You log in with your Attio credentials. Access follows that user's permissions.

Attio AI connector: IT approval and security

Q: What can it read, and what can it change?

Read vs write group: Writes data. Delete: Not stated.

Attio's MCP server can read and change data. The vendor's setup notes don't mention an admin step. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.

Download (.md)

Server URL: https://mcp.attio.com/mcp Source: StackMCP listing, checked 2026-10-16
Access: Read + write
Source: docs.attio.com, checked 2026-10-16
Sign-in: OAuth Source: StackMCP listing, checked 2026-10-16
Read-only option: Not confirmed
How to revoke: Sessions can be revoked from Attio account settings.
Admin approval: Not confirmed
No means the vendor's docs name no admin step. It does not mean an admin cannot block the connection.
Setup: Self-serve
No admin step in the vendor's setup notes. Source: docs.attio.com, checked 2026-10-16
Credits: Credits not confirmed
Plan: Free Source: attio.com, checked 2026-10-16

What data can it reach?

Attio's docs list these tools for its MCP server:

records search/CRUD
lists
notes
tasks
meetings & call recordings
emails
reporting
SQL (plan-gated)

Source: docs.attio.com, checked 2026-10-15

Access is tied to your Attio user permissions. Source: docs.attio.com, checked 2026-11-02

What can it read, and what can it change?

Read + write Some Attio MCP tools change data, not just read it.

Things it can do in your Attio account:

creates, updates, upserts and merges CRM records
creates, updates and upserts activity records (e.g. calls)
creates and updates lists and list entries; adds records to lists
creates notes and updates note content
creates, updates and deletes tasks
creates and deletes comments

Source: docs.attio.com, checked 2026-10-16

Review each change before you approve it, especially anything that sends messages or edits records other people rely on.

On Read vs write, this server is in Writes data.

Delete column on that page: Not stated. That page has no sourced yes or no for this server.

Which actions should wait for a person's OK?

Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.

Write operations ask for confirmation before creating or updating data. The quote does not mention deletes. Source: docs.attio.com, checked 2026-11-02

Sign-in method (from the StackMCP listing): OAuth

You log in with your existing Attio credentials. Source: docs.attio.com, checked 2026-11-02

Does an admin need to approve it?

What Attio's docs confirm about admin controls:

An admin must approve or enable the connectionNot confirmed
Scopes or permissions can limit what it reachesYesSource: attio.com, checked 2026-10-16
Individual tools can be turned offNot confirmed
MCP activity shows in an audit logYesSource: docs.attio.com, checked 2026-10-16

No means the vendor's docs name no admin step. It does not mean an admin cannot block the connection.

Those rows are controls Attio provides. A switch inside Claude or ChatGPT is in the section below, not in this table.

Attio says all operations are logged and auditable. The page does not say where that log is. Source: docs.attio.com, checked 2026-11-02

How do we turn it off?

In Attio

Sessions can be revoked from your Attio account settings. Source: docs.attio.com, checked 2026-11-02

In the AI assistant

In Claude, you can revoke access at any time. Disconnect the connector in Claude's settings, or in the tool's own security settings. Source: support.claude.com, checked 2026-11-02
For other assistants, check that assistant's settings or ask your admin.

Does it use credits or quota?

Not confirmed Attio's docs don't say whether MCP calls use credits or paid usage.

Compare plans and credits. Read vs write.

What do Claude and ChatGPT add?

These rows are the AI app's own controls. They do not mean this server is confirmed for that app. Plan sentences are the quotes on the cost page.

This listing confirms Claude and ChatGPT.

	Claude	ChatGPT
Who enables connectors	On Team and Enterprise, an Owner or Primary Owner enables directory connectors before members use them. For a custom connector, Team is limited to Owners and Primary Owners. On Enterprise, a custom role that includes Manage access to Libraries can add one too. Source: support.claude.com, checked 2026-11-02Source: support.claude.com, checked 2026-11-02	On Business, only admins and owners create and publish custom MCP servers. Enterprise and Edu can use role-based access to grant creation, and admins choose who can use each app. Source: help.openai.com, checked 2026-11-02
Who can block writes	On Team and Enterprise, owners can set each tool to Always allow, Needs approval, or Blocked for the organization. Source: support.claude.com, checked 2026-11-02	Admins turn read actions and write actions on. Users can choose Always ask or Allow read actions. Allow all is not in the standard workspace-wide selector. New actions can be left off. Source: help.openai.com, checked 2026-11-02
Training on connected data	Commercial plans: inputs and outputs are not used for training by default. On consumer plans, raw connector content is excluded from the training data described in the privacy article, unless it is copied into the chat. Source: privacy.claude.com, checked 2026-11-02Source: privacy.claude.com, checked 2026-11-02	Business, Enterprise, and Edu workspace content, including information from apps, is not used for training by default. A consumer-plan default is not confirmed on this page. Source: help.openai.com, checked 2026-11-02
Audit log	Not confirmed	The Compliance Platform is only for eligible Enterprise and Edu workspaces. The quote does not say it records MCP tool calls. Source: help.openai.com, checked 2026-11-02
Plan for a custom connector	Free, Pro, Max, Ultra, Team, and Enterprise. A Free account can add one custom connector. Source: support.claude.com, checked 2026-11-02	Full custom MCP support is for Business and Enterprise or Edu on the web. Pro can connect with read and fetch permissions. Source: help.openai.com, checked 2026-11-02

In Claude, each person still signs in. A custom connector with a shared credential reaches whatever that credential can access. Enterprise-managed auth for Claude is in beta. Custom connectors are called from Anthropic's cloud, so the server has to be reachable on the public internet. Connected services process data on their own infrastructure. Source: support.claude.com, checked 2026-11-02

On Claude Enterprise, owners can keep verified-domain connectors inside the org. In Claude, connector requests are on by default on Team and off on Enterprise. ChatGPT Enterprise can ask OpenAI to limit connections from a verified company domain. ChatGPT admins can refresh a custom MCP app's tool list from workspace settings. Open Plugins in Admin Console, or the Apps page if Plugins is unavailable. That article does not say this turns an app off. Source: support.claude.com, checked 2026-11-02Source: help.openai.com, checked 2026-11-02

Send this to IT

Copy this, fill in the parts in [brackets] and send it.

Email text

Subject: Request: connect Attio to [your AI assistant] for my sales work

Hi [name],

I'd like to connect Attio to [your AI assistant] using Attio's official MCP connector. I want to use it for [task, for example call prep or pipeline review].

What I'm asking for:
- Approval to connect Attio with my own Attio login. Write actions ask for confirmation before they create or update data.
- Any admin step Attio needs before I can connect.

How I'll use it:
- I'll approve each action that creates, changes or sends something before it runs.
- I'll disconnect it if you ask, or when I stop using it.

Quick facts:
- Access: Read + write
- Sign-in: OAuth
- Setup: Self-serve
- Who approves: Not confirmed
- Read-only option: Not confirmed
- How to revoke: Sessions can be revoked from Attio account settings.
- Credits: Not confirmed

The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/attio

Thanks,
[your name]

Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. The date beside each source is the day we last found that quote on the page. StackMCP listing facts on this page were checked on Oct 16, 2026.

All the facts on one page, with sources: Attio MCP server.

Other one-pagers: HubSpot · Salesforce · Gong · Slack · Apollo · Pipedrive · Close · Dynamics 365 Sales

Something out of date on this page? Report a correction, with a link to the vendor page that shows the right information.