The server takes the user through a browser sign in and holds a scoped token. Nothing is pasted into a config file, and access can be revoked from the vendor side without touching the agent. The bucket is a keyword match over the mcp_auth field, run at build time, and the verbatim field ships in the row beside it so you can check the parse yourself. Where the two disagree, the verbatim field is the fact and the bucket is the convenience.
| Tool | MCP status | Server URL | mcp_auth, verbatim | Gate |
|---|---|---|---|---|
| Attio attio.com | Official MCP | https://mcp.attio.com/mcp +1 more | OAuth - one-time login as the user's own Attio account, no API key needed. Reads auto-approve; writes require confirmation. Permissions mirror... | Free to start |
| Cargo getcargo.ai | Official MCP | https://docs.getcargo.ai/ | unknown for the MCP layer specifically - docs confirm the capability but not its auth mechanism. Cargo's separate REST API (api.getcargo.io/v1) uses... | Free to start |
| FullEnrich fullenrich.com | Official MCP | https://mcp.fullenrich.com/mcp +1 more | oauth (browser sign-in to FullEnrich account; no manual API key needed) | Free to start |
| HubSpot hubspot.com | Official MCP | https://developers.hubspot.com/ai-tools/mcp | OAuth 2.0 for the hosted Remote MCP Server (migrating to OAuth 2.1 with PKCE + refresh-token rotation), explicitly excluding custom Sensitive Data... | Free to start |
| Knit MCP getknit.dev | Official MCP | https://www.getknit.dev/mcp-servers +1 more | Knit-managed OAuth or SAML per connected application; the customer authorises each end application through Knit rather than holding its credentials... | Free to start |
| Leadfeeder (product line rebranded/merged under Dealfront; dealfront.com redirects to leadfeeder.com) leadfeeder.com | Official MCP | https://www.leadfeeder.com/features/mcp-server/ +1 more | OAuth - user signs in with their own Leadfeeder account; vendor states "No keys pasted in." | Free to start |
| Metricool metricool.com | Official MCP | https://ai.metricool.com/mcp +3 more | oauth (browser authorisation in clients that support remote OAuth MCP) or a METRICOOL_USER_TOKEN plus METRICOOL_USER_ID header pair from account... | Free to start |
| PandaDoc pandadoc.com | Official MCP | https://mcp.pandadoc.com/v1/mcp +2 more | OAuth - remote hosted server, add the server URL to an MCP client (Claude Desktop, Claude Code, Cursor, VS Code, Gemini, etc.) and authenticate via... | Free to start |
| Pipedrive pipedrive.com | Official MCP | https://mcp.pipedrive.com/mcp +1 more | OAuth - "Connect in minutes through secure OAuth. No coding, no API development, no developer required." AI assistants can only see/edit what the... | Free to start |
| Relevance AI relevanceai.com | Official MCP | https://mcp.relevanceai.com/ +1 more | OAuth (tokens may expire after inactivity; re-auth via login flow); Viewer/Chat project roles get restricted read-only access automatically | Free to start |
| Retool retool.com | Official MCP | https://mcp.retool.com/mcp +2 more | OAuth 2.0. Endpoint pattern https://<your-retool-instance>/mcp over HTTP. | Free to start |
| Snowflake (Cortex AI, as GTM/RevOps warehouse layer) snowflake.com | Official MCP | https://docs.snowflake.com/en/user-guide/snowflake-c... +1 more | Snowflake OAuth 2.0 by default, or External OAuth (Okta, Microsoft Entra ID); hardcoded PATs/tokens are explicitly discouraged. Exposes Cortex Agent,... | Free to start |
| Tidio tidio.com | Official MCP | https://github.com/TidioPoland/tidio-mcp-connector +1 more | OAuth: the tidio_connect tool opens a browser to Tidio's login page, then stores access and refresh tokens locally in ~/.tidio-mcp/credentials.json. | Free to start |
| Trumpet (sendtrumpet.com) sendtrumpet.com | Official MCP | https://www.sendtrumpet.com/blog-posts/introducing-t... | unknown - vendor states it is "installable in five minutes with no engineering required," implying a simple hosted-connector flow, but the specific... | Free to start |
| Zapier MCP zapier.com | Official MCP | https://mcp.zapier.com/api/v1/connect +3 more | Uses Zapier's existing decade-old app-connection/OAuth infrastructure - you authorize apps the same way you would for a normal Zap, then expose... | Free to start |
| ZoomInfo zoominfo.com | Official MCP | https://mcp.zoominfo.com/mcp +2 more | OAuth for user-level access, or client credentials for service accounts; no API keys stored by the client. A local mcp-remote bridge is used for... | Free to start |
| Allegrow allegrow.co | Official MCP | https://mcp.allegrow.co/mcp +1 more | OAuth - connects through Claude's standard connector authorization flow; user logs into their Allegrow account and grants access explicitly (no... | Paid, self-serve |
| Apollo.io apollo.io | Official MCP | https://github.com/apolloio/apollo-mcp-plugin | OAuth (Apollo.io sign-in/authorization flow in the client) | Paid, self-serve |
| Brand24 brand24.com | Official MCP | https://mcp.brand24.com/v1/mcp +1 more | OAuth; the help article states "MCP access is available to Brand24 subscribers. The data available in MCP reflects what's in your active projects." | Paid, self-serve |
| CatchIntent catchintent.com | Official MCP | https://engine.catchintent.com/mcp +3 more | oauth. The vendor's MCP page states "One-time OAuth 2.1 authorization. Your MCP client opens a browser, you sign into CatchIntent, pick the... | Paid, self-serve |
| Circleback circleback.ai | Official MCP | https://circleback.ai/api/mcp +2 more | OAuth with dynamic client registration, compliant with the authenticated remote MCP spec. Centrally hosted and managed by Circleback. | Paid, self-serve |
| Coresignal coresignal.com | Official MCP | https://mcp.coresignal.com/mcp/v2 +2 more | OAuth 2.1 - per docs, the data key is fetched live with every request and never stored, allowing instant revocation | Paid, self-serve |
| Cube Software cubesoftware.com | Official MCP | https://mcp.cubesoftware.com/ +2 more | OAuth - no manual API key management. | Paid, self-serve |
| DocuSign docusign.com | Official MCP | https://developers.docusign.com/platform/mcp-server/ +2 more | OAuth - Streamable HTTP transport; first connection opens a browser window to sign in and authorize, then reuses credentials. | Paid, self-serve |
| Fellow fellow.ai | Official MCP | https://fellow.app/mcp +1 more | OAuth, with OAuth 2.0 dynamic discovery supported. | Paid, self-serve |
| Front front.com | Official MCP | https://mcp.frontapp.com/mcp +1 more | OAuth 2.1 with PKCE, per teammate. Front's docs state the server does not support Dynamic Client Registration, so the AI client must be able to send... | Paid, self-serve |
| Grain grain.com | Official MCP | https://api.grain.com/_/mcp +2 more | OAuth via the native Claude integration, or manual server-URL setup for other MCP clients. Deal and coaching-feedback tools specifically require a... | Paid, self-serve |
| Granola granola.ai | Official MCP | https://www.pulsemcp.com/servers/granola +2 more | OAuth - no manual API key required. | Paid, self-serve |
| Help Scout helpscout.com | Official MCP | https://mcp.helpscout.net/mcp +1 more | oauth. The vendor's article states the connector registers itself, so the OAuth client ID and secret fields in the AI client are left empty, and... | Paid, self-serve |
| Hex hex.tech | Official MCP | https://app.hex.tech/mcp +1 more | oauth. The docs state "Complete the OAuth flow to authorize access to your Hex workspace"; no token path is documented. "Hex MCP server is currently... | Paid, self-serve |
| HeyGen heygen.com | Official MCP | https://mcp.heygen.com/mcp/v1/ +2 more | OAuth - vendor states "connect your HeyGen account, no API key required"; generation draws down the premium credits already in the user's HeyGen plan... | Paid, self-serve |
| Hootsuite (Social OS) hootsuite.com | Official MCP | https://mcp.hootsuite.com/perch +4 more | oauth. The vendor's setup steps end with "Sign in with your Hootsuite workspace when prompted. Authorization is one-time." | Paid, self-serve |
| La Growth Machine lagrowthmachine.com | Official MCP | https://github.com/LaGrowthMachine/gtm-system +1 more | OAuth - no API key needed; first use opens a browser sign-in directly to the user's La Growth Machine account. | Paid, self-serve |
| LeadIQ leadiq.com | Official MCP | https://mcp.leadiq.com/mcp +1 more | oauth. The vendor's page states the connector is added from the AI client's connector directory and the user then signs in with LeadIQ credentials to... | Paid, self-serve |
| Mixmax mixmax.com | Official MCP | https://mcp.mixmax.com/mcp +2 more | OAuth 2.0 authorization code flow, scoped to the connecting user's account. Read-only. | Paid, self-serve |
| Nutshell CRM nutshell.com | Official MCP | https://app.nutshell.com/mcp +1 more | oauth. The vendor's article instructs the user to add the server URL as a custom connector, then log in to Nutshell and approve access on a consent... | Paid, self-serve |
| PhantomBuster phantombuster.com | Official MCP | https://hub.phantombuster.com/docs/mcp-server +1 more | OAuth - first connection redirects to PhantomBuster sign-in/authorization, then workspace selection. | Paid, self-serve |
| RingCentral App Connect MCP ringcentral.com | Official MCP | https://unified-crm-extension.labs.ringcentral.com/m... +3 more | oauth plus a second, separate CRM link. The docs describe a two-layer model: RingCentral identity via OAuth 2.0 or SSO established when the server is... | Paid, self-serve |
| RocketReach rocketreach.co | Official MCP | https://rocketreach.co/resources/products/mcp/ +1 more | OAuth 2.1, browser-based; ties to your existing RocketReach account and shares its credit pool (no separate API key needed for the official connector) | Paid, self-serve |
| Snov.io snov.io | Official MCP | https://mcp.snov.io/mcp +1 more | OAuth - user reviews and approves the connection through their Snov.io account; no raw API key is shared with the AI assistant | Paid, self-serve |
| SparkToro sparktoro.com | Official MCP | https://sparktoro.com/mcp +1 more | OAuth (one-click sign-in with an existing SparkToro account); documented to work with Claude Desktop, Claude Code, Cursor, and ChatGPT. | Paid, self-serve |
| Superblocks superblocks.com | Official MCP | https://api.superblocks.com/mcp +1 more | unknown - the announcement doesn't specify the auth method; the feature is Enterprise-only, implying an admin/OAuth-gated setup, but this isn't... | Paid, self-serve |
| Typeform typeform.com | Official MCP | https://api.typeform.com/mcp +2 more | oauth. The docs state "Authorization is OAuth 2.0, and your client is prompted on first connect." EU-hosted accounts use different endpoints, and a... | Paid, self-serve |
| Vainu vainu.com | Official MCP | https://mcp.vainu.ai/mcp +2 more | OAuth 2.0 with PKCE, scoped to existing Vainu permissions, but NOT enabled by default. The vendor help centre says it "isn't automatically available... | Paid, self-serve |
| Versium REACH versium.com | Official MCP | https://app.versium.com/mcp/reach +2 more | OAuth, and the client must support dynamic client registration. | Paid, self-serve |
| Zoho CRM zoho.com | Official MCP | https://www.zoho.com/crm/developer/mcp.html | oauth. The vendor's page describes a four-step setup ending in "Authenticate via OAuth. Connect your Zoho CRM account. Your agent inherits your... | Paid, self-serve |
| Amplemarket amplemarket.com | Official MCP | https://mcp.amplemarket.com/mcp +3 more | OAuth 2.0 sign-in with the Amplemarket account in the browser; the knowledge article says no API keys are needed. Rate limit 100 requests per minute... | Enterprise leaning |
| Dialpad dialpad.com | Official MCP | https://mcp-public.us.karehq.com/mcp +3 more | oauth. The docs state the server is hosted by Dialpad, supports Dynamic Client Registration so clients register themselves on first connect, acts on... | Enterprise leaning |
| Paragon (ActionKit MCP) useparagon.com | Official MCP | https://github.com/useparagon/paragon-mcp +1 more | Paragon user token plus Connect Portal OAuth. The distinguishing feature is that the authorisation prompt is embedded in the calling product's own... | Enterprise leaning |
| Sybill sybill.ai | Official MCP | https://mcp.sybill.ai/mcp +1 more | Browser-based sign-in / OAuth on first connection from an MCP client such as Claude Desktop. | Enterprise leaning |
| 6sense 6sense.com | Official MCP | https://6sense.com/platform/mcp-server/ +1 more | OAuth using existing 6sense platform login (no separate API key setup per vendor docs) | Enterprise only |
| Apollo.io Sequences (Emailer Campaigns) apollo.io | Official MCP | https://github.com/apolloio/apollo-mcp-plugin +1 more | OAuth (Apollo.io sign-in/authorization flow; no API key required for this MCP) | Enterprise only |
| Common Room commonroom.io | Official MCP | https://www.commonroom.io/docs/using-common-room/mcp... +1 more | oauth (OAuth 2.1, browser-based, tokens scoped to the user's own Common Room permissions) | Enterprise only |
| Common Room commonroom.io | Official MCP | https://www.commonroom.io/docs/using-common-room/mcp... +1 more | oauth (OAuth 2.1, browser-based, tokens scoped to the user's own Common Room permissions) | Enterprise only |
| Crossbeam crossbeam.com | Official MCP | https://mcp.crossbeam.com/mcp +1 more | OAuth with Crossbeam login credentials, with a permission consent screen at connect time. | Enterprise only |
| Crunchbase crunchbase.com | Official MCP | https://mcp.crunchbase.com +2 more | OAuth 2.1. The user signs in with their normal Crunchbase account in the AI client's browser flow; Crunchbase then checks that the account holds an... | Enterprise only |
| G2 Buyer Intent g2.com | Official MCP | https://mcp.g2.com/mcp +2 more | OAuth 2.0 Authorization Code with PKCE. You register an OAuth app in the G2 Developer Dashboard at https://my.g2.com/developers to get a client_id... | Enterprise only |
| Looker cloud.google.com | Official MCP | https://docs.cloud.google.com/looker/docs/mcp +3 more | The managed server uses OAuth 2.1 and an admin "must manually register AI agents as OAuth clients via the API Explorer"; all tools are "disabled by... | Enterprise only |
| mcp.run / TurboMCP turbomcp.ai | Official MCP | https://github.com/dylibso/mcp.run-servlets +1 more | Integrates with a team's own OIDC-compatible identity provider; handles OAuth and Dynamic Client Registration for the servers it fronts. | Enterprise only |
| Nooks nooks.ai | Official MCP | https://mcp.nooks.in/mcp +1 more | OAuth 2.0 authorization code with PKCE (S256), issuer https://oauth.nooks.in, per the server's own /.well-known/oauth-authorization-server metadata;... | Enterprise only |
| Outreach outreach.ai | Official MCP | https://api.outreach.io/mcp/ +1 more | OAuth 2.1 with Dynamic Client Registration; also requires the org-level "Amplify" add-on to be enabled and admin-toggled - not available to every... | Enterprise only |
| Salesforce (core CRM/platform) + Agentforce salesforce.com | Official MCP | https://github.com/salesforcecli/mcp +2 more | OAuth + PKCE via an External Client App (scopes mcp_api, refresh_token); every MCP call runs under the authenticated user's own permissions... | Enterprise only |
| Salesloft salesloft.com | Official MCP | https://mcp.salesloft.com/mcp +2 more | unknown exact flow - vendor press material describes it as natively listed in Claude's connector directory "with no custom setup required," implying... | Enterprise only |
| Showpad showpad.com | Official MCP | https://mcp.showpad.com/mcp/v1 +2 more | OAuth; the docs say each end user authenticates with their own Showpad credentials and can only search and retrieve content they are already... | Enterprise only |
| Actively actively.ai | Official MCP | https://app.actively.ai/docs/mcp +2 more | oauth. The vendor docs state "MCP access uses OAuth 2.1 with WorkOS." Tools are read-only: "Public tools are read-only, non-destructive, idempotent,... | Gate unknown |
| Pylon usepylon.com | Official MCP | https://mcp.usepylon.com +1 more | OAuth 2.0 over stateless streamable HTTP; access is permission-scoped so a connected AI tool can only see/change what the authenticated user could... | Gate unknown |
| Trumpet sendtrumpet.com | Official MCP | https://trumpet.app/api/mcp +2 more | OAuth 2.0 - vendor help-center doc confirms "Authenticate via trumpet (OAuth 2.0)"; setup flow is add-custom-connector → paste MCP server URL →... | Gate unknown |
| Bonjoro bonjoro.com | Community MCP | https://zapier.com/mcp/bonjoro | Rides a Zapier account connection (OAuth to Zapier, which holds the Bonjoro-side connection). | Paid, self-serve |
| Loopio loopio.com | Community MCP | https://github.com/fredericboyer/loopio-mcp | OAuth2 client credentials (Client ID and Secret from the Loopio admin panel) against the Loopio Data API v2, per the repo README; runs locally over... | Enterprise only |
Counted 2026-09-27 from directory.json and reconciled against tools_recount.py. Nothing on this page is hand maintained: it is a filter over the same 1,252 entries the rest of the site is built from. Ordered by the published rule: official MCP first, then community, then unknown, then n/a, then none-found; within each band gate order is free, paid, enterprise-leaning, enterprise-only, unknown; then alphabetical by name. Computed, never curated, never purchasable.