The server takes the user through a browser sign in and holds a scoped token. Nothing is pasted into a config file, and access can be revoked from the vendor side without touching the agent. The bucket is a keyword match over the mcp_auth field, run at build time, and the verbatim field ships in the row beside it so you can check the parse yourself. Where the two disagree, the verbatim field is the fact and the bucket is the convenience.
| Tool | MCP status | Server URL | mcp_auth, verbatim | Gate |
|---|---|---|---|---|
| Attio attio.com | Official MCP | https://docs.attio.com/mcp/overview +1 more | OAuth - one-time login as the user's own Attio account, no API key needed. Reads auto-approve; writes require confirmation. Permissions mirror... | Free to start |
| Cargo getcargo.ai | Official MCP | https://docs.getcargo.ai/ | unknown for the MCP layer specifically - docs confirm the capability but not its auth mechanism. Cargo's separate REST API (api.getcargo.io/v1) uses... | Free to start |
| FullEnrich fullenrich.com | Official MCP | https://mcp.fullenrich.com/mcp +1 more | oauth (browser sign-in to FullEnrich account; no manual API key needed) | Free to start |
| HubSpot hubspot.com | Official MCP | https://developers.hubspot.com/ai-tools/mcp | OAuth 2.0 for the hosted Remote MCP Server (migrating to OAuth 2.1 with PKCE + refresh-token rotation), explicitly excluding custom Sensitive Data... | Free to start |
| Leadfeeder (product line rebranded/merged under Dealfront; dealfront.com redirects to leadfeeder.com) leadfeeder.com | Official MCP | https://www.leadfeeder.com/features/mcp-server/ +1 more | OAuth - user signs in with their own Leadfeeder account; vendor states "No keys pasted in." | Free to start |
| PandaDoc pandadoc.com | Official MCP | https://developers.pandadoc.com/docs/how-to-use-the-... +1 more | OAuth - remote hosted server, add the server URL to an MCP client (Claude Desktop, Claude Code, Cursor, VS Code, Gemini, etc.) and authenticate via... | Free to start |
| Pipedrive pipedrive.com | Official MCP | https://www.pipedrive.com/en/features/mcp-server | OAuth - "Connect in minutes through secure OAuth. No coding, no API development, no developer required." AI assistants can only see/edit what the... | Free to start |
| Relevance AI relevanceai.com | Official MCP | https://relevanceai.com/docs/integrations/mcp/progra... | OAuth (tokens may expire after inactivity; re-auth via login flow); Viewer/Chat project roles get restricted read-only access automatically | Free to start |
| Retool retool.com | Official MCP | https://retool.com/blog/retool-mcp-server | OAuth 2.0. Endpoint pattern https://<your-retool-instance>/mcp over HTTP. | Free to start |
| Snowflake (Cortex AI, as GTM/RevOps warehouse layer) snowflake.com | Official MCP | https://docs.snowflake.com/en/user-guide/snowflake-c... | Snowflake OAuth 2.0 by default, or External OAuth (Okta, Microsoft Entra ID); hardcoded PATs/tokens are explicitly discouraged. Exposes Cortex Agent,... | Free to start |
| Trumpet (sendtrumpet.com) sendtrumpet.com | Official MCP | https://www.sendtrumpet.com/blog-posts/introducing-t... | unknown - vendor states it is "installable in five minutes with no engineering required," implying a simple hosted-connector flow, but the specific... | Free to start |
| Zapier MCP zapier.com | Official MCP | https://mcp.zapier.com | Uses Zapier's existing decade-old app-connection/OAuth infrastructure - you authorize apps the same way you would for a normal Zap, then expose... | Free to start |
| ZoomInfo zoominfo.com | Official MCP | https://mcp.zoominfo.com/mcp +2 more | OAuth for user-level access, or client credentials for service accounts; no API keys stored by the client. A local mcp-remote bridge is used for... | Free to start |
| Allegrow allegrow.co | Official MCP | https://www.allegrow.co/knowledge-base/claude-email-... | OAuth - connects through Claude's standard connector authorization flow; user logs into their Allegrow account and grants access explicitly (no... | Paid, self-serve |
| Apollo.io apollo.io | Official MCP | https://github.com/apolloio/apollo-mcp-plugin | OAuth (Apollo.io sign-in/authorization flow in the client) | Paid, self-serve |
| Circleback circleback.ai | Official MCP | https://circleback.ai/api/mcp +2 more | OAuth with dynamic client registration, compliant with the authenticated remote MCP spec. Centrally hosted and managed by Circleback. | Paid, self-serve |
| Coresignal coresignal.com | Official MCP | https://coresignal.com/mcp-server/ | OAuth 2.1 - per docs, the data key is fetched live with every request and never stored, allowing instant revocation | Paid, self-serve |
| Cube Software cubesoftware.com | Official MCP | https://www.cubesoftware.com/mcp +1 more | OAuth - no manual API key management. | Paid, self-serve |
| DocuSign docusign.com | Official MCP | https://developers.docusign.com/platform/mcp-server/ +2 more | OAuth - Streamable HTTP transport; first connection opens a browser window to sign in and authorize, then reuses credentials. | Paid, self-serve |
| Grain grain.com | Official MCP | https://developers.grain.com/mcp +1 more | OAuth via the native Claude integration, or manual server-URL setup for other MCP clients. Deal and coaching-feedback tools specifically require a... | Paid, self-serve |
| HeyGen heygen.com | Official MCP | https://mcp.heygen.com/mcp/v1/ +2 more | OAuth - vendor states "connect your HeyGen account, no API key required"; generation draws down the premium credits already in the user's HeyGen... | Paid, self-serve |
| La Growth Machine lagrowthmachine.com | Official MCP | https://github.com/LaGrowthMachine/gtm-system +1 more | OAuth - no API key needed; first use opens a browser sign-in directly to the user's La Growth Machine account. | Paid, self-serve |
| Mixmax mixmax.com | Official MCP | https://mcp.mixmax.com/mcp +2 more | OAuth 2.0 authorization code flow, scoped to the connecting user's account. Read-only. | Paid, self-serve |
| PhantomBuster phantombuster.com | Official MCP | https://hub.phantombuster.com/docs/mcp-server +1 more | OAuth - first connection redirects to PhantomBuster sign-in/authorization, then workspace selection. | Paid, self-serve |
| RocketReach rocketreach.co | Official MCP | https://rocketreach.co/resources/products/mcp/ +1 more | OAuth 2.1, browser-based; ties to your existing RocketReach account and shares its credit pool (no separate API key needed for the official connector) | Paid, self-serve |
| Snov.io snov.io | Official MCP | https://mcp.snov.io/mcp +1 more | OAuth - user reviews and approves the connection through their Snov.io account; no raw API key is shared with the AI assistant | Paid, self-serve |
| SparkToro sparktoro.com | Official MCP | https://sparktoro.com/mcp +1 more | OAuth (one-click sign-in with an existing SparkToro account); documented to work with Claude Desktop, Claude Code, Cursor, and ChatGPT. | Paid, self-serve |
| Superblocks superblocks.com | Official MCP | https://superblocks.com/blog/superblocks-mcp | unknown - the announcement doesn't specify the auth method; the feature is Enterprise-only, implying an admin/OAuth-gated setup, but this isn't... | Paid, self-serve |
| Vainu vainu.com | Official MCP | https://mcp.vainu.ai/mcp +2 more | OAuth 2.0 with PKCE, scoped to existing Vainu permissions, but NOT enabled by default. The vendor help centre says it "isn't automatically available... | Paid, self-serve |
| Versium REACH versium.com | Official MCP | https://app.versium.com/mcp/reach +2 more | OAuth, and the client must support dynamic client registration. | Paid, self-serve |
| 6sense 6sense.com | Official MCP | https://6sense.com/platform/mcp-server/ +1 more | OAuth using existing 6sense platform login (no separate API key setup per vendor docs) | Enterprise only |
| Apollo.io Sequences (Emailer Campaigns) apollo.io | Official MCP | https://github.com/apolloio/apollo-mcp-plugin +1 more | OAuth (Apollo.io sign-in/authorization flow; no API key required for this MCP) | Enterprise only |
| Common Room commonroom.io | Official MCP | https://www.commonroom.io/docs/using-common-room/mcp... +1 more | oauth (OAuth 2.1, browser-based, tokens scoped to the user's own Common Room permissions) | Enterprise only |
| Common Room commonroom.io | Official MCP | https://www.commonroom.io/docs/using-common-room/mcp... +1 more | oauth (OAuth 2.1, browser-based, tokens scoped to the user's own Common Room permissions) | Enterprise only |
| Crossbeam crossbeam.com | Official MCP | https://mcp.crossbeam.com/mcp +1 more | OAuth with Crossbeam login credentials, with a permission consent screen at connect time. | Enterprise only |
| G2 Buyer Intent g2.com | Official MCP | https://mcp.g2.com/mcp +2 more | OAuth 2.0 Authorization Code with PKCE. You register an OAuth app in the G2 Developer Dashboard at https://my.g2.com/developers to get a client_id... | Enterprise only |
| Salesforce (core CRM/platform) + Agentforce salesforce.com | Official MCP | https://github.com/salesforcecli/mcp +2 more | OAuth + PKCE via an External Client App (scopes mcp_api, refresh_token); every MCP call runs under the authenticated user's own permissions... | Enterprise only |
| Fellow fellow.ai | Official MCP | https://fellow.app/mcp +1 more | OAuth, with OAuth 2.0 dynamic discovery supported. | Gate unknown |
| Granola granola.ai | Official MCP | https://www.pulsemcp.com/servers/granola +2 more | OAuth - no manual API key required. | Gate unknown |
| mcp.run / TurboMCP turbomcp.ai | Official MCP | https://turbomcp.ai | Integrates with a team's own OIDC-compatible identity provider; handles OAuth and Dynamic Client Registration for the servers it fronts. | Gate unknown |
| Outreach outreach.io | Official MCP | https://api.outreach.io/mcp/ +1 more | OAuth 2.1 with Dynamic Client Registration; also requires the org-level "Amplify" add-on to be enabled and admin-toggled - not available to every... | Gate unknown |
| Pylon usepylon.com | Official MCP | https://mcp.usepylon.com +1 more | OAuth 2.0 over stateless streamable HTTP; access is permission-scoped so a connected AI tool can only see/change what the authenticated user could... | Gate unknown |
| Salesloft salesloft.com | Official MCP | https://www.salesloft.com/company/newsroom/clari-sal... +1 more | unknown exact flow - vendor press material describes it as natively listed in Claude's connector directory "with no custom setup required," implying... | Gate unknown |
| Sybill sybill.ai | Official MCP | https://api.sybill.ai/docs/mcp.html +1 more | Browser-based sign-in / OAuth on first connection from an MCP client such as Claude Desktop. | Gate unknown |
| Trumpet sendtrumpet.com | Official MCP | https://trumpet.app/api/mcp +2 more | OAuth 2.0 - vendor help-center doc confirms "Authenticate via trumpet (OAuth 2.0)"; setup flow is add-custom-connector → paste MCP server URL →... | Gate unknown |
| Bonjoro bonjoro.com | Community MCP | https://zapier.com/mcp/bonjoro | Rides a Zapier account connection (OAuth to Zapier, which holds the Bonjoro-side connection). | Paid, self-serve |
Counted 2026-08-25 from directory.json and reconciled against tools_recount.py. Nothing on this page is hand maintained: it is a filter over the same 293 entries the rest of the site is built from. Ordered by the published rule: official MCP first, then community, then unknown, then n/a, then none-found; within each band gate order is free, paid, enterprise-leaning, enterprise-only, unknown; then alphabetical by name. Computed, never curated, never purchasable.