Your reps already work inside Claude or ChatGPT all day. Each tool they need now arrives as an MCP server. MCP (Model Context Protocol) is an open standard for tools AI models can call. Anthropic counted more than 10,000 active public MCP servers as of December 2025. Most ranking lists skip the one question that matters for sales. What can the agent actually write to your CRM?
There's no single best server for sales, only a best one per job. This guide ranks nine servers by the sales job each one does. For each, you get read and write access, setup and the plan gate. Full disclosure, FullEnrich publishes this list and ranks itself first for contact data. Every other entry comes from vendor docs we read on September 22, 2026.
TL;DR
- There's no single best MCP server for sales, so pick one per job.
- FullEnrich is our pick for verified emails and mobiles across 25+ providers. Its MCP server can't write to a CRM, so pair it with one.
- HubSpot, Salesforce and Attio own the record and can write to it. Salesforce needs Enterprise Edition and above plus Flex Credits.
- Gong and Granola are read-only, which is exactly right for call context.
- Start read-only and keep a human approving every write the agent makes.
The Best MCP Servers for Sales at a Glance
The table shows what each server can write and the plan it needs. Read the last column twice, because there are two plan gates. The first is the vendor's tier and the second is your AI client's.
Server | Best for | Can the agent write? | Plan gate |
|---|---|---|---|
FullEnrich | Verified emails and mobiles | No CRM writes | Every plan, free trial included |
HubSpot | CRM of record on HubSpot | Create and update, no delete in Claude | All HubSpot accounts, paid Anthropic plan for Claude |
Salesforce | Enterprise Salesforce orgs | Depends on the server the admin enables | Enterprise Edition and above, Flex Credits |
Apollo | All-in-one prospecting | Contacts, accounts and sequences, no bulk delete | Any Apollo plan, free included |
Clay | Ops-built research workflows | Only through admin-built Functions | Launch, Growth or Enterprise, lookups on free |
Attio | CRM of record for startups | Yes, after user confirmation | All plans, SQL not on every plan |
Gong | Deal context from calls | No, read-only | Any Gong plan per help center, Gong Credits per launch post |
Granola | Meeting notes | No, read-only | All plans, Basic limited to 30 days |
Exa | Web research | No, public web only | Keyless free tier, rate-limited |
Some older lists still call HubSpot's server read-only. That changed when HubSpot shipped create and update at general availability.
1. FullEnrich, Best for Verified Emails and Mobiles
An agent only books meetings with people it can actually reach. Waterfall enrichment means checking providers one by one until a verified contact turns up. FullEnrich runs a waterfall across 25+ data providers behind one remote MCP server. Verification removes roughly 30% of raw provider data before your agent sees it. So the agent drafts emails and dials numbers that passed checks first. That's why it ranks first for contact data.
What the Agent Can Do
The server exposes 13 tools for search, enrichment and account checks. The agent can call search_people, enrich_bulk, search_contact_by_email and get_credits. Search previews are free for the first 10 results and the total count. Exporting results costs 0.25 credit per contact or company.
Enrichment is the main paid step, and the AI confirms before it spends credits. A work email costs 1 credit and a mobile costs 10. A personal email costs 3 and a reverse email lookup costs 1. Failed lookups cost nothing, and so does a landline found instead of a mobile. Credits are only spent when data is found and verified.
Setup
Paste https://mcp.fullenrich.com/mcp as a connector and sign in with OAuth in your browser. It works in Claude, ChatGPT and Manus through Add connector. Claude Code and IDEs like Cursor use a short config.
Claude Code users can install a plugin with nine open-source skills. Two commands in Claude Code set the whole thing up.
/plugin marketplace add FullEnrich/fullenrich-skills
/plugin install fullenrich@fullenrich
The skills include full-prospecting, full-outreach and full-crm, under an MIT license.
Where It Stops
FullEnrich's MCP server has no CRM write tools, and its README says so plainly. The agent can't create or update a record in HubSpot or Salesforce. The full-crm skill works around this by driving a separate CRM server. It asks for explicit confirmation before any create or update. So pair FullEnrich with your CRM's MCP server from this list. FullEnrich finds and verifies the contact, and the CRM server writes it.
Maxence Garnier, GTM Engineer at Dust, shared this on the FullEnrich MCP page.
"I started solo on the MCP. Three weeks later my whole sales team was using it through our internal skills. We're moving to Enterprise."
Treat it as one customer's account, not a benchmark or a promise. The MCP server is included on every plan, from the free trial up. The free trial gives you 50 credits and needs no card. Plans include unlimited users, and Pro starts at $29 a month.
2. HubSpot, Best CRM Server for HubSpot Teams
HubSpot's remote server is the natural CRM pick for teams already on HubSpot. It reached general availability on April 13, 2026, with create and update support. The agent can search and read records through three read tools. Writes go through manage_crm_objects, which creates or updates records and activities. It shows a summary of proposed changes and waits for explicit confirmation. Supported objects include contacts, companies, deals, tickets, meetings, notes and tasks.
The server is hosted at mcp.hubspot.com and uses OAuth 2.1 with PKCE. The server itself is generally available to all HubSpot accounts. The Claude connector works on all HubSpot products and plans. On the Claude side, you need Pro, Max, Team or Enterprise from Anthropic. Super Admins and App Marketplace Access users connect without approval. Other users need a Super Admin to approve the connector.
The Claude connector doesn't support delete operations at all. If Sensitive Data is turned on, activity and conversation data are blocked.
Here HubSpot does what FullEnrich can't, which is write the record. The HubSpot and FullEnrich template shows the two working together.
3. Salesforce, Best for Enterprise Orgs
Salesforce Hosted MCP Servers suit enterprise orgs that want strict permission control. They became generally available on April 29, 2026, for Enterprise Edition and above. The platform/sobject-reads server is read-only, which Salesforce calls risk-free. Other servers handle mutations, deletes or everything in one SObject server. Custom servers can expose flows, Apex actions and Named Query APIs.
Setup uses OAuth and PKCE with an External Client App and two scopes. Every transaction runs as the authenticated user, so permissions carry over. If a rep can't do something, the agent can't do it either.
The plan gate is the part to check first. The docs say the servers are intended only for customers with Flex Credits. You may also be billed for server usage.
Start with the reads server and add write servers once you trust the setup. Like HubSpot, it owns and writes the record, which FullEnrich doesn't do. The Salesforce and FullEnrich template pairs verified contacts with that record.
4. Apollo, Best All-in-One Prospecting Server
Apollo fits teams that want one server to cover most of prospecting. Search, enrichment and sequences all live behind a single connection. The agent can search and enrich, which uses Apollo credits. It can create, update and bulk create contacts and accounts without credits. It can also create sequences, add contacts to them and send one-off emails.
The remote server lives at mcp.apollo.io/mcp with OAuth 2.0. Headless clients can use an API key instead. Per Apollo's MCP page, any Apollo plan qualifies, including free. There's no separate MCP subscription or extra cost. Free accounts need a work email to run search and enrichment.
Destructive actions like bulk delete aren't supported, per Apollo's MCP docs. The docs also ask you to confirm that model training is turned off. Answers come from Apollo's own database rather than a multi-provider waterfall.
Apollo can enroll contacts in sequences, which FullEnrich's server can't do. Teams that want a second source for mobiles can add FullEnrich alongside it.
5. Clay, Best for Ops-Built Research Workflows
Clay's MCP connector suits ops teams that already built research workflows in Clay. It became generally available on April 22, 2026, on Launch, Growth and Enterprise plans. Free and trial users keep access to company and contact lookups.
The agent runs Functions that an admin built and enabled in Clay. Those Functions can find, enrich and research contacts or companies. The agent can't browse tables or reach anything outside those Functions. It's a hosted connector with OAuth, and Clay hasn't published the endpoint.
In Claude, results arrive in groups of 20, up to 100 in total. Clay's own guide recommends MCP for rep-scale work of 1 to 20 contacts. For volume and deep CRM syncs, it points you back to the Clay platform. So pair Clay with a CRM server for everyday record updates.
Clay wins when your team has already encoded multi-step research as Functions.
6. Attio, Best CRM Server for Startups
Attio's server fits startups that run their pipeline on Attio. It lives at mcp.attio.com/mcp and uses OAuth only, with no API keys. The agent can search, create, update, merge and retrieve records. It also handles lists, notes and tasks, plus reporting and SQL. It can search meetings, calls and emails, including call transcripts.
Reads are auto-approved, while write operations request user confirmation first. Attio says the server is available on all plans. SQL queries aren't available on every billing plan, though.
Writes are rate-limited to 25 requests per second per workspace. Like HubSpot, it writes the record, which FullEnrich's server can't do.
7. Gong, Best for Deal Context From Calls
Gong's server gives an agent deal and account context from recorded calls. It has three tools, ask_account, ask_deal and generate_brief. Gong says the server is read-only and never changes Gong or CRM data. Gong hosts it, and a Tech admin sets it up for your team.
The help center lists it on any Gong plan. Gong's June 9, 2026 launch post ties availability to customers with Gong Credits.
The agent gets answers and briefs, not raw transcripts, message bodies or activity lists. Private calls are excluded from everything the agent sees.
Gong knows what was said on calls, which no contact data vendor knows. Pair it with FullEnrich when a deal needs new stakeholders reached.
8. Granola, Best Meeting Notes Without a Call Recorder
Granola suits reps who want meeting notes without a call recorder contract. The remote server sits at mcp.granola.ai/mcp with browser OAuth. It offers six read tools, including query_granola_meetings and get_meeting_transcript. It has no write tools, so nothing in Granola changes.
MCP is available on all plans, including Basic. Basic covers personal notes from the last 30 days, without transcripts.
Rate limits sit around 100 requests per minute. The agent only sees notes in your active workspace. Granola adds what the buyer said, and FullEnrich adds how to reach them.
9. Exa, Best Free Web Research Server
Exa is the easiest free way to give an agent web research. Its remote server at mcp.exa.ai/mcp has a keyless free tier. You get rate-limited usage without signing in or adding an API key. By default the agent gets web_search_exa and web_fetch_exa. The agent_run tool needs OAuth or an API key. New accounts also get free credits at signup.
Exa reads the public web only, with no contact or CRM data. Use it to spot the trigger, like a new hire or a launch. Then FullEnrich finds a verified email or mobile for the right person.
How to Build a Sales MCP Stack
Build the stack by job and by the CRM you already run. A typical motion needs research, contact data, a system of record and outreach. Call context from Gong or Granola feeds the research and CRM steps.
Salesforce's State of Sales survey of 4,050 sales pros found 54% had used agents. Nearly 9 in 10 plan to by 2027, per the February 2026 report.
Pick Your Stack by CRM
Open the row that matches your CRM. Each one gives the servers, what writes, each plan gate and a first prompt. The prospecting from Claude template walks through the search and enrich flow.
My CRM is HubSpot
Your stack. Exa for account triggers, FullEnrich for verified contacts and HubSpot for the record. Add Granola if reps take notes without a call recorder.
What writes. Only HubSpot writes, and it asks for confirmation before any create or update. Its Claude connector can't delete records.
Plan gates. HubSpot's server works on every account. Its Claude connector needs a paid Anthropic plan. FullEnrich runs on every plan, including the free trial. Exa and Granola both offer a free way to start.
Connect. Add each URL as a connector in your AI client, then sign in.
Exa
https://mcp.exa.ai/mcp
FullEnrich
https://mcp.fullenrich.com/mcp
HubSpot
https://mcp.hubspot.com
Granola (optional)
https://mcp.granola.ai/mcpFirst prompt to try. Find 15 heads of marketing at SaaS companies in San Francisco with verified emails. Check HubSpot for duplicates, then ask me before you push anything.
My CRM is Salesforce
Your stack. FullEnrich for verified contacts, Salesforce's read-only server first and Gong for deal briefs.
What writes. Nothing writes until an admin enables a write server. Every call runs with the signed-in user's permissions.
Plan gates. Salesforce needs Enterprise Edition or above plus Flex Credits. Gong's help center lists any plan, while its launch post cites Gong Credits. FullEnrich runs on every plan.
Connect. Add each URL as a connector in your AI client, then sign in.
FullEnrich
https://mcp.fullenrich.com/mcpSalesforce: enable platform/sobject-reads in Setup, under API Catalog then MCP Servers.
Salesforce: create an External Client App with mcp_api and refresh_token scopes.
Gong: a Tech admin sets up the connection for your team.
First prompt to try. Brief me on the open deal at [account] from Gong. Then find two more stakeholders there with verified emails.
My CRM is Attio
Your stack. FullEnrich for verified contacts, Attio for the record and Exa for web research.
What writes. Attio asks you to confirm every create or update before it runs. Reads go through without any prompt.
Plan gates. Attio's server is on all plans, though SQL isn't on every plan. FullEnrich and Exa both have a free way to start.
Connect. Add each URL as a connector in your AI client, then sign in.
FullEnrich
https://mcp.fullenrich.com/mcp
Attio
https://mcp.attio.com/mcp
Exa
https://mcp.exa.ai/mcpFirst prompt to try. Research [company] online and find its head of sales with a verified email. Add them to Attio after I confirm.
No CRM yet, or I want one server
Your stack. Apollo alone covers search, enrichment and sequences behind one connection.
The trade-off. Its answers come from Apollo's own database rather than a multi-provider waterfall. Add FullEnrich as a second source for mobiles.
What writes. Apollo creates and updates contacts, accounts and sequences. It can also send one-off emails, so approve each send. Bulk delete isn't supported through the server.
Plan gates. Any Apollo plan qualifies, including free. Free accounts need a work email for search and enrichment.
Connect. Add each URL as a connector in your AI client, then sign in.
Apollo
https://mcp.apollo.io/mcp
FullEnrich (optional)
https://mcp.fullenrich.com/mcpFirst prompt to try. Find 20 sales VPs at software companies in France and enrich their emails. Draft a three-step sequence for my review.
Whatever the motion, the contact data layer decides what the agent sends. The verified data layer for AI agents page explains how that layer works. For more examples, see the FullEnrich agents page.
How to Give an Agent CRM Access Safely
Give the agent read access first and make a human approve every write. Keep scopes narrow, and prefer remote OAuth servers over local keys.
Our finding: All nine servers on this list can read data. HubSpot, Salesforce, Attio and Apollo change records directly. Clay writes only through Functions an admin built. Of these, only Salesforce documents a server that deletes records. So your delete policy is mostly a Salesforce admin decision.
The 2025-06-18 MCP spec is clear on this point. It says there SHOULD always be a human in the loop. That human needs the ability to deny tool invocations. Clients should also prompt for confirmation on sensitive operations.
The MCP security best practices page pushes least-privilege scopes for every server. It lists wildcard or omnibus scopes as a common mistake. It also flags arbitrary code execution as a risk with local servers.
OWASP's LLM06 entry names the same failure as excessive agency. Its root causes are excessive functionality, permissions and autonomy. The fix it recommends is a human approving high-impact actions.
- Sandbox first: start Salesforce on the reads server before any write server.
- Confirm before write: rely on Attio's write confirmations and FullEnrich's full-crm skill.
- Admin approval: route the HubSpot connector through Super Admin approval before rollout.
- Narrow scopes: grant only the scopes each job needs, never omnibus ones.
More agents won't fix a loose setup on their own. Gartner predicts AI agents will outnumber sellers 10 to 1 by 2028. Yet it expects fewer than 40% of sellers to say productivity improved. That prediction comes from a Gartner press release dated July 28, 2026.
How We Picked These Servers
This list is based on research, not hands-on benchmarks. We read each vendor's docs, changelogs and help centers on September 22, 2026. Each server had to be official and vendor-hosted, with documented read and write behavior. We also checked auth, the plan gate and fit for a real sales job.
We cut Instantly because its own sources disagree on whether it's official. Its help center hosts the server, while its blog calls it community-maintained. We cut Amplemarket because it overlaps heavily with Apollo. We also couldn't verify its plan requirement in public docs.
Once more, FullEnrich publishes this list and ranks itself first for contact data. Each other entry says where that server does something FullEnrich can't.
Frequently Asked Questions
What is the best MCP server for sales?
It depends on the job, so plan on two or three servers. For verified emails and mobiles, FullEnrich is our pick, with the bias disclosed above. For the record itself, use your CRM's server from HubSpot, Salesforce or Attio. Apollo is the best single server if you want search and sequences together. Add Gong or Granola for call context and Exa for free web research.
Can an MCP server update my CRM?
Yes, but mainly through the CRM's own server, with conditions. HubSpot's server creates and updates records, though its Claude connector can't delete. Salesforce writes depend on which hosted server your admin enables and user permissions. Attio writes only after the user confirms each operation. Apollo can create and update contacts and accounts inside Apollo itself. FullEnrich's MCP server, Gong, Granola and Exa don't write to your CRM. FullEnrich's full-crm skill can drive a connected CRM server, with confirmation first.
Is there a free MCP server for sales?
Yes, several are free, each with its own limits. Exa's keyless tier gives rate-limited web search without an API key. Apollo's server works on any Apollo plan, free included. Granola's Basic plan includes MCP, limited to notes from the last 30 days. FullEnrich's free trial gives you 50 credits with no card needed. That covers 50 work emails or 5 verified mobiles. Search previews of the first 10 results cost nothing at all.
Which AI client works best with sales MCP servers?
Pick the client your team already pays for, then check each server's docs. FullEnrich works in Claude, ChatGPT and Manus through Add connector. It also runs in Claude Code and Cursor. Gong's launch post names Claude, ChatGPT, Microsoft Copilot and Gemini as clients. HubSpot's Claude connector needs a paid Anthropic plan like Pro or Team.
What's the difference between an MCP server and an API?
An MCP server wraps an API so an AI agent can call it. The API is the raw interface your code calls with exact parameters. MCP describes the tools so the model picks one and fills in arguments. Developers still use the API for scheduled jobs and high-volume pipelines. Reps and agents use MCP for in-the-moment work inside a chat. Our explainer on the data enrichment API covers the API side in depth.
Where to Start
- Pick one server per job, not one winner for everything.
- Start read-only and make a human approve every CRM write.
- Verified contact data decides whether the agent's outreach actually lands.
The quickest first step is the contact data layer. Connect the FullEnrich MCP server free with 50 credits and no card. Then pair it with your CRM's server and run one small list. Check what comes back before you let the agent write anything.