What can an AI agent do with
Export your whole CRM?
Lets the agent export records from your CRM in bulk, for every type of record.
How to spot it
On a HubSpot connection or settings screen, this is crm.export.
With it, an agent can
- Export contacts, companies, deals, tickets, and other records in bulk
It cannot, on its own
- Change or delete records
What a bad day looks like
A tricked agent exports your entire customer database at once, and the file ends up somewhere you do not control.
Set it up safer
- Grant only the read permission for the record types it needs, such as crm.objects.contacts.read
- Ask why a full export is needed at all
Narrower permissions on HubSpot:
- View contacts
crm.objects.contacts.read - View deals
crm.objects.deals.read
Ask the company selling the agent
- Why does the agent need to export everything?
- Where do exported files go, and who can open them?
- How long do you keep exports?
Source
Checked against HubSpot documentation on 2026-09-28. All HubSpot permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.