Attio

Name: Attio MCP Server
Availability: InStock
Author: Attio

Productivity23 tools

Search, create and update Attio CRM records from an AI assistant, and read synced emails and call-recording transcripts. One coarse OAuth scope covers everything — the opposite of Close, the other CRM in this catalogue.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on 18 August 2026.

Anthropic states this reflects the level of review a connector received, not a security audit.

Connect Attio via MCP

https://mcp.attio.com/mcp

Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.

Attio Tools & Capabilities (23)

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

One coarse OAuth scope. mcp grants read and write together. There is no read-only connection to approve.
The directory listing is a subset. 23 names listed against 39 documented. The merge tool and the only delete tool are both outside the listing.
No documented inverse for a merge or a comment deletion. Neither merge-records nor delete-comment has an undo tool in Attio's MCP reference.
Call recordings are workspace-wide. Attio states all recordings are visible to all workspace members, so per-user scoping does not narrow this tool.
No documented redaction. Attio's docs describe no redaction of transcripts or email bodies before a tool returns them.
Rate limits are per workspace and per tier, and tools share a bucket within a tier: 100 reads per second, 25 writes per second, 5 merges per second, 300 searches per minute, and 2 semantic searches, reports or SQL queries per second.
Call recording needs Pro or Enterprise. The tools exist on any plan; the recordings only exist if your plan makes them.
SQL is Enterprise-only. Attio states query-particle-sql "is not available on every billing plan" and its SQL overview restricts the feature to Enterprise. It is read-only: only SELECT is supported, and INSERT, UPDATE and DELETE are rejected.
We could not read tool schemas or safety annotations. The endpoint is OAuth-gated. Tool names come from Anthropic's directory; behaviour comes from Attio's docs.

Frequently asked questions

Which Attio plan do I need for the MCP server?

Every plan. Attio's help centre records Attio MCP as available on all plans and available for all workspace members, so no upgrade and no admin role is needed to connect it. Two capabilities behind it are gated separately: call recording requires Pro or Enterprise, and the SQL tool requires Enterprise.

Can an AI assistant read my emails and call recordings through Attio MCP?

Yes, within your own Attio permissions. Three tools reach communications: `get-email-content` returns a full email body, `get-call-recording` returns a recording's details and transcript, and `search-meetings` finds meetings. Attio states all call recordings are visible to every workspace member, so that tool reaches the whole workspace.

Do I need consent to record the calls this connector can read?

Attio says the obligation is yours. Its call-recording guidance states you must adhere to the data privacy laws of meeting participants, that you may need consent from all of them, and that ensuring relevant laws are followed is your responsibility. It suggests notifying participants in the meeting invite.

Can I grant the Attio connector read-only access?

No. Attio's protected-resource descriptor advertises one application scope, `mcp`, which covers reading and writing alike. The consent screen cannot narrow it. Attio instead limits the connector to your own account's permissions, and asks your client to confirm each write at call time.

What should I do if Attio MCP returns rate limit errors?

Attio's documented advice is to prompt your AI tool to reduce parallel operations, space out sequential requests, and retry after a brief wait. Limits are per workspace and per tier: 100 reads per second, 25 writes per second, 300 searches per minute, and 2 semantic searches per second.

Sources

Attio MCP documentation — https://docs.attio.com/mcp/overview (retrieved 2026-08-18). Tool reference, rate-limit tiers, sample prompts, security notes. · retrieved 2026-08-18
Attio SQL overview — https://docs.attio.com/sql/overview (retrieved 2026-08-18). Enterprise gate and read-only SELECT restriction. · retrieved 2026-08-18
Attio help centre, Attio MCP — https://attio.com/help/reference/attio-ai/attio-mcp (retrieved 2026-08-18). Plan and role availability, permission scoping. · retrieved 2026-08-18
Attio help centre, recording calls with Attio — https://attio.com/help/reference/productivity-collaborating/call-intelligence/recording-calls-with-attio (retrieved 2026-08-18). Privacy guidelines and plan gate. · retrieved 2026-08-18
Attio help centre, view and manage call recordings — https://attio.com/help/reference/productivity-collaborating/call-intelligence/view-and-manage-call-recordings (retrieved 2026-08-18). Workspace-wide recording visibility. · retrieved 2026-08-18
Attio help centre, email and calendar syncing — https://attio.com/help/reference/email-calendar/email-and-calendar-syncing (retrieved 2026-08-18). Email body privacy default and sync scope. · retrieved 2026-08-18
Attio help centre, keep emails and calendar events private — https://attio.com/help/reference/email-calendar/keep-emails-and-calendar-events-private (retrieved 2026-08-18). Blocklist and protected recipients. · retrieved 2026-08-18
Live OAuth probe of https://mcp.attio.com/mcp — 2026-08-18. Anonymous initialize returned HTTP 401 with a WWW-Authenticate: Bearer challenge; the RFC 9728 protected-resource descriptor and both authorization-server metadata documents returned HTTP 200. No tool was called. · retrieved 2026-08-18
Anthropic connector directory snapshot — https://claude.ai/directory/ae5afdb9-e3c6-4b64-a13a-420e7a8d8124 (snapshot dated 2026-08-16). Tool names, partner tier, endpoint, "Read and write" permissions. · retrieved 2026-08-16
docs.attio.com/robots.txt (retrieved 2026-08-18) carries Content-Signal: ai-train=yes, search=yes, ai-input=yes — synthesis of this host's content is expressly permitted by the publisher. attio.com/robots.txt allows ClaudeBot and anthropic-ai. · retrieved 2026-08-18