# Attio AI connector: IT approval and security

Attio's MCP server can read and change data. The vendor's setup notes don't mention an admin step. This page covers what it can reach and change, how it signs in, who approves it and how to turn it off.

Online: https://mcpforgtm.com/toolkit/it-approval/attio

- Server URL: https://mcp.attio.com/mcp (Source: StackMCP listing, https://mcpforgtm.com/tools/attio)
- Access: Read + write (Source: https://docs.attio.com/mcp/overview)
- Sign-in: OAuth (Source: StackMCP listing, https://mcpforgtm.com/tools/attio)
- Who approves: Not confirmed
- Read-only option: Not confirmed
- Admin approval: Not confirmed
- Setup: Self-serve (Source: https://docs.attio.com/mcp/overview)
- Credits: Not confirmed
- Plan: Free (Source: https://attio.com/help/reference/attio-ai/attio-mcp)

## What data can it reach?

Attio's docs list these tools for its MCP server:

- records search/CRUD
- lists
- notes
- tasks
- meetings & call recordings
- emails
- reporting
- SQL (plan-gated)
(Source: https://docs.attio.com/mcp/overview)

- Access is tied to your Attio user permissions. (Source: https://docs.attio.com/mcp/overview)

## What can it read, and what can it change?

Read + write. Things it can do in your Attio account (Source: https://docs.attio.com/mcp/overview):

- creates, updates, upserts and merges CRM records
- creates, updates and upserts activity records (e.g. calls)
- creates and updates lists and list entries; adds records to lists
- creates notes and updates note content
- creates, updates and deletes tasks
- creates and deletes comments

## Which actions should wait for a person's OK?

Have a person approve each change listed above before it runs. Every StackMCP recipe follows this rule: read freely, but create, change or send only after you approve it.

- Write operations ask for confirmation before creating or updating data. The quote does not mention deletes. (Source: https://docs.attio.com/mcp/overview)

## How does it sign in?

Sign-in method (from the StackMCP listing): OAuth (Source: StackMCP listing, https://mcpforgtm.com/tools/attio)

- You log in with your existing Attio credentials. (Source: https://docs.attio.com/mcp/overview)

## Does an admin need to approve it?

What Attio's docs confirm about admin controls:

- An admin must approve or enable the connection: Not confirmed
- Scopes or permissions can limit what it reaches: Yes (Source: https://attio.com/help/reference/attio-ai/attio-mcp)
- Individual tools can be turned off: Not confirmed
- MCP activity shows in an audit log: Yes (Source: https://docs.attio.com/mcp/overview)

- Attio says all operations are logged and auditable. The page does not say where that log is. (Source: https://docs.attio.com/mcp/overview)

## How do we turn it off?

### In Attio

- Sessions can be revoked from your Attio account settings. (Source: https://docs.attio.com/mcp/overview)

### In the AI assistant

- In Claude, you can revoke access at any time. Disconnect the connector in Claude's settings, or in the tool's own security settings. (Source: https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp)
- For other assistants, check that assistant's settings or ask your admin.

## Does it use credits or quota?

Not confirmed

## What do Claude and ChatGPT add?

Claude: an Owner or Primary Owner enables directory connectors on Team and Enterprise. Custom connectors on Enterprise can also be added by a custom role with Manage access to Libraries.
Claude Team and Enterprise owners set each tool to Always allow, Needs approval, or Blocked.
Claude commercial plans: inputs and outputs are not used for training by default. Consumer plans exclude raw connector content from the training set described in Anthropic's privacy article, unless it is copied into the chat.
An audit-log export for Claude is not confirmed on this page.
ChatGPT full custom MCP support is for Business and Enterprise or Edu on the web. Pro can connect with read and fetch permissions.
ChatGPT Business: only admins and owners create and publish custom MCP servers.
ChatGPT admins turn read and write actions on. Allow read actions still asks before a change. Allow all is not in the standard workspace-wide selector.
ChatGPT Business, Enterprise, and Edu workspace content, including app data, is not used for training by default.
ChatGPT's Compliance Platform is only for eligible Enterprise and Edu workspaces. The quote does not say it records MCP tool calls.
Sources include https://support.claude.com/en/articles/11176164-use-connectors-to-extend-claude-s-capabilities and https://help.openai.com/en/articles/12584461-connecting-custom-mcp-servers-in-chatgpt. Checked 2026-11-02.

## Send this to IT

Copy this, fill in the parts in [brackets] and send it.

```text
Subject: Request: connect Attio to [your AI assistant] for my sales work

Hi [name],

I'd like to connect Attio to [your AI assistant] using Attio's official MCP connector. I want to use it for [task, for example call prep or pipeline review].

What I'm asking for:
- Approval to connect Attio with my own Attio login. Write actions ask for confirmation before they create or update data.
- Any admin step Attio needs before I can connect.

How I'll use it:
- I'll approve each action that creates, changes or sends something before it runs.
- I'll disconnect it if you ask, or when I stop using it.

Quick facts:
- Access: Read + write
- Sign-in: OAuth
- Setup: Self-serve
- Who approves: Not confirmed
- Read-only option: Not confirmed
- How to revoke: Sessions can be revoked from Attio account settings.
- Credits: Not confirmed

The facts and their sources: https://mcpforgtm.com/toolkit/it-approval/attio

Thanks,
[your name]
```

_Each fact links to its source: the tool vendor's docs, the AI assistant's docs or the StackMCP listing. Anything without a source says Not confirmed. Vendors change their connectors, so confirm anything important on the linked page. The date beside each source is the day we last found that quote on the page. StackMCP listing facts on this page were checked on Oct 16, 2026._