Model Context Protocol moderate risk

Attio

Attio MCP server enables read/write access to Attio CRM data (companies, notes) via API key, posing moderate risk due to write capabilities and API key exposure.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwrite

Quickstart

Config

{
  "mcpServers": {
    "attio": {
      "command": "npx",
      "args": ["attio-mcp-server"],
      "env": {
        "ATTIO_API_KEY": "YOUR_ATTIO_API_KEY"
      }
    }
  }
}

Exposed MCP Tools (3)

safe

read_company_records

Retrieves company records from Attio.

Read-only operation.

safe

read_company_notes

Retrieves notes associated with a company from Attio.

Read-only operation.

moderate

write_company_notes

Writes a new note to a company record in Attio.

Allows modification of company data.

Safety Assessment

This MCP server is relatively safe for read-only operations. Writing company notes introduces a moderate risk, especially if the API key is compromised. Exercise caution when granting write access and ensure proper API key management.

Limited scope: focuses on company records and notes.
Requires API key, providing some authentication.
Clear documentation on setup and usage.
No mention of arbitrary code execution.

Write access to company notes.
API key stored in environment variables, potential for exposure.
Lack of explicit input validation mentioned.
No sandboxing or RBAC mentioned.