshooting

    ProblemLikely CauseFix
    Developer Mode is missingUnsupported account/surface or workspace restrictionUse ChatGPT web, verify plan eligibility, and check workspace administrator controls.
    OAuth authorization failsIncorrect redirect URL or OAuth configurationMake sure the ChatGPT callback URL exactly matches the redirect URL configured in the HubSpot MCP Auth App.
    PKCE authentication errorMCP client is not correctly using PKCEUse a client with proper OAuth/PKCE support. HubSpot requires S256 PKCE for its MCP OAuth flow.
    Connection stops working laterAccess or refresh token problemReauthenticate if the refresh token is expired or invalidated.
    ChatGPT cannot see expected recordsHubSpot user permissions or connector permissionsCheck both the user’s HubSpot CRM access and the permissions granted during connection.
    New MCP capabilities are missingConnection was authorized before new scopes/tools became availableDisconnect and reconnect so the updated permissions can be granted.
    Write actions are unavailableRead-only object, outdated connector or workspace action restrictionVerify the object supports writes, reconnect/upgrade the HubSpot app, and check ChatGPT workspace action controls.
    Custom objects are unavailableNot currently exposed by the managed HubSpot ChatGPT connectorUse the HubSpot API or another supported integration architecture when custom-object access is required.
    Engagement activity is missingSensitive Data is enabledHubSpot intentionally blocks MCP access to activity data in Sensitive Data-enabled accounts.
    More than 10 records cannot be updated at onceManaged ChatGPT connector limitThe current HubSpot ChatGPT connector limits bulk create/update operations to 10 records per request.

    Also note that HubSpot currently states that custom validation rules, including some pipeline-stage and association-label validations, are not applied when records are created or updated through the managed ChatGPT connector. Review important updates before approving them.

    Who Should Use This Integration?

    HubSpot consultants can use MCP to investigate CRM data, summarize account activity and answer client questions without manually building one-off API queries.

    RevOps teams can use it for pipeline reviews, data-quality investigation and operational analysis.

    Sales operations teams can inspect deals, companies and engagement history and perform controlled CRM updates.

    CRM administrators can use it as a conversational layer over supported CRM records while keeping HubSpot’s existing user permissions in place.

    Developers can create custom MCP-based experiences when the managed HubSpot ChatGPT app does not provide enough flexibility.

    MCP is less suitable when you need scheduled automation, complex workflow logic, large-scale data synchronization, custom-object-heavy integrations, event-driven processing or guaranteed deterministic behavior. In those situations, consider HubSpot workflows, HubSpot APIs, a custom app, Breeze, or middleware such as Make, Zapier or n8n.

    Final Thoughts

    Connecting ChatGPT to HubSpot CRM using MCP is much more practical in 2026 than it was during the early MCP beta releases.

    For most HubSpot users, the official HubSpot app in ChatGPT is now the best place to start. It removes most of the manual MCP configuration while providing access to supported CRM records and write actions.

    The custom HubSpot Remote MCP Server route is still valuable when you need your own MCP client or developer-mode application. In that case, use HubSpot’s MCP Auth Apps, connect to https://mcp.hubspot.com, and follow the OAuth 2.1 and PKCE requirements.

    The main consideration is not simply whether ChatGPT can access HubSpot. It is deciding which users should have access, which actions they should be allowed to perform, and which workflows are appropriate for an AI-driven interface rather than a traditional integration.

    Frequently Asked Questions

    1. What is the HubSpot MCP Server?

    The HubSpot Remote MCP Server is a HubSpot-hosted service that allows MCP-compatible AI clients to interact with supported HubSpot CRM data. It can expose CRM records, activities and selected marketing/content information through standardized MCP tools. As of April 2026, the Remote MCP Server is generally available and supports both read and selected create/update operations.

    2. Can ChatGPT connect directly to HubSpot using MCP?

    Yes. You can use HubSpot’s official ChatGPT app for the simplest setup, or create a custom developer-mode connection to HubSpot’s Remote MCP Server at https://mcp.hubspot.com. The custom route requires an MCP Auth App, OAuth credentials, PKCE-compatible authentication and ChatGPT Developer Mode.

    3. Is HubSpot MCP free?

    HubSpot does not document the Remote MCP Server as a separately priced MCP add-on, and it is generally available to HubSpot accounts. Your normal HubSpot subscription, ChatGPT plan/features and applicable usage limits still apply. Certain capabilities can also depend on permissions, workspace configuration and the products available in your HubSpot account.

    4. Which HubSpot plans support the MCP Server?

    HubSpot announced the Remote MCP Server as generally available to all HubSpot accounts in April 2026. HubSpot also states that its official ChatGPT connector is available across HubSpot tiers. However, the actual data a user can access still depends on HubSpot user permissions and the features available in that account.

    5. Which ChatGPT plans support MCP and Developer Mode?

    OpenAI’s current Developer Mode documentation lists Plus, Pro, Business, Enterprise and Education accounts on ChatGPT web as eligible. Managed Business, Enterprise and Education workspaces can have additional administrator, RBAC and publishing controls. Availability of individual apps can also depend on plan, region, role and workspace configuration.

    6. Can ChatGPT update HubSpot records using MCP?

    Yes. HubSpot’s current Remote MCP Server supports create/update operations for selected CRM objects, including contacts, companies, deals, tickets, line items and products, plus supported activities such as calls, emails, meetings, notes and tasks. Always review write operations before approving them, especially when changing pipeline or customer data.

    7. Can ChatGPT create contacts or deals in HubSpot through MCP?

    Yes. Both contacts and deals are currently among the CRM objects that HubSpot allows supported MCP clients to create and update. The official HubSpot ChatGPT connector can also create contacts and deals. The connected user still needs the appropriate HubSpot permissions, and workspace controls can restrict write actions.

    8. Is connecting ChatGPT to HubSpot through MCP secure?

    The integration uses OAuth authorization, PKCE and HubSpot’s existing user permissions, which provide important security controls. However, AI tool use still requires good governance. Use least privilege, require approval for meaningful changes, review proposed write actions, understand Sensitive Data restrictions and consider prompt-injection risk when combining CRM access with untrusted information.

    9. Does HubSpot MCP use OAuth?

    Yes. HubSpot’s current Remote MCP Server requires OAuth authentication with PKCE. During authorization, users select a HubSpot account and approve available permissions. HubSpot then limits MCP access based on those granted permissions and the authenticated user’s existing CRM permissions.

    10. What is the difference between HubSpot MCP and the HubSpot API?

    HubSpot MCP provides AI clients with discoverable tools that are convenient for natural-language CRM interaction. The HubSpot API gives developers more direct and granular programmatic control. MCP is useful for human-in-the-loop AI workflows, while the traditional API remains better for webhooks, bulk integrations, custom logic, scheduled synchronization and production applications.

    11. What is the difference between the HubSpot Remote MCP Server and Developer MCP Server?

    The Remote MCP Server connects AI clients to actual HubSpot CRM information and supported CRM actions. The Developer MCP Server is a separate local tool used with HubSpot’s CLI and developer platform to help build apps, CMS assets, UI extensions and other developer resources. You need the Remote MCP Server for ChatGPT CRM access.

    12. Do I need to build my own MCP server to connect ChatGPT to HubSpot?

    No. HubSpot already hosts the Remote MCP Server at https://mcp.hubspot.com, and HubSpot also provides a managed ChatGPT connector. You only need to create your own middleware or MCP server when you require additional business logic, unsupported data sources, custom objects, special transformations or tools that HubSpot’s existing MCP implementation does not expose.

    Official References