What can an AI agent do with
Create, change, and delete contacts?
Lets the agent add new contacts, change existing ones, and delete them.
How to spot it
On a HubSpot connection or settings screen, this is crm.objects.contacts.write.
With it, an agent can
- Create new contacts
- Change contact details
- Delete contacts
It cannot, on its own
- Edit Sensitive Data fields (separate Enterprise permissions)
- Change companies or deals (separate permissions)
What a bad day looks like
A misread instruction makes the agent delete or overwrite a batch of contacts, wiping phone numbers or owners.
Set it up safer
- Grant crm.objects.contacts.read if it only needs to look up contacts
- Ask for a review step before any delete
Narrower permissions on HubSpot:
- View contacts
crm.objects.contacts.read
Ask the company selling the agent
- Will the agent ever delete contacts?
- Can I approve changes before they are saved?
- Is there a log of every change it makes?
Source
Checked against HubSpot documentation on 2026-09-28. All HubSpot permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.