01 · Write
The model moves the stage
HubSpot, Salesforce and Pipedrive can update records from their own servers. A prompt that says mark it won will do that, under the user's name, with a log line that looks like the seller.
For sales teams in production and energy companies
A CRM MCP server lets a seller ask which deals are open, who owns them and what the next date is. HubSpot, Salesforce and Pipedrive already ship a server. CAS, cobra, weclapp, SuperOffice, SugarCRM and Sage CRM do not, as of 6 October 2026. Pexon signs a read-only tool list either way.
No market-share table
Ten systems, not a ranking. The DACH overview of 14 May 2026 says about 40 CRM vendors sell to Mittelstand or enterprise, and it refuses a share figure. The ten below are the generalists it names and the specialists it gives customer counts for, plus Dynamics, which it names as the base for industry CRM.
Checked 6 October 2026
| CRM | Vendor MCP | The sales question we will sign |
|---|---|---|
| HubSpot | Hosted, generally available, writes included from 13 April 2026 | Open deals and owners. Activities only if sensitive data is off |
| Salesforce | Hosted MCP, GA. Authorization code and PKCE. No service account | My open opportunities past close date |
| Pipedrive | Vendor server on every plan, OAuth, plan token limits | Open deals with no activity, stage left unchanged |
| CAS genesisWorld | None from CAS. Community server uses a password | Address dossier and appointments, as the asking user |
| cobra CRM | None. Endpoints are created per table | Only a table an admin already exposed as GET |
| weclapp | None. Tenant REST, v1 and v2 | Open quotations. Accept stays in weclapp |
| SuperOffice | None. No client-credentials login | Sale, stakeholders, next due date |
| SugarCRM | None. Password grant, then a refresh token | My open opportunities and the account |
| Sage CRM | None. User password on the call, territory still applies | Opportunities in my territory, quote status |
| Dynamics 365 | Finance, SCM and Business Central, on the existing page | Not a sales-object catalogue. Do not point a deal question at that server |
Customer counts, where we repeat one, are the DACH overview's own 'about' figures: CAS 20,000+, cobra 18,000+, weclapp 12,000+, SuperOffice 6,000+, SugarCRM 5,000+. Sage CRM is listed there without a count.
The list your IT signs
The same three lines on every CRM in the ten. The allow line is filled from that product's documented read. The deny line does not change.
caller: the CRM user who asked
allow: my_open_deals, next_date, open_quote
deny: update_stage, accept_quote, send_mailIf the vendor server can write, the deny line is still the contract. A capability on the vendor side is not a permission on ours.
01 · Write
HubSpot, Salesforce and Pipedrive can update records from their own servers. A prompt that says mark it won will do that, under the user's name, with a log line that looks like the seller.
02 · Admin
A weclapp administrator token, a Sugar impersonation endpoint, or a shared CAS password all answer questions the asking person is not allowed to ask.
03 · Mix
The Dynamics connector on this site is Finance, Supply Chain and Business Central. A sales opportunity is not that catalogue.
When the vendor server is the right buy
If the seller only needs HubSpot, Salesforce or Pipedrive inside Claude or ChatGPT, turn on the vendor server and stop. Build ours when the list must stay read-only, or when the CRM is CAS, cobra, weclapp, SuperOffice, Sugar or Sage. The per-system pages are linked below. The questions themselves are the sales questions and the quote questions.
The one you already run. The DACH overview of 14 May 2026 does not publish market shares. It names HubSpot, Salesforce and Pipedrive as the horizontal systems, and CAS, cobra, SuperOffice and weclapp as the specialists with stated customer counts. We do not pick a winner. We open the tenant you have.
No. HubSpot, Salesforce and Pipedrive ship one. Those servers can also write. The blueprint still writes down a read-only list, because a sales question does not need a stage change. Where the vendor has no server, we build the read against the documented API.
Not on the list we sign. Accepting a weclapp quotation, posting a SuperOffice sale, or updating a Pipedrive deal are all real API calls. They stay with the person who already has that right in the CRM.
A two-week Readiness Blueprint at €4,900 net. We name the CRM, the release and the three sales questions, and we test that two users do not see each other's pipeline. A production connector is usually a pilot from €15,000.
Next step
Two weeks. Bring a test user who is not an administrator. We tell you whether the vendor server is enough, or which read we still have to build.