HubSpot integration
Secure the AI agents in your HubSpot CRM.
HubSpot's remote MCP server gives AI agents read and write access to your CRM. Install AxioRank from the Marketplace to risk-score, policy-gate, and audit every agent action, and see that protection on every record.
Marketplace app · OAuth install · read-only scopes · every plan
Governed by AxioRank
- Surface
- mcp.hubspot.com
- Record
- contact
- Decision
- policy_gated
What you get
Governance for the agents touching your CRM.
HubSpot opened the CRM to AI agents. AxioRank makes sure those agents are governed, and shows that protection inside HubSpot.
Governs the HubSpot MCP server
HubSpot's remote MCP server lets AI agents read and write your CRM. AxioRank risk-scores and policy-gates every agent action before it touches a contact, company, or deal.
Agent Access card on every record
A card on contacts, companies, and deals shows, right where your team works, that AxioRank is protecting AI-agent access to that record.
One-click install
Install from the HubSpot Marketplace. OAuth binds your portal to an AxioRank workspace in seconds, with no scripts and no keys to paste.
Token encrypted at rest
The OAuth refresh token is stored with AES-256-GCM, bound to your workspace. Short-lived access tokens are refreshed on demand and never stored.
Audited and provable
Every governed agent action is written to a tamper-evident audit log you can verify offline, so you can prove what an agent did and did not do.
Read-only by default
v1 requests read-only CRM scopes, used only to label the card with the record you are viewing. AxioRank governs your agents; it does not write to your records.
Setup
Installed in about a minute.
Install from the Marketplace, and the protection shows up on your records. Set policies whenever you are ready.
1. Install from the Marketplace
Add AxioRank from the HubSpot Marketplace and grant consent. Your portal binds to your AxioRank workspace automatically.
2. See it on your records
Open any contact, company, or deal. The Agent Access card shows that AxioRank is governing AI-agent access to that record.
3. Govern in AxioRank
Set allow, deny, and hold policies for agent actions. Every call that reaches your CRM through the MCP server is scored, gated, and audited.
Questions
Good to know before you install.
The questions a RevOps or security lead asks first.
What does this actually protect?+
HubSpot's remote MCP server lets AI agents read and write your CRM on a user's behalf. AxioRank sits in front of your agents and risk-scores, policy-gates, and audits every action, so a prompt-injected or misbehaving agent cannot quietly exfiltrate or corrupt CRM data.
Does AxioRank write to my CRM?+
No. v1 requests read-only scopes, used only to label the card with the record you are viewing. Nothing is written to HubSpot. Mirroring governance verdicts back onto records as timeline events is a planned follow-on and would request the timeline scope explicitly.
Where is the OAuth token stored?+
The refresh token is encrypted at rest with AES-256-GCM, bound to your workspace so a ciphertext cannot be reused elsewhere. Short-lived access tokens are minted on demand from it and are never stored.
How do I remove it?+
Disconnect in AxioRank to drop the stored token immediately, and uninstall the AxioRank app from your HubSpot account settings to fully revoke access. HubSpot notifies AxioRank of the uninstall, which also clears the install.
Which plans include it?+
Every plan. Installing, the CRM card, and the governance of agents reaching your HubSpot CRM are available on Free, Pro, and Team alike.
Govern the AI agents in your HubSpot CRM
Install AxioRank from the HubSpot Marketplace, and risk-score, policy-gate, and audit every agent action that reaches your contacts, companies, and deals.
Keep exploring