@revfleet/hscli 0.9.7 → 0.10.0

package/docs/MCP_TOOL_CATALOG.md

@@ -2,191 +2,193 @@
 
 Generated from the runtime registration schemas. Do not edit manually.
 
-- Minimal: 29 tools
-- CRM: 136 tools
-- Migration: 179 tools
-- Full: 180 tools
+- Minimal: 31 tools
+- CRM: 138 tools
+- Migration: 181 tools
+- Full: 182 tools
 
-| Tool | Domain | Risk | Surfaces | Description |
-|---|---|---|---|---|
-| `cms_redirects_create` | cms | write | migration, full | Create a CMS URL redirect (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `cms_redirects_delete` | cms | delete | migration, full | Delete a CMS URL redirect (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `cms_redirects_list` | cms | read | migration, full | List CMS URL redirects. Not available via HubSpot Remote MCP. |
-| `conversations_inboxes_list` | conversations | read | migration, full | List conversation inboxes. Not available via HubSpot Remote MCP. |
-| `conversations_messages_send` | conversations | write | migration, full | Send a message into a conversation thread (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `conversations_threads_list` | conversations | read | migration, full | List conversation threads. Not available via HubSpot Remote MCP. |
-| `crm_associations_create` | crm | write | crm, migration, full | Create default association (dry-run by default unless force=true). Supports standard types, engagements, and custom object type IDs. |
-| `crm_associations_list` | crm | read | minimal, crm, migration, full | List associations between CRM objects (supports standard types, engagements, and custom object type IDs like 2-199622513) |
-| `crm_associations_remove` | crm | delete | crm, migration, full | Remove default association (dry-run by default unless force=true). Supports standard types, engagements, and custom object type IDs. |
-| `crm_calls_batch_archive` | crm | delete | crm, migration, full | Batch archive calls (dry-run by default unless force=true) |
-| `crm_calls_batch_read` | crm | read | crm, migration, full | Batch read calls |
-| `crm_calls_batch_upsert` | crm | write | crm, migration, full | Batch upsert calls (dry-run by default unless force=true) |
-| `crm_calls_create` | crm | write | crm, migration, full | Create call (dry-run by default unless force=true) |
-| `crm_calls_delete` | crm | delete | crm, migration, full | Delete/archive call by ID (dry-run by default unless force=true) |
-| `crm_calls_get` | crm | read | crm, migration, full | Get one call by ID |
-| `crm_calls_list` | crm | read | crm, migration, full | List calls |
-| `crm_calls_merge` | crm | write | crm, migration, full | Merge calls records (endpoint support varies by object) |
-| `crm_calls_search` | crm | read | crm, migration, full | Search calls |
-| `crm_calls_update` | crm | write | crm, migration, full | Update call (dry-run by default unless force=true) |
-| `crm_companies_batch_archive` | crm | delete | crm, migration, full | Batch archive companies (dry-run by default unless force=true) |
-| `crm_companies_batch_read` | crm | read | minimal, crm, migration, full | Batch read companies |
-| `crm_companies_batch_upsert` | crm | write | crm, migration, full | Batch upsert companies (dry-run by default unless force=true) |
-| `crm_companies_create` | crm | write | crm, migration, full | Create companie (dry-run by default unless force=true) |
-| `crm_companies_delete` | crm | delete | crm, migration, full | Delete/archive companie by ID (dry-run by default unless force=true) |
-| `crm_companies_get` | crm | read | minimal, crm, migration, full | Get one companie by ID |
-| `crm_companies_list` | crm | read | minimal, crm, migration, full | List companies |
-| `crm_companies_merge` | crm | write | crm, migration, full | Merge companies records (endpoint support varies by object) |
-| `crm_companies_search` | crm | read | minimal, crm, migration, full | Search companies |
-| `crm_companies_update` | crm | write | crm, migration, full | Update companie (dry-run by default unless force=true) |
-| `crm_contacts_batch_archive` | crm | delete | crm, migration, full | Batch archive contacts (dry-run by default unless force=true) |
-| `crm_contacts_batch_read` | crm | read | minimal, crm, migration, full | Batch read contacts |
-| `crm_contacts_batch_upsert` | crm | write | crm, migration, full | Batch upsert contacts (dry-run by default unless force=true) |
-| `crm_contacts_create` | crm | write | crm, migration, full | Create contact (dry-run by default unless force=true) |
-| `crm_contacts_delete` | crm | delete | crm, migration, full | Delete/archive contact by ID (dry-run by default unless force=true) |
-| `crm_contacts_get` | crm | read | minimal, crm, migration, full | Get one contact by ID |
-| `crm_contacts_list` | crm | read | minimal, crm, migration, full | List contacts |
-| `crm_contacts_merge` | crm | write | crm, migration, full | Merge contacts records (endpoint support varies by object) |
-| `crm_contacts_search` | crm | read | minimal, crm, migration, full | Search contacts |
-| `crm_contacts_update` | crm | write | crm, migration, full | Update contact (dry-run by default unless force=true) |
-| `crm_custom_records_create` | crm | write | crm, migration, full | Create custom object record (dry-run by default unless force=true) |
-| `crm_custom_records_delete` | crm | delete | crm, migration, full | Delete custom object record (dry-run by default unless force=true) |
-| `crm_custom_records_get` | crm | read | crm, migration, full | Get custom object record by objectType and id |
-| `crm_custom_records_list` | crm | read | crm, migration, full | List custom object records by objectType |
-| `crm_custom_records_search` | crm | read | crm, migration, full | Search custom object records |
-| `crm_custom_records_update` | crm | write | crm, migration, full | Update custom object record (dry-run by default unless force=true) |
-| `crm_custom_schemas_create` | crm | write | crm, migration, full | Create custom object schema (dry-run by default unless force=true) |
-| `crm_custom_schemas_get` | crm | read | crm, migration, full | Get custom object schema by objectType |
-| `crm_custom_schemas_list` | crm | read | crm, migration, full | List custom object schemas |
-| `crm_custom_schemas_update` | crm | write | crm, migration, full | Update custom object schema (dry-run by default unless force=true) |
-| `crm_deals_batch_archive` | crm | delete | crm, migration, full | Batch archive deals (dry-run by default unless force=true) |
-| `crm_deals_batch_read` | crm | read | minimal, crm, migration, full | Batch read deals |
-| `crm_deals_batch_upsert` | crm | write | crm, migration, full | Batch upsert deals (dry-run by default unless force=true) |
-| `crm_deals_create` | crm | write | crm, migration, full | Create deal (dry-run by default unless force=true) |
-| `crm_deals_delete` | crm | delete | crm, migration, full | Delete/archive deal by ID (dry-run by default unless force=true) |
-| `crm_deals_get` | crm | read | minimal, crm, migration, full | Get one deal by ID |
-| `crm_deals_list` | crm | read | minimal, crm, migration, full | List deals |
-| `crm_deals_merge` | crm | write | crm, migration, full | Merge deals records (endpoint support varies by object) |
-| `crm_deals_search` | crm | read | minimal, crm, migration, full | Search deals |
-| `crm_deals_update` | crm | write | crm, migration, full | Update deal (dry-run by default unless force=true) |
-| `crm_emails_batch_archive` | crm | delete | crm, migration, full | Batch archive emails (dry-run by default unless force=true) |
-| `crm_emails_batch_read` | crm | read | crm, migration, full | Batch read emails |
-| `crm_emails_batch_upsert` | crm | write | crm, migration, full | Batch upsert emails (dry-run by default unless force=true) |
-| `crm_emails_create` | crm | write | crm, migration, full | Create email (dry-run by default unless force=true) |
-| `crm_emails_delete` | crm | delete | crm, migration, full | Delete/archive email by ID (dry-run by default unless force=true) |
-| `crm_emails_get` | crm | read | crm, migration, full | Get one email by ID |
-| `crm_emails_list` | crm | read | crm, migration, full | List emails |
-| `crm_emails_merge` | crm | write | crm, migration, full | Merge emails records (endpoint support varies by object) |
-| `crm_emails_search` | crm | read | crm, migration, full | Search emails |
-| `crm_emails_update` | crm | write | crm, migration, full | Update email (dry-run by default unless force=true) |
-| `crm_exports_create` | crm | write | crm, migration, full | Create a CRM export (dry-run by default unless force=true) |
-| `crm_exports_get` | crm | read | crm, migration, full | Get a CRM export by ID |
-| `crm_exports_list` | crm | read | crm, migration, full | List CRM exports with pagination |
-| `crm_exports_status` | crm | read | crm, migration, full | Get the status of a CRM export |
-| `crm_imports_create` | crm | write | crm, migration, full | Create import (dry-run by default unless force=true) |
-| `crm_imports_errors` | crm | read | crm, migration, full | Get import errors |
-| `crm_imports_get` | crm | read | crm, migration, full | Get import by ID |
-| `crm_imports_list` | crm | read | crm, migration, full | List import jobs |
-| `crm_lists_create` | crm | write | crm, migration, full | Create a CRM list (dry-run by default unless force=true) |
-| `crm_lists_delete` | crm | delete | crm, migration, full | Delete a CRM list (dry-run by default unless force=true) |
-| `crm_lists_get` | crm | read | crm, migration, full | Get a CRM list by ID |
-| `crm_lists_list` | crm | read | crm, migration, full | List CRM lists with pagination |
-| `crm_lists_memberships` | crm | read | crm, migration, full | Get memberships of a CRM list |
-| `crm_lists_update` | crm | write | crm, migration, full | Update a CRM list (dry-run by default unless force=true) |
-| `crm_meetings_batch_archive` | crm | delete | crm, migration, full | Batch archive meetings (dry-run by default unless force=true) |
-| `crm_meetings_batch_read` | crm | read | crm, migration, full | Batch read meetings |
-| `crm_meetings_batch_upsert` | crm | write | crm, migration, full | Batch upsert meetings (dry-run by default unless force=true) |
-| `crm_meetings_create` | crm | write | crm, migration, full | Create meeting (dry-run by default unless force=true) |
-| `crm_meetings_delete` | crm | delete | crm, migration, full | Delete/archive meeting by ID (dry-run by default unless force=true) |
-| `crm_meetings_get` | crm | read | crm, migration, full | Get one meeting by ID |
-| `crm_meetings_list` | crm | read | crm, migration, full | List meetings |
-| `crm_meetings_merge` | crm | write | crm, migration, full | Merge meetings records (endpoint support varies by object) |
-| `crm_meetings_search` | crm | read | crm, migration, full | Search meetings |
-| `crm_meetings_update` | crm | write | crm, migration, full | Update meeting (dry-run by default unless force=true) |
-| `crm_notes_batch_archive` | crm | delete | crm, migration, full | Batch archive notes (dry-run by default unless force=true) |
-| `crm_notes_batch_read` | crm | read | crm, migration, full | Batch read notes |
-| `crm_notes_batch_upsert` | crm | write | crm, migration, full | Batch upsert notes (dry-run by default unless force=true) |
-| `crm_notes_create` | crm | write | crm, migration, full | Create note (dry-run by default unless force=true) |
-| `crm_notes_delete` | crm | delete | crm, migration, full | Delete/archive note by ID (dry-run by default unless force=true) |
-| `crm_notes_get` | crm | read | crm, migration, full | Get one note by ID |
-| `crm_notes_list` | crm | read | crm, migration, full | List notes |
-| `crm_notes_merge` | crm | write | crm, migration, full | Merge notes records (endpoint support varies by object) |
-| `crm_notes_search` | crm | read | crm, migration, full | Search notes |
-| `crm_notes_update` | crm | write | crm, migration, full | Update note (dry-run by default unless force=true) |
-| `crm_owners_list` | crm | read | minimal, crm, migration, full | List HubSpot owners |
-| `crm_pipelines_get` | crm | read | minimal, crm, migration, full | Get one pipeline |
-| `crm_pipelines_list` | crm | read | minimal, crm, migration, full | List pipelines for object type |
-| `crm_pipelines_stages` | crm | read | minimal, crm, migration, full | List stages for a pipeline |
-| `crm_properties_batch_create` | crm | write | crm, migration, full | Batch-create properties for a standard object or custom object type ID (dry-run by default unless force=true) |
-| `crm_properties_create` | crm | write | crm, migration, full | Create property (dry-run by default unless force=true) |
-| `crm_properties_get` | crm | read | minimal, crm, migration, full | Get one property definition |
-| `crm_properties_list` | crm | read | minimal, crm, migration, full | List properties for an object type |
-| `crm_properties_update` | crm | write | crm, migration, full | Update property (dry-run by default unless force=true) |
-| `crm_property_groups_create` | crm | write | crm, migration, full | Create a property group (dry-run by default unless force=true) |
-| `crm_property_groups_list` | crm | read | crm, migration, full | List property groups for an object type |
-| `crm_property_groups_update` | crm | write | crm, migration, full | Update a property group (dry-run by default unless force=true) |
-| `crm_tasks_batch_archive` | crm | delete | crm, migration, full | Batch archive tasks (dry-run by default unless force=true) |
-| `crm_tasks_batch_read` | crm | read | crm, migration, full | Batch read tasks |
-| `crm_tasks_batch_upsert` | crm | write | crm, migration, full | Batch upsert tasks (dry-run by default unless force=true) |
-| `crm_tasks_create` | crm | write | crm, migration, full | Create task (dry-run by default unless force=true) |
-| `crm_tasks_delete` | crm | delete | crm, migration, full | Delete/archive task by ID (dry-run by default unless force=true) |
-| `crm_tasks_get` | crm | read | crm, migration, full | Get one task by ID |
-| `crm_tasks_list` | crm | read | crm, migration, full | List tasks |
-| `crm_tasks_merge` | crm | write | crm, migration, full | Merge tasks records (endpoint support varies by object) |
-| `crm_tasks_search` | crm | read | crm, migration, full | Search tasks |
-| `crm_tasks_update` | crm | write | crm, migration, full | Update task (dry-run by default unless force=true) |
-| `crm_tickets_batch_archive` | crm | delete | crm, migration, full | Batch archive tickets (dry-run by default unless force=true) |
-| `crm_tickets_batch_read` | crm | read | minimal, crm, migration, full | Batch read tickets |
-| `crm_tickets_batch_upsert` | crm | write | crm, migration, full | Batch upsert tickets (dry-run by default unless force=true) |
-| `crm_tickets_create` | crm | write | crm, migration, full | Create ticket (dry-run by default unless force=true) |
-| `crm_tickets_delete` | crm | delete | crm, migration, full | Delete/archive ticket by ID (dry-run by default unless force=true) |
-| `crm_tickets_get` | crm | read | minimal, crm, migration, full | Get one ticket by ID |
-| `crm_tickets_list` | crm | read | minimal, crm, migration, full | List tickets |
-| `crm_tickets_merge` | crm | write | crm, migration, full | Merge tickets records (endpoint support varies by object) |
-| `crm_tickets_search` | crm | read | minimal, crm, migration, full | Search tickets |
-| `crm_tickets_update` | crm | write | crm, migration, full | Update ticket (dry-run by default unless force=true) |
-| `files_delete` | files | delete | migration, full | Permanently delete a file (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `files_get` | files | read | migration, full | Get metadata for a single file by ID. Not available via HubSpot Remote MCP. |
-| `files_list` | files | read | migration, full | List uploaded files. Not available via HubSpot Remote MCP. |
-| `files_signed_url` | files | read | migration, full | Generate a time-limited signed URL for a private file. Not available via HubSpot Remote MCP. |
-| `forms_create` | forms | write | migration, full | Create a marketing form. Legacy forms/v2 payloads are translated to v3 automatically. Dry-run by default unless force=true. |
-| `forms_get` | forms | read | migration, full | Get one form by ID. Not available via HubSpot Remote MCP. |
-| `forms_list` | forms | read | migration, full | List marketing forms. Not available via HubSpot Remote MCP. |
-| `forms_submissions` | forms | read | migration, full | List submissions for a form. Not available via HubSpot Remote MCP. |
-| `forms_submit` | forms | write | migration, full | Programmatically submit a form (server-side submission endpoint). Dry-run by default unless force=true. |
-| `forms_update` | forms | write | migration, full | Update a marketing form. Legacy forms/v2 payloads are translated to v3 automatically. Dry-run by default unless force=true. |
-| `get_campaign_analytics` | compat | read | migration, full | Get campaign analytics (aggregated metrics) for one or more campaigns. HubSpot-compat. |
-| `get_campaign_asset_metrics` | compat | read | migration, full | Get metrics for specific CRM objects associated with a campaign. HubSpot-compat. |
-| `get_campaign_asset_types` | compat | read | migration, full | List available campaign asset types (emails, blog posts, ads, etc.). HubSpot-compat. |
-| `get_campaign_contacts_by_type` | compat | read | migration, full | Paginated contact IDs for a campaign filtered by attribution type (e.g. 'INFLUENCED'). HubSpot-compat. |
-| `get_crm_objects` | compat | read | minimal, crm, migration, full | Batch read CRM records by ID. HubSpot-compat: max 100 IDs per request. |
-| `get_properties` | compat | read | minimal, crm, migration, full | Get full property definitions (types, enum options) for an object type. HubSpot-compat. |
-| `get_user_details` | compat | read | minimal, crm, migration, full | Get the authenticated user's account info, portal details, and OAuth scopes. HubSpot-compat tool. |
-| `hub_api_request` | hub | write | full | Raw HubSpot API request with safety controls |
-| `hubdb_publish` | hubdb | write | migration, full | Publish a HubDB table's draft state to live (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `hubdb_row_create` | hubdb | write | migration, full | Create a row in a HubDB draft table (dry-run by default unless force=true). Call hubdb_publish to publish. Not available via HubSpot Remote MCP. |
-| `hubdb_row_update` | hubdb | write | migration, full | Update a HubDB row in the draft table (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `hubdb_rows_list` | hubdb | read | migration, full | List rows in a HubDB table. Not available via HubSpot Remote MCP. |
-| `hubdb_tables_list` | hubdb | read | migration, full | List HubDB tables. Not available via HubSpot Remote MCP. |
-| `hubspot_module_compose` | modules | read | migration, full | Compose a widget body for a HubSpot drag-and-drop module using given field values. Validates the values against the module's fields.json schema before returning — rejects unknown fields and type mismatches. The returned widget is ready to drop into an email or CMS page's content.widgets[widgetId], with the schema + metadata HubSpot's renderer expects. Use this instead of hand-shaping widget bodies. |
-| `hubspot_module_describe` | modules | read | migration, full | Return the full field schema for a HubSpot drag-and-drop module (the same schema a user sees when clicking a module in the editor). Fields include name, label, type (text, richtext, number, boolean, color, choice, group, image, link, ...), required flag, default, choices, and nested children for groups. Call this before hubspot_module_compose to know what fields to pass. |
-| `hubspot_module_list` | modules | read | migration, full | Enumerate @hubspot/* built-in drag-and-drop modules available on the caller's portal. Each entry reports whether fields.json resolves (i.e. whether the module can be used in widgets). Useful for discovery — call hubspot_module_describe on any available entry to see its field schema. |
-| `manage_crm_objects` | compat | write | crm, migration, full | Create, update, or DELETE CRM records. HubSpot-compat surface extended with 'delete' — policy-file + change-ticket still enforced server-side. Bulk max 100 records per call. |
-| `marketing_emails_get` | marketing | read | migration, full | Get one marketing email by ID. Not available via HubSpot Remote MCP. |
-| `marketing_emails_list` | marketing | read | migration, full | List marketing emails. Not available via HubSpot Remote MCP. |
-| `marketing_emails_statistics` | marketing | read | migration, full | Get statistics for a marketing email. Not available via HubSpot Remote MCP. |
-| `reporting_dashboards_get` | reporting | read | migration, full | Get an analytics report/dashboard by ID |
-| `reporting_dashboards_list` | reporting | read | migration, full | List analytics reports/dashboards with pagination |
-| `sales_sequences_enrollments` | sales | read | migration, full | Get enrollments for a sales sequence |
-| `sales_sequences_get` | sales | read | migration, full | Get a sales sequence by ID |
-| `sales_sequences_list` | sales | read | migration, full | List sales sequences with pagination |
-| `search_crm_objects` | compat | read | minimal, crm, migration, full | Search CRM records by filter groups, text query, sorts, and pagination. HubSpot-compat: accepts the same filterGroups/query/sorts/properties/limit/after shape as HubSpot Remote MCP. |
-| `search_owners` | compat | read | minimal, crm, migration, full | Find CRM owners by email or ID, or list all. HubSpot-compat: max 100 results. |
-| `search_properties` | compat | read | minimal, crm, migration, full | Keyword-search property definitions for an object type. HubSpot-compat: max 5 keywords. |
-| `webhooks_create_subscription` | webhooks | write | migration, full | Create a webhook subscription (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `webhooks_delete_subscription` | webhooks | delete | migration, full | Delete a webhook subscription (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `webhooks_list_subscriptions` | webhooks | read | migration, full | List webhook subscriptions for a HubSpot app. Not available via HubSpot Remote MCP. |
-| `workflows_enroll` | workflows | write | migration, full | Enroll a contact into a legacy v3 workflow (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
-| `workflows_get` | workflows | read | migration, full | Get one workflow by flowId (v4). Not available via HubSpot Remote MCP. |
-| `workflows_list` | workflows | read | migration, full | List workflows (v4). Not available via HubSpot Remote MCP. |
-| `workflows_unenroll` | workflows | read | migration, full | Remove a contact from a legacy v3 workflow (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| Tool | Domain | Risk | Safety annotations | Output schema | Surfaces | Description |
+|---|---|---|---|---|---|---|
+| `cms_redirects_create` | cms | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Create a CMS URL redirect (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `cms_redirects_delete` | cms | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Delete a CMS URL redirect (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `cms_redirects_list` | cms | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List CMS URL redirects. Not available via HubSpot Remote MCP. |
+| `conversations_inboxes_list` | conversations | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List conversation inboxes. Not available via HubSpot Remote MCP. |
+| `conversations_messages_send` | conversations | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Send a message into a conversation thread (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `conversations_threads_list` | conversations | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List conversation threads. Not available via HubSpot Remote MCP. |
+| `crm_associations_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create default association (dry-run by default unless force=true). Supports standard types, engagements, and custom object type IDs. |
+| `crm_associations_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List associations between CRM objects (supports standard types, engagements, and custom object type IDs like 2-199622513) |
+| `crm_associations_remove` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Remove default association (dry-run by default unless force=true). Supports standard types, engagements, and custom object type IDs. |
+| `crm_calls_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive calls (dry-run by default unless force=true) |
+| `crm_calls_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Batch read calls |
+| `crm_calls_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert calls (dry-run by default unless force=true) |
+| `crm_calls_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create call (dry-run by default unless force=true) |
+| `crm_calls_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive call by ID (dry-run by default unless force=true) |
+| `crm_calls_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get one call by ID |
+| `crm_calls_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List calls |
+| `crm_calls_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge calls records (endpoint support varies by object) |
+| `crm_calls_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Search calls |
+| `crm_calls_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update call (dry-run by default unless force=true) |
+| `crm_companies_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive companies (dry-run by default unless force=true) |
+| `crm_companies_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Batch read companies |
+| `crm_companies_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert companies (dry-run by default unless force=true) |
+| `crm_companies_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create companie (dry-run by default unless force=true) |
+| `crm_companies_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive companie by ID (dry-run by default unless force=true) |
+| `crm_companies_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Get one companie by ID |
+| `crm_companies_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List companies |
+| `crm_companies_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge companies records (endpoint support varies by object) |
+| `crm_companies_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Search companies |
+| `crm_companies_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update companie (dry-run by default unless force=true) |
+| `crm_contacts_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive contacts (dry-run by default unless force=true) |
+| `crm_contacts_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Batch read contacts |
+| `crm_contacts_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert contacts (dry-run by default unless force=true) |
+| `crm_contacts_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create contact (dry-run by default unless force=true) |
+| `crm_contacts_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive contact by ID (dry-run by default unless force=true) |
+| `crm_contacts_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Get one contact by ID |
+| `crm_contacts_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List contacts |
+| `crm_contacts_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge contacts records (endpoint support varies by object) |
+| `crm_contacts_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Search contacts |
+| `crm_contacts_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update contact (dry-run by default unless force=true) |
+| `crm_custom_records_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create custom object record (dry-run by default unless force=true) |
+| `crm_custom_records_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete custom object record (dry-run by default unless force=true) |
+| `crm_custom_records_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get custom object record by objectType and id |
+| `crm_custom_records_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List custom object records by objectType |
+| `crm_custom_records_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Search custom object records |
+| `crm_custom_records_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update custom object record (dry-run by default unless force=true) |
+| `crm_custom_schemas_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create custom object schema (dry-run by default unless force=true) |
+| `crm_custom_schemas_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get custom object schema by objectType |
+| `crm_custom_schemas_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List custom object schemas |
+| `crm_custom_schemas_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update custom object schema (dry-run by default unless force=true) |
+| `crm_deals_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive deals (dry-run by default unless force=true) |
+| `crm_deals_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Batch read deals |
+| `crm_deals_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert deals (dry-run by default unless force=true) |
+| `crm_deals_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create deal (dry-run by default unless force=true) |
+| `crm_deals_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive deal by ID (dry-run by default unless force=true) |
+| `crm_deals_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Get one deal by ID |
+| `crm_deals_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List deals |
+| `crm_deals_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge deals records (endpoint support varies by object) |
+| `crm_deals_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Search deals |
+| `crm_deals_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update deal (dry-run by default unless force=true) |
+| `crm_emails_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive emails (dry-run by default unless force=true) |
+| `crm_emails_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Batch read emails |
+| `crm_emails_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert emails (dry-run by default unless force=true) |
+| `crm_emails_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create email (dry-run by default unless force=true) |
+| `crm_emails_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive email by ID (dry-run by default unless force=true) |
+| `crm_emails_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get one email by ID |
+| `crm_emails_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List emails |
+| `crm_emails_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge emails records (endpoint support varies by object) |
+| `crm_emails_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Search emails |
+| `crm_emails_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update email (dry-run by default unless force=true) |
+| `crm_exports_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create a CRM export (dry-run by default unless force=true) |
+| `crm_exports_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get a CRM export by ID |
+| `crm_exports_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List CRM exports with pagination |
+| `crm_exports_status` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get the status of a CRM export |
+| `crm_imports_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create import (dry-run by default unless force=true) |
+| `crm_imports_errors` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get import errors |
+| `crm_imports_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get import by ID |
+| `crm_imports_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List import jobs |
+| `crm_lists_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create a CRM list (dry-run by default unless force=true) |
+| `crm_lists_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete a CRM list (dry-run by default unless force=true) |
+| `crm_lists_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get a CRM list by ID |
+| `crm_lists_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List CRM lists with pagination |
+| `crm_lists_memberships` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get memberships of a CRM list |
+| `crm_lists_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update a CRM list (dry-run by default unless force=true) |
+| `crm_meetings_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive meetings (dry-run by default unless force=true) |
+| `crm_meetings_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Batch read meetings |
+| `crm_meetings_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert meetings (dry-run by default unless force=true) |
+| `crm_meetings_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create meeting (dry-run by default unless force=true) |
+| `crm_meetings_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive meeting by ID (dry-run by default unless force=true) |
+| `crm_meetings_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get one meeting by ID |
+| `crm_meetings_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List meetings |
+| `crm_meetings_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge meetings records (endpoint support varies by object) |
+| `crm_meetings_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Search meetings |
+| `crm_meetings_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update meeting (dry-run by default unless force=true) |
+| `crm_notes_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive notes (dry-run by default unless force=true) |
+| `crm_notes_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Batch read notes |
+| `crm_notes_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert notes (dry-run by default unless force=true) |
+| `crm_notes_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create note (dry-run by default unless force=true) |
+| `crm_notes_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive note by ID (dry-run by default unless force=true) |
+| `crm_notes_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get one note by ID |
+| `crm_notes_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List notes |
+| `crm_notes_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge notes records (endpoint support varies by object) |
+| `crm_notes_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Search notes |
+| `crm_notes_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update note (dry-run by default unless force=true) |
+| `crm_owners_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List HubSpot owners |
+| `crm_pipelines_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Get one pipeline |
+| `crm_pipelines_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List pipelines for object type |
+| `crm_pipelines_stages` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List stages for a pipeline |
+| `crm_properties_batch_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch-create properties for a standard object or custom object type ID (dry-run by default unless force=true) |
+| `crm_properties_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create property (dry-run by default unless force=true) |
+| `crm_properties_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Get one property definition |
+| `crm_properties_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List properties for an object type |
+| `crm_properties_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update property (dry-run by default unless force=true) |
+| `crm_property_groups_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create a property group (dry-run by default unless force=true) |
+| `crm_property_groups_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List property groups for an object type |
+| `crm_property_groups_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update a property group (dry-run by default unless force=true) |
+| `crm_tasks_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive tasks (dry-run by default unless force=true) |
+| `crm_tasks_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Batch read tasks |
+| `crm_tasks_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert tasks (dry-run by default unless force=true) |
+| `crm_tasks_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create task (dry-run by default unless force=true) |
+| `crm_tasks_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive task by ID (dry-run by default unless force=true) |
+| `crm_tasks_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Get one task by ID |
+| `crm_tasks_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | List tasks |
+| `crm_tasks_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge tasks records (endpoint support varies by object) |
+| `crm_tasks_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | crm, migration, full | Search tasks |
+| `crm_tasks_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update task (dry-run by default unless force=true) |
+| `crm_tickets_batch_archive` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch archive tickets (dry-run by default unless force=true) |
+| `crm_tickets_batch_read` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Batch read tickets |
+| `crm_tickets_batch_upsert` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Batch upsert tickets (dry-run by default unless force=true) |
+| `crm_tickets_create` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Create ticket (dry-run by default unless force=true) |
+| `crm_tickets_delete` | crm | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Delete/archive ticket by ID (dry-run by default unless force=true) |
+| `crm_tickets_get` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Get one ticket by ID |
+| `crm_tickets_list` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | List tickets |
+| `crm_tickets_merge` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Merge tickets records (endpoint support varies by object) |
+| `crm_tickets_search` | crm | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | minimal, crm, migration, full | Search tickets |
+| `crm_tickets_update` | crm | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | crm, migration, full | Update ticket (dry-run by default unless force=true) |
+| `files_delete` | files | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Permanently delete a file (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `files_get` | files | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get metadata for a single file by ID. Not available via HubSpot Remote MCP. |
+| `files_list` | files | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List uploaded files. Not available via HubSpot Remote MCP. |
+| `files_signed_url` | files | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Generate a time-limited signed URL for a private file. Not available via HubSpot Remote MCP. |
+| `forms_create` | forms | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Create a marketing form. Legacy forms/v2 payloads are translated to v3 automatically. Dry-run by default unless force=true. |
+| `forms_get` | forms | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get one form by ID. Not available via HubSpot Remote MCP. |
+| `forms_list` | forms | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List marketing forms. Not available via HubSpot Remote MCP. |
+| `forms_submissions` | forms | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List submissions for a form. Not available via HubSpot Remote MCP. |
+| `forms_submit` | forms | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Programmatically submit a form (server-side submission endpoint). Dry-run by default unless force=true. |
+| `forms_update` | forms | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Update a marketing form. Legacy forms/v2 payloads are translated to v3 automatically. Dry-run by default unless force=true. |
+| `get_campaign_analytics` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | migration, full | Get campaign analytics (aggregated metrics) for one or more campaigns. HubSpot-compat. |
+| `get_campaign_asset_metrics` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | migration, full | Get metrics for specific CRM objects associated with a campaign. HubSpot-compat. |
+| `get_campaign_asset_types` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | migration, full | List available campaign asset types (emails, blog posts, ads, etc.). HubSpot-compat. |
+| `get_campaign_contacts_by_type` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | migration, full | Paginated contact IDs for a campaign filtered by attribution type (e.g. 'INFLUENCED'). HubSpot-compat. |
+| `get_crm_objects` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Batch read CRM records by ID. HubSpot-compat: max 100 IDs per request. |
+| `get_properties` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Get full property definitions (types, enum options) for an object type. HubSpot-compat. |
+| `get_user_details` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Get the authenticated user's account info, portal details, and OAuth scopes. HubSpot-compat tool. |
+| `hscli_mcp_doctor` | hscli | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Inspect local MCP profile isolation, portal pinning, policy, and cached capability state without exposing credentials |
+| `hscli_mcp_manifest` | hscli | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Describe the hscli MCP protocol, transport, tool surface, and safety metadata without accessing HubSpot |
+| `hub_api_request` | hub | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | full | Raw HubSpot API request with safety controls |
+| `hubdb_publish` | hubdb | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Publish a HubDB table's draft state to live (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `hubdb_row_create` | hubdb | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Create a row in a HubDB draft table (dry-run by default unless force=true). Call hubdb_publish to publish. Not available via HubSpot Remote MCP. |
+| `hubdb_row_update` | hubdb | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Update a HubDB row in the draft table (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `hubdb_rows_list` | hubdb | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List rows in a HubDB table. Not available via HubSpot Remote MCP. |
+| `hubdb_tables_list` | hubdb | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List HubDB tables. Not available via HubSpot Remote MCP. |
+| `hubspot_module_compose` | modules | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Compose a widget body for a HubSpot drag-and-drop module using given field values. Validates the values against the module's fields.json schema before returning — rejects unknown fields and type mismatches. The returned widget is ready to drop into an email or CMS page's content.widgets[widgetId], with the schema + metadata HubSpot's renderer expects. Use this instead of hand-shaping widget bodies. |
+| `hubspot_module_describe` | modules | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Return the full field schema for a HubSpot drag-and-drop module (the same schema a user sees when clicking a module in the editor). Fields include name, label, type (text, richtext, number, boolean, color, choice, group, image, link, ...), required flag, default, choices, and nested children for groups. Call this before hubspot_module_compose to know what fields to pass. |
+| `hubspot_module_list` | modules | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Enumerate @hubspot/* built-in drag-and-drop modules available on the caller's portal. Each entry reports whether fields.json resolves (i.e. whether the module can be used in widgets). Useful for discovery — call hubspot_module_describe on any available entry to see its field schema. |
+| `manage_crm_objects` | compat | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | Yes | crm, migration, full | Create, update, or DELETE CRM records. HubSpot-compat surface extended with 'delete' — policy-file + change-ticket still enforced server-side. Bulk max 100 records per call. |
+| `marketing_emails_get` | marketing | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get one marketing email by ID through hscli's public-API adapter. |
+| `marketing_emails_list` | marketing | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List marketing emails through hscli's public-API adapter. |
+| `marketing_emails_statistics` | marketing | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get aggregate statistics for a marketing email campaign through the legacy public email API. |
+| `reporting_dashboards_get` | reporting | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get an analytics report/dashboard by ID |
+| `reporting_dashboards_list` | reporting | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List analytics reports/dashboards with pagination |
+| `sales_sequences_enrollments` | sales | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get enrollments for a sales sequence |
+| `sales_sequences_get` | sales | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get a sales sequence by ID |
+| `sales_sequences_list` | sales | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List sales sequences with pagination |
+| `search_crm_objects` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Search CRM records by filter groups, text query, sorts, and pagination. HubSpot-compat: accepts the same filterGroups/query/sorts/properties/limit/after shape as HubSpot Remote MCP. |
+| `search_owners` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Find CRM owners by email or ID, or list all. HubSpot-compat: max 100 results. |
+| `search_properties` | compat | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | Yes | minimal, crm, migration, full | Keyword-search property definitions for an object type. HubSpot-compat: max 5 keywords. |
+| `webhooks_create_subscription` | webhooks | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Create a webhook subscription (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `webhooks_delete_subscription` | webhooks | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Delete a webhook subscription (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `webhooks_list_subscriptions` | webhooks | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List webhook subscriptions for a HubSpot app. Not available via HubSpot Remote MCP. |
+| `workflows_enroll` | workflows | write | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Enroll a contact into a legacy v3 workflow (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
+| `workflows_get` | workflows | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | Get one workflow by flowId (v4). Not available via HubSpot Remote MCP. |
+| `workflows_list` | workflows | read | readOnly=true; destructive=false; idempotent=true; openWorld=true | No | migration, full | List workflows (v4). Not available via HubSpot Remote MCP. |
+| `workflows_unenroll` | workflows | delete | readOnly=false; destructive=true; idempotent=false; openWorld=true | No | migration, full | Remove a contact from a legacy v3 workflow (dry-run by default unless force=true). Not available via HubSpot Remote MCP. |
 

package/docs/OPERATIONAL_PLAYBOOKS.md

@@ -30,17 +30,18 @@ hscli auth token-info --profile <profile>
 2. **Rotate credentials**: generate a new private app token with minimum necessary scopes
 3. **If vault was encrypted**: re-encrypt with a new passphrase
    ```bash
-   export HSCLI_VAULT_PASSPHRASE="new-passphrase"
-   hscli auth decrypt   # with old passphrase
-   hscli auth login --token "pat-xxx-new-token"
-   hscli auth encrypt   # with new passphrase
+   export HSCLI_VAULT_PASSPHRASE="$OLD_HSCLI_VAULT_PASSPHRASE"
+   hscli auth decrypt
+   hscli auth login --auth-type private-app --profile <profile>
+   export HSCLI_VAULT_PASSPHRASE="$NEW_HSCLI_VAULT_PASSPHRASE"
+   hscli auth encrypt
    ```
 4. **Audit recent actions** via HubSpot audit log (Settings > Account > Audit Logs)
 
 ### Recovery
 ```bash
 # Login with new token
-hscli auth login --token "pat-eu1-new-token" --profile production
+hscli auth login --auth-type private-app --profile production
 
 # Verify connectivity
 hscli crm contacts list --limit 1 --profile production
@@ -133,8 +134,8 @@ hscli auth encrypt
 # Remove encrypted vault
 rm ~/.revfleet/auth.enc
 # Re-authenticate with each profile
-hscli auth login --token "pat-xxx-token" --profile default
-hscli auth login --token "pat-xxx-other" --profile staging
+hscli auth login --auth-type private-app --profile default
+hscli auth login --auth-type private-app --profile staging
 # Re-encrypt
 export HSCLI_VAULT_PASSPHRASE="new-passphrase"
 hscli auth encrypt
@@ -234,7 +235,7 @@ hscli auth profile-show --profile default
 ### Resolution
 ```bash
 # Re-login — hublet auto-detected from token prefix
-hscli auth login --token "pat-eu1-your-token"
+hscli auth login --auth-type private-app
 
 # Verify routing
 hscli doctor hublet-check

package/docs/PORTAL_SETUP.md

@@ -225,8 +225,8 @@ hscli crm owners list --email "user@yourcompany.com"
 # Build hscli (first time only)
 cd hscli-main && npm install && npm run build
 
-# Authenticate (pipe to avoid token in shell history)
-printf '%s' 'pat-eu1-XXXX' | hscli auth login --token-stdin
+# Authenticate (hidden prompt; token never enters shell history)
+hscli auth login --profile live --hublet eu1
 
 # Verify
 hscli auth whoami

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@revfleet/hscli",
-  "version": "0.9.7",
+  "version": "0.10.0",
   "description": "HubSpot operations and migration control plane for humans and agents, with deterministic runbooks, policy guardrails, and auditable evidence.",
   "type": "module",
   "bin": {