HubSpot

70/100
Last tested 2026-11-10 (Fresh: tested within 30 days) Failed Key unknown

No advisories in range for tested 0.4.0 (checked 2026-11-09)

Security review: not tested

Score = points from our five tests (install, handshake, maintenance, docs, license). Not a quality or security rating. Methodology

  • Install20/20
  • Handshake0/30
  • Maintenance25/25
  • Docs15/15
  • License10/10

Transport (tested 2026-10-22): stdio

Tested version: 0.4.0 · tested 2026-10-22

Token cost (estimate): the figure is pending. We have no tools/list capture to estimate from.

Permissions: the figure is pending.

Score 70/100 · Tools 0 · Token cost pending · Compare · Last tested 2026-11-10 · Version tested 0.4.0 · Package @hubspot/mcp-server

Summary: HubSpot requires credentials or a backing service before it will list tools.

Evidence summary

Handshake
fail
Tools listed
0
Context cost
Pending The token cost figure is pending. ranking
API key
Key: unknown
Tested
2026-11-10

Test results

TestResultPointsEvidence
installpass20npm install @hubspot/mcp-server (Node 20, Linux) succeeded in 1s.
handshakefail0Server did not complete the handshake without credentials or a backing service (26 at async asyncRunEntryPointWithESMLoader (node:internal/modules/run_main:101:5) Node.js v24.22.1 exited code 1).
maintenancepass25Latest release published 21 days before test.
docspass15README over 3,000 chars; install instructions present; mcpServers config example present. Check of the package's own README (README shipped in npm package).
licensepass10MIT (OSI-approved).

Local-model readiness

Not tested

Not yet tested (no tools/list response without credentials).

What we tested and what we didn't

Tested on 2026-11-10

  • Install from the registry
  • We attempted an MCP initialize with no credentials; it did not complete, so we never reached the tool list (Method details: initialize failed; tools/list not sent)
  • Maintenance signals (last push, archived/deprecated status)
  • Docs (README length, install and config example)
  • License (OSI-approved or not)
  • Token cost (estimate)

Not tested

  • Security: not audited (no code review, no permission or data-flow analysis)
  • Real tasks (no functional task runs yet)
  • Behaviour with real credentials or a real account
  • Performance, rate limits or load
  • Correctness of results beyond the listed tasks

Methodology: how we test. A high score means it installs and responds, not that giving it access to your data carries no risk.

Known security issues

Checked on 2026-11-09 for version 0.4.0 against OSV, GitHub advisories. Scope: the package itself; dependencies not scanned.

No published advisories found in OSV and GitHub advisories for @hubspot/mcp-server 0.4.0 as of 2026-11-09. This is not a security audit.

Monthly roundup: MCP security issues, October 2026.

Tool list changes

No tool list: this server did not list tools without credentials in our test, so tool changes are not tracked.

Raw test record (JSON)
{
  "name": "@hubspot/mcp-server",
  "version": "0.4.0",
  "registry": "npm",
  "status": "failed",
  "tested": "2026-11-10",
  "tools_count": null,
  "deprecated": false,
  "archived": null,
  "tests": {
    "install": [
      "pass",
      20,
      "`npm install @hubspot/mcp-server` (Node 20, Linux) succeeded in 1s."
    ],
    "handshake": [
      "fail",
      0,
      "Server did not complete the handshake without credentials or a backing service (26\n    at async asyncRunEntryPointWithESMLoader (node:internal/modules/run_main:101:5)\n\nNode.js v24.22.1\n\n\nexited code 1)."
    ],
    "maintenance": [
      "pass",
      25,
      "Latest release published 21 days before test."
    ],
    "docs": [
      "pass",
      15,
      "README over 3,000 chars; install instructions present; `mcpServers` config example present. Check of the package's own README (README shipped in npm package)."
    ],
    "license": [
      "pass",
      10,
      "MIT (OSI-approved)."
    ]
  }
}

Install

npx -y @hubspot/mcp-server

Pin the version we tested

npx -y @hubspot/mcp-server@0.4.0

tested 2026-11-10. Newer versions may differ and were not tested by us.

{
  "mcpServers": {
    "hubspot": {
      "command": "npx",
      "args": [
        "-y",
        "@hubspot/mcp-server@0.4.0"
      ]
    }
  }
}

Tools listed

Not available (handshake did not complete without credentials).

Quick config

{
  "mcpServers": {
    "hubspot": {
      "command": "npx",
      "args": [
        "-y",
        "@hubspot/mcp-server"
      ]
    }
  }
}

Add to config Opens the config generator with this server selected.

Test history

Follow this server (RSS) · Monthly changelog

Related: Fix: MCP error -32000 Connection closed

FAQ

Is HubSpot deprecated?

No. @hubspot/mcp-server was not deprecated or archived when we last tested it on 2026-11-10.

What replaces HubSpot?

Nothing; HubSpot is not deprecated as of 2026-11-10.

Does HubSpot need an API key?

Unknown. It did not complete the handshake in our test without credentials or a backing service, and gave no clear credential message.

Embed the badge

TestedMCP: 70/100, tested 2026-11-10

Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.

Claim this listing · Report an issue