Salesloft MCP Review 2026: Features, Setup and Use Cases

Key takeaways:

• Salesloft’s MCP server is strictly read-only. It supports no updates, writes or deletes, and cannot search or retrieve cadences or cadence performance.
• It ships 13 tools covering accounts, people, opportunities, conversations, teams and users, which is a deliberately narrow catalog.
• Access is an add-on for Agentic customers, meaning teams that bought an Agent package such as Account Agent or Coaching Agent.
• Salesloft’s own help center describes the server as being in a Crawl phase, and its supported clients are Claude Desktop and ChatGPT.

Salesloft has taken the most conservative approach to MCP of any vendor in this review, and that is a defensible position rather than a shortcoming.

The server reads revenue data and does nothing else. It cannot change a record, advance a deal or touch a cadence, so the worst outcome of a misfiring prompt is a wrong answer rather than a wrong action.

The complication is that Salesloft’s marketing and Salesloft’s documentation currently describe different products. This review works from the help center, which is the surface a customer can actually verify today, and flags where the announcements point somewhere else. We compete with Salesloft and publish our own MCP server, which is worth knowing as you read the comparison.

What Salesloft MCP Is

Salesloft MCP is a standardized interface built on the Model Context Protocol that lets external AI assistants query your Salesloft data. Salesloft’s own FAQ describes it as currently in the Crawl phase, which is the company’s own signal about maturity.

The security posture is the strongest part of the documentation, and it is unusually specific. Data comes from your own Salesloft instance, nothing is cached outside the Salesloft perimeter, and the assistant only sees data during the active chat session. MCP falls inside Salesloft’s existing SOC 2 and ISO 27001 scopes.

One caveat there is stated plainly and deserves repeating, because it is the honest version of a claim most vendors fudge. Salesloft does not use your data for training, but whether the LLM provider does depends on the contract you hold with that provider. The server cannot control what happens once data reaches Claude or ChatGPT, and Salesloft says so.

The Clari Context

Salesloft merged with Clari, and the combined company positions the MCP server as a route into the full revenue lifecycle rather than just sales engagement. Its September 2026 announcement describes adding Cadence and activity data, Clari Copilot call intelligence, forecasting and deal inspection data, plus connectors for ChatGPT, Microsoft Copilot and Google Gemini.

That is roadmap, not current documentation, and the gap between the two is the single most important thing to understand before planning around this server. More on that below.

The Agent packages that gate access are worth understanding on their own terms, because they are the reason most teams will or will not have this server. Account Agent and Coaching Agent are autonomous products rather than features, priced separately, and the MCP server arrives as an inclusion with them. If the category is unfamiliar, our explainer on what an AI SDR is covers how agents differ from the automation already inside these platforms.

What Salesloft MCP Can Do

The catalog is 13 tools, and it splits cleanly into direct lookups and searches. Everything here reads.

The conversation tools are the most valuable of the set. Being able to search conversations and then pull participants, messages and recording data is what makes the server worth connecting for a manager reviewing team activity.

Salesloft publishes sample prompts by persona, which is a useful way to see the intended shape. A rep asks for a summary of last week’s calls with an account and any objections raised. A manager asks which deals in a team’s pipeline are most at risk of slipping. A CRO asks about current pipeline revenue broken down by segment.

Every one of those prompts shares a property: it is a question. Nothing in this catalog takes an action, and that is by design rather than by omission.

Notice also what the object list does not include. There are no cadence, template, task or activity-creation tools, so the server describes accounts, people, deals and conversations rather than the outbound machinery around them. Teams expecting the conversational equivalent of their prospecting workflow will find this reads the results of that work instead of running it.

How to Set Up Salesloft MCP

Setup runs through an admin, then through each user’s AI client. The server stays dark until it is switched on for the organization.

Admin Configuration

An administrator switches the server on once for the whole organization, and the path runs through the AI settings rather than through an integrations menu.

1. In Salesloft, open the Settings page as an admin and select the Artificial Intelligence settings under the Data section.
2. Scroll to the Salesloft MCP section within those settings.
3. Toggle the setting to enable the MCP Server, which activates the server discovery URL for your team. The toggle turns blue when it is on.
4. Share the client-specific connection instructions with users, since the pre-configuration only makes connection possible rather than automatic.

Admin rights are required for all of this. Without them the toggle is not available, and neither is the discovery URL that clients need.

User Connection

Users authenticate with their existing Salesloft credentials, so there are no separate accounts to provision. Access is tied to the user’s Salesloft API key, and the supported clients per the help center are Claude Desktop and ChatGPT.

Permissions carry over intact from Salesloft itself. If you do not have access to a record in the platform, the assistant receives a 403 or an empty result when it tries to fetch that record, which means the server cannot become a way around your own permission model.

Revoking access has two levels. Removing or regenerating a user’s key in Settings under API Keys cuts off that individual, while turning off the organization-level toggle disconnects everyone at once.

If a connection fails, the documented cause of a 401 Unauthorized is an incorrect or revoked API key, and the fix is generating a new key and updating the client configuration.

Salesloft MCP Pricing and Availability

There is no public rate card here, and the MCP server sits outside the standard tiers as an add-on. The help center’s package availability grid marks it as unavailable on Advanced and Elite, and available as an Add-On.

The qualifying condition is narrower than that grid suggests. Salesloft states that the MCP server is available for Agentic customers only, meaning teams that have purchased one of the Agent packages such as Account Agent or Coaching Agent, who get the MCP server included.

There is a consumption dimension too. MCP calls route through the Salesloft API and count against your organization’s standard API rate limits, so heavy conversational use competes with your existing integrations for the same budget. That is worth modeling before rolling the server out to a full team.

The comparison a buyer actually needs is total cost against capability, and that is hard to run when one side publishes nothing. An Agent package plus the seats underneath it is a materially different commitment from a platform that lists its plans publicly, and the MCP server is rarely the deciding factor in either direction.

Where Salesloft MCP Falls Short

The limitations are clear and, to Salesloft’s credit, documented rather than discovered.

The server is read-only, supporting no updates, writes or deletes of any kind. An assistant can tell you a deal is at risk and cannot update the deal, create the follow-up task, or log the call.

Cadences are invisible to it. The documentation states explicitly that searching or retrieving cadences, or cadence performance, is not supported. For a sales engagement platform, that is a striking gap: the core object most Salesloft users work in every day is the one the MCP server cannot reach.

Client support is narrow. The help center names Claude Desktop and ChatGPT as the currently supported clients, which is fewer than most competitors.

The documentation and the announcements disagree, and this is the thing to watch. Salesloft’s September 2026 newsroom post advertises write-back capabilities, Cadence data in the MCP layer, and connectors for Microsoft Copilot and Google Gemini.

The help center, last updated in August 2026, describes a read-only server with no cadence access and two supported clients. Both can be true of different points in time. Plan against the documented product rather than the announced one, then re-check before you commit.

Read-only is a genuinely sound security posture, and the research supports the caution behind it. A peer-reviewed threat model published in the Journal of Cybersecurity and Privacy identified 57 threats across MCP components using STRIDE and DREAD.

The same study tested seven MCP clients and found five of them implemented no static validation of server-provided tool metadata. In an ecosystem with that much client-side variance, a server that cannot write is a server that cannot be tricked into writing.

That reasoning aligns with what CISA’s Secure by Design guidance asks of vendors, which is that products ship safe by default rather than leaving safety to customer configuration. Salesloft’s read-only default is a textbook example, even though it costs the product real functionality.

Salesloft MCP Versus Reply MCP

We compete with Salesloft, so weigh this section accordingly. The two servers are built on opposite philosophies, and which one is right depends entirely on whether you want an assistant that reports or an assistant that acts.

We took the opposite bet, and the mechanism behind it is what makes writing defensible at all. Every tool we publish carries a safety label that reaches the client during discovery, marking it as one that only reads, one that changes something, or one that a prospect will see and that cannot be undone.

An assistant therefore knows, before it acts, that pulling a performance number is not the same class of operation as launching a send. The riskiest handful, such as enrolling people or replying on a live thread, are meant to be confirmed every time. Salesloft answered the same safety question by removing writes altogether, and reasonable teams will prefer either answer.

Our own gap belongs in the same breath. We ship nothing that discovers a person or appends missing data, and lookup covers records you have saved rather than an outside database. Salesloft’s read tools are also richer than ours on accounts, opportunities and call content, because it is a CRM-adjacent revenue platform and we are not.

Availability differs as sharply as the philosophy. Ours comes with the 14-day trial and nothing beyond it, since we operate no free tier past that window. Salesloft’s needs an Agent package, and neither company publishes a complete price list.

For the platform comparison behind the protocol one, our Salesloft review covers cadences, Conversations and reporting in more depth.

Salesloft MCP Use Cases That Hold Up

Pipeline inspection is the strongest fit. Asking which deals moved backwards in a stage this month, or which have had no activity in three weeks, uses search_opportunities against data a manager would otherwise assemble by hand.

Call review is the second. Searching conversations by account and pulling participants and recording data lets a manager or a coach catch up on a team’s week without sitting through recordings.

Account research before a renewal is the third. Combining account_by_id with conversation history gives a rep the context for a conversation, which is the highest-value read in the catalog.

What does not work is anything operational. You cannot ask it to add a prospect to a cadence, update a stage or send a follow-up, so the server ends where the work begins. Teams that want the acting half generally connect a second server for execution, and those comparing that layer will find our roundup of Salesloft alternatives covers the platforms that do it.

Who Salesloft MCP Is For

Salesloft MCP suits managers, RevOps and leadership on an Agent package who want to interrogate revenue data conversationally. If your questions are analytical and your security team is cautious, the read-only design is a feature and the SOC 2 and ISO 27001 coverage will matter.

Individual reps get less from it, because the object they live in is cadences and that is precisely what the server cannot see. Automation projects are a poor fit too, since nothing here can take an action.

Teams whose main need is finding new prospects are looking at the wrong layer entirely, since this server only reads what you already hold. Sourcing is a separate product category, and our roundup of sourcing tools covers the vendors whose own servers do reach an external database.

Need the half that acts rather than the half that reports? Start a free trial and weigh the write tools yourself.