An AI agent that uses my CRM connects through the access your CRM already offers, such as a HubSpot private app token or a GoHighLevel marketplace app, with scopes you choose. It can flag stale leads, draft follow-ups, log what happened and brief the owner each morning, and your records stay where they are. A person approves anything a customer receives and anything that changes who owns a deal.
An AI agent that uses my CRM is a program with its own login to the CRM you already run, so it can read your leads and deals, notice what is going stale, and draft the next move for a person to approve. You keep your records where they are. Nothing gets exported, rebuilt or migrated. This page explains how that access works in HubSpot and GoHighLevel, what an agent can do with it, and what should stay with you.
The short version for an owner: the CRM stays the system of record, the agent is one more user with narrow permissions, and every message a customer sees is approved by a person at first.
Why it matters for a service business
A CRM is only as good as the follow-up around it. In a Harvard Business Review study of online sales leads, the authors' summary is blunt: most companies are not responding nearly fast enough. In a home-service company the lead is a homeowner with a broken furnace or a quote request, and the person who should reply is on a roof or in a van. The CRM holds the record. Nobody holds the clock.
The pool of companies doing something about it is small. The Census Bureau's Business Trends and Outlook Survey put business AI use at 19.8% as of May 3, 2026, with fewer than 20% of firms of four or fewer employees using it. Most of your competitors are still doing follow-up from memory.
How an agent gets access to your CRM
You do not need a new product. The CRM already has a way to let a program in. The details differ.
HubSpot: a private app. HubSpot's documentation says only super admins can create private apps, each account can have up to 20, and each app gets its own access token that the program sends as a bearer token. Scopes control what the app can see or change, so a follow-up agent can read contacts and deals without touching billing settings. HubSpot says to rotate the token every six months, and warns that removing the user who created an app can make its calls fail with a permissions error. Create the app from an account that will not be offboarded.
GoHighLevel: a marketplace app. GoHighLevel's OAuth guide says a location or agency admin installs the app, then the program exchanges a code for a token. Access tokens last one day and are renewed with a refresh token, which GoHighLevel expires after a year of non-use. A build that does not renew tokens automatically will quietly stop working the next morning, which is the most common way this connection breaks.
Your field service software. If your leads live in ServiceTitan, Jobber or Housecall Pro instead, the same pattern applies with that vendor's own access. See our guides to ServiceTitan and Jobber.
Limits you plan around
HubSpot's usage guidelines give private apps 100 calls per 10 seconds on Free and Starter and 190 on Professional and Enterprise, with daily limits of 250,000, 625,000 and 1,000,000 per account on Free or Starter, Professional and Enterprise. GoHighLevel's guide gives a burst limit of 100 requests per 10 seconds and 200,000 a day, counted per app. Neither is a problem for follow-up work on a few thousand leads. Both punish a first sync that tries to read everything at once, so a build should page through history slowly.
What an agent does with a CRM
| Job | What it watches | What it reads | What it drafts or does | Who approves |
|---|---|---|---|---|
| Lead sitting too long | A new lead with no activity after a set time | Lead, source, owner, last activity | A first reply and a nudge to the owner | Office manager |
| Stale estimate or deal | A deal with no movement for a set number of days | Deal stage, last note, amount | A follow-up that references the work quoted | Salesperson or estimator |
| Log what happened | A call, text or email thread | Conversation | A clean note on the record | None for notes |
| Assign by rule | A new lead in a service area | Address, trade, availability | A suggested owner | Office manager |
| Owner morning summary | Every morning | New leads, stale deals, unanswered replies | One summary with exceptions first | None, it only reads |
We wrote about leads that sit in a CRM for four days and about speed to lead if you want the operational side of the first two rows.
What it should not do
- Change who owns a deal on its own. Assignment is a management call. The agent suggests.
- Send price or promises. Quotes, discounts and schedule commitments come from a person.
- Delete or merge records. Read and add notes first. Anything destructive needs an explicit approval.
- Message people who did not opt in. Keep consent on the record and have the agent check it.
Start with a person approving every message and loosen it only after you have read enough drafts to trust them. We explain the model in human-in-the-loop AI.
Setup steps and what you need
- List the three follow-ups that depend on someone remembering.
- Check whether your CRM's own automation already handles one. If it does, leave it.
- Have an admin create the app or install the marketplace app with the narrowest scopes.
- Pick where drafts land and who approves them each day.
- Name the person who owns tokens, scopes and failures.
Where Cortex fits
Cortex builds AI agents that work inside the software you already run, with a person approving anything that goes to a customer. We are not a HubSpot or GoHighLevel partner or a certified app, and we will say so when your CRM's own tools are enough. See what we connect on integrations.
The free AI Operations Audit looks at your CRM, phones and field software in 30 minutes and tells you which job to hand an agent first.
Questions people ask
Can an AI agent work with the CRM I already use?
Usually yes, if the CRM has an API or marketplace app model, which HubSpot and GoHighLevel both do. The agent reads and writes records through that access, so you do not migrate anything.
How does an AI agent get into HubSpot?
HubSpot documents private apps. A super admin creates one, picks scopes, and gets a token the agent sends with each call. HubSpot says to rotate the token every six months.
How does an AI agent get into GoHighLevel?
GoHighLevel documents an OAuth marketplace app that a location or agency admin installs. Its access tokens last one day and are renewed with a refresh token, so the connection needs to handle that automatically.
What is the best AI for CRM automation?
There is no single best one. First list the jobs you lose money on, then check whether your CRM's own tools cover them. An outside agent fits when the work crosses your CRM and other systems or needs your own approval rules.
Will an AI agent send messages to my leads on its own?
It should not at first. Begin with drafts that a person approves, and loosen that only for narrow, low-risk messages after you have read enough of them.
Sources
- Private apps, HubSpot
- API usage details, HubSpot
- OAuth FAQs, GoHighLevel
- The Short Life of Online Sales Leads, Harvard Business Review (BYU archive record)
- Large Firms With at Least 20 Employees Biggest AI Users, U.S. Census Bureau
Originally published at buildcortex.dev.
