Talk to Kai
How the connection works

How to connect Claude to your CRM

A plain language explainer for connecting Claude to your HubSpot CRM. What it can read, what it can write, how to install it, and what tends to get in the way.

Step 1

What you need.

A paid Anthropic plan on one side, any HubSpot tier on the other. That is it.

Anthropic
Pro

Twenty dollars per month, per user. Good for one or two people trying it out.

Anthropic
Team

Per seat, with admin controls and a Data Processing Agreement. The sensible choice for the Lex Mundi HQ marketing and BD team.

Anthropic
Enterprise

SSO, SCIM provisioning, organization-wide audit logs, and Zero Data Retention. The step up once Claude is a real workflow tool across the team.

HubSpot
Any tier

The Connector works on every HubSpot subscription, including Starter. No upgrade needed on the HubSpot side.

Step 2

Read most. Write part.

The Connector gives Claude access to almost every standard HubSpot object and the ability to create or update a controlled subset of them.

Read access

Claude can pull in

  • Contacts, Companies, Deals, Tickets
  • Line items, Products, Quotes, Invoices
  • Orders, Carts, Subscriptions
  • Engagements: Calls, Meetings, Notes, Tasks, Emails
  • Users, Teams
  • Campaigns, Landing pages, Website pages
  • Marketing events, Segments (lists)

Anything visible in the HubSpot UI to the user, Claude can summarize, compare, search, and rewrite.

Write access

Claude can create or updateAvailable since 20 November 2025

  • Contacts, Companies, Deals, Tickets
  • Line items, Products
  • Engagements: Calls, Meetings, Notes, Tasks, Emails
Capped at 10 records per request. Every write tool can be set to Needs Approval, so the user sees the full payload before it touches HubSpot.
Watch out before the demo

If Sensitive Data is enabled in HubSpot, half of the ideas silently fail.

The Connector intentionally blocks all engagement data (calls, meetings, notes, emails) when the HubSpot account has the Sensitive Data feature switched on. Most "know every guest" and "engagement snapshot" prompts then return nothing, and it looks like Claude is broken. Before the first demo, check whether Sensitive Data is on at the account level.

What the Connector cannot do

There are clear limits, designed for safety. Some can be worked around with a small custom build sitting on top.

No deletes

The Connector cannot delete records. Removing data still happens in HubSpot. Often a feature, not a bug.

No drafts

Only published landing pages and blog posts are visible. Anything still in draft inside HubSpot stays hidden.

Validation rules are bypassed

Validation logic defined inside HubSpot forms does not apply during writes through the Connector. Property-level rules still do.

Custom objects, not yet

Member-firm-shaped data lives in custom objects (jurisdictions, referrals, member events). The off-the-shelf Connector cannot reach those today.

Workable with a small custom build

Bulk over ten records

The 10-record cap is per request. Operations across hundreds of contacts need batching or a workflow.

Workable with a small custom build

Sensitive Data fields

Custom properties flagged as Sensitive Data are excluded by design. Engagements are blocked entirely when Sensitive Data is on account-wide.

Step 3

How to install it.

One short flow inside HubSpot. After that, a small per-user setting in Claude decides whether write actions need approval each time or run on their own. Total time, under ten minutes.

Walk through the setup, step by step

Click through every step in a guided pop-up. One step at a time, with the exact buttons to press and the things to watch out for.

In HubSpot

Install the connector

  1. In HubSpot, click Settings (the gear icon, top right).
  2. Open the Integrations dropdown in the left sidebar, then click Connected Apps.
  3. Search for Claude, then open HubSpot connector for Claude.
  4. Follow the install prompts and sign in to your Claude account when asked.
  5. Choose your permissions, then click Connect app. Done.
In Claude (per user, optional)

Decide what runs without asking

  1. By default, every write action asks you to click Allow in the chat before it happens. Safe, but it interrupts.
  2. To change that, in Claude open the left sidebar, click Customize, then Connectors, then HubSpot.
  3. On the right, set each tool to Always allow, Ask first, or Never. This is per user, per tool.
About the permissions screen

You choose what the Connector can touch.

During install, HubSpot shows two groups: Required (5) and Optional (35). Required is minimal read access on the core objects so the Connector can run at all. Optional covers engagement reads, every write action, marketing assets, products, line items, and more.

For Optional, there is a Select dropdown at the top with three quick options: All, View-only, or None. Pick what fits your stage.

Pilot

View-only

Reading everything, changing nothing. The safe default for the first two to four weeks. Reversible at any moment.

Active use

All, with approvals in Claude

Full read plus write. Per write tool, leave Ask first on in Claude so you see the payload before it touches HubSpot.

Power user

All, with Always allow

For tools you trust completely after a few weeks. Skip the click. The HubSpot Audit Log still captures every write.

If you want, ask Kai for the recommended starting set. The list of all 40 scopes is in HubSpot's docs, no need to memorize it.

Each colleague at Lex Mundi HQ then connects through their own Claude account, and the Connector respects each person's HubSpot permissions automatically.

The Connector does not overwrite HubSpot's user permissions. Whatever a colleague can see in HubSpot is what they see through Claude. The Connector is bound to their personal login.

Three things worth knowing
  • Each user authenticates separately. Their Claude session sees exactly what they would see logged into HubSpot.
  • Permissions are inherited. If a colleague cannot see a contact in HubSpot, they cannot see it through Claude either.
  • Everything is logged. Every create and update appears in the HubSpot Audit Log.
3 Common Issues

What tends to get in the way.

Drawn from teams that have already gone through their first install.

Install

"My team cannot use it."

The Super Admin installed the Connector but forgot to click Give users access in HubSpot Settings, Integrations, Connected Apps. Colleagues then see no-permission errors.

Fix: open HubSpot Connected Apps, select the Claude connector, click Give Access. Two minutes, all colleagues unblocked.
Silent block

"Claude cannot see any emails."

If the HubSpot account has the Sensitive Data feature enabled, engagement data is silently excluded. Teams notice this only when Claude says it found no calls or emails.

Fix: ask your HubSpot admin to confirm whether Sensitive Data is on. Decide deliberately whether to switch it off or accept that engagements stay out of scope.
Numbers

Spot-check the numbers, always.

Claude is strong at language and middling at exact arithmetic. Pipeline values, contact counts, conversion rates: it sometimes rounds, sometimes truncates large result sets silently.

Fix: for number-heavy answers, ask Claude to show the underlying records and verify one or two against HubSpot. Build the habit early.
How to start safely

Three reversible stages.

Each stage can be rolled back the same day. Move to the next one only when the previous one has earned the team's trust.

Stage 012 to 4 weeks

Read-only pilot.

Super Admin installs with read-only scopes. One or two Claude Team seats. Run the Ideas prompts, document what works. Nothing in HubSpot changes. Reversible by disconnecting at any point.

Stage 024 to 8 weeks

Writes with approval.

Re-authorize with write scopes for contacts, deals, engagements. Set every write tool to Needs Approval. Roll out to three to five HQ users. Watch the HubSpot Audit Log weekly for the first month.

Stage 03Onward

Scale up, or step up to Enterprise.

Upgrade to Claude Enterprise for SSO, SCIM, organization-wide audit logs, and Zero Data Retention. Open the Connector up to events, membership, and content colleagues alongside marketing and BD. Move to custom builds once the team is fluent.

Before stage one

Check the Sensitive Data flag in HubSpot first.

If Sensitive Data is enabled at the account level, the Connector silently blocks all engagement data (calls, meetings, notes, emails). Half of the Ideas prompts then return empty results and the pilot looks broken. Ask your HubSpot admin to confirm before the first demo.

Sources