Highspot website screenshot

Highspot

Highspot is a sales enablement and go-to-market platform whose API surface splits in two. A per-tenant REST API at https://api-{instance}.highspot.com/v1.0 covers spots, items, item content, users, groups, pitches and analytics, authenticated with an API client key and secret issued from account settings; it has no public reference and no published OpenAPI. Alongside it Highspot runs a first-party remote MCP server at https://mcp.highspot.com/mcp, verified live, secured with OAuth 2.1 (dynamic client registration, PKCE, scopes mcp:read / mcp:write / offline_access) and discoverable through RFC 8414 and RFC 9728 metadata documents. The MCP server exposes content search, instant answers, deal context, content recommendations, linked pitches, Digital Room generation and Highspot Agents to OpenAI, Anthropic and Microsoft Copilot clients. Both the MCP server and the Insights Layer APIs are gated to the top "Best" subscription tier.

Highspot publishes 2 APIs on the APIs.io network. Tagged areas include Sales Enablement, Content Management, Pitch Analytics, CRM Integration, and Buyer Engagement.

Highspot’s developer surface includes pricing, status page, privacy policy, engineering blog, GitHub presence, authentication, support, and 28 more developer resources.

38.8/100 thin ▬ flat Agent 16/100 agent aware Full breakdown ↓
scored 2026-08-20 · rubric v0.12.0
AccessEnterprise
2 APIs 2 MCP Servers
Sales EnablementContent ManagementPitch AnalyticsCRM IntegrationBuyer EngagementTrainingCoachingArtificial IntelligenceMCP Server

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-20 · rubric v0.12.0
Composite quality — 38.8/100 · thin
Contract Quality 0.0 / 25
Developer Ergonomics 3.8 / 20
Access Clarity 18.7 / 20
Operational Transparency 6.5 / 13
Contract Governance 2.2 / 12
Discoverability 7.6 / 10
Agent readiness — 16/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
Documented Reversibility 0 / 6
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/highspot: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 2

Individual APIs this provider publishes, each with its own machine-readable definition.

Highspot API

The Highspot REST API provides programmatic access to the Highspot sales enablement platform, enabling management of content (spots and items), users, groups, pitches, domain se...

Highspot MCP Server

The Highspot MCP Server leverages the Model Context Protocol to provide LLMs with access to sales content, knowledge, insights, and actions within Highspot. Enables searching co...

MCP Servers 2

Model Context Protocol servers that expose these APIs to AI agents.

Highspot MCP Server

Highspot ships a first-party REMOTE Model Context Protocol server at https://mcp.highspot.com/mcp. It is a hosted HTTP MCP endpoint — an agent POSTs JSON-RPC to it directly; the...

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Highspot Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Highspot Authentication

3 schemes

SECURITY

Highspot Domain Security

TLSv1.3 · DMARC

SECURITY

Highspot Vulnerability Disclosure

disclosure policy published

SECURITY

Highspot Trust Center

ISO 27001, GDPR

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Highspot Scopes

3 scopes

3 scopes

SCOPES

Resources

Get Started 2

Portal, sign-up, and the first successful call

Agent Surfaces 3

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 3

Pagination, idempotency, versioning, errors, and events

Build 4

SDKs, sample code, and the tooling you integrate with

Access & Security 7

Authentication, authorization, and security posture

Scroll for all 7

Operate 7

Status, limits, changes, and where to get help

Scroll for all 7

Commercial 6

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: highspot
name: Highspot
description: Highspot is a sales enablement and go-to-market platform whose API surface splits in two. A per-tenant REST API
  at https://api-{instance}.highspot.com/v1.0 covers spots, items, item content, users, groups, pitches and analytics, authenticated
  with an API client key and secret issued from account settings; it has no public reference and no published OpenAPI. Alongside
  it Highspot runs a first-party remote MCP server at https://mcp.highspot.com/mcp, verified live, secured with OAuth 2.1
  (dynamic client registration, PKCE, scopes mcp:read / mcp:write / offline_access) and discoverable through RFC 8414 and
  RFC 9728 metadata documents. The MCP server exposes content search, instant answers, deal context, content recommendations,
  linked pitches, Digital Room generation and Highspot Agents to OpenAI, Anthropic and Microsoft Copilot clients. Both the
  MCP server and the Insights Layer APIs are gated to the top "Best" subscription tier.
type: Index
accessModel:
  pricing: enterprise
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Enterprise
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/highspot.png
url: https://raw.githubusercontent.com/api-evangelist/highspot/refs/heads/main/apis.yml
created: '2026-06-13'
modified: '2026-08-14'
specificationVersion: '0.23'
tags:
- Sales Enablement
- Content Management
- Pitch Analytics
- CRM Integration
- Buyer Engagement
- Training
- Coaching
- Artificial Intelligence
- MCP Server
tags_raw:
- Sales Enablement
- Content Management
- Pitch Analytics
- CRM Integration
- Buyer Engagement
- Training
- Coaching
- AI
- MCP Server
apis:
- aid: highspot:highspot-api
  name: Highspot API
  description: The Highspot REST API provides programmatic access to the Highspot sales enablement platform, enabling management
    of content (spots and items), users, groups, pitches, domain settings, and analytics. Supports standard HTTP methods (GET,
    POST, PUT, DELETE) with API key authentication using client key and secret credentials obtained from the Developer section
    of Highspot account settings.
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://www.highspot.com/
  baseURL: https://api-su2.highspot.com
  tags:
  - Sales Enablement
  - Content Management
  - Pitch Analytics
  - CRM Integration
  properties:
  - type: DeveloperPortal
    url: https://developers.highspot.com/
  - type: Authentication
    url: authentication/highspot-authentication.yml
  - type: Conventions
    url: conventions/highspot-conventions.yml
  - type: Lifecycle
    url: lifecycle/highspot-lifecycle.yml
  - type: Conformance
    url: conformance/highspot-conformance.yml
  - type: Support
    url: https://www.highspot.com/contact/
  contact:
  - FN: Highspot Support
    url: https://www.highspot.com/contact/
    email: support@highspot.com
- aid: highspot:highspot-mcp-server
  name: Highspot MCP Server
  description: 'The Highspot MCP Server leverages the Model Context Protocol to provide LLMs with access to sales content,
    knowledge, insights, and actions within Highspot. Enables searching content, accessing deal-specific answers, recommending
    content, creating linked pitches, generating Digital Rooms, and invoking Highspot Agents. Available in OpenAI, Anthropic,
    and Microsoft Copilot platforms. Throttle limit: 100 API calls per connection per 60 seconds.'
  image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
  humanURL: https://www.highspot.com/product/mcp-server/
  baseURL: https://mcp.highspot.com/mcp
  tags:
  - MCP
  - Artificial Intelligence
  - LLM
  - Sales Enablement
  tags_raw:
  - MCP
  - AI
  - LLM
  - Sales Enablement
  properties:
  - type: Documentation
    url: https://www.highspot.com/product/mcp-server/
  - type: MCPServer
    url: mcp/highspot-mcp.yml
  - type: OAuthScopes
    url: scopes/highspot-scopes.yml
  - type: Authentication
    url: authentication/highspot-authentication.yml
  - type: RateLimits
    url: rate-limits/highspot-rate-limits.yml
  - type: MicrosoftConnector
    url: https://learn.microsoft.com/en-us/connectors/highspotmcptestjan20/
  contact:
  - FN: Highspot Support
    url: https://www.highspot.com/contact/
    email: support@highspot.com
common:
- type: TrustCenter
  url: security/highspot-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/highspot-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/highspot-domain-security.yml
- type: Website
  url: https://www.highspot.com/
- type: Integrations
  url: https://www.highspot.com/integrations/
- type: IntegrationDirectory
  url: https://exchange.highspot.com/integrations
- type: MCPServer
  url: https://www.highspot.com/product/mcp-server/
- type: Pricing
  url: https://www.highspot.com/pricing/
- type: Status
  url: https://status.highspot.com/
- type: Security
  url: https://www.highspot.com/trust/
- type: Privacy
  url: https://www.highspot.com/privacy/
- type: TermsOfService
  url: https://www.highspot.com/terms/
- type: Contact
  url: https://www.highspot.com/contact/
- type: Blog
  url: https://www.highspot.com/blog/
- type: LinkedIn
  url: https://www.linkedin.com/company/highspot
- type: GitHub
  url: https://github.com/highspot
- type: Plans
  url: plans/highspot-plans-pricing.yml
- type: RateLimits
  url: rate-limits/highspot-rate-limits.yml
- type: FinOps
  url: finops/highspot-finops.yml
- type: WellKnown
  url: well-known/highspot-well-known.yml
- type: LLMsTxt
  url: llms/highspot-llms.txt
- type: Packages
  url: packages/highspot-packages.yml
- type: Authentication
  url: authentication/highspot-authentication.yml
- type: OAuthScopes
  url: scopes/highspot-scopes.yml
- type: Conventions
  url: conventions/highspot-conventions.yml
- type: Conformance
  url: conformance/highspot-conformance.yml
- type: Compliance
  url: security/highspot-trust-center.yml
- type: Lifecycle
  url: lifecycle/highspot-lifecycle.yml
- type: StatusPage
  url: https://status.highspot.com/
- type: DeveloperPortal
  url: https://developers.highspot.com/
- type: HelpCenter
  url: https://support.highspot.com/
- type: Community
  url: https://community.highspot.com/
- type: Support
  url: https://www.highspot.com/contact/
- type: Login
  url: https://app.highspot.com/
- type: PrivacyPolicy
  url: https://www.highspot.com/privacy/
- type: GitHubOrganization
  url: https://github.com/highspot
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
x-enrichment:
  date: '2026-08-14'
  status: enriched
  artifacts_added: 12
  pass: local-v1
x-coverage:
  state: covered
  reason: mcp-surface-verified
  detail: The REST API reference is gated — developers.highspot.com 302s to https://app.highspot.com/unsupported_browser and
    api-su2.highspot.com/v1.0/ returns 401 — but contract discovery found a live first-party remote MCP server at https://mcp.highspot.com/mcp
    with full OAuth 2.1 discovery metadata, so this profile is covered on the agent surface even though no OpenAPI is published.
  evidence:
  - url: https://mcp.highspot.com/mcp
    status: 401
  - url: https://mcp.highspot.com/.well-known/oauth-protected-resource/mcp
    status: 200
  - url: https://app.highspot.com/.well-known/oauth-authorization-server
    status: 200
  - url: https://developers.highspot.com/
    status: 302
  - url: https://api-su2.highspot.com/openapi.json
    status: 404
  checked: '2026-08-14'