# @nubiia/mcp-pipedrive Pipedrive CRM MCP server: deals, leads, contacts, pipelines, activities & custom fields for AI assistants like Claude. 300+ tools. Built by Nubiia. - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 2.7.1 - **Author:** Nubiia - **License:** MIT - **npm:** @nubiia/mcp-pipedrive - **Source:** https://github.com/nubiia-dev/mcp-pipedrive - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-10-22T18:29:40.986Z - **Version scanned:** 2.7.1 - **CVEs:** none found by OSV at scan time ## Tools 40 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `organizations_list_activities` — List all activities associated with a specific organization. - `persons_list_activities` — List all activities associated with a specific person. Returns all activities (calls, meetings, tasks, etc.) linked to the person, including: - Activity details - `projects_activities_list` — Get all activities linked to a specific project. Returns activity details including type, due date, and completion status. - `organizations_add_follower` — Add a follower to an organization. - `teams_add_user` — Add a user to a team. - `projects_archive` — Archive a project. Archived projects can be retrieved by using the include_archived filter. - `projects_boards_list` — Get all project boards that are not deleted. Returns boards ordered by their order number. - `projects_boards_get` — Get details of a specific project board by ID. - `activities_bulk_delete` - `organizations_bulk_delete` - `persons_bulk_delete` - `organizations_get_collection` - `persons_get_collection` - `activities_create` — Create a new activity. Subject, type, and due_date are required. Can link to deals, persons, organizations, projects, or leads. - `channels_create` - `org_relationships_create` — Create a new organization relationship. - `organizations_create` — Create a new organization. Name is required. Supports address fields and custom fields. Custom fields: - Pass display names: { "custom_fields": { "Industry": "T - `persons_create` - `products_create` - `projects_create` — Create a new project. Requires title, board_id, and phase_id. Optionally include description, dates, deals, and labels. - `teams_create` — Add a new team to the company. - `organizations_list_deals` — List all deals associated with a specific organization. - `persons_list_deals` — List all deals associated with a specific person. Returns all deals where the person is linked, including: - Deal details (title, value, stage, status) - Timeli - `products_list_deals` — Get all deals where a specific product is attached. Returns a list of deals that have this product in their products list. This is useful for: - Tracking produc - `channels_delete_conversation` — Delete an existing conversation from a channel. This endpoint requires the **Messengers integration** OAuth scope and the Messaging manifest ready for the Messa - `mailbox_delete_thread` — Mark a mail thread as deleted. - `teams_delete_user` — Remove a user from a team. - `activities_delete` — Delete an activity by ID. - `channels_delete` — Delete an existing messenger's channel and all related entities (conversations and messages). This endpoint requires the **Messengers integration** OAuth scope - `org_relationships_delete` — Delete an organization relationship. - `organizations_delete` — Delete an organization by ID. - `persons_delete` — Delete a person from Pipedrive. Warning: This action cannot be undone. The person will be permanently deleted. Note: Deleting a person does not automatically de - `products_delete` — Delete a product from Pipedrive. The product will be marked as deleted and after 30 days will be permanently deleted. Note: Deleting a product does not automati - `projects_delete` — Delete a project by marking it as deleted. This does not permanently remove the project. - `organizations_list_files` — List all files attached to a specific organization. - `persons_list_files` — List all files attached to a specific person. Returns all files associated with the person, including: - File metadata (name, type, size) - Upload information ( - `products_list_files` — List all files attached to a specific product. Returns files associated with the product such as: - Product images - Documentation - Specifications - Contracts - `organizations_delete_follower` - `persons_delete_follower` — Delete a follower from a person. Removes a user from the list of followers for this person. After removal: - The user will no longer receive notifications about - `persons_add_follower` — Add a follower to a person. Followers are users who will receive notifications about updates to this person. This is useful for team collaboration and keeping s ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"mcp-pipedrive\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"@nubiia/mcp-pipedrive\"\n ],\n \"env\": {\n \"PIPEDRIVE_API_TOKEN\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `PIPEDRIVE_API_TOKEN` — Pipedrive API Token (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Extensive blast radius — deletes data; holds an api key. - Floor 58, ceiling 58 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/%40nubiia%2Fmcp-pipedrive - Install plan: https://forgeregistry.com/api/v1/packages/%40nubiia%2Fmcp-pipedrive/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/%40nubiia%2Fmcp-pipedrive - HTML page: https://forgeregistry.com/registry/%40nubiia%2Fmcp-pipedrive - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.