Best MCP servers for sales and GTM in 2026: 12 compared

The best MCP server for sales depends on what you want your AI agent to do. To run LinkedIn and email outbound from ChatGPT, Claude or another agent with approval before each message, use Sliq. For a contact database plus email sequences, Apollo. For CRM context, the server of the CRM you already run: HubSpot, Salesforce or Attio. For enrichment, Clay. ZoomInfo is strong data but read-only.

We compared 12 servers on the question most roundups skip: once your agent can write, what can it actually send, on which channel, and what stops a bad send? Every fact below comes from the vendor's own docs, checked on October 19, 2026, and each entry links to its source. Sliq is our product, and it is ranked first for the job it is built for. We list where it falls short too.

What is an MCP server for sales?

An MCP server for sales is a connector that lets an AI agent, such as ChatGPT, Claude, Cursor, Codex or Microsoft Copilot, use a sales tool directly. MCP (Model Context Protocol) is the open standard those agents use to call outside tools. Once connected, you ask the agent in plain language to search prospects, update the CRM or launch a sequence, and it calls the tool's functions for you.

Almost every server on this list is hosted. You paste a URL into your AI client as a custom connector and sign in. There is nothing to install.

Can a sales MCP server send outreach, or only read data?

Some only read, some write records, and a few can send. That split is the most important thing to check before you connect one:

• Read-only: the agent can look things up but change nothing. ZoomInfo and Salesloft work this way today.
• Writes records: the agent can create or update contacts, deals, tasks and notes. HubSpot, Salesforce and Attio do this.
• Starts outreach: the agent can enroll people in sequences, launch campaigns or send messages. Sliq, Apollo, Amplemarket, lemlist, HeyReach, Instantly and Outreach do some version of this.

The AI clients add a layer of their own. Tools are labelled as read-only or as write and destructive. Claude's connector guidelines say read-only tools can run without per-call confirmation and destructive tools always prompt. OpenAI's MCP docs say ChatGPT treats any tool without a read-only label as a write action and asks for confirmation by default. That prompt is a single click per tool call, and both clients let you approve a tool for the rest of a conversation. So if a sequence or a message is about to go out under your name, the check that matters lives in the sales tool itself.

How we compared them

We judged each server on six things, using plain values rather than a points score:

1. Find: can the agent search for new people and companies?
2. Write access: read-only, records only, or outreach.
3. Sends on: which channels the agent can reach: email, LinkedIn, calls, or none.
4. Send safety: what the vendor documents to stop a bad send, such as approval steps, drafts, permission scoping or audit logs.
5. Connects to: which AI clients the vendor documents, and how you sign in (OAuth or API key).
6. Starts at: the cheapest plan that includes MCP access.

We left out a total score on purpose. A vendor scoring its own product 15 out of 15 is not a measurement, and the six answers above tell you more than a sum would.

The 12 best MCP servers for sales, by use case

1. Sliq: best for LinkedIn and email outbound from any AI agent, with approval

Sliq is an AI GTM agent for LinkedIn and email outbound. Its MCP server, at https://mcp.getsliq.com/mcp, gives your AI agent the same tools Sliq's own agent uses: find prospects, research them, draft LinkedIn and email messages, build sequences, read replies and analytics, and manage the approval queue.

• Sends on: LinkedIn (connection requests, DMs, follow-ups) and email.
• Send safety: outreach your agent drafts waits in Sliq's approval queue by default, where you approve, edit or reject each message. You choose per action type what can auto-send, for example profile follows, and what always asks first, for example first DMs and emails. One-off emails go out only from a draft, and the server tells the agent to confirm with you before sending. Every change an outside agent makes shows on the agent's page in Sliq, labelled with the client that made it, such as "via Claude".
• Connects to: Claude and ChatGPT as hosted connectors over OAuth. Claude Code, Codex and other command-line clients use a Sliq API key.
• Starts at: free with 200 credits and no card. Paid plans from $49/month. MCP access is included on every plan.
• Limits: Sliq is not a CRM and not a ZoomInfo-scale contact database. Pair it with your CRM's server when you want deal context in the same conversation.

Setup guide: Sliq for ChatGPT and Claude.

2. Apollo: best for a contact database plus email sequences

Apollo's MCP server (https://mcp.apollo.io/mcp) is the broadest data-plus-execution server on the list. It lists 52 actions, including people and company search, enrichment, deals, tasks and call transcripts. On the write side it can create and update contacts and deals, build sequences, add and remove sequence contacts, and send one-off emails.

• Sends on: email, through sequences and direct one-off sends.
• Send safety: each action can be set to Always allow, Approval required or Blocked. Apollo recommends Approval required for anything that spends credits. Sequence changes can be previewed, and bulk deletes are not supported.
• Connects to: ChatGPT, Claude, Claude Code, Cursor, Codex, Perplexity, Replit and VS Code with GitHub Copilot. OAuth by default, or an API key for headless clients.
• Starts at: no extra charge. Apollo's MCP page says any plan qualifies, including free, but its docs note that free accounts using personal email addresses cannot search or enrich.
• Limits: email-first. We found no documented LinkedIn sending.

3. Amplemarket: best for teams already on Amplemarket

Amplemarket's MCP server (https://mcp.amplemarket.com/mcp) exposes more than 50 tools across search, enrichment, sequences, inbox, calls, tasks and analytics. The agent can build lead lists, create and edit sequences, add leads to them, and launch a draft sequence so it starts sending. It can draft inbox replies but has no standalone send tool.

• Sends on: whatever channels the launched sequence uses.
• Send safety: you can edit AI-drafted sequence stages before anything sends, and workflows must be reviewed and activated by hand. Access follows each user's permissions.
• Connects to: Claude, ChatGPT, Cursor, Grok and other remote MCP clients. OAuth only.
• Starts at: the Startup plan, listed at $600/month on an annual term on Amplemarket's pricing page. There is no free plan.
• Limits: 100 requests per minute per user. The server only helps if you are already paying for the platform.

4. lemlist: best for multichannel sequences across email, LinkedIn and calls

lemlist's MCP server (https://app.lemlist.com/mcp) lets the agent search lemlist's lead database, enrich leads, read campaign stats and the inbox, and create, start and pause campaigns. lemlist says agents can add leads directly into live email, LinkedIn and call sequences. A bucket setting narrows which tool groups the agent sees, which helps keep the tool list short.

• Sends on: email, LinkedIn and calls, through sequences.
• Send safety: warnings before credits are spent, and admins approve connectors. Tool buckets limit what is shown to the agent, not what it is allowed to do.
• Connects to: Claude (web, desktop and Cowork), Claude Code, ChatGPT, Codex, Cursor and Grok. OAuth or API key.
• Starts at: the Email plan, $55/month billed yearly on lemlist's pricing page.
• Limits: leads added to a live sequence send on that sequence's schedule, so review the sequence before the agent fills it.

5. HeyReach: best for LinkedIn campaigns across many sender accounts

HeyReach's MCP server connects an agent to HeyReach's LinkedIn campaigns. The agent can create lead lists, upload CSVs, read campaign data and enroll contacts into active campaigns, which then send on their own schedule.

• Sends on: LinkedIn, through campaigns. Email depends on its integrations.
• Send safety: we found no documented approval step in the product. Once leads are in an active campaign, the campaign runs.
• Connects to: Claude, Claude Code, n8n, Make, Clay and VS Code. You connect with a per-workspace URL that carries an MCP key, not OAuth.
• Starts at: the Growth plan, $79 per sender per month on HeyReach's pricing page.
• Limits: LinkedIn-first. For a head-to-head, see Sliq vs HeyReach.

6. Clay: best for enrichment and research workflows

Clay's MCP server (https://api.clay.com/v3/mcp) lets the agent search people and companies and run "Functions": enrichment, research or drafting workflows that a Clay admin builds and marks as available to MCP. Results can open as a Clay table.

• Sends on: none natively. Sending only happens if an admin builds a Function that pushes to a sequencer.
• Send safety: strong spend controls. Admins set per-rep credit limits, a limit of 0 blocks further actions, reps can only run approved Functions, and admins can restrict reps to the accounts they own in Salesforce.
• Connects to: Claude, ChatGPT and Codex (beta). OAuth.
• Starts at: paid plans. Clay says MCP is available on all paid modern plans.
• Limits: queries return up to 100 results.

7. HubSpot: best CRM context for HubSpot teams

HubSpot's remote MCP server (https://mcp.hubspot.com) has been generally available since April 2026. The agent can read and write contacts, companies, deals, tickets and products, log calls and emails, create tasks and schedule meetings. Since the Fall 2026 release it can also work with custom objects, pipelines, campaigns and landing pages.

• Sends on: marketing email. The agent can draft, schedule and publish marketing emails. We found no documented one-to-one sales email send.
• Send safety: every action respects the user's HubSpot permissions, and writes are recorded in HubSpot's audit log. A Super Admin approves the app.
• Connects to: any MCP client, with HubSpot-built connectors for Claude and ChatGPT. OAuth 2.1 only.
• Starts at: any HubSpot tier, including Free. Campaign and landing-page tools need Marketing Hub Pro or Enterprise.

8. Salesforce: best for RevOps and admins

Salesforce's hosted MCP servers are generally available. A read-only server and a read-write-delete server cover standard and custom objects, and admins can build custom servers that expose Apex, Flows and named queries.

• Sends on: none documented.
• Send safety: the agent gets exactly the permissions of the user who signs in, the audit trail names that user, and every server is off until an admin enables it.
• Connects to: Claude, ChatGPT, Cursor, Postman, Microsoft Copilot Studio and Microsoft 365 Copilot. OAuth through an External Client App that an admin sets up.
• Starts at: Enterprise Edition or above, plus Developer Edition. Calls count against your daily API limit.
• Limits: setup is admin work. Plan on an afternoon with your Salesforce admin, not five minutes.

9. Attio: best CRM server for startups

Attio's MCP server (https://mcp.attio.com/mcp) offers 48 tools: search and read records, lists, notes, meetings, call recordings and emails, plus create, update, upsert and merge records, tasks and comments. It also has a reporting tool and a SQL tool on some plans.

• Sends on: none. The email tools search and read only.
• Send safety: reads are auto-approved, and Attio documents that writes request your confirmation before creating or updating data. Actions follow workspace permissions.
• Connects to: Claude, ChatGPT, Cursor and other MCP clients. OAuth, with no API keys needed.
• Starts at: Attio's docs say it is available on all plans, and Attio has a free plan.

10. Instantly: best for cold email campaigns and replies

Instantly's MCP server (https://mcp.instantly.ai/mcp) gives the agent its campaigns, leads, analytics, replies and sending-account health. It can create, update and pause campaigns, add and move leads, verify emails, enable warmup and reply to messages.

• Sends on: email, through campaigns and replies.
• Send safety: new campaigns are created as drafts that you activate, and destructive actions such as deletes are clearly marked. Instantly's own docs say the AI will "typically" confirm before major actions, which is a description of the client, not a gate in Instantly.
• Connects to: Claude Desktop, Cursor, n8n and other MCP clients. API key.
• Starts at: API access is included on all Outbound plans, from $47/month for Growth on Instantly's pricing page.

11. ZoomInfo: best for enterprise contact and intent data

ZoomInfo's MCP server (https://mcp.zoominfo.com/mcp) offers 19 tools to search and enrich companies and contacts and to pull intent signals, scoops, news and audiences, plus account and contact research agents.

• Sends on: none. ZoomInfo states that MCP tools cannot write back to ZoomInfo records.
• Send safety: not applicable for sending. Agents can only do what your ZoomInfo account allows, admins can set per-user credit caps, and ZoomInfo prohibits using MCP data to train models.
• Connects to: the widest client list here: Claude, Claude Code, ChatGPT, Codex, Cursor, VS Code Copilot, Perplexity, Microsoft Copilot Studio, Gemini Enterprise and Slack. OAuth or SSO.
• Starts at: a ZoomInfo license. There is no separate MCP fee, but usage draws on your credits.
• Limits: enrichment handles up to 25 records per call.

12. Outreach: best for enrolling prospects into existing sequences

Outreach's MCP server (https://api.outreach.io/mcp/) can read meetings, transcripts, email, sequences, tasks, accounts and opportunities. On the write side it can create accounts, prospects, opportunities, tasks and sequences, add prospects to a sequence and delete records. It has no update tools yet and no direct send tool.

• Sends on: indirectly. Enrolling a prospect adds them to a sequence that already exists in Outreach.
• Send safety: access follows each user's profile permissions. Admins can switch create access (on by default) and delete access (off by default), and deletes require explicit confirmation.
• Connects to: Claude, ChatGPT, Codex, Agentforce, Microsoft Copilot, Gemini CLI, Amazon Quick and VS Code. OAuth 2.1.
• Starts at: the Amplify add-on with active credits on a licensed seat. Pricing is through sales.

Comparison table: all 12 side by side

Other sales MCP servers worth knowing

These are real and official, but they are either data-only or limited enough today that they did not make the main list:

Which sales MCP servers can send on LinkedIn?

Only three on this list reach LinkedIn: Sliq, lemlist and HeyReach. Sliq drafts LinkedIn messages and queues them for approval. lemlist and HeyReach add leads to LinkedIn sequences and campaigns that then send on schedule. The CRM and data servers cannot touch LinkedIn at all.

LinkedIn itself does not publish an MCP server. We found no official LinkedIn or Microsoft server for messaging or Sales Navigator as of October 2026. The LinkedIn MCP servers you will find on GitHub are unofficial. The most popular, stickerdaniel/linkedin-mcp-server, drives your own logged-in browser session, and its README says plainly that LinkedIn's User Agreement prohibits automated access and that accounts using automated tools can be restricted or banned. Others work from copied session cookies. They are fine for experiments on an account you can afford to lose, and a poor fit for the profile you sell from. For the full picture on LinkedIn account risk, see safe LinkedIn automation tools.

What happens when an AI agent sends outreach for you?

It sends under your name, at the speed of a tool call. That is the whole appeal, and it is the risk. One loosely worded prompt like "follow up with everyone who didn't reply" can reach hundreds of people before you read a single message.

There are three places a check can live, and they are not equal:

1. In the AI client. ChatGPT and Claude ask before write actions. That is one click per tool call, a single call can cover a whole batch of people, and both clients let you approve a tool for the rest of a conversation.
2. In the sales tool's settings. Apollo's per-action Approval required setting, Attio's write confirmations and Outreach's admin delete toggle all live here. They control which actions can run.
3. On each message. The message waits in a queue where you read the actual text for that person, then approve, edit or reject it. This is what Sliq's approval queue does, and what Amplemarket's editable sequence stages do at the sequence level.

We built Sliq around the third because it is the only one that shows you what each person will actually read. Whichever tool you pick, check where its gate sits before you let an agent near your sender accounts. For a longer treatment, see AI outbound tools that approve every message before it sends.

How many sales MCP servers should you connect?

Usually two: one for context and one that does the work. Every server you add puts more tools in front of the agent, and more tools means more chances it picks the wrong one. lemlist's tool buckets exist for exactly this reason.

Three setups that work:

• Founder-led or small sales team: Sliq for LinkedIn and email outbound, plus HubSpot or Attio for the CRM. Both CRM servers work on a free plan.
• Email-heavy team: Apollo or Instantly for sequences, plus your CRM's server.
• Enterprise: Salesforce for the CRM, ZoomInfo for data, and Outreach for sequences, all set up by an admin with each user's own permissions.

Which sales MCP server should you choose?

• You want your AI agent to run LinkedIn and email outbound, and you want to see each message first: Sliq.
• You want a contact database and email sequences in one server: Apollo.
• You already run Amplemarket, lemlist, HeyReach, Instantly or Outreach: connect that tool's server first. It is the cheapest upgrade you will make.
• You want CRM context in the conversation: the server for your CRM: HubSpot, Salesforce or Attio.
• You want enrichment or research: Clay, or ZoomInfo if you already have a license.

FAQ

Related reading

• Sliq for ChatGPT and Claude (MCP setup)
• Run LinkedIn outbound from Claude: connect Sliq as an MCP server
• AI outbound tools that approve every message before it sends
• Sliq vs HeyReach
• Safe LinkedIn automation tools