io.github.mindstone/mcp-server-hubspot

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  warn25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  tool "complete_hubspot_auth" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "create_hubspot_deal" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "create_hubspot_lead" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "list_hubspot_pipelines" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "list_hubspot_list_members" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "add_hubspot_list_members" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "remove_hubspot_list_members" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "search_hubspot_kb_articles" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "import_hubspot_file_from_url" param "url" description: off-vendor URL in a description (example.com); capability text should not name where data goes. tool "update_hubspot_workflow" description: bare 'IMPORTANT:' prose in a description (tag form is high-confidence; prose is warn). tool "list_hubspot_ticket_threads" description: imperative telling the model it must read/send/attach something.

• Supply chain

  warn25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  install hook "prepare" present and not a recognized benign build command

• Credential hygiene

  pass15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

• Permission scope

  pass15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.

• Version behavior

  fail10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  vs prior 0.4.0 (patch bump): new tool "list_hubspot_accounts" touches a sensitive surface (email/exec/net/fs); new tool "authenticate_hubspot_account" touches a sensitive surface (email/exec/net/fs); new tool "complete_hubspot_auth" touches a sensitive surface (email/exec/net/fs); new tool "remove_hubspot_account" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_contacts" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_contact" appeared; new tool "create_hubspot_contact" touches a sensitive surface (email/exec/net/fs); new tool "update_hubspot_contact" appeared; new tool "delete_hubspot_contact" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_companies" appeared; new tool "get_hubspot_company" appeared; new tool "create_hubspot_company" appeared; new tool "update_hubspot_company" appeared; new tool "delete_hubspot_company" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_deals" appeared; new tool "get_hubspot_deal" appeared; new tool "create_hubspot_deal" appeared; new tool "update_hubspot_deal" appeared; new tool "delete_hubspot_deal" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_tickets" appeared; new tool "get_hubspot_ticket" appeared; new tool "create_hubspot_ticket" appeared; new tool "update_hubspot_ticket" appeared; new tool "delete_hubspot_ticket" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_leads" appeared; new tool "get_hubspot_lead" appeared; new tool "create_hubspot_lead" appeared; new tool "update_hubspot_lead" appeared; new tool "delete_hubspot_lead" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_tasks" appeared; new tool "get_hubspot_task" appeared; new tool "create_hubspot_task" appeared; new tool "update_hubspot_task" appeared; new tool "delete_hubspot_task" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_notes" appeared; new tool "get_hubspot_note" appeared; new tool "update_hubspot_note" appeared; new tool "delete_hubspot_note" touches a sensitive surface (email/exec/net/fs); new tool "create_hubspot_note" touches a sensitive surface (email/exec/net/fs); new tool "create_hubspot_association" appeared; new tool "get_hubspot_associations" appeared; new tool "delete_hubspot_association" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_association_labels" appeared; new tool "create_hubspot_labeled_association" appeared; new tool "list_hubspot_properties" appeared; new tool "get_hubspot_property" touches a sensitive surface (email/exec/net/fs); new tool "create_hubspot_property" appeared; new tool "update_hubspot_property" appeared; new tool "delete_hubspot_property" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_property_groups" appeared; new tool "create_hubspot_property_group" appeared; new tool "list_hubspot_owners" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_owner" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_pipelines" appeared; new tool "get_hubspot_pipeline" appeared; new tool "search_hubspot_calls" appeared; new tool "search_hubspot_meetings" appeared; new tool "get_hubspot_call" appeared; new tool "get_hubspot_meeting" appeared; new tool "search_hubspot_emails" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_email" touches a sensitive surface (email/exec/net/fs); new tool "create_hubspot_call" appeared; new tool "create_hubspot_meeting" appeared; new tool "get_contact_engagements" appeared; new tool "search_hubspot_products" appeared; new tool "get_hubspot_product" appeared; new tool "create_hubspot_product" appeared; new tool "update_hubspot_product" appeared; new tool "search_hubspot_line_items" appeared; new tool "get_hubspot_line_item" appeared; new tool "create_hubspot_line_item" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_object" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_object" touches a sensitive surface (email/exec/net/fs); new tool "create_hubspot_object" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_forms" appeared; new tool "get_hubspot_form" appeared; new tool "get_hubspot_form_submissions" appeared; new tool "get_hubspot_analytics_report" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_marketing_emails" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_marketing_email" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_email_statistics" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_lists" appeared; new tool "get_hubspot_list" appeared; new tool "list_hubspot_list_members" touches a sensitive surface (email/exec/net/fs); new tool "batch_read_hubspot_contacts" touches a sensitive surface (email/exec/net/fs); new tool "add_hubspot_list_members" touches a sensitive surface (email/exec/net/fs); new tool "remove_hubspot_list_members" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_kb_articles" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_kb_article" touches a sensitive surface (email/exec/net/fs); new tool "search_hubspot_kb_articles" touches a sensitive surface (email/exec/net/fs); new tool "upload_hubspot_file" touches a sensitive surface (email/exec/net/fs); new tool "import_hubspot_file_from_url" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_file" touches a sensitive surface (email/exec/net/fs); new tool "delete_hubspot_file" touches a sensitive surface (email/exec/net/fs); new tool "attach_file_to_record" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_workflows" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_workflow" touches a sensitive surface (email/exec/net/fs); new tool "create_hubspot_workflow" appeared; new tool "update_hubspot_workflow" appeared; new tool "delete_hubspot_workflow" touches a sensitive surface (email/exec/net/fs); new tool "activate_hubspot_workflow" appeared; new tool "deactivate_hubspot_workflow" appeared; new tool "enrol_in_hubspot_workflow" appeared; new tool "list_hubspot_ticket_threads" touches a sensitive surface (email/exec/net/fs); new tool "list_hubspot_thread_messages" touches a sensitive surface (email/exec/net/fs); new tool "get_hubspot_thread_message_original_content" touches a sensitive surface (email/exec/net/fs).

• Transport config

  unscannable10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  local stdio server: no remote transport or auth surface, and no phone-home/telemetry signal found in source. Absence of transport findings is NOT a safety guarantee — phone-home hosts can be constructed at runtime and defeat static analysis.