Best GoHighLevel MCP servers, compared on CRM depth, OAuth, and write safety
HighLevel publishes an official MCP. Compare monthly operations, counted GoHighLevel-specific tools, whether the AI client must hold a Private Integration Token, and which CRM writes are actually approval-gated.
Published
· September 17, 2026
Last verified
· September 17, 2026
Products reviewed
· 4
Author
· NotFair product team
Our verdict
Best for operators who want hosted HighLevel OAuth next to ads and analytics
NotFair hosts Marketplace OAuth, exposes a counted 36-tool CRM surface, and gates contact, opportunity, calendar, tag, and task writes behind workspace roles. Official HighLevel documents a larger first-party operation catalog; NotFair does not copy that number as its own tool count.
Ad-creative columns do not map here. The matrix compares CRM tool breadth and whether the client stores a Private Integration Token. “Not published” means the vendor’s public documentation does not support a more specific claim.
Free: 300/month after 7 unlimited days. Growth: unlimited ($99/mo monthly, or $950/yr (~$79/mo) annually). This platform is not one of the metered ad-network quota platforms.Usage source
36 GoHighLevel tools
No — Claude and other MCP clients do not store a HighLevel Private Integration Token.Capability source
Yes — contacts, opportunities, calendar appointments, tags, and contact tasks, with workspace-role gates. deleteCalendarEvent cannot be undone through NotFair.
No NotFair-style SaaS operation cap is published on the HighLevel help articles used for this row.
625 operations across 40 domains on the Claude /mcp/anthropic/v2 help article. The generic /mcp/ endpoint is documented as a more limited core tool set; a counted inventory is not published there.
Generic HTTP setup documents Authorization Bearer <token> plus locationId headers in the client config.Capability source
Vendor documents retrieve, update, messaging, opportunities, calendars, payments, locations, and custom fields. Exact NotFair-style approval/provenance is not assumed.
Yes — vendor documents approved actions against HighLevel services
No software subscription cap; usage remains subject to the HighLevel API and the host you operate.
56 curated tools on the current README: 22 read-only, 22 create/update, 12 destructive
Client configuration uses operator-supplied HighLevel credentials on the host you run.
README documents custom-field CRUD, contact delete, and a confirm-gated duplicate merge. Those destructive tools are not part of NotFair’s counted surface.
Yes — including documented destructive operations
GoHighLevel is not an ad creative surface. Capability columns here mean whether the AI client must store a Private Integration Token, and whether CRM writes are documented.
Operating model
Setup, safeguards, location routing, and client reach
Server
Best for
Delivery
Credentials
Safety lifecycle
Multi-account
Clients
NotFair
Our verdict
Operators who want hosted HighLevel OAuth on the same MCP endpoint as ads and analytics
Workspace-role gates, before/after receipts, and labeled destructive calendar deletes. No Google Ads impact snapshot.
Company or Location connections with explicit locationId on agency calls
Claude Web/Code, Codex CLI, Cursor, OpenClaw, Hermes
HighLevel official MCP
Teams that want HighLevel’s first-party MCP and Claude operation catalog
HighLevel-hosted remote MCP
Generic /mcp/ uses a Private Integration Token and locationId headers. /mcp/anthropic/v2 uses HighLevel sign-in and sub-account OAuth for Claude.
HighLevel OAuth or PIT scopes; NotFair workspace-role receipts are not assumed
Claude v2 help article documents multi-sub-account support for agencies
Claude.ai, Claude Code, Claude Cowork on the Anthropic v2 endpoint; Cursor, Windsurf, OpenAI Playground, and other HTTP MCP clients on /mcp/
tkturners/gohighlevel-mcp
Developers who want a self-hosted TypeScript HighLevel MCP with a published 81-tool inventory
Self-hosted open source
Private Integration Token or OAuth 2.0 with refresh, as documented in the repository
Operator-owned credentials; NotFair role gates are not assumed. README states the project is not affiliated with GoHighLevel.
The HighLevel account(s) the operator configures
Claude Code, Cursor, Windsurf, and other MCP clients that can run the server
NightSquawk/gohighlevel-mcp-server
Operators who want 56 curated tools including contact delete and a guarded merge
Self-hosted open source
GoHighLevel API v2 credentials as documented in the repository
Repository documents confirm-gating for some destructive ops; NotFair calendar-delete and role-gate contracts are not assumed
The HighLevel account(s) the operator configures
Claude, Cursor, and other MCP clients that can run the server
NotFair is the publisher of this comparison and is therefore not a neutral party. Google Ads impact review and undo are not claimed for GoHighLevel. HighLevel’s 625-operation Claude catalog is first-party documentation, not a NotFair tool count.
Testing method
A benchmark that can be rerun
We review the connection boundary, tool surface, write contract, location routing, and recovery path. Marketing claims without a public document, schema, or observable flow are not treated as verified capabilities.
How many MCP operations can the user run each month, what consumes quota, and what happens at the limit?
02
Tool depth
How many tools are GoHighLevel-specific rather than a cross-platform total?
03
Token handling
Does the AI client store a Private Integration Token, or is OAuth hosted?
04
Connection
Can a non-developer connect without building HighLevel OAuth infrastructure?
05
Useful reads
Can the agent inspect locations, contacts, conversations, opportunities, and calendars?
06
Safe writes
Are CRM mutations role-gated, receipted, and limited to documented scopes?
07
After the write
Are before/after receipts available? Calendar delete must not be described as undoable.
08
Location routing
Can the agent list locations and target an explicit locationId?
09
Client reach
Does the same remote endpoint work in the AI workspace the operator already uses?
Test boundary
NotFair was verified against its production registerGoHighLevelTools() surface and hosted Marketplace OAuth connection. Competitor rows are based on linked public documentation or repository READMEs; no competitor account was connected and no competitor write was executed for this review.
Decision guide
Choose by operating model
Choose NotFair
You want hosted HighLevel OAuth without a PIT in the client, a drift-guarded tool count, and the same MCP endpoint as ads and analytics.
Choose HighLevel official
You want the first-party Claude catalog (625 operations across 40 domains on the Anthropic v2 endpoint) or the generic PIT endpoint.
Choose tkturners/gohighlevel-mcp
You want a self-hosted TypeScript server that publishes 81 tools and PIT or OAuth 2.0.
Choose NightSquawk
You want 56 curated tools including contact delete and a guarded merge, operated by you.
NotFair production path
Inspect → approve CRM write → record receipt → never claim ads undo
Reads cover contacts, conversations, opportunities, calendars, invoices, payments, and metadata.
Writes require contacts.write, opportunities.write, calendars/events.write, or locations/tags.write plus a workspace role that can write.
createContact, upsertContact, updateContact, opportunity and appointment mutations return before/after receipts.
deleteCalendarEvent is destructive and cannot be undone through NotFair.
The generic request tool is GET-only. locations.write and users.write are not requested.
Remote endpoint
https://notfair.co/api/mcp/notfair
Public verification prompts
Use the same prompts on every server
01
Show my plan, monthly operation limit, operations used, and operations remaining.
02
List every GoHighLevel-specific tool available in this connection; exclude tools for other platforms.
03
List reachable HighLevel locations and their locationIds.
04
Find the last five contacts added in this location.
05
List open opportunities in the primary pipeline.
06
Preview creating a contact from an email. Do not execute until I approve.
07
After a write, return the operation receipt, author, timestamp, and before/after snapshot.
08
Explain whether deleteCalendarEvent can be undone on this server.
09
Confirm the AI client does not receive a Private Integration Token.
GoHighLevel MCP server FAQ
Direct answers for buyers comparing official, hosted, and self-hosted HighLevel MCP options.
Is there an official GoHighLevel MCP?
Yes. HighLevel documents https://services.leadconnectorhq.com/mcp/ for generic HTTP clients (Private Integration Token + locationId headers) and https://services.leadconnectorhq.com/mcp/anthropic/v2 for Claude, which the vendor says includes 625 operations across 40 domains plus multi-sub-account OAuth.
How many GoHighLevel tools does NotFair expose?
NotFair advertises 36 GoHighLevel tools, measured from registerGoHighLevelTools() and guarded by a drift test. That is not HighLevel’s 625-operation first-party catalog.
Do I paste a Private Integration Token into Claude?
Not with NotFair. Official generic HighLevel MCP setup documents Authorization and locationId headers. NotFair keeps HighLevel credentials server-side after Marketplace OAuth.
Was every competitor tested against a live sub-account?
No. This review combines public documentation with live production verification of NotFair.
From comparison to first write
Connect once. Audit first. Approve only what you understand.
The free plan includes seven days of unlimited access, then 300 MCP operations each month. No credit card.