Vendor-authored, source-reviewed comparison · 2026
Best GoHighLevel MCP servers, compared on CRM depth, OAuth, and write safety
HighLevel publishes an official MCP. Compare monthly operations, counted GoHighLevel-specific tools, whether the AI client must hold a Private Integration Token, and which CRM writes are actually approval-gated.
- Published
- · September 17, 2026
- Last verified
- · September 17, 2026
- Products reviewed
- · 4
- Author
- · NotFair product team
Our verdict
Best for operators who want hosted HighLevel OAuth next to ads and analytics
NotFair hosts Marketplace OAuth, exposes a counted 36-tool CRM surface, and gates contact, opportunity, calendar, tag, and task writes behind workspace roles. Official HighLevel documents a larger first-party operation catalog; NotFair does not copy that number as its own tool count.
- Monthly operations
- Workspace plans
- Not a metered ad-network quota platform
- GoHighLevel tools
- 36
- Reads and bounded writes
- Credentials
- Hosted OAuth
- No PIT in the AI client
- Write lifecycle
- Role-gated + receipts
- Calendar delete is irreversible
Comparison matrix
Counted tools, token handling, and CRM writes
Ad-creative columns do not map here. The matrix compares CRM tool breadth and whether the client stores a Private Integration Token. “Not published” means the vendor’s public documentation does not support a more specific claim.
| Server | Operations / month | GoHighLevel tools | Client holds PIT? | CRM writes | Write access |
|---|---|---|---|---|---|
NotFair Our verdict | Free: 300/month after 7 unlimited days. Growth: unlimited ($99/mo monthly, or $950/yr (~$79/mo) annually). This platform is not one of the metered ad-network quota platforms.Usage source | 36 GoHighLevel tools | No — Claude and other MCP clients do not store a HighLevel Private Integration Token.Capability source | Yes — contacts, opportunities, calendar appointments, tags, and contact tasks, with workspace-role gates. deleteCalendarEvent cannot be undone through NotFair. | Yes — bounded CRM writes; request is GET-only |
HighLevel official MCP | No NotFair-style SaaS operation cap is published on the HighLevel help articles used for this row. | 625 operations across 40 domains on the Claude /mcp/anthropic/v2 help article. The generic /mcp/ endpoint is documented as a more limited core tool set; a counted inventory is not published there. | Generic HTTP setup documents Authorization Bearer <token> plus locationId headers in the client config.Capability source | Vendor documents retrieve, update, messaging, opportunities, calendars, payments, locations, and custom fields. Exact NotFair-style approval/provenance is not assumed. | Yes — vendor documents approved actions against HighLevel services |
tkturners/gohighlevel-mcp | No software subscription cap; usage remains subject to the HighLevel API and the host you operate. | 81 MCP tools on the current README, covering contacts, opportunities, appointments, pipelines, calendars, conversations, blogs, workflows, and more | Client configuration uses operator-supplied HighLevel credentials on the host you run. | Repository documents a read/write CRM surface. NotFair workspace receipts and calendar-delete limits are not assumed. | Yes — mutating CRM tools as documented in the repository |
NightSquawk/gohighlevel-mcp-server | No software subscription cap; usage remains subject to the HighLevel API and the host you operate. | 56 curated tools on the current README: 22 read-only, 22 create/update, 12 destructive | Client configuration uses operator-supplied HighLevel credentials on the host you run. | README documents custom-field CRUD, contact delete, and a confirm-gated duplicate merge. Those destructive tools are not part of NotFair’s counted surface. | Yes — including documented destructive operations |
GoHighLevel is not an ad creative surface. Capability columns here mean whether the AI client must store a Private Integration Token, and whether CRM writes are documented.
Operating model
Setup, safeguards, location routing, and client reach
| Server | Best for | Delivery | Credentials | Safety lifecycle | Multi-account | Clients |
|---|---|---|---|---|---|---|
NotFair Our verdict | Operators who want hosted HighLevel OAuth on the same MCP endpoint as ads and analytics | Hosted remote MCP | Hosted Marketplace OAuth; platform tokens stay server-side | Workspace-role gates, before/after receipts, and labeled destructive calendar deletes. No Google Ads impact snapshot. | Company or Location connections with explicit locationId on agency calls | Claude Web/Code, Codex CLI, Cursor, OpenClaw, Hermes |
HighLevel official MCP | Teams that want HighLevel’s first-party MCP and Claude operation catalog | HighLevel-hosted remote MCP | Generic /mcp/ uses a Private Integration Token and locationId headers. /mcp/anthropic/v2 uses HighLevel sign-in and sub-account OAuth for Claude. | HighLevel OAuth or PIT scopes; NotFair workspace-role receipts are not assumed | Claude v2 help article documents multi-sub-account support for agencies | Claude.ai, Claude Code, Claude Cowork on the Anthropic v2 endpoint; Cursor, Windsurf, OpenAI Playground, and other HTTP MCP clients on /mcp/ |
tkturners/gohighlevel-mcp | Developers who want a self-hosted TypeScript HighLevel MCP with a published 81-tool inventory | Self-hosted open source | Private Integration Token or OAuth 2.0 with refresh, as documented in the repository | Operator-owned credentials; NotFair role gates are not assumed. README states the project is not affiliated with GoHighLevel. | The HighLevel account(s) the operator configures | Claude Code, Cursor, Windsurf, and other MCP clients that can run the server |
NightSquawk/gohighlevel-mcp-server | Operators who want 56 curated tools including contact delete and a guarded merge | Self-hosted open source | GoHighLevel API v2 credentials as documented in the repository | Repository documents confirm-gating for some destructive ops; NotFair calendar-delete and role-gate contracts are not assumed | The HighLevel account(s) the operator configures | Claude, Cursor, and other MCP clients that can run the server |
NotFair is the publisher of this comparison and is therefore not a neutral party. Google Ads impact review and undo are not claimed for GoHighLevel. HighLevel’s 625-operation Claude catalog is first-party documentation, not a NotFair tool count.
Testing method
A benchmark that can be rerun
We review the connection boundary, tool surface, write contract, location routing, and recovery path. Marketing claims without a public document, schema, or observable flow are not treated as verified capabilities.
01
Monthly capacity
How many MCP operations can the user run each month, what consumes quota, and what happens at the limit?
02
Tool depth
How many tools are GoHighLevel-specific rather than a cross-platform total?
03
Token handling
Does the AI client store a Private Integration Token, or is OAuth hosted?
04
Connection
Can a non-developer connect without building HighLevel OAuth infrastructure?
05
Useful reads
Can the agent inspect locations, contacts, conversations, opportunities, and calendars?
06
Safe writes
Are CRM mutations role-gated, receipted, and limited to documented scopes?
07
After the write
Are before/after receipts available? Calendar delete must not be described as undoable.
08
Location routing
Can the agent list locations and target an explicit locationId?
09
Client reach
Does the same remote endpoint work in the AI workspace the operator already uses?
Test boundary
NotFair was verified against its production registerGoHighLevelTools() surface and hosted Marketplace OAuth connection. Competitor rows are based on linked public documentation or repository READMEs; no competitor account was connected and no competitor write was executed for this review.
Decision guide
Choose by operating model
Choose NotFair
You want hosted HighLevel OAuth without a PIT in the client, a drift-guarded tool count, and the same MCP endpoint as ads and analytics.
Choose HighLevel official
You want the first-party Claude catalog (625 operations across 40 domains on the Anthropic v2 endpoint) or the generic PIT endpoint.
Choose tkturners/gohighlevel-mcp
You want a self-hosted TypeScript server that publishes 81 tools and PIT or OAuth 2.0.
Choose NightSquawk
You want 56 curated tools including contact delete and a guarded merge, operated by you.
NotFair production path
Inspect → approve CRM write → record receipt → never claim ads undo
- listLocations returns reachable HighLevel locations; agency calls pass locationId.
- Reads cover contacts, conversations, opportunities, calendars, invoices, payments, and metadata.
- Writes require contacts.write, opportunities.write, calendars/events.write, or locations/tags.write plus a workspace role that can write.
- createContact, upsertContact, updateContact, opportunity and appointment mutations return before/after receipts.
- deleteCalendarEvent is destructive and cannot be undone through NotFair.
- The generic request tool is GET-only. locations.write and users.write are not requested.
Remote endpoint
https://notfair.co/api/mcp/notfairPublic verification prompts
Use the same prompts on every server
Show my plan, monthly operation limit, operations used, and operations remaining.
List every GoHighLevel-specific tool available in this connection; exclude tools for other platforms.
List reachable HighLevel locations and their locationIds.
Find the last five contacts added in this location.
List open opportunities in the primary pipeline.
Preview creating a contact from an email. Do not execute until I approve.
After a write, return the operation receipt, author, timestamp, and before/after snapshot.
Explain whether deleteCalendarEvent can be undone on this server.
Confirm the AI client does not receive a Private Integration Token.
GoHighLevel MCP server FAQ
Direct answers for buyers comparing official, hosted, and self-hosted HighLevel MCP options.
Yes. HighLevel documents https://services.leadconnectorhq.com/mcp/ for generic HTTP clients (Private Integration Token + locationId headers) and https://services.leadconnectorhq.com/mcp/anthropic/v2 for Claude, which the vendor says includes 625 operations across 40 domains plus multi-sub-account OAuth.
NotFair advertises 36 GoHighLevel tools, measured from registerGoHighLevelTools() and guarded by a drift test. That is not HighLevel’s 625-operation first-party catalog.
Not with NotFair. Official generic HighLevel MCP setup documents Authorization and locationId headers. NotFair keeps HighLevel credentials server-side after Marketplace OAuth.
No. This review combines public documentation with live production verification of NotFair.
From comparison to first write
Connect once. Audit first. Approve only what you understand.
The free plan includes seven days of unlimited access, then 300 MCP operations each month. No credit card.