Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 6
- 4 12
- 3 0
- 2 0
- 1 0
Trust in production
- Trust it - 61%
- With caveats - 39%
- Wouldn't - 0%
100% would recommend this server
How reviewers scored it
- Setup & docs 4.2
- Auth experience 4.2
- Reliability 4.2
- Maintainer responsiveness 4.3
Why it got an A
This is Affinity's relationship CRM (affinity.co), not the Affinity design app by Canva. The hosted server is first-party over HTTPS (Streamable HTTP) with browser OAuth via login.affinity.co, or a long-lived API key as a Bearer token. Tool calls run as the signed-in user, so list access, field visibility and role limits still apply, and you can untick the write scope at consent for read-only. The docs list 70 tools: 42 read (people, companies, opportunities, lists, notes, meetings, transcripts, relationship graphs) and 28 that write, delete or merge. Deletes and merges show what they affect and wait for your confirmation; the docs describe no ask-first step for creates or updates, so those run as soon as the client calls them. MCP access needs the Scale, Advanced or Enterprise plan. A local uvx affinity-mcp (MIT, PyPI v0.7.1, 2026-10-28) runs over stdio with an API key only. Affinity's reference says no CRM data, prompts or AI responses are persisted. No advisories found for the PyPI package. Biggest deduction: the server code is closed and there is no public changelog, so maintenance is scored one band lower from the dated PyPI releases and docs; API-key permissions are not specified.
How to connect
Hosted: https://mcp.affinity.co/mcp (Streamable HTTP), OAuth sign-in or an API key as a Bearer token. Needs the Scale, Advanced or Enterprise plan.
Is Affinity CRM MCP safe?
Is Affinity CRM MCP safe to use?
Affinity CRM MCP grades A (strong public trust signals). Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does Affinity CRM MCP have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Affinity CRM MCP support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in CRM & Sales
- A HubSpot MCP ServerOfficial hosted HubSpot server for contacts, companies, deals, tickets, and engagements, with OAuth sign-in.
- A Intercom MCP ServerOfficial hosted Intercom server to search conversations and contacts, with OAuth sign-in and a few write tools.
- A Patto MCP ServerHosted server for PR, link-building and sales outreach that keeps contacts and campaigns, drafts and sends email from your brand's mailbox, and tracks replies and follow-ups.
- A ToolsPad MCP ServerHosted server that connects an assistant to one approved ToolsPad workspace for CRM contacts, opportunities, notes, tasks and forms, with separate read and write OAuth scopes.
- B Attio MCPOfficial hosted Attio server for records, lists, notes, tasks, and activities, with OAuth sign-in.
Community reviews
Clean integration, sensible permissions
Tried it on a side project first, then rolled it out at work. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Finding stale deals
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Set it up once, forgot about it
Started with it as an experiment, now it is a fixture. Sign-in flow was painless and I never had to paste a key into a config file. Happy to run it in production.
Used for Drafting follow-ups from CRM history
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Hooked Affinity CRM MCP into Claude Code and it worked on the first try. Sign-in flow was painless and I never had to paste a key into a config file. Releases come often and the changelog is clear. Good choice if you need Affinity CRM in your agent.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Easy win for our agent setup
I use this almost daily. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Filed an issue and got a reply within two days. Used a fine-grained token with short expiry and it works fine with that. Fine in production if you sandbox it.
Used for Drafting follow-ups from CRM history
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Solid and well behaved
I use this almost daily. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Narrowing the scopes took ten minutes and made me much happier running it.
Used for Enriching leads before outreach
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Recommended it to two teams already
Simple to set up in Cursor, simple to reason about. Auth is handled properly, and revoking access later was one click.
Used for Finding stale deals
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 3/5
No complaints after a month
Installed it on a Friday, it was part of my workflow by Monday. Scoped the token to just what the agent needs and it respected that. Hosted endpoint means no local process to babysit. Would recommend without hesitation.
Used for Logging meeting outcomes automatically
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Our team uses it every day
Tried it on a side project first, then rolled it out at work. Hosted endpoint means no local process to babysit. Updates land regularly, and nothing broke when I upgraded. Used a fine-grained token with short expiry and it works fine with that.
Used for Updating deal notes after calls
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Does what it says, no drama
Replaced a homegrown script with Affinity CRM MCP and have not looked back. Auth is handled properly, and revoking access later was one click. It is in our production agent and I sleep fine.
Used for Updating deal notes after calls
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Trustworthy enough for real work
Installed it on a Friday, it was part of my workflow by Monday. Scoped the token to just what the agent needs and it respected that. Token setup is the fiddliest part, after that it is smooth. Easy recommendation.
Used for Account research before renewals
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
Started with it as an experiment, now it is a fixture. Being official from Affinity counts for a lot when I pitch it to security.
Used for Enriching leads before outreach
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Better than the DIY script it replaced
Our agents call this dozens of times a day. Sign-in flow was painless and I never had to paste a key into a config file. Gave it its own API key so I can revoke it without breaking anything else.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
The Affinity CRM integration I wanted
Simple to set up in Cursor, simple to reason about. Updates land regularly, and nothing broke when I upgraded. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Finding stale deals
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Clear tool names, sensible outputs, very few surprises. Token setup is the fiddliest part, after that it is smooth. Scoped the token to just what the agent needs and it respected that. Keep permissions tight and it is a good tool.
Used for Account research before renewals
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Quietly reliable
Of the Affinity CRM integrations I tried, this one is the most predictable. You can tell it is actively maintained, the rough edges keep getting fixed. Turned on read-only mode on day one, highly recommend doing the same. I would use it in prod, but only with a human approving writes.
Used for Drafting follow-ups from CRM history
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Exactly what I needed from Affinity CRM
Been running this for about a month now. Scoped the token to just what the agent needs and it respected that. Hosted endpoint means no local process to babysit.
Used for Account research before renewals
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Earned a permanent spot in my config
Replaced a homegrown script with Affinity CRM MCP and have not looked back. Sign-in flow was painless and I never had to paste a key into a config file. Recommended, with sensible guardrails.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Set this up for our team after comparing a few options. Filed an issue and got a reply within two days. Worth it, just do not skip the hardening steps.
Used for Logging meeting outcomes automatically
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.