{
  "entry": {
    "kind": "mcp",
    "slug": "intercom-mcp-server",
    "name": "Intercom MCP Server",
    "vendor": "Intercom",
    "description": "Intercom's official server exposes conversations, contacts, and help-centre content, letting an agent search support history and draft or send replies.\n\nCapabilities are outbound network access and credential access. This connector sits at the intersection of two risks the catalog treats seriously: the data is customer personal information, and support conversations are written by strangers, making them one of the most reliable prompt-injection channels into a corporate agent. An assistant that reads customer messages and can also send replies as your brand should be treated as a publishing system with an untrusted input, not as an internal tool.",
    "website": "https://developers.intercom.com/docs/guides/mcp",
    "repository": null,
    "documentationUrl": "https://developers.intercom.com/docs/guides/mcp",
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "network:outbound",
      "credentials:access"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 20,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: credentials:access",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}