Connect HubSpot to AI agents over MCP (with Stepper Skill Sets)

Let your AI agent find, create and update HubSpot contacts, companies and deals through a Stepper Skill Set, limited to the actions you choose.

A Skill Set is a toolkit you build in Stepper: you connect your apps, pick which actions an agent may call, and Stepper serves them as one MCP endpoint. The agent never sees your HubSpot password or API keys, and every call is logged.

Last checked:

What you can let an agent do in HubSpot

These are the HubSpot actions you can add to a Skill Set. They're the same actions Stepper workflows use, listed on Stepper's HubSpot page. You choose which ones the agent gets.

For example, you could ask

  • Find the contact for [email protected] and update her lifecycle stage to customer.
  • Create a deal for Tidewater Clay's wholesale order and log a note on the contact.
  • Create Contact Creates a Contact in HubSpot.
  • Update Contact Update a Contact in HubSpot.
  • Create Company Creates a Company in HubSpot.
  • Update Company Update a Company in HubSpot.
  • Create Deal Creates a Deal in HubSpot.
  • Update Deal Update a Deal in HubSpot.
  • Find Contact Finds a contact by searching.
  • Find Company Finds a company by searching.
  • Find Deal Finds a deal by searching.
  • Create Engagement Creates a new Engagement for a contact, in HubSpot.
  • Make HTTP Request Make an HTTP request to any URL with full control over method, headers, and body.

Set it up in 5 steps

You need a Stepper account, a HubSpot account, and an AI client that supports remote MCP servers, such as ChatGPT, Claude, Cursor or VS Code. Your own agent works too, using a Skill Set token.

  1. Connect HubSpot to Stepper

    In Stepper, connect your HubSpot account. Use an account that can do what you want the agent to do, and no more.

  2. Create a Skill Set

    Go to Skill Sets in Stepper, create a Skill Set for this agent, and use Add Entry to add your HubSpot connection.

  3. Restrict the actions

    Choose only the HubSpot actions the agent needs. An entry with no actions chosen allows every HubSpot action, so a short list is safer. To pin a value, such as one channel, table or calendar, hardcode that parameter so the agent can't change it.

  4. Add the Skill Sets server to your AI client

    Add this URL as a remote MCP server:

    https://mcp.stepper.io/skill-sets/mcp

    Then sign in to Stepper when your client asks. On the Stepper screen that follows, pick the Skill Set this agent should use. To switch to a different Skill Set later, remove the server and connect again.

    Chat apps (ChatGPT, Claude and others): add it as a custom connector or app, wherever your client lists remote MCP servers.

    Code editors (Cursor, Windsurf and others that use an mcpServers config):

    {
      "mcpServers": {
        "stepper": {
          "url": "https://mcp.stepper.io/skill-sets/mcp"
        }
      }
    }

    Your own agent or script: generate a Skill Set token in Stepper and send it as Authorization: Bearer sst_….

  5. Test it

    Ask the agent what it can do (it checks the Skill Set's list of skills) and make sure only the HubSpot actions you chose appear. Then run one request using the lowest-risk action you allowed, such as a lookup or a draft, and check the call in the Skill Set's call log in Stepper.

HubSpot's own MCP server, and when to use it instead

HubSpot hosts a remote MCP server that lets an agent act in your HubSpot account after you sign in. HubSpot's separate Developer MCP server is for building on its platform. Read HubSpot's remote MCP server for setup.

Use HubSpot's server when the agent works mostly in HubSpot and needs more of your CRM than the actions listed above.

A Skill Set fits when the agent needs HubSpot alongside other apps through one endpoint, or when you want to choose exactly which actions it can call, lock parameter values, and check a log of every call.

Guardrails

An agent can misread a request, and some HubSpot actions change or remove real data. Set these up before you rely on it.

Scope

Give a research agent only the Find actions. Add Create and Update actions for the objects it really needs, and leave Make HTTP Request off.

Use a separate Skill Set for each agent or role, so each one gets only its own actions and tokens.

Audit

Every skill call is logged with the tool name, status, how it authenticated, and when. Call logs are kept for 30 days and are visible in Stepper, so you can check what the agent did in HubSpot.

Revoke

Revoke a Skill Set token from Stepper to cut off a script or client straight away. To stop an agent using one action, remove it from the Skill Set; that applies from the agent's next call, with no need to reconnect. You can also remove the server from your AI client.

Add with care: Make HTTP Request. Make HTTP Request can call any URL with your connection, so it gives the agent far more reach than the other actions.

Connect other apps to AI agents over MCP:

HubSpot is a trademark of its owner. Stepper isn't affiliated with or endorsed by HubSpot; its name is used here only to describe the integration.