Close AI connector: IT approval and security

Close's MCP server can read and change data. The vendor's setup notes don't mention an admin step. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.

Download (.md)

Server URL
https://mcp.close.com/mcp Source: StackMCP listing, checked 2026-10-16
Access
Read + write
Source: developer.close.com, checked 2026-10-16
Sign-in
OAuth 2.0 with Dynamic Client Registration (API key via Close-API-Key + Close-Scope headers for custom setups) Source: StackMCP listing, checked 2026-10-16
Read-only option
Yes. The mcp.read scope is read-only access.
How to revoke
Not confirmed
Admin approval
Not confirmed

No means the vendor's docs name no admin step. It does not mean an admin cannot block the connection.

Setup
Self-serve
No admin step in the vendor's setup notes. Source: developer.close.com, checked 2026-10-16
Credits
Credits not confirmed
Plan
Not confirmed

What data can it reach?

Close's docs list these tools for its MCP server:

Source: developer.close.com, checked 2026-10-16

What can it read, and what can it change?

Read + write Some Close MCP tools change data, not just read it.

Things it can do in your Close account:

Source: developer.close.com, checked 2026-10-16

Review each change before you approve it, especially anything that sends messages or edits records other people rely on.

On Read vs write, this server is in Writes data.

From the read vs write page: saves an email as an unsent draft, and creates a workflow in draft status. It can also permanently delete a lead. That is not a drafts-only server. Source: developer.close.com, checked 2026-11-02

Read-only switch named on that page: mcp.read scope. Source: developer.close.com, checked 2026-11-02

Delete column on that page: Yes. Source: developer.close.com, checked 2026-11-02

Which actions should wait for a person's OK?

Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.

How does it sign in?

Sign-in method (from the StackMCP listing): OAuth 2.0 with Dynamic Client Registration (API key via Close-API-Key + Close-Scope headers for custom setups)

Does an admin need to approve it?

What Close's docs confirm about admin controls:

No means the vendor's docs name no admin step. It does not mean an admin cannot block the connection.

Those rows are controls Close provides. A switch inside Claude or ChatGPT is in the section below, not in this table.

How do we turn it off?

In Close

The Close docs we checked don't say how to revoke MCP access. Ask your Close admin.

In the AI assistant

Does it use credits or quota?

Not confirmed Close's docs don't say whether MCP calls use credits or paid usage.

Compare plans and credits. Read vs write.

What do Claude and ChatGPT add?

These rows are the AI app's own controls. They do not mean this server is confirmed for that app. Plan sentences are the quotes on the cost page.

This listing confirms Claude and ChatGPT.

ClaudeChatGPT
Who enables connectors On Team and Enterprise, an Owner or Primary Owner enables directory connectors before members use them. For a custom connector, Team is limited to Owners and Primary Owners. On Enterprise, a custom role that includes Manage access to Libraries can add one too. Source: support.claude.com, checked 2026-11-02Source: support.claude.com, checked 2026-11-02 On Business, only admins and owners create and publish custom MCP servers. Enterprise and Edu can use role-based access to grant creation, and admins choose who can use each app. Source: help.openai.com, checked 2026-11-02
Who can block writes On Team and Enterprise, owners can set each tool to Always allow, Needs approval, or Blocked for the organization. Source: support.claude.com, checked 2026-11-02 Admins turn read actions and write actions on. Users can choose Always ask or Allow read actions. Allow all is not in the standard workspace-wide selector. New actions can be left off. Source: help.openai.com, checked 2026-11-02
Training on connected data Commercial plans: inputs and outputs are not used for training by default. On consumer plans, raw connector content is excluded from the training data described in the privacy article, unless it is copied into the chat. Source: privacy.claude.com, checked 2026-11-02Source: privacy.claude.com, checked 2026-11-02 Business, Enterprise, and Edu workspace content, including information from apps, is not used for training by default. A consumer-plan default is not confirmed on this page. Source: help.openai.com, checked 2026-11-02
Audit log Not confirmed The Compliance Platform is only for eligible Enterprise and Edu workspaces. The quote does not say it records MCP tool calls. Source: help.openai.com, checked 2026-11-02
Plan for a custom connector Free, Pro, Max, Ultra, Team, and Enterprise. A Free account can add one custom connector. Source: support.claude.com, checked 2026-11-02 Full custom MCP support is for Business and Enterprise or Edu on the web. Pro can connect with read and fetch permissions. Source: help.openai.com, checked 2026-11-02

In Claude, each person still signs in. A custom connector with a shared credential reaches whatever that credential can access. Enterprise-managed auth for Claude is in beta. Custom connectors are called from Anthropic's cloud, so the server has to be reachable on the public internet. Connected services process data on their own infrastructure. Source: support.claude.com, checked 2026-11-02

On Claude Enterprise, owners can keep verified-domain connectors inside the org. In Claude, connector requests are on by default on Team and off on Enterprise. ChatGPT Enterprise can ask OpenAI to limit connections from a verified company domain. ChatGPT admins can refresh a custom MCP app's tool list from workspace settings. Open Plugins in Admin Console, or the Apps page if Plugins is unavailable. That article does not say this turns an app off. Source: support.claude.com, checked 2026-11-02Source: help.openai.com, checked 2026-11-02

Send this to IT

Copy this, fill in the parts in [brackets] and send it.

Email text
Subject: Request: connect Close to [your AI assistant] for my sales work

Hi [name],

I'd like to connect Close to [your AI assistant] using Close's official MCP connector. I want to use it for [task, for example call prep or pipeline review].

What I'm asking for:
- Approval to connect Close with OAuth, and to use the mcp.read scope if we want read-only access.
- Any admin step Close needs before I can connect.

How I'll use it:
- I'll approve each action that creates, changes or sends something before it runs.
- I'll disconnect it if you ask, or when I stop using it.

Quick facts:
- Access: Read + write
- Sign-in: OAuth 2.0 with Dynamic Client Registration (API key via Close-API-Key + Close-Scope headers for custom setups)
- Setup: Self-serve
- Who approves: Not confirmed
- Read-only option: Yes. The mcp.read scope is read-only access.
- How to revoke: Not confirmed
- Credits: Not confirmed

The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/close

Thanks,
[your name]

Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. The date beside each source is the day we last found that quote on the page. StackMCP listing facts on this page were checked on Oct 16, 2026.

All the facts on one page, with sources: Close MCP server.

Other one-pagers: HubSpot · Salesforce · Gong · Slack · Apollo · Pipedrive · Attio · Dynamics 365 Sales

Something out of date on this page? Report a correction, with a link to the vendor page that shows the right information.