Access and Permissions

Authentication. The Attentive MCP server authenticates through Attentive’s standard login using OAuth. When you connect, your AI application directs you through Attentive’s sign-in and authorization flow. After authorization, the application receives a token to access the MCP server. You do not need to paste an Attentive password or API key into a configuration file.

Permission scoping. Access is tied to your Attentive account and the selected company. The tools available to your AI application depend on your connection and the features enabled for that company. Individual actions are also subject to authorization checks.

Read and write actions. Your connection can include tools that retrieve data—such as reporting, existing campaigns, segments, and configuration—and tools that create, edit, or delete data. Do not assume that a connection is read-only. Review the actions available through your AI application before using it.

Confirmation on writes. Your AI application may ask you to approve a tool call before it changes data in your account. Confirmation behavior depends on the application and its settings. Keep a human in the loop for higher-risk actions such as scheduling campaign sends or publishing journeys.