Intercom
Intercom's official remote MCP. Universal search and fetch over conversations and contacts. Hosted at mcp.intercom.com.
Delv Safety Grade: A
Score 82/100 · assessed 2026-04-28
Intercom's official remote MCP server is maintained by a major SaaS vendor with strong operational track record. The remote-hosted model at mcp.intercom.com eliminates local supply-chain concerns but introduces dependency on Intercom's infrastructure availability. Permissions are moderately scoped: read access to conversations and contacts via API token, plus search capabilities across support data. No filesystem or shell access, but the token grants broad read access to potentially sensitive customer support data. Transparency is reasonable with official documentation, though no public repository means no community audit of the server implementation itself. The remote architecture means you're trusting Intercom's endpoint security and uptime. No known security incidents. Solid choice for teams already using Intercom who need programmatic access to support data, but the access token should be treated as highly sensitive given the scope of customer data it unlocks.
Lethal Trifecta (prompt-injection exposure)
TRIFECTA RISKLive customer-support chat is designed to ingest hostile-by-default messages. Trifecta is the default operating mode.
Green flags
- Official vendor implementation from established SaaS company
- Remote hosting eliminates local supply-chain and installation risks
- Read-only API scope limits potential for data modification
- Well-documented with official developer guides
- No shell or filesystem access required
Red flags
- No public repository means server implementation cannot be audited
- Access token grants broad read access to all customer support data
- Remote-only architecture creates single point of failure at mcp.intercom.com
- No visibility into server-side security practices or incident response
Permissions requested
Review
Install this if you're an Intercom customer who spends time context-switching between support tickets and other tools. Skip it if you're just browsing MCPs for fun or you don't have an Intercom workspace. It's a focused, reliable integration that earns its place in a support or sales workflow.
Good at
- Remote hosting means no local dependencies or version management.
- Search and fetch are fast enough for real-time workflows, especially mid-call.
- Official vendor support reduces the risk of breaking changes or abandoned repos.
- Works across Claude Desktop, Claude Code, and Cursor without extra config tweaks.
Watch out
- Read-only access means you can't reply to conversations or update contact fields.
- Search syntax is strict; typos or vague queries return nothing.
- Dependent on Intercom's MCP endpoint uptime with no local fallback.
- Only useful if you're already paying for Intercom, which narrows the audience.
Use cases
- Searching support conversations from chat
- Pulling a customer history into a sales call
- Auditing contact properties
- Cross-tool incident triage
Getting started
Works with
Similar MCPs
- Lara Translate MCPProfessional translation with language detection, context-aware translations, translation memories, and glossaries.
- Make MCPTurns Make automation scenarios into callable tools for AI assistants, bridging 1,000+ apps through Make workflows.
- CCXT MCPCrypto exchange integration using CCXT, covering spot, futures, OHLCV, balances, and orders across 20+ exchanges.
- HubSpotHubSpot's MCP for CRM workflows: contacts, deals, tickets, properties. Distributed via NPM, see the developer docs for install steps.