71 lines
3.3 KiB
Markdown
71 lines
3.3 KiB
Markdown
---
|
|
name: attio-reverse-engineering
|
|
description: "Reverse-engineer and integrate Attio CRM (AI models, API, MCP) into OMP — covers internal endpoints, auth, gateway, and provider wiring"
|
|
---
|
|
|
|
# Attio Reverse Engineering & OMP Integration
|
|
|
|
## Architecture
|
|
```
|
|
Attio Web App (app.attio.com)
|
|
├── Public API: api.attio.com/v2 (Bearer token from Settings → Developers → API Keys)
|
|
├── Internal AI: app.attio.com/api/internal/chat/completions (session cookie auth, Cloudflare-protected)
|
|
├── MCP: mcp.attio.com/mcp (OAuth: openid offline_access mcp)
|
|
└── SPA: React, all /api/* GET routes return HTML (not API JSON)
|
|
|
|
OMP Integration:
|
|
├── attio-gateway.py :8312 — FastAPI, round-robin API key pool, proxies api.attio.com/v2
|
|
├── attio-api-provider.py :8313 — OpenAI-compatible, /v1/models + /v1/chat/completions + tools
|
|
├── attio_mcp.py — MCP stdio server, 3 tools (list_workspaces, search_people, get_record)
|
|
└── mcp.json — attio (remote http OAuth) + attio-farm (local stdio)
|
|
```
|
|
|
|
## Auth Methods
|
|
1. **API Key** (for api.attio.com/v2): `Authorization: Bearer att_...` — works from any client
|
|
2. **Session Cookies** (for app.attio.com/internal): requires real browser — Cloudflare blocks urllib/requests
|
|
3. **OAuth JWT** (for mcp.attio.com/mcp): obtained via OAuth consent flow, stored in mcp.json
|
|
|
|
## Internal AI Endpoint
|
|
- URL: `POST https://app.attio.com/api/internal/chat/completions`
|
|
- Auth: session cookies (`attio-session`, `attio-app-session`, `attio-session-id`)
|
|
- Blocked by Cloudflare Error 1010 for non-browser requests
|
|
- Models available: Claude Opus 5, Claude Sonnet 5 (names in Attio: "Opus 5", "Claude Sonnet 5")
|
|
- Other probe results: `/{workspace}/api/chat` returns 405 (exists but different method)
|
|
|
|
## OMP Provider Wiring (3 files)
|
|
1. `providers.yml`: under `providers:`, add entry with `apiKey: ""`, `baseUrl`, `models`, `provider: openai`
|
|
2. `models.yml`: detailed config per model (api, contextWindow, maxTokens, compat flags)
|
|
3. `config.yml`: add `provider/*` to `enabledModels` AND provider to `modelProviderOrder`
|
|
- **Without enabledModels, /model won't show the provider at all**
|
|
- OMP restart required after changes
|
|
|
|
## Pool Format (attio_accounts.json)
|
|
```json
|
|
[{
|
|
"email": "...",
|
|
"api_key": "att_...",
|
|
"api_workspace_id": "uuid",
|
|
"api_workspace_slug": "slug",
|
|
"cookies": [
|
|
{"name": "attio-session", "value": "jwt...", "domain": ".attio.com"},
|
|
{"name": "attio-app-session", "value": "jwt...", "domain": ".attio.com"},
|
|
{"name": "attio-session-id", "value": "uuid", "domain": ".attio.com"}
|
|
],
|
|
"status": "active_pro_trial"
|
|
}]
|
|
```
|
|
|
|
## Browser Automation Issues
|
|
- Camoufox: launch hangs (GeoIP lookup or binary issue on Windows)
|
|
- Playwright: chromium binary missing, install needed; node.exe must be copied to driver/
|
|
- Patchright: driver node.exe missing
|
|
- curl_cffi: fails to compile on Windows CPython 3.11
|
|
- Browser relay (OMP): times out, extension may not be connected
|
|
- Chrome CDP: port 9224 listening but OMP browser tool can't connect (503)
|
|
|
|
## Working Tools
|
|
- `attio_list_workspaces` — reads pool from JSON, no API call needed
|
|
- `attio_search_people` — POST /v2/objects/people/records/query with filter
|
|
- `attio_create_person` — POST /v2/objects/people/records with values
|
|
- `attio_get_record` — GET /v2/objects/{type}/records/{id}
|