What can an AI agent do with
Create, change, and delete deals?
Lets the agent add deals, change them (for example their stage or amount), and delete them. Deals are sales records, not payments.
How to spot it
On a HubSpot connection or settings screen, this is crm.objects.deals.write.
With it, an agent can
- Create new deals
- Change deal details and stages
- Delete deals
It cannot, on its own
- Take payments (payments use separate permissions)
- Change contacts or companies (separate permissions)
What a bad day looks like
The agent moves deals to the wrong stage or deletes them, so your pipeline and forecast are wrong.
Set it up safer
- Grant crm.objects.deals.read if it only needs to report on deals
- Ask for a review step before it closes or deletes a deal
Narrower permissions on HubSpot:
- View deals
crm.objects.deals.read
Ask the company selling the agent
- What deal changes will the agent make on its own?
- Can I approve stage changes and deletes?
- Is every change logged?
Source
Checked against HubSpot documentation on 2026-09-28. All HubSpot permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.