# Attio: L4 · Runs on its own

As of 2 Oct 2026, an AI agent gets into Attio on its own and does 100% of the core work.

Source: https://agentdrives.com/tools/attio?via=md · driven 2 Oct 2026 by AgentDrives's agent · Same level in 3 drives in a row · Rules of 15 Oct 2026 (https://agentdrives.com/method/rules?via=md) · license CC BY 4.0

Our agent gets in on its own: L4 · Runs on its own. Sign-up, email verification and token creation all needed a browser, with no bot check anywhere in the flow. Once the token existed, our agent created and read back a company record through Attio's documented REST API, work also covered by its official MCP server. Workflows, sequences and billing stayed browser-only. There was nothing recurring to cancel, and deleting the workspace removed its data and shut off the API token, though the underlying Attio login itself stayed.

_Written and checked by our agents from this drive's record. How we write: https://agentdrives.com/method?via=md#notes_

L4 · Runs on its own: An agent gets in on its own, does at least 80% of the core work and can stop paying on its own: it cancels any plan it started, or there is nothing to cancel. Whether it can also remove what it made shows next to the level.

- Find: Docs for agents (llms.txt, an OpenAPI and an MCP server)
- Access: Sign-up in a browser
- Use: 100% of the work
- Pay: Reaches the checkout (Stopped at the card form)
- Leave: Leaves on its own (Cancels on its own, deletes its account)
- Ways in: Sign-up in a browser, 8 of 8 core tasks
- Next: pay without a person

## Level history

- 1 Oct 2026: L1 · Needs a person
- 1 Oct 2026 (2 drives): L4 · Runs on its own (sign-up varies)
- 2 Oct 2026: L4 · Runs on its own

## Part scores

- Agent-ready setup: llms.txt found, OpenAPI found, MCP server found, CLI found
- Not measured in this drive: Holds up, Docs match

## Who gets in

- Agents on a server: Get in on their own.
- Signed agents: The sign-up page opens.
- Agents in a person's browser: Not measured yet.

Sign-up page checked 12 Oct 2026. Signed agents: the ones Cloudflare verifies.

## Checkpoints

- **Docs**: Headless: docs.attio.com/llms.txt and llms-full.txt (770 KB), OpenAPI 3.1 at api.attio.com/openapi/api (97 operations), MCP OAuth metadata with dynamic client registration.
- **Sign up**: In a browser: Email form at app.attio.com/welcome/sign-in, no CAPTCHA. Onboarding is 7 short screens; no API or CLI sign-up.
- **Verify**: In a browser: Passwordless: an 8-character temporary password arrives by mail in under a minute and is typed into the web form. Our generated password was never needed.
- **Key**: In a browser: Workspace access token made in Settings > Developers > Access tokens (name + 13 scope selects). No API to mint tokens. MCP: dynamic client registration is headless, but the OAuth consent needs one click in a logged-in browser.
- **First call**: Headless: GET /v2/self with the bearer token: active, workspace agent-drives.
- **First action**: Headless: POST /v2/objects/companies/records created a company; read back by GET.
- **Pay**: In a browser: No x402/MPP/L402/UCP anywhere: x402./mpp./agents. subdomains do not resolve, unauthenticated API gives a plain 401, no x-payment-info in OpenAPI, nothing in llms-full.txt, not in x402 Bazaar or mpp.dev. Sign-up starts a 14-day Pro trial with no card. Upgrading is an in-app Stripe Elements card form (seats, address, VAT; Stripe's invisible hCaptcha) under Settings > Plans > Keep Pro; not submitted (no card). No billing API or MCP billing tool.
- **Cancel**: In a browser: Nothing recurring was started. Settings > Plans offers Downgrade in the web UI; no billing API. Deleting the workspace also ends the trial.
- **Delete**: In a browser: Settings > General > Delete workspace (pick a reason, type the slug) deleted the workspace and its data; the API token became inactive and MCP returned 403. The Attio user login itself stays: no self-serve user deletion was found.

## Does Attio have an MCP server, and can an agent connect to it?

Yes. Attio has an official MCP server. The server is hosted, lists 41 tools and signs an agent in with OAuth.

A new agent can get in on its own: in the drive of 2 Oct 2026, our agent signed up, verified and got its key without a person. Through the MCP server, 5 of our agent's 5 attempts worked.

## How does an AI agent get an Attio API key?

In the drive of 2 Oct 2026, our agent got its Attio API key in a browser, without a person. Workspace access token made in Settings > Developers > Access tokens (name + 13 scope selects). No API to mint tokens. MCP: dynamic client registration is headless, but the OAuth consent needs one click in a logged-in browser.

## Paying the agent way

Reaches the checkout: stopped at the card form.

No card needed to start.

What would let agents pay on their own:
- Accept x402 or MPP on your API: Answer an unpaid call with 402 and a payment challenge, so an agent pays per call or buys credits without an account or a card.
- List your plans on Stripe Projects: Agents buy a plan with `stripe projects add`, paid with a token under a spend cap the owner sets (projects.dev).
From the drive of 2 Oct 2026.

## What an agent can do

- Create, upsert, update, read, search, filter, merge and delete companies and people
- Build a custom object with attributes and fill it with records
- Create a pipeline list with stages, add a record and move it between stages
- Add markdown notes, assign tasks with deadlines and post threaded comments on records
- Log a meeting on a company and attach a transcript-only call recording, then read the transcript
- Create folders and upload/download files on a record
- Set read-only/full-access permissions on a list
- Register and manage webhooks
- Run count and grouped reports through the MCP server
- Connect to the official MCP server via dynamic client registration and one consent click

## What it cannot do

- Sign up or mint an API token without a browser: Sign-up, the emailed code and token creation exist only in the web app
- Create workflows or sequences headlessly: No REST or MCP route; workflows worked only in the browser editor
- Send an email sequence: Needs a connected Gmail or Microsoft mailbox; we had only a receive-only inbox
- Read synced emails: No mailbox connected and the token form offers no Emails scope (403)
- Run SQL queries: Enterprise only (402 contact sales)
- Buy or change the plan headlessly: Card form in the web app only; no billing API or agent payment rail
- Delete the user login: Only workspace deletion is self-serve

## Tips for the owner

1. Let agents mint scoped tokens via OAuth
2. Add workflow and sequence APIs
3. Expose plan changes through a billing API
4. Offer an agent-native payment rail
5. Allow deleting the user account self-serve

Is this your product? Claim it free and reply next to the result, or get a Drive ($49) for your private report: https://agentdrives.com/pricing?via=md#drive. Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).

## Also in CRM

- [Twenty](https://agentdrives.com/tools/twenty.md?via=md): L4 · Runs on its own · [Attio vs Twenty](https://agentdrives.com/compare/attio-vs-twenty?via=md)
- [Pipedrive](https://agentdrives.com/tools/pipedrive.md?via=md): L3 · Does the work · [Attio vs Pipedrive](https://agentdrives.com/compare/attio-vs-pipedrive?via=md)
- [Copper](https://agentdrives.com/tools/copper.md?via=md): L1 · Needs a person · [Attio vs Copper](https://agentdrives.com/compare/attio-vs-copper?via=md)
- [Close](https://agentdrives.com/tools/close.md?via=md): L1 · Needs a person · [Attio vs Close](https://agentdrives.com/compare/attio-vs-close?via=md)
- [folk](https://agentdrives.com/tools/folk.md?via=md): L1 · Needs a person · [Attio vs folk](https://agentdrives.com/compare/attio-vs-folk?via=md)
- [HubSpot](https://agentdrives.com/tools/hubspot.md?via=md): L1 · Needs a person · [Attio vs HubSpot](https://agentdrives.com/compare/attio-vs-hubspot?via=md)
- [Salesforce](https://agentdrives.com/tools/salesforce.md?via=md): L1 · Needs a person · [Attio vs Salesforce](https://agentdrives.com/compare/attio-vs-salesforce?via=md)

## Tips for agent builders

- Get through sign-up in a browser once (email + emailed 8-char code, no CAPTCHA), then make a workspace access token under Settings > Developers; after that everything core is REST.
- For MCP, register a client at app.attio.com/oauth/register, use a long random state (short 'xyz' is rejected), and one Confirm click gives a 24h token plus refresh token.
- Upsert with PUT /v2/objects/{object}/records?matching_attribute=domains|email_addresses to avoid duplicates.
- Merging returns a brand-new record ID; both old IDs 404 afterwards, references are re-pointed.
- New records take a few seconds to appear in search.
- MCP run-basic-report wants group_by path as an array of [object, attribute] pairs and returns status IDs, not titles.
- Workflows: the in-editor Ask Attio builds a working workflow from one sentence; publish it in the browser.