LeadConnector / GoHighLevel MCP Pack — wraps the GoHighLevel CRM for AI agents.
Server has clear, well-structured tool definitions with consistent naming (verb_noun pattern) and solid descriptions (avg 180 chars). All 5 tools have input schemas with type definitions and parameter descriptions. However, output schemas are undocumented, LLMs cannot predict response structure for planning. Error handling is minimal (generic HTTP errors). No tool annotations (readOnlyHint, idempotentHint). API key exposed as parameter violates secret-injection pattern. Missing pagination guidance despite list tools. Baseline: 549 production tools average 194 chars descriptions, 100% have documented returns, this server lacks return documentation entirely.
Fetch a single CRM contact by its contact ID. Returns full detail: name, email, phone, tags, source, custom fields, and timestamps.
List marketing/automation campaigns in the account. Returns a {campaigns:[...]} envelope with campaign IDs, names, and status. Useful for finding a campaign to attribute or enroll contacts.
Search or list CRM contacts in a GoHighLevel/LeadConnector account. Free-text query matches name, email, or phone. Returns a {contacts:[...], meta} envelope with contact IDs, names, emails, phones, tags, and custom fields.
List opportunities (pipeline deals) for a given pipeline. Requires a pipelineId (get one from leadconnector_list_pipelines). Returns deals with monetary value, stage, status, and the associated contact.
List all sales pipelines and their stages in the account. Returns a {pipelines:[...]} envelope with pipeline IDs, names, and ordered stages. Use the returned pipeline ID with leadconnector_list_opportunities.
API key exposed as tool parameter (_apiKey). Violates secret-injection pattern, credentials in parameters leak into agent logs and prompt history. Must use server-side injection via environment or vault.
Output schemas completely undocumented. LLMs cannot predict response structure (e.g., {contacts:[...], meta} envelope) for planning downstream calls. Baseline: 100% of A+ tools document return types.
No tool annotations (readOnlyHint, idempotentHint). All 5 tools are read-only but lack explicit hints. Agents cannot distinguish safe-to-retry operations from destructive ones.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 66 | 2026-07-28+ | v2 |
Error handling is generic HTTP status + truncated body. No recovery guidance. E.g., '401 Api key is invalid' should suggest 'Verify API key in Settings → Business Profile → API Key' or offer alternative auth methods.
Pagination not documented. list_contacts and list_opportunities accept 'limit' but no mention of offset/cursor or total count. LLMs cannot plan multi-page retrieval.