Attio MCP server and Claude/ChatGPT apps: what it does, access and how to connect

Attio hosts one official MCP server (mcp.attio.com) for its Claude connector and ChatGPT app. You sign in with OAuth, and it reads and writes with your own permissions. Verified 21 Oct 2026.

Official remote MCP · read & write
Claude connector and ChatGPT app · read & write

Hosting: Remote HTTP, hosted by Attio (https://mcp.attio.com/mcp); no local server
Auth: OAuth sign-in with your Attio login; Attio says no API keys are needed
Read / write: Read and write: records, list entries, notes, tasks, comments and activity records; no tool moves money
Works with: Claude.ai, Claude Desktop, ChatGPT, Cursor and other MCP clients that support remote servers (Claude Code via the remote URL)
Plan requirement: An Attio workspace; the SQL tool is not on every Attio billing plan (Attio doesn't name which)
Last changed: Feb 2026: Attio connector listed in the Claude directory
Verification: Verified 21 Oct 2026 by theFinanceStack · confidence: high

What can an agent do with Attio through MCP?

Search and read your CRM (people, companies, deals, lists, notes, emails, call recordings). Create or update records, list entries, notes, tasks and comments. Each write runs as soon as you confirm it.

Attio's tool reference lists 48 tools across 11 groups (our count of the docs page).

What it can read

Records and objects, list entries, activities, notes and tasks
Meetings, call recordings with transcripts and email bodies
Workspace members and aggregate reports
On some plans, a read-only SQL tool

How writes behave

Attio says read tools are auto-approved and write tools ask for confirmation.
Nothing is held as a draft. Once confirmed, a create, update, upsert or merge changes the live workspace.

Changes to watch

merge-records: two records become one new record.
delete-task
delete-comment: per Attio, it works only on comments you created, and deleting a parent comment also deletes all of its replies.
update-list: can change a list's permissions.

Money

Attio is a CRM, so none of the tools issue payments, invoices or ledger entries.

Can

Search and list records (people, companies, deals, custom objects)
Create, update, upsert and merge records
Read and update list entries; add records to lists; create lists, rename them or change their permissions
Create and edit notes; search notes, including semantic search
Create, update and delete tasks
Read emails and call-recording transcripts
Run aggregate reports; read-only SQL on some plans

Cannot

Act beyond your own Attio user permissions or outside your workspace (per Attio)
Delete records: the docs list delete tools only for tasks and comments
Run SQL queries on every billing plan (per Attio)
Send emails or move money: no such tools are documented

What access does it get?

Whatever your Attio user can see and do in one workspace. Attio publishes no separate OAuth scope list.

Where	Scopes and permissions (as documented)	Admin requirement
Remote MCP server (any client)	OAuth with your Attio login; inherits your workspace permissions. Scope names not documented by the vendor. Sessions can be revoked in Attio account settings.	Attio doesn't document an admin requirement; each user signs in with their own Attio account
Claude connector	Same OAuth sign-in; you pick the workspace and confirm access. Scope names not documented by the vendor.	Claude Team/Enterprise: an Owner adds connectors and can restrict them
ChatGPT app	Same OAuth sign-in; you pick the workspace and confirm. Scope names not documented by the vendor.	ChatGPT Business/Enterprise: an admin must allow the app

How do I connect it?

Add Attio from the Claude connectors directory or ChatGPT Apps, or point any remote-capable MCP client at https://mcp.attio.com/mcp, then sign in with Attio.

Open claude.com/connectors/attio and add it, or in Claude go to Customize › Connectors, browse connectors and search "Attio".
Sign in to Attio when redirected, choose the workspace and confirm access.
Where Claude lets you set per-tool permissions, keep write tools on approval and switch off any you don't need.
Check which Attio tools your client shows before setting approvals. On 21 Oct 2026 the Claude directory listing showed 23 tools, while Attio's docs list 48. The directory says Anthropic does not control which tools developers make available and cannot verify that they work as intended.
Team/Enterprise: an Owner adds the connector before members can connect.

What should a finance team watch for?

Confirmed writes go straight into the live CRM. The agent also reads free text (emails, transcripts, notes), and that text can carry injected instructions.

Per-workspace rate limits, per Attio: read 100/s, write 25/s, merge 5/s, search 300/min, and 2/s each for semantic search, reporting and SQL. All tools in a tier share one bucket per workspace, so several users or agents running bulk jobs at once draw on the same limit, and calls over it return 429 errors.
Attio marks write tools for confirmation through MCP safety annotations. Whether you see a prompt depends on your AI app and its settings, and nothing is held as a draft. Never set Attio write tools to "always allow". Attio documents no tool to undo a merge, so review merge-records requests record by record.
Email bodies, call transcripts and notes are untrusted input: an injected line could push the agent to update deal values, merge records or change list permissions. Keep approval on for every write.
Least privilege is set through Attio user roles, with no setting for it on the connector. Connect with a user whose role covers only the objects and lists needed, and revoke sessions in Attio account settings when done.
Attio says no data is shared with external systems unless you configure more integrations, and that operations are logged. For training and retention, check Attio's and your AI provider's terms.

How could finance teams and accounting firms use it?

Reads suit pipeline and customer questions; writes suit drafting notes, tasks and field updates that a person confirms before they change the CRM.

Inside a company

Pull open deals by stage and expected close date to sanity-check the revenue forecast.
Run a basic report on deal values by owner or segment before a board pack.
Summarise recent emails and call notes for a customer before a billing or renewal conversation.
Draft follow-up tasks for overdue renewals, confirmed by a person before they are created.

At an accounting firm

Review a client's pipeline against booked revenue when preparing a forecast, connected as your own Attio user in the client's workspace.
Search notes and calls for mentioned start dates or discounts, to check against the signed contract before any revenue recognition decision.
Draft a note on the company record after a client meeting for the account owner to confirm.
Flag duplicate company records for the client's team to merge themselves.

Whatever the use, keep a person confirming anything that changes the CRM, and tie any revenue figures back to the ledger before relying on them.

Want Attio connected to Claude for your team?

We set up scoped connections, with a review step before anything changes your books, for a fixed fee.

Book a 30-minute setup call

Change log

Date	Change	Source
2026-10-21	Re-verified: 48 tools in the docs, per-tier rate limits, Claude path now Customize › Connectors on Attio's app page	attio.com/apps/claude
2026-02	Attio connector listed in the Claude directory (Anthropic verified)	claude.com/connectors/attio
2026	Hosted MCP server at mcp.attio.com with OAuth, read auto-approval and write confirmation; ChatGPT app published	docs.attio.com/mcp/overview

FAQ

Is this official?

Yes. Attio hosts the MCP server, and both the Claude connector (Anthropic verified) and the ChatGPT app are marked as built by Attio.

Is it free?

Attio doesn't list a separate charge for MCP; you need an Attio workspace, and the SQL tool isn't on every billing plan. Your Claude or ChatGPT plan rules still apply.

Does it change data in Attio?

Yes. It can create, update, upsert and merge records and manage notes, tasks, comments and lists. Attio says write tools ask for confirmation first.

Is my data used to train models?

Attio's MCP docs don't address training. Attio says data isn't shared externally unless you add integrations; check Attio's and your AI provider's terms.

Can my accountant use it on my behalf?

Attio doesn't document delegated access. The connection runs as the signed-in Attio user, so an accountant would connect as their own Attio user in your workspace, with the permissions you give that user.

Something wrong or out of date? Tell us and we'll email you when it's fixed.

Sources

Verified by theFinanceStack, 21 Oct 2026. Vendor list on the CFO Software Market Map courtesy of Jason Staats; AI connectivity data by theFinanceStack. Not tax, compliance or financial advice.