Affinity
Search your CRM, prep for meetings and update deal records from your AI assistant.
Query live treasury data from an AI assistant: balances, cash flows, transactions, payments, forecasts, approvals.
Opens Agent Studio, where connecting is one click. The connector URL below works in any MCP client.
Paste it into any MCP client. Setup docs
The Atlar MCP server connects an Atlar treasury account to Claude, ChatGPT and any MCP-compatible agent. All 21 tools in Anthropic's directory listing read: balances, cash flows, transactions, payments, forecasts, entities and approval chains. Whether the connection can also write is decided by your OAuth grant and an organization policy, not by the endpoint.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
scopes_supported in its authorization-server metadata and no scope list in its RFC 9728 descriptor (both fetched 2026-09-08). A consent screen cannot show a reader a scope string that names write access, so the audit trail for "was this grant read-only" is Atlar's settings and consent records, not the token.query_approval_chains and query_payment_schedules return the configuration that governs approvals. Atlar's Permissions reference places approval chains at READ in its Read financial data group, explicitly "not modify them". Nothing in the listed tool set advances a payment through a chain.v2beta paths (docs index, 2026-09-08). We cannot say which API version the MCP tools call, but the data behind query_portfolios and forecast is documented as beta on the REST side.Not with the 21 tools Anthropic's directory lists, which all read. But Atlar's MCP documentation describes an OAuth consent screen offering read-only or read/write access, naming payment creation as a read/write example, so the grant rather than the tool list is the real boundary. Check the permission level you approved.
An admin has to enable it first. Atlar documents a Third-party OAuth client access policy under Settings, Security that is disabled by default, which blocks every user from authorizing an AI agent until an owner or admin changes it. Atlar states the change needs the organization:update permission, typically held by the owner.
Whatever the person who authorized it can already see. Atlar states the agent inherits the exact same permissions as the authorizing user, with the same role-based access and audit trail as the Atlar dashboard. The organization policy narrows it further: under Read-only, an agent cannot write even if the user's role allows it.
Set the organization policy to Read-only. Atlar documents three settings — Disabled, Read-only, and Read and write — and states that under Read-only an agent cannot create, update or delete resources even when the authorizing user's role would normally permit it. The policy overrides the individual grant.
No. Atlar documents OAuth 2.1 authorization code flow with PKCE, so you sign in on Atlar's own dashboard rather than in the chat. Atlar also states that access tokens issued to MCP clients are constrained to the connector host by audience claim, with no passthrough to its REST API at api.atlar.com.
Revoke the grant from your Atlar profile. Atlar documents a page at app.atlar.com/profile that lists your outstanding consents and lets you manage them. Separately, an organization on the Read-only policy can configure a Connection lifetime, after which the MCP connection expires and must be re-authorized whether or not it is in use.
Two causes, per Atlar's troubleshooting notes. Either the permission level granted during OAuth was read-only rather than read/write, or the authorizing user's own role does not allow the action. Atlar states Claude can only do what that user is allowed to do, so check the grant first and then the role.
https://docs.atlar.com/docs/mcp.md, 2026-09-08; page updatedAt 2026-09-03) · retrieved 2026-09-08docs.atlar.com/robots.txt carries Allow: / and points at this file, and every documentation page serves Markdown with a .md suffix. · retrieved 2026-09-08initialize against https://mcp.atlar.com/mcp — HTTP 401, no WWW-Authenticate header, no rate-limit headers (2026-09-08). We did not authenticate and did not call any tool. · retrieved 2026-09-08resource https://mcp.atlar.com/mcp, authorization_servers https://api.atlar.com · retrieved 2026-09-08authorization_code, refresh_token and client_credentials grants, PKCE S256, and no scopes_supported field · retrieved 2026-09-08mcp.atlar.com and three candidate hostnames, all 404 or DNS failure (2026-09-08) · retrieved 2026-09-08auth_required · retrieved 2026-09-08Connect Atlar once and your agents call these tools on their own: on a schedule, in a workflow, with nobody at the keyboard.