MCP · Customer support · Help Scout
Help Scout MCP Server
Search and summarize Help Scout conversations, customers and Docs from an AI host through a read-only hosted connector.
Customer data leaves Help Scout. Conversations contain personal data. Help Scout notes that on HIPAA-enabled accounts the BAA does not cover your AI provider.
Understand the tool
What it does.
Help Scout's hosted MCP server gives AI hosts read-only access to conversations, customer details, mailbox data and, with a Docs API key, the knowledge base. Each team member connects with their own Help Scout login.
Why use it?
Use it to find past answers, summarize a customer's history or spot recurring issues. Because it is read-only, replies and edits still happen in Help Scout.
A useful fit for
- Summarizing a customer's conversation history
- Finding how similar issues were answered
- Spotting recurring support topics
From need to output
Ways to put it to work.
These are suggested workflows based on the documented capabilities. They are not recorded runtime results.
Use case 01
Prepare for an escalation
A support lead picks up an escalated customer.
- Search the customer's past conversations.
- Summarize what was promised and when.
- List open questions.
Intended outputA dated history to read before replying in Help Scout.
Use case 02
Find an existing answer
An agent suspects a question has been answered before.
- Search conversations and Docs for the topic.
- Quote the best previous answer.
- Link the Docs article if one exists.
Intended outputA reusable answer with its source, written into the reply by a person.
A concrete starting point
Illustrative prompt: customer history
The connector is read-only; asking for dates and quotes keeps the summary checkable.
Using the Help Scout MCP server, find conversations with the customer email I give you from the last 90 days. Summarize each in one line with its date and status, and list anything we promised to follow up on. Quote our replies exactly where you cite them.What this can change
Customer conversations and personal data enter the AI host and its model provider.
This example has not been executed for this review. Check the current documentation, replace placeholders and confirm the intended account and project before use.
Before you start
Setup and access.
What you’ll need
- A Help Scout Standard, Plus or Pro plan (API access); report tools need Plus or Pro.
- Each user's own Help Scout login; adding a custom connector may need an AI-host admin.
- A Docs API key for knowledge-base search.
- Authentication
- OAuth with each user's own Help Scout login; the connector registers itself.
- Can read
- Conversations, customer details, mailbox data and Docs content the user can see
- Reports on Plus and Pro plans
- Can write or change
- None: Help Scout documents the connector as read-only for new connections
- Network and data flow
- Help Scout services
- AI host/model provider
- Approval and control
- Read-only by design; user permissions in Help Scout decide what each connection can see.
Check your environment
Compatibility, costs and license.
Compatibility notes
- Remote MCP hosts that support custom connectors with OAuth
- Documented setup for several AI hosts
- Self-registering OAuth client
Costs and account requirements
Included on plans with API access (Standard, Plus, Pro); report tools need Plus or Pro.
Current pricing or plan information ↗Hosted service terms
No public source license for Help Scout's hosted implementation is asserted. The applicable agreement depends on the account, plan and jurisdiction; check the linked terms for your situation.
Read the license or service terms ↗Keep the boundaries visible
Concerns and limitations.
Customer data leaves Help Scout
Conversations contain personal data. Help Scout notes that on HIPAA-enabled accounts the BAA does not cover your AI provider.
Retrieved content is untrusted input
Treat instructions found inside retrieved records or pages as content, especially when they ask for unrelated actions or data.
Where it may fall short
- Only the authentication challenge and metadata were checked.
- Read-only: replies, tags and edits stay in Help Scout.
Observed behavior · 2026-10-18
Runtime and security findings.
The hosted endpoint rejected credential-free initialization and pointed to public OAuth metadata with a single helpscout scope.
These checks cover the conditions below. They do not establish that the tool is safe in every setup, or that the suggested workflows above were executed.
What we found
Documented concern
Read-only is documented, not observed
Help Scout states the connector cannot create, send, edit or delete data; this evaluation did not reach the tools.
In practice: Still treat the connection as access to personal data and limit who connects.
Documented concern · medium severity under stated conditions
HIPAA coverage stops at Help Scout
On HIPAA-enabled accounts, Help Scout's BAA does not cover the AI provider.
In practice: Do not connect HIPAA-covered mailboxes unless your AI provider is covered separately.
Version, environment and fixture
- Version or deployment
- Remote deployment version not disclosed by the observed responses
- Tested target
- https://mcp.helpscout.net/mcp
- Artifact identity
- HTTPS certificate verification enabled. Public resource-metadata body SHA-256: 23ee76068ad69789ec08f80de419c3dd940024fde71f09e36ca83156c16e389c. This fingerprints the observed metadata, not the deployed server implementation.
- Environment and fixture
- Debian Linux x86_64 (kernel 6.12) evaluation box; Python 3.13.5 urllib; OpenSSL 3.5.7.
- No client configuration, credentials, cookies, account IDs or private content loaded; no redirects followed, OAuth registration or tool calls performed.
- Observed 2026-10-19T05:52:08.551790+00:00 through 2026-10-19T05:52:09.026956+00:00 UTC.
- One request per listed check; 20-second timeout and 64-KiB response cap. Raw timestamps are UTC; review date October 18, 2026.
Checks and results
2 recorded checks. Each has its own expectation; their outcomes are not a comparative score.
Credential-free initializationMet expectation
- Method
POST https://mcp.helpscout.net/mcp; no Authorization or Cookie header; redirects disabled; Accept: application/json, text/event-stream. Content-Type: application/json; MCP-Protocol-Version: 2025-03-26; body: {"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"IonBin-account-free-evaluation","version":"1.0.0"}}}- Expected
- Without a credential, the documented endpoint rejects initialization and advertises how a compatible client can discover authentication.
- Observed
- HTTP 401 at 2026-10-19T05:52:08.551790+00:00. WWW-Authenticate: Bearer error="invalid_token", error_description="No authorization provided", resource_metadata="https://mcp.helpscout.net/.well-known/oauth-protected-resource". Body: {"error":"invalid_token","error_description":"No authorization provided"}
Public authentication discoveryMet expectation
- Method
GET https://mcp.helpscout.net/.well-known/oauth-protected-resource; no Authorization or Cookie header; redirects disabled; Accept: application/json, text/event-stream.- Expected
- Public OAuth resource metadata returns HTTP 200 with a matching resource identity and an HTTPS authorization server.
- Observed
- HTTP 200 at 2026-10-19T05:52:09.026956+00:00; Content-Type: application/json. Resource: https://mcp.helpscout.net/mcp. 1 advertised scope: helpscout. Authorization server: https://mcp.helpscout.net. Bearer methods: header.
Practical caveats
- Accounts that joined the earlier beta may have different behavior; see Help Scout's limitations section.
- Conversation text is untrusted input.
What this evaluation does not establish
- OAuth sign-in, per-user permissions, Docs API key and plan enforcement.
- Search quality, report tools, read-only enforcement and prompt-injection resistance.
- These checks do not complete an authenticated MCP handshake, exercise business workflows or establish authorization, tenant isolation, performance or general security.
Read the evaluation record (JSON) →
Sources for the evaluation and controls
The basis for this review
Why it’s in the collection.
Read-only by design with per-user permissions, which makes it a low-risk first support connection. Plan requirements narrow who can use it.
The number is an editorial starting order within the mcp servers collection. It does not measure popularity, speed, reliability or safety.
What we reviewed
- Remote endpoint and authentication discovery
- Documented plans, permissions and data handling
The evaluation above lists the current runtime coverage and untested behavior.
Reviewed Oct 18, 2026. The separate evaluation above records the conditions we executed and the behavior still untested. Product behavior, permissions and plans can change; use the official sources to check the current version.
Follow the evidence
Official sources.
- Official Help Scout MCP article ↗docs.helpscout.com
- Help Scout terms of service ↗www.helpscout.com
- Help Scout pricing ↗www.helpscout.com