Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 4
- 4 7
- 3 3
- 2 1
- 1 0
Trust in production
- Trust it - 60%
- With caveats - 27%
- Wouldn't - 13%
80% would recommend this server
How reviewers scored it
- Setup & docs 3.9
- Auth experience 3.7
- Reliability 4.2
- Maintainer responsiveness 4.2
Why it got a B
Hosted by Attio over HTTPS with OAuth sign-in, so there is no API key in a config file, and you can revoke sessions in Attio settings. Read tools run without asking, while writes like create-record and delete-task ask you to confirm first. Biggest deduction: the grant has no scopes and gives the AI everything your Attio user can do, and the server is closed source, so we also scored maintenance one band lower.
How to connect
Hosted: https://mcp.attio.com/mcp (OAuth sign-in, no API key)Is Attio MCP safe?
Is Attio MCP safe to use?
Attio MCP grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does Attio MCP have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Attio MCP support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in CRM & Sales
- A HubSpot MCP ServerOfficial hosted HubSpot server for contacts, companies, deals, tickets, and engagements, with OAuth sign-in.
- A Patto MCP ServerHosted server for PR, link-building and sales outreach that keeps contacts and campaigns, drafts and sends email from your brand's mailbox, and tracks replies and follow-ups.
- A ToolsPad MCP ServerHosted server that connects an assistant to one approved ToolsPad workspace for CRM contacts, opportunities, notes, tasks and forms, with separate read and write OAuth scopes.
- B Clay MCP ServerOfficial hosted Clay server to find and enrich people and companies, check credits and run your workspace's Functions from Claude, ChatGPT and other AI tools.
- B Panda Leads ToolsCommunity stdio server with 15 lead tools, each running one of the author's paid Apify Actors on your account, building prospect lists from public registries, OpenStreetMap, job boards and company websites, including named people and contact details.
Embed this badge
[](https://trustedmcp.io/servers/attio-mcp)<a href="https://trustedmcp.io/servers/attio-mcp"><img src="https://trustedmcp.io/badge/attio-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Security story needs work
It works in a demo, but things got shaky under real use. Narrowing the scopes took ten minutes and made me much happier running it. I like that access goes through a proper sign-in instead of a long-lived secret on disk. I will check back in a few releases.
Used for Updating deal notes after calls
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Handy for dev, careful in prod
Good for experimenting, still deciding about production. Scoped the token to just what the agent needs and it respected that. Recommended, with sensible guardrails.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 2/5
- Maintainer responsiveness 4/5
Recommended it to two teams already
Set this up for our team after comparing a few options. Hosted endpoint means no local process to babysit. Releases come often and the changelog is clear. The OAuth flow worked first time in Claude Code.
Used for Updating deal notes after calls
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Saves me a context switch every hour
Tried it on a side project first, then rolled it out at work. Auth is handled properly, and revoking access later was one click. Updates land regularly, and nothing broke when I upgraded.
Used for Finding stale deals
- Setup & docs 5/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
Clear tool names, sensible outputs, very few surprises. Sign-in flow was painless and I never had to paste a key into a config file. Updates land regularly, and nothing broke when I upgraded. It is in our production agent and I sleep fine.
Used for Account research before renewals
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Been running this for about a month now. Filed an issue and got a reply within two days.
Used for Enriching leads before outreach
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Our team uses it every day
Started with it as an experiment, now it is a fixture. Sign-in flow was painless and I never had to paste a key into a config file. Narrowing the scopes took ten minutes and made me much happier running it.
Used for Pipeline summaries for the weekly sales meeting
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Easy win for our agent setup
Simple to set up in Cursor, simple to reason about. Releases come often and the changelog is clear. The OAuth flow worked first time in Claude Code. Scoped the token to just what the agent needs and it respected that. Would recommend without hesitation.
Used for Enriching leads before outreach
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Our agents call this dozens of times a day. The OAuth flow worked first time in Claude Code. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Logging meeting outcomes automatically
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Earned a permanent spot in my config
Of the Attio integrations I tried, this one is the most predictable. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Nothing to install, I just point the client at the URL. You can tell it is actively maintained, the rough edges keep getting fixed. Easy recommendation.
Used for Drafting follow-ups from CRM history
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Good defaults, good docs
Installed it on a Friday, it was part of my workflow by Monday. Filed an issue and got a reply within two days. Auth is handled properly, and revoking access later was one click. Happy to run it in production.
Used for Drafting follow-ups from CRM history
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Solid and well behaved
I use this almost daily. You can tell it is actively maintained, the rough edges keep getting fixed.
Used for Updating deal notes after calls
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Replaced a homegrown script with Attio MCP and have not looked back. Scoped the token to just what the agent needs and it respected that. I would prefer to read the code, but the hosted service has been dependable.
Used for Account research before renewals
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Capable but needs guardrails
Works well enough for what I need. Nothing to install, I just point the client at the URL. Sign-in flow was painless and I never had to paste a key into a config file. You can tell it is actively maintained, the rough edges keep getting fixed. For anything real I would look elsewhere.
Used for Logging meeting outcomes automatically
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 4/5
OK for read-only work
Some tools are great, a couple feel half finished. Auth is handled properly, and revoking access later was one click. The scope options are worth reading carefully, the defaults are broader than I wanted. Worth it, just do not skip the hardening steps.
Used for Finding stale deals
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.