Salesflare

Name: Salesflare MCP Server
Availability: InStock
Author: Salesflare

Sales & CRM16 tools

Read accounts, contacts, opportunities and tasks from your AI agent, and create or update them. All 16 tools are read, create or update — Salesflare's REST API publishes 8 DELETE operations and the MCP server exposes none of them. The OAuth grant is identity-only and does not separate read from write.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on 19 August 2026.

Anthropic states this reflects the level of review a connector received, not a security audit.

Connect Salesflare via MCP

https://mcp.salesflare.com/mcp

Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.

Salesflare Tools & Capabilities (16)

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

No delete tools exist, which is a ceiling and also a gap. An agent cannot remove a contact on a data-subject erasure request. That work stays in the Salesflare UI or its REST API, which publishes 8 DELETE operations.
The OAuth grant does not separate read from write. Advertised scopes are openid and offline_access only. Per-tool control in the MCP client is the only enforcement point for the eight write tools.
Per-user permission enforcement is asserted but not documented. Anthropic's paragraph says the connected user's Salesflare permissions apply; neither Salesflare's connector article nor its permissions article describes how role and group scopes map onto MCP tools. We could not verify it and did not authenticate to try.
Salesflare's default is team-wide sharing. Everything is shared with the team except My Contacts and account timelines, so "the connected user's data" is close to "the team's data" unless permissions are configured.
Permissions are a Pro plan feature. At $29/user/month annually, the Growth plan has no internal privacy settings. The scoping that would narrow a connector's reach costs $49/user/month annually.
Records contain automatically gathered data. Salesflare documents enrichment from public sources, email signatures and company websites. An agent reading a contact reads that material, and the output does not mark which fields were volunteered and which were gathered.
No tool annotations were readable. The endpoint returns 401 to an anonymous handshake, so no readOnlyHint or destructiveHint values could be confirmed. The verb census rests on the directory names cross-checked against the REST API, not on annotations.
No tool descriptions or schemas are published here. Anthropic's snapshot carries names only, and the gated endpoint prevented a live tools/list. Argument shapes, filter capabilities, pagination behaviour and result caps are all unknown to us.
The directory paragraph over-claims slightly. It says Claude can read notes, calls and meetings and create or update notes, but no tool with those names exists. Interaction history is most likely reached through get_account_feed; we could not confirm the payload.
Deletes described conditionally. The paragraph's phrase about delete actions "where available" may read as implying some are available. None are in this tool set.
No rate limits are published for the MCP server. Salesflare's REST API documents bearer-token authentication but we found no MCP-specific request budget, so a busy agent's ceiling is unknown.
Prompts are unknown, not absent. The snapshot records an empty prompt_names list and the gated endpoint prevented a prompts/list check.
The implicit grant is advertised. Whether the MCP resource accepts tokens from that deprecated flow was not tested.
No lead-credit interaction is documented. Salesflare's email-finder feature is metered in lead credits (5/month on Growth), and no MCP tool appears to touch it, but the connector's relationship to that meter is not addressed by any source we found.

Frequently asked questions

Can the Salesflare MCP server delete my CRM records?

No. None of the 16 tools deletes anything — every one is a read, a create or an update. We checked this against Salesflare's own OpenAPI specification, which publishes 8 DELETE operations covering accounts, contacts, opportunities, tasks, tags, meetings, messages and custom fields. The connector exposes none of them, so the destructive quarter of the REST API is simply absent.

Does the Salesflare MCP server only read data, or can it write?

It writes. Eight of the 16 tools are writes: four create tools for accounts, contacts, opportunities and tasks, and four matching update tools. The other eight are reads. Anthropic's directory says the same in prose rather than a one-word label, and Salesflare's help centre advises starting with read-only questions before moving on to creating or updating data.

Does the Salesflare connector respect each user's CRM permissions?

Salesflare states the connector follows the connected user's Salesflare permissions, but neither its help centre nor the directory documents how role and group scopes map onto individual tools. That gap matters because Salesflare shares everything with the team by default except My Contacts and account timelines, and the permissions feature that narrows this requires the Pro plan.

Which OAuth scopes does the Salesflare MCP server require?

Two, and neither describes CRM access. Salesflare's protected-resource metadata advertises openid and offline_access — an identity scope and a refresh-token scope. There is no read scope and no write scope, so the grant cannot separate the eight read tools from the eight write tools. Approving the connector approves its whole surface at once.

What Salesflare plan do I need for the Claude connector?

Salesflare documents no plan requirement for the connector itself, and its help centre gates nothing behind a tier. The gate that matters is indirect: user permissions are a Pro plan feature at 49 dollars per user monthly billed annually. On the 29-dollar Growth plan there are no internal privacy settings, so a connected agent reaches shared team data.

Why do Salesflare CRM records contain data the contact never gave me?

Because Salesflare enriches records automatically from public sources. Salesflare documents that contacts linked to publicly available data may get profile pictures, social media links and previous positions filled in, and that email signatures can populate phone number, role and address. Accounts are enriched from the company website. An agent reading a contact reads that gathered data too.

How many tools does the Salesflare MCP server have?

Sixteen, and the number is trustworthy in a way many listings are not. Every entry in Anthropic's directory snapshot is a valid snake_case identifier, with no display names mixed in, and all 16 map onto operations in Salesflare's published REST API. The surface is narrower than the API behind it, which carries 71 operations across 46 paths.

Sources

Salesflare help centre — How can I use Salesflare with ChatGPT or Claude? — https://howto.salesflare.com/en/articles/14432597-how-can-i-use-salesflare-with-chatgpt-or-claude (fetched 2026-08-19 as Markdown via the .md suffix). Source of the endpoint confirmation, the connection steps, the enable-only-the-tools-you-need advice, the start-with-read-only guidance, and the workspace-administrator note. · retrieved 2026-08-19
Salesflare help centre — How does Salesflare enrich accounts and contacts? — https://howto.salesflare.com/en/articles/4815162-how-does-salesflare-enrich-accounts-and-contacts (fetched 2026-08-19 as Markdown). Source of every enrichment claim: public data sources, email signatures, company-website account enrichment, and the lightning-bolt indicator. · retrieved 2026-08-19
Salesflare help centre — Can I set user permissions? — https://howto.salesflare.com/en/articles/4664889-can-i-set-user-permissions (fetched 2026-08-19 as Markdown). Source of the four roles, the group model, the view and create/edit/delete scopes, the admin built-in rights, and the Pro-plan gate on permissions. · retrieved 2026-08-19
Salesflare help centre — What is shared with my team in Salesflare? — https://howto.salesflare.com/en/articles/1012823-what-is-shared-with-my-team-in-salesflare (fetched 2026-08-19 as Markdown). Source of the default team-sharing behaviour and the My Contacts and account-timeline exceptions. · retrieved 2026-08-19
Salesflare help centre — What is included in the Pro plan? — https://howto.salesflare.com/en/articles/4665458-what-is-included-in-the-pro-plan (fetched 2026-08-19 as Markdown). Source of the three-plan structure and the $29 and $49 per-user monthly annual pricing, and the 5 lead credits per month on Growth. · retrieved 2026-08-19
Salesflare REST API specification — https://api.salesflare.com/openapi.json (fetched 2026-08-19; Swagger 2.0). Source of the 71-operation, 46-path count, the 34/14/15/8 verb split, the eight DELETE paths, and every REST mapping in the tool table. · retrieved 2026-08-19
Doc-order note: robots.txt first, then llms.txt, then the .md suffix, then sitemap. salesflare.com/robots.txt allows all crawlers and names ClaudeBot, Claude-User, GPTBot, PerplexityBot and others explicitly as allowed (fetched 2026-08-19). howto.salesflare.com/robots.txt disallows three paths and sets a 1-second crawl delay (fetched 2026-08-19). No Content-Signal axes are published on salesflare.com, howto.salesflare.com or app.salesflare.com — all three checked 2026-08-19. howto.salesflare.com/llms.txt exists and indexes the help centre with .md article links, which is how every article above was located; salesflare.com/llms.txt returns the site's HTML shell. No sub-URLs were guessed. · retrieved 2026-08-19
Live anonymous probe — 2026-08-19: an MCP initialize POST to https://mcp.salesflare.com/mcp returns HTTP 401 with a 12-byte text/plain body and a www-authenticate header naming realm="MCP" and the root-form resource_metadata URL. No authentication was attempted and no tool was called. · retrieved 2026-08-19
Live RFC 9728 probe — all three path forms tried 2026-08-19: root and path-insert return byte-identical 185-byte 200s; path-append returns a 9-byte text/plain 404 · retrieved 2026-08-19
Live RFC 8414 probe — https://mcp.salesflare.com/.well-known/oauth-authorization-server (fetched 2026-08-19; the path-insert form 404s, and /.well-known/openid-configuration returns an identical document) · retrieved 2026-08-19
Anthropic connector directory — https://claude.ai/directory/6e8d7c79-70a3-469d-855f-a76341668f74 (snapshot 2026-08-16; source of the 16-tool list, the full permissions paragraph, the empty prompt_names, the partner tier, the four categories and the streamable-HTTP transport) · retrieved 2026-08-16
Salesflare support — support@salesflare.com · Privacy — https://salesflare.com/privacy