What can an AI agent do with
View contacts?
Lets the agent see your contacts and their details, such as names, emails, phone numbers, and other contact fields.
How to spot it
On a HubSpot connection or settings screen, this is crm.objects.contacts.read.
With it, an agent can
- See contact records and their details
- Look up contacts to answer questions
It cannot, on its own
- Create, change, or delete contacts
- See Sensitive Data fields (separate Enterprise permissions)
What a bad day looks like
The agent copies your customer list into another tool or gives a customer's phone number to someone who asked for it.
Set it up safer
- Grant read only if the agent just needs to look things up
- Keep very private details in HubSpot Sensitive Data fields, which need separate permissions
Ask the company selling the agent
- Do you copy my contacts into your own systems?
- How long do you keep contact data?
- Do you use my data to train models?
Source
Checked against HubSpot documentation on 2026-09-28. All HubSpot permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.