How to add HubSpot MCP Server to Windsurf
HubSpot's hosted MCP server: OAuth in, then agents read and write CRM contacts, deals, tickets and engagements. Paste the config into ~/.codeium/windsurf/mcp_config.json and restart Windsurf.
Last updated June 14, 2026 · 0★ · http · oauth · official
Windsurf config for HubSpot MCP Server
claude mcp add --transport http hubspot https://mcp.hubspot.com/anthropic{
"mcpServers": {
"hubspot-mcp-server": {
"serverUrl": "https://mcp.hubspot.com/anthropic"
}
}
}Remote server — no local install needed. Restart the client after saving the config.
Setup steps
- 1Open Windsurf → Cascade → the hammer/MCP icon → Configure (or edit ~/.codeium/windsurf/mcp_config.json).
- 2Paste the HubSpot MCP Server config below.
- 3Fill in placeholder secrets, then save.
- 4Click Refresh in the MCP panel.
- 5HubSpot MCP Server's tools become available to Cascade.
Before you start
- A HubSpot account (any plan tier); a Super Admin must authorize the connector for the portal the first time
- An MCP client that supports remote HTTP servers with OAuth (Claude, Claude Code, Cursor)
- For the packaged Claude connector: a paid Claude plan (Pro, Max, Team, or Enterprise)
Security
Hosted by HubSpot; auth is OAuth 2.0 against your portal, so no tokens sit in local config. The server can create and update CRM records — HubSpot's connector settings let you set write tools to require approval, and access is revocable anytime under Settings → Integrations → Connected Apps.
HubSpot MCP Server + Windsurf FAQ
Where is the Windsurf config file?
Windsurf reads MCP servers from ~/.codeium/windsurf/mcp_config.json. Paste the HubSpot MCP Server config there under the "mcpServers" key and restart the client.
Is HubSpot MCP Server safe to use with Windsurf?
Hosted by HubSpot; auth is OAuth 2.0 against your portal, so no tokens sit in local config. The server can create and update CRM records — HubSpot's connector settings let you set write tools to require approval, and access is revocable anytime under Settings → Integrations → Connected Apps.
Is the HubSpot MCP server free and safe to use?
The server itself is free with any HubSpot subscription, and it's the official hosted endpoint — OAuth-scoped, no credentials stored locally, revocable from Connected Apps. The main caveats: Claude's packaged connector requires a paid Claude plan, and write tools can modify real CRM records, so enable HubSpot's approval setting for writes.
What is the HubSpot MCP endpoint URL?
The server lives at https://mcp.hubspot.com; Claude clients use the https://mcp.hubspot.com/anthropic path with Streamable HTTP transport and OAuth 2.0. There is nothing to install — add the URL to your MCP client and authenticate in the browser.
Can it write to my CRM or only read?
Both. CRM objects (contacts, companies, deals, tickets, invoices and more) and engagements are read/write, while users, teams, campaigns and CMS content (landing pages, blog posts) are read-only. Admins can force write operations to require per-action approval.