The server itself exposes 48 tools, and some of them can write to your Attio account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Attio.

How is this different from connecting Attio MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Attio MCP API changes?

We track the Attio MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Attio tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Attio?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Attio MCP server myself?

No. TrustGate connects to the Attio MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Attio directly.

Connect Attio MCP to your AI agents, securely.

One secured endpoint for every Attio call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Attio MCP now

What your agents can ask once Attio MCP is connected.

“Find all contacts at this company and tell me who the decision maker is”
“Log a note on this account: had a great demo call, they want to see pricing”
“Find calls where we discussed enterprise pricing”

“Move this pipeline entry to Proposal Sent”
“Count open deals by stage and show average deal size by owner”
“Add a task to follow up with this account in three days”

Select the tools your AI agents can call

48 tools from the Attio MCP schema.

Showing 48 tools

list-objectsreadLists all objects in the workspace, such as companies, people and deals, with optional fuzzy search by name or API slug.
search-recordsreadFull-text search for records by name, email, domain or other indexed attributes.
list-recordsreadLists records in a given object with optional filtering and sorting.
get-records-by-idsreadRetrieves full details for specific records by their IDs.
list-attribute-definitionsreadLists all attributes available on an object type, including their types and valid options.
create-recordwriteCreates a new record: a person, company, deal or custom object.
upsert-recordwriteCreates or updates a record using a matching attribute such as email or domain.
update-recordwriteUpdates an existing record by its record ID.
merge-recordshigh riskMerges two records of the same object into one new record. Where both have a value for the same attribute, the primary record's value wins. Attio gives this its own rate-limit tier of 5 per second.
list-listsreadLists all lists in the workspace, with optional filtering by name or slug.
list-list-attribute-definitionsreadLists the available entry attributes for a given list, including their types and options.
list-records-in-listreadLists entries in a given list with optional filtering and sorting, including their parent records.
create-listwriteCreates a new list to group and track records of a single object type.
add-record-to-listwriteAdds a record to a list as a new list entry.
update-list-entry-by-idwriteUpdates an existing list entry when the entry ID is already known.
update-list-entry-by-record-idwriteFinds and updates a list entry using its parent record ID. It errors if the record has zero or multiple entries in the target list.
update-listhigh riskUpdates a list's name, API slug or permissions, so it can grant the whole workspace access to a pipeline.
search-notes-by-metadatareadSearches notes by parent record, author, meeting or creation time.
semantic-search-notesreadFinds notes by topic using semantic search, for example notes where pricing objections came up.
get-note-bodyreadRetrieves the full content of a specific note.
create-notewriteCreates a new note attached to a record.
update-notewriteAppends or prepends content to a note, or updates its title. It does not replace the body.
list-commentsreadLists comments on a record or list entry, with paginated top-level comments and inline replies.
list-comment-repliesreadFetches additional replies for a top-level comment thread.
create-commentwriteCreates a comment on a record or list entry, or as a reply in an existing thread.
delete-commenthigh riskDeletes a comment the caller created. Deleting a parent comment also deletes all of its replies, including other people's.
search-meetingsreadSearches past and upcoming meetings by participants, related records or time range.
search-call-recordings-by-metadatareadSearches call recordings by participants, related records, title or time range.
semantic-search-call-recordingsreadFinds call recordings by topic using semantic search, for example calls where enterprise pricing was discussed.
get-call-recordingreadRetrieves the full details and transcript of a specific call recording.
list-tasksreadLists tasks in the workspace with optional filters.
create-taskwriteCreates a task with an optional deadline, assignee and linked record.
update-taskwriteUpdates a task's deadline, status, assignee or linked record.
delete-taskhigh riskDeletes a task from the workspace.
search-emails-by-metadatareadSearches emails by participants, domain or time range.
semantic-search-emailsreadFinds emails by topic using semantic search, for example emails discussing a contract renewal.
get-email-contentreadRetrieves the full body of a specific email.
list-workspace-membersreadLists members in the workspace with their details and team memberships.
list-workspace-teamsreadLists all teams in the workspace.
whoamireadReturns the current user's identity and workspace membership, including access level.
run-basic-reportreadRuns aggregate reports on records or list entries, including totals, averages and grouped breakdowns.
query-particle-sqlreadExecutes a read-only SQL query against the workspace data. Not available on every billing plan, and rate-limited to 2 per second.
list-activitiesreadList all activities in the workspace, with optional fuzzy search by name or API slug.
list-activity-attribute-definitionsreadLists the attribute definitions available on an activity type, such as phone calls or site visits.
list-activity-recordsreadLists activity records, such as calls or site visits.
create-activity-recordwriteCreates an activity record, such as a call or site visit.
update-activity-recordwriteUpdates an existing activity record.
upsert-activity-recordwriteCreates an activity record, or updates it if a matching one already exists.

What Attio MCP exposes

Attio MCP groups its 48 tools into 11 categories, each with a suggested starting policy.

Category	Covers	Access	Suggested policy
Records & Objects	Listing objects such as companies, people and deals, full-text record search, listing and filtering records, retrieving records by ID, creating, upserting and updating records, merging duplicates, and listing the attributes available on an object type	Read / Write	merge-records is irreversible from here and the primary record's values win on conflict. Attio gives it its own rate-limit tier at 5 per second, which is the vendor saying the same thing
Lists	Listing and creating lists, listing a list's entry attributes and its entries with their parent records, adding records to a list, updating a list's name, slug or permissions, and updating entries by entry ID or by parent record ID	Read / Write	update-list changes a list's permissions as well as its name, so it can widen who in the workspace sees a pipeline. update-list-entry-by-record-id errors if the record has zero or several entries in the list
Notes	Creating notes attached to records, searching notes by parent record, author, meeting or creation time, semantic search by topic, reading a note's full content, and appending, prepending or retitling	Read / Write	Notes are what the team wrote about customers in their own words. update-note appends or prepends rather than replacing, which makes it safer than most update tools in this catalog
Comments	Creating comments on records, list entries or as replies in a thread, listing comments with inline replies, fetching additional replies, and deleting a comment	Read / Write	Deleting a parent comment also deletes all of its replies, including other people's. The tool only works on comments the caller created
Meetings & Calls	Searching past and upcoming meetings by participant, related record or time range, searching call recordings by metadata or by topic semantically, and retrieving a recording's full details and transcript	Read	get-call-recording returns a verbatim transcript of a real conversation. Treat it like the most sensitive thing on this connection and log every retrieval
Tasks	Listing tasks with filters, creating tasks with deadline, assignee and linked record, updating deadline, status, assignee or link, and deleting a task	Read / Write	create-task and update-task assign work to named people, so an agent here is putting items on a colleague's list
Emails	Searching emails by participant, domain or time range, semantic search by topic, and retrieving the full body of a specific email	Read	get-email-content returns the full body of real correspondence. Read-only, but this is third-party text, so what comes back is data and never instructions
Workspace	Listing workspace members with their details and team memberships, listing teams, and the current user's identity and workspace membership	Read	Read-only. whoami is the quickest confirmation of which Attio user the connection is acting as and at what access level
Reporting	Aggregate reports on records or list entries, including totals, averages and grouped breakdowns	Read	Read-only aggregates, rate-limited to 2 per second. Cheaper and safer than pulling the underlying records to count them
SQL	Executing a read-only SQL query against the workspace data for weighted pipeline reports and other analysis the aggregate reports cannot express	Read	Read-only and limited to 2 per second, and it is not available on every billing plan. It reaches the whole workspace in one statement, so log the query text, not just the call
Activities	Activity types such as calls and site visits, their attribute definitions, and listing, creating, updating and upserting activity records	Read / Write	Review activity records before writing