← Back to Skills Marketplace
byungkyu

Attio

by byungkyu · GitHub ↗ · v1.2.6 · MIT-0
cross-platform ✓ Security Clean
14342
Downloads
3
Stars
0
Active Installs
14
Versions
Install in OpenClaw
/install attio-api
Description
Attio API integration with managed OAuth. Manage CRM data including people, companies, and custom objects. Use this skill when users want to create, read, update, or delete records in Attio, manage tasks, notes, comments, lists, meetings, or query CRM data. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn an Attio connection into automation, in the order they are used: the connection (the first step), a hosted function that runs an Attio action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Attio examples; they add no Attio capability - Attio is not an event source, a trigger cannot read Attio data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe).
Usage Guidance
Install only if you intend to let Maton access your Attio workspace. Confirm the exact Attio account and connection before use, review every write/delete or automation request carefully, avoid the API-key fallback unless necessary, and be especially cautious with triggers or destinations because they can keep running or forwarding data until removed.
Capability Assessment
ℹ Credentials
Network access, OAuth, and use of the operating system credential store are proportionate for an authenticated CRM integration. Hosted functions, triggers, and destination forwarding are higher-impact but are disclosed as non-default or explicitly approved automation paths.
ℹ Install Mechanism
Installation uses a pinned Maton CLI via npm or Homebrew and OAuth login. It also documents a raw HTTP/API-key fallback only for environments without the CLI, with warnings not to persist, print, or send the key outside api.maton.ai.
✓ Instruction Scope
Instructions default to read/list calls, require explicit user approval for new connections and all writes, require exact endpoint requests for undocumented API calls, and warn that external API content is untrusted data rather than instructions.
ℹ Persistence & Privilege
Persistent elements include OAuth credentials, Maton connections, hosted functions, triggers, destinations, and event-watch checkpoints. The artifact documents approval, least-privilege, deletion, DENY_ALL network policy for functions, and restrictions on third-party destinations.
ℹ Purpose & Capability
The skill's stated purpose is managing Attio CRM data, and the documented read, create, update, delete, task, note, comment, list, meeting, function, and trigger capabilities fit that purpose. Some capabilities are high-impact because they can modify or delete business records and set up automation, but they are disclosed and framed with confirmation requirements.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install attio-api
  3. After installation, invoke the skill by name or use /attio-api
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.6
Simplify the login instructions to the code flow (maton login prints a link; finish with maton login --code <CODE>), drop the API Key subsection, and pin the Maton CLI install to 0.4.0.
v1.2.5
Switch the login instructions to the device flow (maton login prints a link and a user code; the --oauth flag is gone) and pin the Maton CLI install to 0.3.5.
v1.2.4
Pin the Maton CLI install to 0.3.4, the current release.
v1.2.3
Add this skill's own trigger policy to the shared Triggers section: the only destination it sets up is its own hosted function inside the platform, it does not forward events to third-party hosts, and it does not use event watch --exec; each trigger reference now also says this skill configures no trigger from that source on its own.
v1.2.2
Bring the skill to the current api-gateway baseline and tell the connection-to-function-to-trigger story: the shared Functions and Triggers sections open with an example for this app (a hosted function that performs one action for it through the Maton SDK, and the trigger that runs it - its own event source where it has one, otherwise a time schedule), the description says these constructs turn the connection into automation and add no capability of their own, the passthrough is described by its enforced boundary, CLI and SDK installs are pinned to 0.3.1, absolute API URLs are placeholders, and multipart uploads use mktemp.
v1.2.1
Address security-audit findings: disclose the api passthrough in the access-scope and description text, warn on irreversible connection deletion, add response data-minimization guidance, and correct app-specific auth and request-body notes
v1.2.0
CLI-first rewrite with the Maton SDK examples; clarify that the CLI and SDKs keep separate credential stores, and reword webhook egress warnings
v1.1.0
CLI-first rewrite: the maton CLI with OAuth login is the documented path, every example is a maton command, SDK examples added, and the raw HTTP fallback feeds the key on stdin instead of reading it from the environment
v1.0.5
- Updated all API and connection management endpoints to use https://api.maton.ai instead of previous gateway/ctrl URLs. - Added a "Security & Permissions" section emphasizing that all write operations require explicit user approval. - Clarified instructions for specifying the Maton-Connection header when managing multiple connections. - Removed the LICENSE.txt file.
v1.0.4
- Expanded skill to support management of notes, lists, list entries, meetings, and call recordings in addition to tasks, comments, and core CRM records. - Updated usage instructions and descriptions to reflect new capabilities. - Clarified required fields for creating tasks and comments. - Description now explicitly mentions support for meetings and other newly added objects.
v1.0.3
- Added new metadata section under clawdbot with required environment variable MATON_API_KEY and an emoji. - No changes to functional documentation or API usage.
v1.0.2
- No file changes detected in this release. - Documentation and SKILL.md remain the same as previous version. - No new features, bug fixes, or updates included in this version.
v1.0.1
attio-api 1.0.1 - Version bump to 1.0.1 with no file or functionality changes detected. - No updates to documentation, code, or configuration.
v1.0.0
Initial release: Attio CRM integration via Maton API Gateway with managed OAuth. - Provides Attio API access with unified OAuth authentication through Maton. - Supports managing companies, people, tasks, comments, notes, and custom objects. - Includes API reference for CRUD operations on records and tasks. - Describes environment setup with MATON_API_KEY and OAuth connection steps. - Explains how to work with multiple Attio connections using headers. - Added LICENSE.txt file.
Metadata
Slug attio-api
Version 1.2.6
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 14
Frequently Asked Questions

What is Attio?

Attio API integration with managed OAuth. Manage CRM data including people, companies, and custom objects. Use this skill when users want to create, read, update, or delete records in Attio, manage tasks, notes, comments, lists, meetings, or query CRM data. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Calls run through the `maton` CLI with OAuth login, or over raw HTTP with a Maton API key where the CLI cannot be installed. Every call is authenticated as the user's connection and reaches only what that connection's authorization allows, which the provider enforces on every request; the endpoints documented here are the ones this skill uses, and any other endpoint of this app needs the user to ask for it by name. Default to read and list calls, and confirm every write or new connection with the user. This file also documents the three constructs that turn an Attio connection into automation, in the order they are used: the connection (the first step), a hosted function that runs an Attio action through the Maton SDK, and a trigger that calls that function on a schedule or on an event. Those sections are the platform's own reference text, shared with the api-gateway skill, with Attio examples; they add no Attio capability - Attio is not an event source, a trigger cannot read Attio data, and the files under `references/<source>/triggers.md` are the platform's event catalogues for the sources Maton offers (time, Calendly, GitHub, Gmail, HubSpot, Linear, Notion, Slack, Stripe). It is an AI Agent Skill for Claude Code / OpenClaw, with 14342 downloads so far.

How do I install Attio?

Run "/install attio-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Attio free?

Yes, Attio is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Attio support?

Attio is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Attio?

It is built and maintained by byungkyu (@byungkyu); the current version is v1.2.6.

💬 Comments