Atrix AI

Lets AI agents manage projects, issues, docs, calendar, CRM deals and people in an Atrix workspace, with OAuth scopes that never exceed the user's own permissions.

View on atrix.dev

Hosted MCP Server

npx add-mcp 'https://atrix.dev/api/mcp'

Installs into Claude Code, Codex, Cursor and more

Documentation

Build on the workspace your team already runs on.

A REST API, an MCP server for AI assistants, OAuth for your own apps and signed webhooks — one set of scopes, one rate limit and one audit trail across all of them.

Need a token? Create one in settings.

curl https://atrix.dev/api/v1/me \
  -H "Authorization: Bearer $ATRIX_TOKEN"

{
  "access": {
    "state": "ok"
  },
  "member": {
    "id": "cm3k8w1zz0004qz8fa1b2c3d4",
    "name": "Sara Khan",
    "email": "sara@example.com",
    "emailVerified": true,
    "image": null,
    "title": "Product lead",
    "role": "admin"
  },
  "org": {
    "id": "cm3k7a0aa0000qz8f1a2b3c4d",
    "name": "Northwind"
  },
  "scopes": [
    "feed.read",
    "messages.read",
    "profile.read"
  ]
}

Four ways in

100

REST endpoints

91

MCP tools

49

Grantable scopes

120/min

Calls per token, 30 writes

A token can never do more than its owner.

  • Scopes narrow a person’s permissions. They never add to them.
  • Permissions are checked on every call, so removing someone disables their tokens at once.
  • No scope reaches pay, and other workspaces’ ids answer 404.
  • Every call is audited: token, operation, scope and outcome — never contents. Security and audit

Latest changes

Changelog

  1. 2026-10-28 Labels, cycles and workspace export Workspace labels: GET and POST /labels, PATCH and DELETE /labels/{id}. Names are unique regardless of case; deleting one takes it off every item.
  2. 2026-10-27 A developer portal Guides, a full REST reference and this changelog at atrix.dev/developers.
  3. 2026-10-13 Goals, roadmap, time, leave and expenses over REST REST endpoints for goals, the roadmap and changelog, time tracking, leave and expenses.

Questions developers ask

Do I need to create an OAuth app or client ID?

No. Atrix supports dynamic client registration, so Claude, ChatGPT and Codex register themselves the first time they connect. There is nothing to create in advance and no client secret to store anywhere.

When should I use an Atrix Token instead of signing in?

Use OAuth for anything with a browser — it is the safer path, and the token is scoped, refreshable and revocable without touching your password. Use an Atrix Token for scripts, CI and servers, where nobody is present to approve a consent screen. Tokens start with atx_pat_ so a leaked one is recognisable on sight, and you choose 30 days, 90 days, a year, or no expiry.

Can a token read salaries?

No. Pay is deliberately outside what any token can be granted: it is not in the list of grantable scopes, and no tool selects a compensation record. Employment records are reachable only with the people.records scope, only by somebody whose own permissions allow it, and only for people they outrank.

What happens if somebody's permissions change after I mint a token?

The token follows them. Permissions are resolved per call rather than frozen at mint time, so revoking somebody's access to customers immediately stops every token they created from reading customers — you do not have to hunt the tokens down.

Does an agent editing a page interrupt someone typing in it?

No. Pages are collaborative documents, and an appended block merges into the live document the way another person's typing would. Their cursor does not move, their undo history survives, and nothing either of you wrote is lost.

Which MCP clients are supported?

Any client that speaks Streamable HTTP, which is all of the current ones. Atrix implements the discovery documents defined by RFC 9728 and RFC 8414, so a well-behaved client finds the authorization server on its own from a single URL.