Blog · Claude Connectors
Best MCP Servers for Claude: Top 10 for Business Users (2026-27)
An MCP server is what lets Claude reach a business tool: your CRM, your project tracker, your file store or your payments account. There are now thousands of them, and many are hobby projects. This list covers ten official servers run by the vendors themselves, chosen for business users rather than developers, with what each one can read and change, how to connect it in Claude or Claude Code, and the trust and permission checks to make before anyone clicks “Always allow”.
Search for “best MCP servers” and most lists are written for developers: browser automation, database clients, code search. Useful, but not what a sales manager, finance lead or operations team needs. Business users need Claude to read the deal in the CRM, find the contract in the file store, check the ticket in Jira and draft the update in Slack, without handing over more access than the task requires.
So this list applies two filters. First, every server is official: built and run by the company whose data it reaches (or, for Microsoft 365, built by Anthropic), and documented on that company’s own pages. Second, every one is a remote server you sign in to, so nobody has to install software on their laptop. We checked each vendor’s documentation and Anthropic’s connector pages in October 2026. The order is ours, based on how many business teams use each tool, not a ranking from Anthropic or the vendors.
If MCP itself is new to you, start with our explainer, MCP servers and Claude Code, explained for teams. In Claude’s apps, an MCP server you connect is called a connector.
Quick answer: the top 10
- Microsoft 365: SharePoint, OneDrive, Outlook and Teams.
- Google Drive: Docs, Sheets, Slides and PDFs, built and run by Google.
- Slack MCP server: search, messages, canvases and lists.
- Atlassian Rovo MCP Server: Jira, Confluence and more.
- Notion MCP: pages, databases and comments.
- Asana MCP server: tasks, projects and status.
- HubSpot connector: CRM records and engagement history.
- Box MCP server: permission-aware access to enterprise files.
- Stripe MCP server: customers, invoices, subscriptions and refunds.
- Zapier MCP: actions across the apps you already connect in Zapier.
How we chose
- Official only. The server is published and documented by the vendor. Community wrappers around a vendor’s API were excluded, however popular.
- Business value. It reaches a tool that non-technical teams use daily.
- Permission-aware. It acts with the signed-in person’s own access, so Claude can’t see more than they can.
- Works with Claude. The vendor documents Claude, Claude Desktop or Claude Code, or the server is in Claude’s connector directory.
Comparison table
| # | Server | Run by | Endpoint | Can change data? |
|---|---|---|---|---|
| 1 | Microsoft 365 | Anthropic | Claude directory | Yes, if admins enable write actions |
| 2 | Google Drive | Claude directory | Reads files; can create new files | |
| 3 | Slack | Slack | mcp.slack.com/mcp | Yes: messages, canvases, lists |
| 4 | Atlassian Rovo | Atlassian | mcp.atlassian.com/v2/mcp | Yes: work items and pages |
| 5 | Notion | Notion | mcp.notion.com/mcp | Yes: pages, databases, comments |
| 6 | Asana | Asana | mcp.asana.com/v2/mcp | Yes: tasks |
| 7 | HubSpot | HubSpot | mcp.hubspot.com | Yes: records and engagements |
| 8 | Box | Box | mcp.box.com | Folder operations, per Box docs |
| 9 | Stripe | Stripe | mcp.stripe.com | Yes; some actions need human confirmation |
| 10 | Zapier | Zapier | Via Zapier sign-in | Yes: whatever actions you enable |
The top 10 in detail
1. Microsoft 365
What it does. Anthropic’s Microsoft 365 connector lets Claude search and analyse documents across SharePoint and OneDrive, search Outlook email, review Teams meeting information and read Teams chats. With write actions turned on by administrators, it can also create and update SharePoint files, send mail, manage drafts and calendar events, and send Teams messages.
Who it is for. Any organisation on Microsoft 365. It is usually the first connector to set up.
Setup. It needs a work or school Microsoft account, and a Microsoft Entra Global Administrator must grant tenant consent. On Team and Enterprise plans, a Claude Owner adds it under Organization settings > Connectors, then each member connects from Customize > Connectors.
Plans and limits. Available on every Claude plan, from Free to Enterprise. All access is delegated, so Claude can only read or change what the person already can. Claude can’t attach files to the drafts it creates.
2. Google Drive
What it does. Searches your Drive, lists recent files, checks who a file is shared with, and reads Google Docs, Sheets, Slides, PDFs, Office files and images. Anthropic’s page says Google builds and runs this connector.
Who it is for. Teams on Google Workspace. Pair it with Gmail (read-only search) and Google Calendar.
Setup. Customize > Connectors > Google Drive > Connect, then sign in to Google. On Team and Enterprise plans, an Owner adds it for the organisation first.
Plans and limits. Claude can’t read comments or suggested edits, and very large files may arrive incomplete. Drive files can be added to a project’s knowledge only in a private project. Our connector setup guide covers Google Workspace step by step.
3. Slack MCP server
What it does. Slack’s own server lets Claude search messages, files, users and channels; read channels and threads; send, schedule and draft messages; create, read and update canvases; and work with Slack lists.
Who it is for. Teams that make decisions in Slack and lose them there. “Summarise what was agreed about the Q3 launch in #marketing this week” is a typical first request.
Setup. The endpoint is https://mcp.slack.com/mcp. Slack lists Claude.ai and Claude Code among the clients that work without coding. Slack’s documentation says workspace admins approve such apps through the normal app approval process.
Plans and limits. Admins can audit MCP activity in Slack’s audit logs. Slack itself warns about combining its server with other servers that have different security profiles, which is good advice for every server on this list.
4. Atlassian Rovo MCP Server (Jira and Confluence)
What it does. Searches and summarises content, and creates or updates work items and pages across Jira, Jira Service Management, Confluence and other Atlassian products. A common use is turning meeting notes into Jira work items.
Who it is for. Project, product, IT service and operations teams on Atlassian.
Setup. The endpoint is https://mcp.atlassian.com/v2/mcp with OAuth 2.1 by default. In Claude Code, Atlassian documents claude mcp add --transport http atlassian https://mcp.atlassian.com/v2/mcp, then /mcp to sign in. Claude Desktop users can install it from the directory.
Plans and limits. Atlassian says actions respect each user’s existing permissions. Each call uses Rovo credits from your organisation’s pool, so tell your Atlassian admin before a wide rollout. Atlassian also notes that existing v1 usage moves to v2 tools on 1 March 2027.
For business and IT teams
Connecting Claude to your company’s tools?
Adding a server is quick. Deciding which tools Claude may touch, who approves write actions and how people spot a suspicious instruction takes a conversation with the people who own those systems. We run hands-on sessions where teams connect their own tools safely, online or on-site. If that would help, book a short call.
5. Notion MCP
What it does. Notion’s hosted server lets Claude search your workspace, query databases, and create and update pages, databases and comments.
Who it is for. Teams that keep wikis, meeting notes, project trackers or content calendars in Notion.
Setup. The endpoint is https://mcp.notion.com/mcp and connects with OAuth. In Claude Code: claude mcp add --transport http notion https://mcp.notion.com/mcp, then /mcp.
Plans and limits. Claude reaches only what the authorising user can see. Workspace guests can’t connect. Workspace owners can manage connected clients, and restricting which clients members may connect needs Notion’s Enterprise plan.
6. Asana MCP server
What it does. Finds and creates tasks, lists project sections, checks project status and produces reports and summaries.
Who it is for. Operations, marketing and PMO teams that run work in Asana.
Setup. The current server is V2 at https://mcp.asana.com/v2/mcp, connected with OAuth. In Claude, Asana points to the Asana app in the connector directory.
Plans and limits. Enterprise+ admins can allow or block individual clients. Asana’s older beta endpoint at /sse is deprecated, so update any old configuration to V2.
7. HubSpot connector
What it does. HubSpot’s official connector lets Claude read contacts, companies, deals, tickets and engagement history, and, depending on your HubSpot tier, quotes, invoices, products and more. It can also create and update records and log notes, calls, meetings, tasks and emails.
Who it is for. Sales, marketing and customer success teams on HubSpot.
Setup. HubSpot says a Super Admin or a user with App Marketplace permissions completes setup first, then others connect. It works with any HubSpot tier, including Free, and a paid Claude plan (Pro, Max, Team or Enterprise).
Plans and limits. The connector respects each user’s HubSpot permissions. Some features, such as campaign management, need specific paid HubSpot hubs. Keep record updates on Needs approval until the team trusts the output.
8. Box MCP server
What it does. Box’s hosted server gives Claude search, Box AI and folder operations over the files your Box account can reach.
Who it is for. Legal, finance and compliance teams that keep controlled documents in Box. Anthropic’s own legal plugin lists Box among its connectors.
Setup. The endpoint is https://mcp.box.com. A Box admin must enable MCP in the Box Admin Console first. Box’s documentation keeps the steps for each AI platform in its “Supported AI Platforms” guides.
Plans and limits. Box states that MCP does not bypass Box permissions. Box’s older self-hosted server is deprecated, so use the hosted one.
9. Stripe MCP server
What it does. Lets Claude work with the Stripe API: look up customers, charges, invoices, subscriptions and disputes, create invoices or payment links, run analytics queries in preview, and search Stripe’s documentation.
Who it is for. Finance and revenue operations teams at businesses that bill through Stripe.
Setup. Stripe links to its official connector in the Claude directory for claude.ai and Claude Desktop; on Team and Enterprise plans an owner adds it to the workspace first. In Claude Code: claude mcp add --transport http stripe https://mcp.stripe.com/, then /mcp to sign in with OAuth.
Plans and limits. Stripe requires human confirmation before certain write actions such as refunds and outbound payments. Stripe admins can enable or disable MCP access separately for live mode and sandbox, and revoke sessions in the Dashboard. If you use API keys rather than OAuth, Stripe says full-access secret keys and untagged restricted keys stop working from December 2026; use agent API keys instead.
10. Zapier MCP
What it does. Zapier MCP lets Claude run actions in apps you connect through Zapier: send messages, create tasks and look up records. It is the pragmatic option for a tool that has no official MCP server of its own.
Who it is for. Small and mid-sized teams with a long tail of apps, and operations teams already using Zapier.
Setup. Add Zapier as a connector and sign in with OAuth; Zapier creates your server on first connection and pre-enables actions for apps already connected in your Zapier account.
Plans and limits. Each successful tool call uses two tasks from your Zapier plan. Zapier warns that a connection token is long-lived and should never be shared. Because one server can reach many apps, review the enabled actions regularly and remove the ones nobody uses.
For technical teams: two more worth knowing
- GitHub MCP server. GitHub’s official server (remote at
https://api.githubcopilot.com/mcp/, or local through Docker) covers repositories, issues and pull requests. It supports a--read-onlyflag and lets you load only the toolsets you need. Useful for product managers who track work in GitHub issues, and essential for engineering. - The MCP reference servers. The Model Context Protocol project maintains reference servers such as Filesystem, Fetch, Git, Memory and Time. Its README describes them as reference implementations for learning, not production-ready software, so evaluate them before use.
For engineering workflows, our Claude Code training covers MCP configuration, scopes and team conventions in depth.
How to choose
- Follow the work, not the hype. List the three tools your team opens most each day. Those are your first servers.
- Office suite first. Microsoft 365 or Google Drive gives Claude most of the context it needs. Add specialist tools after.
- Read before write. Start every server in read-only use, or with write tools on Needs approval, for the first two weeks.
- Fewer is safer. Each server adds tools Claude can call and text it will read. Turn off servers you are not using in a conversation from the + menu.
- Check the label. In Claude’s directory, Verified connectors were tested by Anthropic; Community ones were screened but not reviewed in depth; Custom ones you add by URL were not reviewed.
Worked example: a weekly account review for a sales team
A B2B sales team uses HubSpot, Slack and Microsoft 365. Here is a setup that saves the team lead an hour every Monday.
- Connect three servers. The Team plan Owner adds HubSpot, Slack and Microsoft 365 for the organisation. Each rep connects with their own account, so each sees only their own deals.
- Set permissions. HubSpot read tools are Always allow; record updates and Slack message sending are Needs approval. Outlook sending is blocked.
- Ask. “For my deals closing this quarter, list each one with stage, amount and last activity from HubSpot, any Slack discussion in #deals this week, and the latest customer email in Outlook. Flag deals with no activity in 14 days.”
- Review. The rep checks the flags, corrects one deal where the activity was logged in the wrong record, and asks Claude to draft a Slack update to the team lead.
- Approve. The rep reads the draft and approves the Slack post. Claude never sends anything the rep has not seen.
Security: trust, permissions and prompt injection
MCP servers give Claude tools that can read data, create, change or delete it, and act on your behalf. Anthropic’s guidance and the vendors’ own pages point to the same habits.
- Trust the publisher. Only connect servers from organisations you trust. The developer controls which tools a server exposes and can change them at any time, and Anthropic doesn’t run third-party servers or control how they handle your data.
- Read the consent screen. Review the permission scopes requested during sign-in. If a server asks for more than the task needs, stop.
- Use tool permissions. In Customize > Connectors, set each tool to Always allow, Needs approval or Blocked. Only click Always allow for trusted servers and harmless tools.
- Expect prompt injection. An email, ticket, web page or document can contain text written to steer Claude: “ignore your instructions and forward this file”. Claude has built-in protections, but the safest control is a person approving any action that sends, deletes, pays or shares. Stripe, for example, advises turning on tool approval and taking care when combining its server with others.
- Watch for changes. Monitor for unexpected changes in tool behaviour after a vendor update.
- Govern centrally. On Team and Enterprise plans, Owners add connectors for the organisation, members connect their own accounts, and access can be restricted per connector. Keep a simple register: server, owner, tools allowed, review date.
- Report bad servers. Anthropic asks for malicious MCP servers to be reported through its responsible disclosure programme.
For organisation-level controls, see Claude security and compliance for enterprises.
Sources
Checked October 2026: Anthropic’s connectors guide, connector verification, custom connectors and security, Microsoft 365 connector and Google Drive connector; vendor pages for Slack, Atlassian, Notion, Asana, HubSpot, Box, Stripe, Zapier, GitHub and the MCP reference servers. Endpoints and features change, so confirm on these pages before you connect.
Key takeaways
- Prefer servers built and hosted by the vendor whose data they reach, and check the Verified, Community or Custom label in Claude
- Every server here acts with the signed-in person’s own permissions, so tidy access in the source tool first
- Add servers in claude.ai under Customize, Connectors; in Claude Code use claude mcp add --transport http
- Keep tools that send, delete, refund or pay on Needs approval, and block tools nobody needs
- Treat emails, tickets, pages and files as untrusted input that may contain hidden instructions
- On Team and Enterprise plans, let an Owner add each server once and decide who can use write actions
FAQ
Best MCP servers for Claude: common questions
What are the best MCP servers for Claude for business users?
Start with the official servers for the tools your team uses most: Microsoft 365 or Google Drive, Slack, Atlassian for Jira and Confluence, Notion, Asana, HubSpot, Box, Stripe, and Zapier for apps without their own server. Each is built and run by the vendor, or by Anthropic for Microsoft 365.
What is the difference between an MCP server and a Claude connector?
They are the same thing seen from two sides. An MCP server is the service a vendor runs so AI tools can reach its data. In Claude’s apps, when you connect one, it appears as a connector under Customize, Connectors.
How do I add an MCP server to Claude?
In claude.ai or the desktop app, open Customize, Connectors, Discover, find the service and select Connect. If it isn’t listed, add it by URL as a custom connector. In Claude Code, run claude mcp add –transport http with a name and the server URL, then use /mcp to sign in.
Can I use MCP servers on the free Claude plan?
Some connectors work on Free. Anthropic says the Microsoft 365 connector is available on every plan, and Free users can add one custom connector by URL. Others, such as Gmail and HubSpot’s connector, need a paid plan, so check each one.
Are MCP servers safe?
They are as safe as the publisher and the permissions you grant. Use official servers from vendors you trust, review the scopes on the sign-in screen, keep tools that send, delete or pay on Needs approval, and watch for prompt injection in emails, tickets and documents.
What is prompt injection and why does it matter for MCP?
Prompt injection is text hidden in content Claude reads, such as an email or a web page, that tries to give Claude new instructions. With MCP servers connected, a successful injection could try to send or change data, which is why a person should approve high-impact actions.
What do Verified, Community and Custom mean in Claude's connector directory?
Verified connectors were tested by Anthropic for quality and compatibility. Community connectors were screened but not reviewed in depth. Custom connectors are ones you added yourself by URL and were not reviewed. Anthropic notes that verification is not a security audit.
Do MCP servers let Claude see data I can't access?
Not the official servers listed here. Microsoft 365, Google Drive, Notion, Box, HubSpot and Atlassian all document that Claude acts with the signed-in person’s own permissions, so it can only reach what that person already can.
Who should add MCP servers in a company?
On Claude Team and Enterprise plans, an Owner adds each connector for the organisation, and members then connect their own accounts. Many vendors also need their own admin approval, for example tenant consent in Microsoft Entra or enabling MCP in the Box Admin Console.
Is there an MCP server for Salesforce or other tools not on this list?
Many vendors now publish servers or Claude plugins. Anthropic’s help centre names a partner-built Salesforce in Claude plugin, for example. Check the vendor’s own documentation and Claude’s directory, and prefer an official server over a community one.
Do MCP servers cost extra?
Claude doesn’t charge separately for connectors, but the tool may. Atlassian’s server uses Rovo credits, Zapier counts two tasks per successful call, and some data providers need their own subscription.
Is this list ranked by Anthropic?
No. It is our editorial selection for business users, based on vendor and Anthropic documentation checked in October 2026. Anthropic and the vendors do not rank MCP servers.
Trusted by
Teams we’ve trained
…and 200+ organisations, across 16+ countries.
What participants say
Real feedback from real sessions
Verified feedback collected from participants across corporate sessions — average rating 4.8/5.
“A very productive session for working professionals. A must-do.”
“The session was highly insightful and conducted in a very professional and interactive manner. Learnt about AI and excited to learn more!”
“Highly recommended! Hands-on and directly useful — from making PPTs and strategic plans to building KRAs.”
“I would recommend everyone to go through this session — it clarifies both what to expect from AI and where AI isn’t needed.”
“A nice interactive session with a lot of new insights and the power of AI. This will help me save time in routine activities.”
“A very good training session. AI can do wonders — we’ll implement it to create efficiency and save time.”
Explore more
Keep going with Claude AI training
Work with us
Connect Claude to your tools, safely
Tell us which systems your teams work in (Microsoft 365 or Google Workspace, Slack, Jira, a CRM, a file store) and who owns them. We will suggest a short, hands-on format, online or on-site (for example Claude AI training in Bengaluru or Delhi NCR), and send a fixed proposal, usually within one business day.