Close AI connector: IT approval and security
Close's MCP server can read and change data. The vendor's setup notes don't mention an admin step. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.
- Server URL
https://mcp.close.com/mcpSource: StackMCP listing, checked 2026-10-16- Access
- Read + writeSource: developer.close.com, checked 2026-10-16
- Sign-in
- OAuth 2.0 with Dynamic Client Registration (API key via Close-API-Key + Close-Scope headers for custom setups) Source: StackMCP listing, checked 2026-10-16
- Read-only option
- Yes. The mcp.read scope is read-only access.
- How to revoke
- Not confirmed
- Admin approval
- Not confirmed
No means the vendor's docs name no admin step. It does not mean an admin cannot block the connection.
- Setup
- Self-serveNo admin step in the vendor's setup notes. Source: developer.close.com, checked 2026-10-16
- Credits
- Credits not confirmed
- Plan
- Not confirmed
What data can it reach?
Close's docs list these tools for its MCP server:
- lead/activity search & aggregation
- leads, contacts, opportunities CRUD
- tasks & call tasks
- notes & comments
- draft emails & email/SMS templates
- workflows (sequences)
- smart views & pipelines
- meeting transcripts
- AI field enrichment
- voice agents
- Close's scope header chooses the tools. mcp.read is read-only access. Source: developer.close.com, checked 2026-11-02
What can it read, and what can it change?
Read + write Some Close MCP tools change data, not just read it.
Things it can do in your Close account:
- creates, updates and deletes leads, contacts and opportunities
- merges leads
- creates, updates and deletes tasks, call tasks and notes
- creates and updates draft emails
- creates, updates and deletes email and SMS templates
- creates workflows (sequences) in Draft status
- creates and edits pipelines, statuses and smart views
- writes AI-enriched field values to leads/contacts
- schedules voice agent calls
Review each change before you approve it, especially anything that sends messages or edits records other people rely on.
On Read vs write, this server is in Writes data.
From the read vs write page: saves an email as an unsent draft, and creates a workflow in draft status. It can also permanently delete a lead. That is not a drafts-only server. Source: developer.close.com, checked 2026-11-02
Read-only switch named on that page: mcp.read scope. Source: developer.close.com, checked 2026-11-02
Delete column on that page: Yes. Source: developer.close.com, checked 2026-11-02
Which actions should wait for a person's OK?
Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.
How does it sign in?
Sign-in method (from the StackMCP listing): OAuth 2.0 with Dynamic Client Registration (API key via Close-API-Key + Close-Scope headers for custom setups)
- Close recommends OAuth. You grant access to an organization and to scopes. Source: developer.close.com, checked 2026-11-02
Does an admin need to approve it?
What Close's docs confirm about admin controls:
- An admin must approve or enable the connectionNot confirmed
- Scopes or permissions can limit what it reachesYesSource: developer.close.com, checked 2026-10-16
- Individual tools can be turned offNot confirmed
- MCP activity shows in an audit logNot confirmed
No means the vendor's docs name no admin step. It does not mean an admin cannot block the connection.
Those rows are controls Close provides. A switch inside Claude or ChatGPT is in the section below, not in this table.
How do we turn it off?
In Close
The Close docs we checked don't say how to revoke MCP access. Ask your Close admin.
In the AI assistant
- In Claude, you can revoke access at any time. Disconnect the connector in Claude's settings, or in the tool's own security settings. Source: support.claude.com, checked 2026-11-02
- For other assistants, check that assistant's settings or ask your admin.
Does it use credits or quota?
Not confirmed Close's docs don't say whether MCP calls use credits or paid usage.
Compare plans and credits. Read vs write.
What do Claude and ChatGPT add?
These rows are the AI app's own controls. They do not mean this server is confirmed for that app. Plan sentences are the quotes on the cost page.
This listing confirms Claude and ChatGPT.
| Claude | ChatGPT | |
|---|---|---|
| Who enables connectors | On Team and Enterprise, an Owner or Primary Owner enables directory connectors before members use them. For a custom connector, Team is limited to Owners and Primary Owners. On Enterprise, a custom role that includes Manage access to Libraries can add one too. Source: support.claude.com, checked 2026-11-02Source: support.claude.com, checked 2026-11-02 | On Business, only admins and owners create and publish custom MCP servers. Enterprise and Edu can use role-based access to grant creation, and admins choose who can use each app. Source: help.openai.com, checked 2026-11-02 |
| Who can block writes | On Team and Enterprise, owners can set each tool to Always allow, Needs approval, or Blocked for the organization. Source: support.claude.com, checked 2026-11-02 | Admins turn read actions and write actions on. Users can choose Always ask or Allow read actions. Allow all is not in the standard workspace-wide selector. New actions can be left off. Source: help.openai.com, checked 2026-11-02 |
| Training on connected data | Commercial plans: inputs and outputs are not used for training by default. On consumer plans, raw connector content is excluded from the training data described in the privacy article, unless it is copied into the chat. Source: privacy.claude.com, checked 2026-11-02Source: privacy.claude.com, checked 2026-11-02 | Business, Enterprise, and Edu workspace content, including information from apps, is not used for training by default. A consumer-plan default is not confirmed on this page. Source: help.openai.com, checked 2026-11-02 |
| Audit log | Not confirmed | The Compliance Platform is only for eligible Enterprise and Edu workspaces. The quote does not say it records MCP tool calls. Source: help.openai.com, checked 2026-11-02 |
| Plan for a custom connector | Free, Pro, Max, Ultra, Team, and Enterprise. A Free account can add one custom connector. Source: support.claude.com, checked 2026-11-02 | Full custom MCP support is for Business and Enterprise or Edu on the web. Pro can connect with read and fetch permissions. Source: help.openai.com, checked 2026-11-02 |
In Claude, each person still signs in. A custom connector with a shared credential reaches whatever that credential can access. Enterprise-managed auth for Claude is in beta. Custom connectors are called from Anthropic's cloud, so the server has to be reachable on the public internet. Connected services process data on their own infrastructure. Source: support.claude.com, checked 2026-11-02
On Claude Enterprise, owners can keep verified-domain connectors inside the org. In Claude, connector requests are on by default on Team and off on Enterprise. ChatGPT Enterprise can ask OpenAI to limit connections from a verified company domain. ChatGPT admins can refresh a custom MCP app's tool list from workspace settings. Open Plugins in Admin Console, or the Apps page if Plugins is unavailable. That article does not say this turns an app off. Source: support.claude.com, checked 2026-11-02Source: help.openai.com, checked 2026-11-02
Send this to IT
Copy this, fill in the parts in [brackets] and send it.
Subject: Request: connect Close to [your AI assistant] for my sales work Hi [name], I'd like to connect Close to [your AI assistant] using Close's official MCP connector. I want to use it for [task, for example call prep or pipeline review]. What I'm asking for: - Approval to connect Close with OAuth, and to use the mcp.read scope if we want read-only access. - Any admin step Close needs before I can connect. How I'll use it: - I'll approve each action that creates, changes or sends something before it runs. - I'll disconnect it if you ask, or when I stop using it. Quick facts: - Access: Read + write - Sign-in: OAuth 2.0 with Dynamic Client Registration (API key via Close-API-Key + Close-Scope headers for custom setups) - Setup: Self-serve - Who approves: Not confirmed - Read-only option: Yes. The mcp.read scope is read-only access. - How to revoke: Not confirmed - Credits: Not confirmed The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/close Thanks, [your name]
Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. The date beside each source is the day we last found that quote on the page. StackMCP listing facts on this page were checked on Oct 16, 2026.
All the facts on one page, with sources: Close MCP server.
Other one-pagers: HubSpot · Salesforce · Gong · Slack · Apollo · Pipedrive · Attio · Dynamics 365 Sales
Something out of date on this page? Report a correction, with a link to the vendor page that shows the right information.