Conecto CRM
REMOTE · API.CONECTO.CHAT
Contacts, companies and deals, with every email, call and meeting on one record. Pay per action.
Available components
Last scanned (54 minutes ago)
Scores higher than 43% of remote servers
Reachable. Last reached 5 Nov 2026.
Category CRM and Sales
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (crm_archive_contact). See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability61
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 9407 tokens (~136/item across 69 items; 69 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage78
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 33% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 9 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 70 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 4 Nov 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 3 Nov 26 0
- Stability: unverified → 0.03 ▲ functional
- 2 Nov 26 60
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://api.conecto.chat/mcp/crm
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=api.conecto.chat | CN=WR3,O=Google Trust Services,C=US | 6 Oct 2026 | 4 Jan 2027 | RSA 2048 | SHA256-RSA | e65363629d99e1e21050aed0a4a3b3ce |
| SANs: api.conecto.chat | ||||||
| CN=WR3,O=Google Trust Services,C=US (CA) | CN=GTS Root R1,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | RSA 2048 | SHA256-RSA | 7ff005a91568d63abc22861684aa4b5a |
| CN=GTS Root R1,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 19 Jun 2020 | 28 Jan 2028 | RSA 4096 | SHA256-RSA | 77bd0d6cdb36f91aea210fc4f058d30d |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of api.conecto.chat. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| chat. | present | 33026 | 8 | Verified |
| conecto.chat. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
| Header | Value |
|---|---|
| x-content-type-options | nosniff |
| x-frame-options | DENY |
| referrer-policy | same-origin |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://api.conecto.chat/mcp/crm | Verified | 200 | |
| http (plaintext) | http://api.conecto.chat/mcp/crm | HTTPS enforced | 302 | https://api.conecto.chat/mcp/crm |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
crm_list_tags List tags ~24
Every tag with how many contacts, companies and deals carry it. Free.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
crm_list_tasks List tasks ~76
Tasks by status (default open), optionally for one contact or due before a time, soonest first, each with the contact it is about (id, name, email). Free.
| Name | Type | Req | Description |
|---|---|---|---|
| contact_id | integer | – | – |
| due_before | string | – | – |
| limit | integer | – | – |
| status | string | – | – |
No output schema declared.
No examples provided.
crm_merge_companies Merge companies ~91
Merge duplicate companies into the one you keep. Its empty fields are filled from the others, tags and custom fields are combined (the kept company wins where both have a value), and their people, deals and notes move to it. The merged companies are deleted. Costs $0.01 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| keep_id | integer | yes | – |
| merge_ids | array | yes | – |
No output schema declared.
No examples provided.
crm_merge_contacts Merge contacts ~106
Merge duplicate contacts into the one you keep. Its empty fields are filled from the others, tags and custom fields are combined (the kept contact wins where both have a value), and every note, task, email, chat, call, ticket and deal moves to it. The merged contacts are archived; their emails still find the kept contact. Costs $0.01 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| keep_id | integer | yes | – |
| merge_ids | array | yes | – |
No output schema declared.
No examples provided.
crm_move_deal Move a deal ~118
Move a deal to a stage (by name or id), optionally of another pipeline. A won or lost stage closes the deal (give lost_reason when it is lost); an open stage reopens it. Each move is kept in the deal's history: crm_get_deal shows how many days it stayed in each stage. Costs $0.01 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| deal_id | integer | yes | – |
| lost_reason | string | – | – |
| pipeline | string | – | – |
| stage | string | yes | – |
No output schema declared.
No examples provided.
crm_pipeline_report Pipeline report ~161
How a pipeline is doing: open deals by stage with their value and weighted value (value x probability), deals won and lost in a period (this month by default) with the win rate, average deal won, average days to close and lost reasons, a forecast of open deals by expected close month, and how many open deals have not moved for stale_days. Values are per currency. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| pipeline | string | – | Name or id; default: the first pipeline. |
| since | string | – | First day of the period: YYYY-MM-DD or today-30. Default: the 1st of this month. |
| stale_days | integer | – | – |
| until | string | – | Last day of the period (included). Default: today. |
No output schema declared.
No examples provided.
crm_restore_company Restore a company ~45
Bring an archived company back into the lists, searches, duplicates and exports. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| company_id | integer | yes | – |
No output schema declared.
No examples provided.
crm_restore_contact Restore a contact ~36
Bring an archived contact back. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| contact_id | integer | yes | – |
No output schema declared.
No examples provided.
crm_save_companies Save many companies ~78
Create or update up to 100 companies in one call, each exactly like crm_save_company (matched by name). Each one succeeds or fails on its own; the reply lists which, and you pay only for the ones saved. Costs $0.01 per record saved; nothing if none are found.
| Name | Type | Req | Description |
|---|---|---|---|
| companies | array | yes | – |
No output schema declared.
No examples provided.
crm_save_company Save a company ~210
Create a company, or update the one with this name (case-insensitive). With company_id, update that company instead, and a name renames it. Only the fields you send change; tags are added, custom fields merged. Costs $0.01 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| company_id | integer | – | – |
| custom_fields | object | – | Custom fields as {"key": value}, merged into the existing ones; null clears one. Keys defined with crm_define_field are checked against their type. |
| domain | string | – | – |
| employee_count | integer | – | – |
| industry | string | – | – |
| lifecycle_stage | string | – | – |
| name | string | – | Required unless company_id is given; with it, the company's new name. |
| notes | string | – | – |
| tags | array | – | Tags to add, e.g. ["vip"]; a new tag is made on first use. crm_tag_records removes tags. |
| website | string | – | – |
No output schema declared.
No examples provided.
crm_save_contact Save a contact ~212
Create a contact, or update the one with this email if it already exists. Only the fields you send change; tags are added, custom fields merged. Without an email a new contact is always created. Costs $0.01 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | – | Company name; also links or creates the company record. |
| custom_fields | object | – | Custom fields as {"key": value}, merged into the existing ones; null clears one. Keys defined with crm_define_field are checked against their type. |
| string | – | – | |
| language | string | – | – |
| lifecycle_stage | string | – | – |
| location | string | – | – |
| name | string | – | – |
| notes | string | – | – |
| phone | string | – | – |
| tags | array | – | Tags to add, e.g. ["vip"]; a new tag is made on first use. crm_tag_records removes tags. |
| timezone | string | – | – |
| title | string | – | – |
No output schema declared.
No examples provided.
crm_save_contacts Save many contacts ~86
Create or update up to 100 contacts in one call, each exactly like crm_save_contact (matched by email; without an email a new contact is made). Each one succeeds or fails on its own; the reply lists which, and you pay only for the ones saved. Costs $0.01 per record saved; nothing if none are found.
| Name | Type | Req | Description |
|---|---|---|---|
| contacts | array | yes | – |
No output schema declared.
No examples provided.
crm_save_deal Save a deal ~318
Create a deal (no deal_id) or update one (with deal_id): pipeline and stage, amount, expected close date, next step, the company and contact it belongs to, tags and custom fields. A new deal starts at the first stage of its pipeline unless you give one. Costs $0.01 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| amount | number | – | – |
| close_date | string | – | YYYY-MM-DD: when it is expected to close |
| company_id | integer | – | – |
| company_name | string | – | – |
| contact_email | string | – | – |
| contact_id | integer | – | – |
| currency | string | – | – |
| custom_fields | object | – | Custom fields as {"key": value}, merged into the existing ones; null clears one. Keys defined with crm_define_field are checked against their type. |
| deal_id | integer | – | – |
| description | string | – | – |
| lost_reason | string | – | – |
| next_step | string | – | – |
| pipeline | string | – | Pipeline name or id (crm_list_pipelines). Default: the deal's own, else the first pipeline. |
| stage | string | – | Stage name or id in that pipeline, e.g. "Proposal". A new deal without one starts at the first stage. crm_move_deal moves deals too. |
| tags | array | – | Tags to add, e.g. ["vip"]; a new tag is made on first use. crm_tag_records removes tags. |
| title | string | – | – |
No output schema declared.
No examples provided.
crm_save_pipeline Save a pipeline ~150
Create a deal pipeline, or change one (by pipeline_id, or the pipeline with this name): its name, its position among the pipelines, and its stages in order. A stage that still holds deals cannot be dropped; move them first with crm_move_deal. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | – |
| pipeline_id | integer | – | – |
| position | integer | – | – |
| stages | array | – | All the stages, in order. Keep a stage (and its deals) by giving its id or its current name. Won and Lost are added when no stage has those outcomes; open stages without a probability get one spread… |
No output schema declared.
No examples provided.
crm_save_segment Save a segment ~248
Save filters under a name, such as "customers renewing within 30 days" (a new name creates a segment, an existing one replaces its filters). Use it with the segment argument of crm_find_contacts, crm_find_companies, crm_find_deals and crm_export. Relative dates (today+30) are worked out each time. Costs $0.001 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| filters | array | yes | Conditions that must all match, e.g. [{"field": "lifecycle_stage", "op": "eq", "value": "customer"}, {"field": "renewal_date", "op": "lte", "value": "today+30"}]. field: a standard field, "tag", or a… |
| name | string | yes | – |
| object | string | yes | – |
| sort | string | – | Default sort, e.g. "-amount". |
No output schema declared.
No examples provided.
crm_search Search the CRM ~74
Find contacts, companies and deals in one call from whatever you have: a name, an email, a phone number (any format), a domain, a company name or a deal title. Use it to turn what someone told you into record ids. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | – |
| query | string | yes | – |
No output schema declared.
No examples provided.
crm_tag_records Tag records ~105
Add and remove tags on up to 100 contacts, companies or deals at once, such as everyone who came to a webinar. A new tag is made on first use; tags match in any case. Find tagged records with the tag argument of the find tools. Costs $0.001 per record tagged; nothing if none are found.
| Name | Type | Req | Description |
|---|---|---|---|
| add | array | – | – |
| ids | array | yes | – |
| object | string | yes | – |
| remove | array | – | – |
No output schema declared.
No examples provided.
crm_timeline Read a timeline ~241
Everything that happened with a contact, a company (all its people) or a deal, or in the whole CRM when you name none of them, newest first: notes, tasks, emails from your inboxes, website chats, phone calls (with their summary), tickets, meetings, deal stage moves and deal notes, each with its contact_id where it has one. Each says who made it: `by` is the name of the key whose bot did (like "Ben, through Claude"), a person, a form or an import, or null; `via` is "dashboard" when a person made it on a dashboard link the key made, "ai_app" when the key's AI app did. Read it before you write to someone. For the next page pass next_before as `before`. Free.
| Name | Type | Req | Description |
|---|---|---|---|
| before | string | – | ISO 8601: only entries before this time. |
| company_id | integer | – | – |
| contact_id | integer | – | – |
| deal_id | integer | – | – |
| string | – | – | |
| limit | integer | – | – |
| types | array | – | Only these kinds of entries. |
No output schema declared.
No examples provided.
crm_update_contact Update a contact ~203
Change fields on an existing contact by id. Only the fields you send change; tags are added, custom fields merged. Costs $0.01 per call; nothing if it fails.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | – | Company name; also links or creates the company record. |
| contact_id | integer | yes | – |
| custom_fields | object | – | Custom fields as {"key": value}, merged into the existing ones; null clears one. Keys defined with crm_define_field are checked against their type. |
| string | – | – | |
| language | string | – | – |
| lifecycle_stage | string | – | – |
| location | string | – | – |
| name | string | – | – |
| notes | string | – | – |
| phone | string | – | – |
| tags | array | – | Tags to add, e.g. ["vip"]; a new tag is made on first use. crm_tag_records removes tags. |
| timezone | string | – | – |
| title | string | – | – |
No output schema declared.
No examples provided.
How do I install the Conecto CRM MCP server?
Conecto CRM is a hosted endpoint at https://api.conecto.chat/mcp/crm, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · api.conecto.chat
claude mcp add --transport http chat-conecto-crm 'https://api.conecto.chat/mcp/crm'
What is the Conecto CRM MCP server?
Conecto CRM is an MCP server listed in the public MCP registry as chat.conecto/crm. Contacts, companies and deals, with every email, call and meeting on one record. Pay per action. This page covers its hosted endpoint (https://api.conecto.chat/mcp/crm).
Is the Conecto CRM MCP server safe to use?
Conecto CRM scores 61 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Conecto CRM MCP server expose?
Conecto CRM exposes 69 tools: crm_find_contacts, crm_get_contact, crm_get_customer, crm_save_contact, crm_save_contacts, and 64 more. Their descriptions and schemas cost roughly 9,294 tokens of context every time the server is loaded.
Does the Conecto CRM MCP server require authentication?
No. We connected to Conecto CRM without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Conecto CRM MCP server still maintained?
Conecto CRM is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.