Attio for AI agents

Attio is a customizable CRM built around flexible records and lists, used by startups and sales teams to track companies, people and deals with data synced from email and calendars. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.

Connect Attio See the 109 actions ↓

CRMOAuth 2.0MCP + RESTattio.com

AUDIT LOG · ATTIOPOLICY: acme-support

09:41:07 · claude · u_8f2read

attio.list_lists

List Lists✓ allowed · 212ms

09:41:08 · claude · u_8f2read

attio.get_list

Get List✓ allowed · 164ms

09:41:09 · claude · u_8f2write

attio.create_list

Create List✓ approved · approved by user

09:41:12 · claude · u_8f2destructive

attio.delete_deal

Delete Deal✕ blocked · policy: deny

EVERY ATTIO CALL, ON THE RECORD

01 · USE CASES

What agents do in Attio.

Look up an account before replying

Pull the company record, open deals and recent notes from Attio so the agent answers a customer with the full context.

Log notes after a call

Add a note to the person's Attio record summarising the call and next steps, held for approval if you prefer.

Keep deletes out of reach

Let the agent update deal stages and list entries while deleting records or lists stays denied by policy.

02 · ACTIONS

109 Attio actions, graded by risk.

Every Attio action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.

read

Look things up. Allowed by default.

attio.get_list
Get List
attio.get_note
Get Note
attio.get_self
Get Current Token Info
attio.get_task
Get Task
attio.get_object
Get Object
attio.get_record
Get Record
attio.list_lists
List Lists
attio.list_notes
List Notes
attio.find_record
Find Record
attio.get_comment
Get Comment
attio.get_company
Get Company
attio.get_webhook
Get Webhook
attio.get_v2_tasks
List Tasks
attio.list_entries
List Entries (Deprecated)
attio.list_objects
List Objects
attio.list_records
List Records

+ 35 MORE

write

Create and change things. Allow, or ask the user first.

attio.create_list
Create List
attio.create_note
Create Note
attio.create_task
Create Task
attio.update_list
Update List
attio.update_task
Update Task
attio.create_entry
Create Entry (Deprecated)
attio.update_entry
Update Entry (Deprecated)
attio.create_object
Create Object
attio.create_person
Create Person
attio.create_record
Create Record
attio.create_status
Create Status
attio.update_object
Update Object
attio.update_person
Update Person
attio.update_record
Update Record
attio.update_status
Update Status
attio.create_comment
Create Comment

+ 31 MORE

destructive

Delete, cancel or archive. Ask first, or deny outright.

attio.delete_deal
Delete Deal
attio.delete_note
Delete Note
attio.delete_task
Delete Task
attio.delete_user
Delete User
attio.delete_entry
Delete List Entry
attio.delete_person
Delete Person
attio.delete_record
Delete Record
attio.delete_comment
Delete Comment
attio.delete_company
Delete Company
attio.delete_webhook
Delete Webhook
attio.delete_workspace_record
Delete Workspace Record

03 · HOW IT WORKS

Attio in three steps.

01Your users connect AttioThey sign in to Attio on Arc0 Connect, under your brand, and approve the access you ask for.
02You set the rulesReads run, writes like “create List” can wait for the user, and “delete Deal” can be denied outright.
03Any agent can actYour agent calls Attio through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.

POLICY.TS

await arc0.policies.set('attio', {
  read: 'allow',
  write: 'ask',        // create_list
  destructive: 'deny',  // delete_deal
})

# Claude Code: the same connection, one URL
$ claude mcp add --transport http arc0 \
    https://mcp.arc0.ai/u/u_8f2

04 · AUTH AND DATA

How Attio connects.

Users sign in to Attio on Arc0 Connect and approve the scopes you request. Build with Arc0’s Attio OAuth app, or bring your own so the Attio consent screen names you. Tokens refresh automatically, and you can export them whenever you want.

The same Attio connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →

AUTH: OAuth 2.0
CREDENTIALS: Per-tenant encrypted vault
MODEL SEES: Results only, never credentials
AUDIT LOG: Every call, on every plan

05 · WORKS WITH

Use Attio from any agent.

Claude

ChatGPT

Cursor

Codex

VS Code

OpenAI Agents SDK

Claude Agent SDK

Vercel AI SDK

Mastra

LangGraph

06 · RELATED

More crm apps.

Salesforce224 actions

07 · FAQ

Attio and Arc0, answered.

Q01

Can I use Attio with Claude, ChatGPT or Cursor?

Yes. Connect Attio to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Attio actions you allow.

Q02

How do users connect Attio?

Q03

Which Attio actions can my agent take?

109 in total: 51 read, 47 write and 11 destructive, such as “create List”. Your policies decide which of them each agent may call.

Q04

Can I stop my agent from deleting things in Attio?

Yes. Actions like “delete Deal” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.

Q05

Can my own backend call Attio too?

Yes. The same Attio connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.

Get started

Plug Attio into your agent.

Your users connect Attio once, under your brand. Your agent gets 109 actions behind your policies, with every call on the record.

Connect Attio Browse all apps →

Free to build · MCP + REST · Audit log on every plan