Granola MCP server icon

Granola

by Granola

Productivity4 tools

Search your Granola meeting notes, read AI summaries and pull raw transcripts into your AI assistant. Six documented tools, two more than the directory lists, and every one reads. Granola captures audio from your own machine with no meeting bot, so participants see no Granola indicator unless you turn one on.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Connect Granola via MCP

https://mcp.granola.ai/mcp

Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.

Granola Tools & Capabilities (4)

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • The directory listing undercounts and misnames. It lists four tools where Granola documents six, and names the dispatcher query_granola, where Granola's table calls it query_granola_meetings. Build allowlists from Granola's documentation, not the listing.
  • There is no permissions label to check. The directory record carries no permissions field. Read-only here is Granola's tool table plus the absence of any documented write tool — not an observation of ours and not a claim by Anthropic.
  • We could not verify tool behaviour ourselves. The endpoint returns 401 to an anonymous handshake, so no schemas and no safety annotations were readable to us.
  • One workspace at a time. Granola states MCP follows the active workspace in the desktop app, does not combine workspaces, and excludes notes from other workspaces even when sharing makes them visible in the active one.
  • Enterprise members can be locked out entirely. Granola states that if an admin enables neither note scope, members cannot use Granola MCP.
  • Enterprise member controls do not bind admins. Granola states admins reach both personal and public notes through MCP regardless of the member setting.
  • The free plan is a 30-day window without transcripts. Granola documents Basic as personal notes from the last 30 days, with folder, search and transcript tools on paid plans only.
  • Rate limits are approximate and moving. Granola gives an average of about 100 requests per minute across all tools, varying by plan and client, and states they are subject to change.
  • Participants get no automatic signal. There is no meeting bot in the participant list, and both transparency features require setup — a Chrome extension, an Accessibility permission, or a virtual camera. Granola states workspace-wide enforcement for Zoom and Teams on Windows is not yet available.
  • Notes survive transcript deletion. Granola states auto-deletion removes only the transcript, so a workspace that deletes transcripts may still expose their substance through get_meetings.
  • Transcript deletion is permanent, and Enterprise policy has no cooldown. Granola states existing transcripts are deleted immediately when a workspace policy activates and cannot be recovered.
  • Training is opt-out, not opt-in, below Enterprise. Granola states it may use anonymized data to improve its services by default, with opt-out available on any plan and applied by default for Enterprise.
  • No audio to fall back on. Granola states it does not store meeting audio on desktop, so a transcript cannot be checked against a recording.
  • The dispatcher's reach is undocumented. Granola does not publish what query_granola_meetings matches, ranks or filters, or whether it respects the paid-plan transcript gate.
  • Prompts are unconfirmed. Anthropic's snapshot lists no prompt names, but the gated endpoint blocked our own prompts/list, so we cannot say whether the server serves any.
  • No service accounts. Granola states MCP has no API key or service account path; every user authenticates individually through browser OAuth.

Frequently asked questions

Whose meetings can the Granola MCP connector read?

Only notes inside the one Granola workspace you have active, and only those you already have access to. Granola documents two scopes: personal notes you own or that were shared with you, and public notes visible to everyone in that workspace including its Team space. Granola states that notes from other workspaces are excluded even when sharing makes them visible in the active one.

Does Granola tell other participants that a meeting is being transcribed?

Not by default, because there is no meeting bot to see. Granola documents two opt-in transparency features that do produce a visible signal: an automated chat message posted when transcription starts, and a watermark badge on your camera. Both require setup — a browser extension, an Accessibility permission, or a virtual camera — so an unconfigured install shows participants nothing from Granola.

Can the Granola MCP server write or change my notes?

No. All six tools Granola documents read. The dispatcher tool maps to Granola Chat, and although Chat can rewrite note sections inside the desktop app, Granola documents that rewriting as triggered in the app rather than as an MCP capability. Anthropic's directory record carries no permissions label at all, so the read-only picture comes from Granola's tool table.

What is the difference between list_meetings and get_meetings?

One indexes, the other reads. Granola documents list_meetings as returning meeting metadata — meeting ID, title, date and attendees — with folder filtering on paid plans. get_meetings returns note content for meetings you can access: the same identifying fields plus your private notes and the AI-summarised notes. So list_meetings finds a meeting and get_meetings opens it.

How far back can Granola MCP search my meeting history?

That depends on your plan and your transcript retention setting. Granola documents the Basic free plan as limited to personal notes from the last 30 days, with Business and Enterprise having no stated window. Transcripts can be auto-deleted on a schedule from one day to one year, and Granola states deletion is permanent and irreversible.

Do deleted transcripts disappear from the MCP connector too?

The transcripts do, but the notes built from them do not. Granola states transcript auto-deletion removes only the transcript and leaves both AI-generated and manual notes untouched. So get_meeting_transcript loses that meeting while get_meetings still returns its summarised substance. Granola frames the same asymmetry as degraded Chat quality for affected meetings.

Do I need an admin to enable the Granola MCP connector?

Only on Enterprise, where it is a hard gate. Granola documents an MCP access setting under Workspace, General, Apps and connectors, where an admin enables personal notes, public notes, both or neither. Granola states that members have no MCP access at all until an admin enables a scope. Free and Business users connect without an admin step.

Is Granola MCP rate limited?

Yes, and the ceiling moves with your plan. Granola documents rate limits as varying by subscription plan and by the MCP client in use, and gives a current average of roughly 100 requests per minute across all tools. Granola states the limits are subject to change. Upgrading from Basic grants the extra tools and higher limits on the next query.

Sources

  • Granola MCP — https://docs.granola.ai/help-center/sharing/integrations/mcp (fetched 2026-08-19 as Markdown via the .md suffix; the directory's help.granola.ai/article/granola-mcp URL 301-redirects to this host) · retrieved 2026-08-19
  • How transcription works — https://docs.granola.ai/help-center/taking-notes/transcription (fetched 2026-08-19) · retrieved 2026-08-19
  • When to Use AI Notetaking: A Guide for Your Team — https://docs.granola.ai/help-center/consent-security-privacy/getting-consent (fetched 2026-08-19) · retrieved 2026-08-19
  • Let People Know You're Using Granola — https://docs.granola.ai/help-center/consent-security-privacy/transparency-solutions/introduction (fetched 2026-08-19) · retrieved 2026-08-19
  • Turn on transparency features for your team (Admin Guide) — https://docs.granola.ai/help-center/consent-security-privacy/transparency-solutions/for-enterprise-admins (fetched 2026-08-19) · retrieved 2026-08-19
  • Let people know you're using Granola (User Guide) — https://docs.granola.ai/help-center/consent-security-privacy/transparency-solutions/for-individuals (fetched 2026-08-19) · retrieved 2026-08-19
  • Transcript auto-deletion — https://docs.granola.ai/help-center/consent-security-privacy/transcript-auto-deletion (fetched 2026-08-19) · retrieved 2026-08-19
  • Models & training — https://docs.granola.ai/help-center/consent-security-privacy/model-training (fetched 2026-08-19) · retrieved 2026-08-19
  • Chatting with your meetings — https://docs.granola.ai/help-center/getting-more-from-your-notes/chatting-with-your-meetings (fetched 2026-08-19) · retrieved 2026-08-19
  • Sharing controls — https://docs.granola.ai/help-center/consent-security-privacy/sharing-controls (fetched 2026-08-19) · retrieved 2026-08-19
  • Granola docs machine index — https://docs.granola.ai/llms.txt (fetched 2026-08-19) · retrieved 2026-08-19
  • docs.granola.ai/robots.txt disallows only /cdn-cgi/ and /_next/, names a sitemap, and carries Content-Signal: ai-train=yes, search=yes, ai-input=yes — the publisher expressly permits AI input as well as search (fetched 2026-08-19). www.granola.ai/robots.txt is a bare allow with a sitemap and no Content-Signal · retrieved 2026-08-19
  • Live RFC 9728 protected-resource descriptor — https://mcp.granola.ai/.well-known/oauth-protected-resource (fetched 2026-08-19; the path-append form returns a byte-identical body, the path-insert form returns 405 from the MCP router) · retrieved 2026-08-19
  • Live RFC 8414 authorization-server metadata — https://mcp-auth.granola.ai/.well-known/oauth-authorization-server (fetched 2026-08-19; four OIDC scopes, no data scope) · retrieved 2026-08-19
  • Live anonymous probe — 2026-08-19: a POST to the endpoint returns HTTP 401 with www-authenticate naming resource_metadata at the root well-known path · retrieved 2026-08-19
  • Anthropic connector directory — https://claude.ai/directory/4d608ca4-1664-4ddd-be1c-c88c0ea2ec7e (snapshot 2026-08-16) · retrieved 2026-08-16

Use in Agentman

Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio

Server Info

Category
Productivity
Developer
Granola
Tools
4
Domain
mcp.granola.ai

Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.