Home / Agent-Access Registry

Registry · Updated 21 August 2026

Which commercial software can an AI agent actually act inside?

Not which vendors say "agentic" — which ones publish an interface an external agent can authenticate against and use. Every row below was checked against the vendor's own documentation on the date shown, and links to the specific page the finding rests on. Where we found nothing, we say so rather than leaving it blank.

18 / 34publish an official MCP server
25 / 34document external agent write access
2categories with zero agent interface

The two categories where no vendor ships an agent interface are Pricing & Packaging and Sales Compensation — Layers 3 and 5 of the Agentic Commercial Model. They are also the two layers the model argues have to change first. Several of those vendors do expose REST APIs an agent can write through; none of them will sell you the interface. You build it yourself, or you don't have one.

GTM & Sales EngagementLayer 23 / 3
Marketing AutomationLayer 25 / 5
CRM & PipelineLayer 92 / 3
Sales Enablement & Revenue IntelligenceLayer 42 / 3
Customer Success & AdoptionLayer 73 / 5
Billing & Usage MeteringLayer 6 + 82 / 5
CPQLayer 31 / 3
Pricing & Packaging StrategyLayer 30 / 3
Sales Compensation & Incentive ManagementLayer 50 / 4
VendorLayer / categoryMCP serverExternal APIAgent write accessEvidenceVerifiedWhat we found
Chargebee L6 + 8 · Billing & Usage Metering Official Documented Documented Source ↗ 2026-08-21 Three first-party MCP servers (Knowledge Base, Data Lookup, Onboarding) plus configurable custom servers with per-tool input constraints; Onboarding server writes to test/sandbox sites.
DigitalRoute L6 + 8 · Billing & Usage Metering None found Documented Documented Source ↗ 2026-08-21 Usage Engine Cloud REST APIs with OAuth 2.0 client credentials and explicit write scopes (create:meter_types, create:meters); no MCP server found.
Metronome L6 + 8 · Billing & Usage Metering Official Documented Documented Source ↗ 2026-08-21 First-party MCP server (@metronome/mcp) in the official Node SDK, bearer-token auth, exposes writes incl. contracts.create and usage.ingest.
Orb L6 + 8 · Billing & Usage Metering None found Documented Documented Source ↗ 2026-08-21 Public REST API with API-key auth and write endpoints (event ingestion, customer and alert creation); no vendor-published MCP server found in docs, GitHub, npm or MCP directories.
m3ter L6 + 8 · Billing & Usage Metering None found Documented Documented Source ↗ 2026-08-21 Full REST API with OAuth client-credentials and documented writes, but no first-party MCP server. Salesforce has signed a definitive agreement to acquire; no completion announcement found.
DealHub L3 · CPQ Third-party only Documented Documented Source ↗ 2026-08-21 Documented REST APIs incl. Headless Quotes (generate and publish a quote from a backend system), but neither MCP nor "DealAgent" appears in the developer docs — DealAgent is marketing-side only.
PandaDoc L3 · CPQ Official Documented Documented Source ↗ 2026-08-21 First-party hosted MCP server (mcp.pandadoc.com, EU variant) using OAuth consent; agents read, create and update documents and templates, scoped to the authenticated user’s regional account.
Qwilr L3 · CPQ Third-party only Documented Documented Source ↗ 2026-08-21 REST API with bearer/JWT auth and write endpoints for Pages, taxes and webhooks; no first-party MCP server — only third-party wrappers such as Zapier MCP.
Ahoy L9 · CRM & Pipeline None found None found None found None found 2026-08-21 No developer portal, API reference, webhook documentation or MCP server could be found; the site lists only end-user integrations with no documented programmatic access.
HubSpot L9 · CRM & Pipeline Official Documented Documented Source ↗ 2026-08-21 First-party remote MCP server with scope-gated, admin-authorised read and write access to CRM objects and engagements — distinct from the in-product Breeze copilot.
Pipedrive L9 · CRM & Pipeline Official Documented Documented Source ↗ 2026-08-21 Native first-party MCP server with per-client setup guides; access governed by authentication and permission settings, assistants can create or update records.
Catalyst (Totango) L7 · Customer Success & Adoption Third-party only Documented Documented Source ↗ 2026-08-21 No first-party MCP server for Catalyst or the merged Totango entity, only third-party wrappers. Catalyst API v1 is GET-only; Totango’s HTTP, Touchpoints and SuccessPlay APIs accept writes via API key with no agent-specific scoping, confirmation or audit trail.
ChurnZero L7 · Customer Success & Adoption Claimed, undocumented Documented Unclear Source ↗ 2026-08-21 Agentic Essentials and ChurnZero Connect (MCP) remain verifiable only via press release with no first-party technical documentation; the documented REST API is described by ChurnZero as read-only, with writes handled by a separate ingestion API whose agent-scoped use is undocumented.
Gainsight L7 · Customer Success & Adoption Official Documented Documented Source ↗ 2026-08-21 First-party MCP server with admin setup guide, user-level OAuth 2.1 with PKCE, writes to CTAs, tasks, success plans and timeline activities; deletes, company-field updates, scorecards and admin config excluded. No confirmation prompt or audit trail documented.
Planhat L7 · Customer Success & Adoption Official Documented Documented Source ↗ 2026-08-21 First-party MCP server with ~10 tools including create/update/delete_model_record; access is the intersection of the OAuth client permissions and the user’s own. No automated confirmation step and no audit trail documented.
Vitally L7 · Customer Success & Adoption Official Documented Documented Source ↗ 2026-08-21 Hosted first-party MCP connector tied to the user login and respecting Access Groups; creates Notes, Tasks and Custom Object records attributed to the acting user. Docs state write actions run without a confirmation step; no audit log documented.
Apollo.io L2 · GTM & Sales Engagement Official Documented Documented Source ↗ 2026-08-21 First-party MCP server at mcp.apollo.io over streamable HTTP with OAuth 2.0; writes include creating contacts, adding to sequences and sending one-off emails, scoped to the authorising user’s permissions, plan tier and credit balance.
Clay L2 · GTM & Sales Engagement Official ± Documented Documented Source ↗ 2026-08-21 First-party remote MCP server documented on Clay’s developer and university docs, plus a developer platform API/CLI covering tables, searches and workflows — external access, separate from the internal Claygent agent.
Outreach L2 · GTM & Sales Engagement Official Documented Documented Source ↗ 2026-08-21 Contrary to the earlier finding, Outreach now publishes a first-party MCP server at api.outreach.io/mcp (OAuth 2.1, August 2026 release, Amplify add-on) with read, create and delete tools but deliberately no update/edit tools, governed by the user’s existing profile permissions.
ActiveCampaign L2 · Marketing Automation Official Documented Documented Source ↗ 2026-08-21 First-party remote MCP server, per-account URL under Settings > Developer, explicitly supports writes: contacts, lists, tags, custom fields, automations, campaign creation and send.
ClickFunnels L2 · Marketing Automation Official Documented Documented Source ↗ 2026-08-21 Own MCP server in technical preview at agents.myclickfunnels.com/mcp with OAuth and a selectable read-only or full-access level; full access creates and updates funnels, pages, contacts, products and more.
Customer.io L2 · Marketing Automation Official Documented Documented Source ↗ 2026-08-21 First-party MCP server (mcp.customer.io, EU variant) exposing the Journeys UI and CDP Data Pipelines APIs with granular scopes — read, read:sensitive, write, write:live, configure — each user authenticating with their own credentials.
Klaviyo L2 · Marketing Automation Official Documented Documented Source ↗ 2026-08-21 First-party MCP server, GA in remote-hosted form, creating and updating campaigns, flows, profiles and catalogs; scoped by private API key scopes with an optional READ_ONLY mode and Owner/Admin/Manager role requirements.
Semrush L2 · Marketing Automation Official Documented Documented Source ↗ 2026-08-21 First-party MCP server (OAuth 2.0 or API key) but its tools are read-only by design; scoped write endpoints exist separately on the v4 Projects REST API.
PROS L3 · Pricing & Packaging Strategy None found None found None found Source ↗ 2026-08-21 Documentation and API references sit behind the login-gated PROS Connect portal; no public developer docs or MCP announcement found. Note: PROS divested its B2B CPQ/pricing line to Conga and now positions as an airline retailing vendor.
Vendavo L3 · Pricing & Packaging Strategy None found None found None found Source ↗ 2026-08-21 Only a login-gated documentation portal and support site; no public API/developer reference and no MCP mention. 2026 AI announcements cover an embedded pricing assistant, not external agent access.
Zilliant L3 · Pricing & Packaging Strategy Claimed, undocumented Documented Unclear Source ↗ 2026-08-21 Press release announces an MCP server slated for Q1 2026 with no linked technical docs; the public developer docs and Customer API reference contain no MCP pages, so write scoping is unverified.
CaptivateIQ L5 · Sales Compensation & Incentive Management Third-party only Documented Documented Source ↗ 2026-08-21 Public first-party developer site with token auth, documented rate limits and write endpoints (Data Worksheet batch update, bulk import), but no first-party MCP server — only third-party connector listings.
Everstage L5 · Sales Compensation & Incentive Management None found None found None found Source ↗ 2026-08-21 Agent Core describes internal multi-agent orchestration with no mention of MCP, external APIs or a developer portal; no public API reference found.
QuotaPath L5 · Sales Compensation & Incentive Management None found Documented Documented Source ↗ 2026-08-21 Public REST API covering deals, commissions, paths, teams and users with POST/PUT/PATCH/DELETE writes under workspace API tokens; no first-party MCP server anywhere in QuotaPath docs.
Spiff (Salesforce) L5 · Sales Compensation & Incentive Management None found Documented Documented Source ↗ 2026-08-21 Dedicated Spiff developer site documents creating, updating and deleting commission objects, but no Spiff-specific MCP server or Agentforce action for commission operations — Salesforce MCP support is platform-level and does not name Spiff/ICM.
Clari L4 · Sales Enablement & Revenue Intelligence Official Documented Unclear Source ↗ 2026-08-21 First-party API reference plus a Clari + Salesloft MCP server documented in the Salesloft help centre; the newsroom claims write-back so AI tools can act, but no published scope or permission detail confirms it, and rollout is phased through late summer 2026.
Gong L4 · Sales Enablement & Revenue Intelligence Official Documented Read only Source ↗ 2026-08-21 First-party Gong MCP server documented in the help centre, described only in query/read terms with no documented write actions; the separate REST API does document scoped writes such as call and CRM data upload.
Highspot L4 · Sales Enablement & Revenue Intelligence Claimed, undocumented ± Documented Unclear Source ↗ 2026-08-21 The only first-party MCP page is a product/marketing page listing capabilities with no published auth method, scopes, permission model or tool schema, so the write-sounding actions cannot be verified as documented scoped access.

± marks a finding supported by the vendor's own indexed pages where a direct fetch of the documentation URL failed — slightly lower confidence than the rest.

How to read this

MCP server. Official means the vendor publishes and documents its own Model Context Protocol server. Claimed, undocumented means it exists in a press release or a product page with no technical documentation behind it — a distinction we think matters more than any rating on this site. Third-party only means the connector exists but the vendor didn't build it.

External API. Whether a documented public API exists that a system outside the vendor's own product can authenticate against. An in-product copilot doesn't count.

Agent write access. Whether an external agent can change something — create a record, update a deal, send a campaign — through documented, scoped, permissioned access. Reading data is table stakes; acting is the test.

A vendor scoring poorly here isn't necessarily bad software. It means that if your operating model assumes agents will do part of the commercial work, this system will need a human in the loop or an integration you build and maintain yourself. That is a cost, and it belongs in the evaluation.

Findings are point-in-time. Vendors ship. If something here is out of date or wrong, tell us at hello@agenticreadystack.com and we'll re-check and re-date the row.

Your stack is one layer. The other eight are organisational.

The registry tells you what your tools can do. The Agentic Commercial Model benchmarks whether the commercial organisation around them is built for the same era.

Take the free benchmark →