Can an agent create a contact with Attio CRM?
B+
Who does each step
Whether the agent handles it alone or a person has to step in.
- 01
Discover
MachineThe vendor's machine-readable docs show the agent where and how to call this job.
- 02
Access
Workaround · setupYou give the agent a key or token.
- 03
Onboard
Workaround · setupYou sign up or register a client for the agent.
- 04
Pay
Not applicableNothing to pay for the job.
- 05
Confirm
MachineThe response or specification defines errors the agent can distinguish from success.
- 06
Sustain
Workaround · setupYou replace or revoke the agent's access when it needs to change.
- Access: handing over a key or token.
- Onboard: signing up or registering a client for the agent.
- Sustain: renewing, replacing or revoking its access.
To remove these handoffs: support OAuth client registration so the agent can register its own client and ask for consent; provide an agent registration route, such as auth.md, a sign-up API or OAuth client registration; provide key management or OAuth refresh and revocation so the agent can maintain its own access.
Agent surfaces
3 kinds · 9 entries
For agentsNames the job's endpoint
OAuthauthorization server · protected resource
The probe
13 Oct 2026 · 08:38 UTC · 76.09 s
Each request it sent and what came back; the descriptors it read, counted, with what they named.
Discover44 descriptor reads11 facts
- Found
- OAuthattio.comFor agentsattio.com/llms.txtAPIapi.attio.comOAuthmcp.attio.com/mcpOAuthapp.attio.comOAuthmcp.attio.comOAuthmcp.attio.com/mcpOAuthapp.attio.comFor agentsdocs.attio.com/llms.txtAPIapi.attio.comOAuthmcp.attio.com
- From
- attio.com/.well-known/oauth-authorization-server · attio.com/llms.txt · api.attio.com/openapi/api · mcp.attio.com/.well-known/oauth-protected-resource/mcp · mcp.attio.com/.well-known/oauth-authorization-server · mcp.attio.com/.well-known/oauth-protected-resource · docs.attio.com/llms.txt · docs.attio.com/rest-api/endpoint-reference/openapi
- This endpoint
- api.attio.com is named by a descriptor it read
Job requestPOST api.attio.com/v2/objects/people/records401118 ms
- Request
- POST https://api.attio.com/v2/objects/people/records
- Response
- 401 · application/json · 205 bytes
- Body
- sha256:bc58ed46e2b8cc02cd7509b6d0cf80095a606fd180f313959d234a8f36672a0d
- Exchange
- sha256:d1521142767b2c1ba2ec7b39986e767d451c2f38bee7d4eeb05237e58a61d8b8
Resource metadataGET api.attio.com/.well-known/oauth-protected-resource/v2/objects/people/records404119 ms
- Request
- GET https://api.attio.com/.well-known/oauth-protected-resource/v2/objects/people/records
- Response
- 404 · text/plain · 9 bytes
- Body
- sha256:0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
- Exchange
- sha256:cd3015bd6d803e423f33c135456e342ddfe95a869f2762d6f126133a9d81d8c7
Resource metadataGET api.attio.com/.well-known/oauth-protected-resource404120 ms
- Request
- GET https://api.attio.com/.well-known/oauth-protected-resource
- Response
- 404 · text/plain · 9 bytes
- Body
- sha256:0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5
- Exchange
- sha256:3e3c60fc0e055cb7e3b7afe46d290335bce1b7333819bddc46bcae3000837971
Job requestsession openedPOST mcp.attio.com/mcp401154 ms
- Request
- POST https://mcp.attio.com/mcp
- Response
- 401 · application/json · 131 bytes
- Body
- sha256:ce38f50b84c28af9c12365edc0959073c0a41d3e5c68f0ad02ea4a688aed899a
- Exchange
- sha256:8fe3f67f66578668beda8ad97a70d2ee6b8481c1f4b8cea011678524b1197082
Resource metadataGET mcp.attio.com/.well-known/oauth-protected-resource200128 ms
- Request
- GET https://mcp.attio.com/.well-known/oauth-protected-resource
- Response
- 200 · application/json · 255 bytes
- Body
- sha256:dc0b68b993dca8eaa73db41abb54b9f0518b0b12d88eeab926e97e38c6f7f083
- Exchange
- sha256:3d31c68462d399134236c4e48af9265ca347345dcf27f5f9a7b4d79e5f3523ae
Authorization serverGET app.attio.com/.well-known/oauth-authorization-server200126 ms
- Request
- GET https://app.attio.com/.well-known/oauth-authorization-server
- Response
- 200 · application/json · 758 bytes
- Body
- sha256:7fdfa29c878590f2a502bb9f35d22abf615bf3bf9781ef5f25c03ac766e45118
- Exchange
- sha256:3033b1476ffd4e30d27e29ac707076959751b85391fd7bbb237771c233f48d40
Client registrationPOST app.attio.com/oauth/register201142 ms
- Request
- POST https://app.attio.com/oauth/register
- Response
- 201 · application/json · 308 bytes
- Body
- sha256:acf4aed5862275e6ba6b3e5d6b4a7968a4b78910d8cdd3cc76c4369709e3bb41
- Exchange
- sha256:232620c7ce8554e56d12b3720998f60b1cf40980e00584aafe18e952f59f6458
AuthorizationGET app.attio.com/oidc/authorize?response_type=code&client_id=6843ffb6-a2a1-4a8d-a5fd-e1db8bd297e6&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=460741e3302ad3896a4893534013ecd1&code_challenge=3mTNL1ealcj5E6eKnLlsn5mUKYb76YlkI5Q3yC3mLOE&code_challenge_method=S256&resource=https%3A%2F%2Fmcp.attio.com%2Fmcp&scope=openid+offline_access+mcp302161 ms
- Request
- GET https://app.attio.com/oidc/authorize?response_type=code&client_id=6843ffb6-a2a1-4a8d-a5fd-e1db8bd297e6&redirect_uri=https%3A%2F%2Fapi.sourcey.com%2F.well-known%2Fagent-readiness%2Fcallback&state=460741e3302ad3896a4893534013ecd1&code_challenge=3mTNL1ealcj5E6eKnLlsn5mUKYb76YlkI5Q3yC3mLOE&code_challenge_method=S256&resource=https%3A%2F%2Fmcp.attio.com%2Fmcp&scope=openid+offline_access+mcp
- Response
- 302 · text/html · 0 bytes
- Body
- sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
- Exchange
- sha256:fb8a73debe86e5e15fc789a0c8a1024d8b930e42e3141ab01fe8f182b8dc50ed
Declared pageGET app.attio.com/welcome/sign-in200136 ms
- Request
- GET https://app.attio.com/welcome/sign-in
- Response
- 200 · text/html · 12841 bytes
- Body
- sha256:994e8a4e2208292263855dbda6ab047644ee38bb055918368f1724f4c0569774
- Exchange
- sha256:7fdca6d7b82eba6f2c4ab1ab4b679b87ec14a3368ce0e3e6cf2ba5b287a586cb
Attio on the startup-offers board
- 80% offAttio Startup Program
The grade’s badge
One image that keeps itself current, linking here.
[](https://sourcey.com/c/attio/agent-readiness/attio-crm/crm-contact-create)Improve the report
Correct it, probe it again, or improve the path.
- Profile
- arp_01m4t6hr9e7pat7pxha6rhw8d9
- Projection
- sha256:b70b1bcef92bbed5a43128f9929c589e0b97167b957ba205af69654ffc6ff03a
- Policy
- kind-2026-10-12.2 · sha256:b612172aad277b54461de84e006815126f2df566563954b02f4432a39cad89ac
A report or a reassessment request names this profile, its revision and its projection. How report cards are assessed →View the exact declaration