Performativ Connector for Claude

Ask Claude About Your Clients, Using the Performativ Data You Can Already See.

The Performativ connector links Claude to your firm's Performativ platform. Advisors, portfolio managers, operations and compliance staff can find a client and read their holdings, performance, risk figures, advisors, log entries and activity history, without leaving the conversation.

At a Glance

‍Read-only. It cannot trade, place orders or move money.
Your own login, your own permissions. Each user signs in with their Performativ staff login. Claude sees only what that user can see in Performativ.
Your firm decides. It is off by default. A firm administrator switches it on and chooses which users may use it.
Staff only. It is not available to your end clients.
Performativ's own figures. Numbers come straight from Performativ; the connector does not calculate performance.
Hosted in the EU. Performativ runs the connector on AWS in Stockholm (eu-north-1).

‍Connector URL: https://mcp.onperformativ.com/mcp

Before You Start, You Need

A Claude plan that supports connectors (Free, Pro, Max, Team, or Enterprise).
A Performativ staff login at a Performativ customer firm.
Your firm's administrator has switched on Performativ MCP.
Your Performativ user has a role with the MCP permission.

‍

What You Can Do

The connector gives Claude eight read-only tools. Claude picks the right ones from your question; you don't need to name them.

Tool	What It Answers	Try Asking
Get signed-in Performativ user	Who am I connected as?	"Which Performativ user am I connected as?"
Find clients	Which clients match this name or external id?	"Find the client [NAME]."
Get client holdings	What does this client hold on a given date?	"What does [NAME] hold today?"
Get client performance	How did this client perform over a period?	"What was [NAME]'s time-weighted return from 1 April to 30 September?"
Get client fact box	What are this client's risk and return figures?	"What is [NAME]'s volatility, Sharpe ratio, and maximum drawdown?"
List client log entries	What notes have been logged on this client?	"What have we logged on [NAME] since our last meeting on 12 August?"
List client activity	What changed on the client record, and who changed it?	"What changed on [NAME]'s record in the last 90 days?"
Get client advisors	Who are this client's advisors?	"Who are [NAME]'s advisors?"

Combine Them for Everyday Work

Meeting prep: "Prepare me for my meeting with [NAME] tomorrow. Our last meeting was 12 August."
Client review: "Review [NAME]'s performance this year versus last year, and their risk profile."
Follow-up: "Has anything changed or been logged on [NAME] since 1 October, and who should I follow up with?"
Client names above are examples.

Good to Know

Holdings and performance default to the previous day's close (UTC). Ask for a specific date or period to change it.
Amounts are in your firm's reporting currency, including cash. The risk fact box covers a 36-month window.
Large results come in pages; Claude can ask for the next page. Very large portfolios may exceed a single Performativ read.
Prospects are not included in client search.
Claude may do simple arithmetic on the figures, such as weights or totals, when presenting them.

‍

Get Started

Supported apps: Claude on the web, Claude Desktop, and Claude Code. Connectors you add in Claude are also available in the Claude mobile app.

Team or Enterprise Plan (Added Once by an Owner)

An Owner opens Organization settings → Connectors.
Click Add, then Custom.
Enter https://mcp.onperformativ.com/mcp. No client ID or secret is needed.
Click Add.
Each member then opens Customize → Connectors, finds Performativ, and clicks Connect.

Free, Pro, or Max Plan

Open Customize → Connectors and click Add custom connector.
Enter https://mcp.onperformativ.com/mcp, leave the OAuth fields empty, and click Add.
Click Connect and sign in.

Claude Code

claude mcp add --transport http performativ https://mcp.onperformativ.com/mcp

Then run /mcp, choose performativ and authenticate in the browser.

Signing In

Choose your workspace. Type your firm's Performativ workspace name, or click Sign in with your organization. The page never lists other firms.
Log in at your firm's usual Performativ login, including your firm's single sign-on where it is set up.
Review and approve. Performativ shows its own consent page, "Connect Claude to your firm", which states:
1. It can see the client data your Performativ user can see.
2. It can only read. It cannot trade, place orders or move money.
3. It acts as you, with your permissions, and your firm's administrator decides whether it is allowed.
4. To stop it, remove the connector in the app's settings.
Click Approve. You return to Claude, ready to ask.

Check that the "Returns you to" line on the consent page shows the app you expect, such as claude.ai.

Staying Connected

You stay connected for up to 30 days per sign-in; access refreshes automatically in the background. After the 30 days, or after a long period without use, Claude asks you to reconnect.

Turning It Off

For one chat: use the + menu → Connectors to toggle Performativ on or off.
For single tools: set them to Blocked under Customize → Connectors.
Disconnect: remove the connector in Claude's settings. In Claude Code, run claude mcp logout performativ or claude mcp remove performativ.

‍

Security and Privacy

The connector reads on behalf of the signed-in user, with that user's Performativ permissions, and keeps no client data.

How Access Works

Two gates, both required. The firm's "Enable Performativ MCP" switch must be on, and the user must hold the MCP permission. Both are checked at sign-in and again on every tool call. If either check cannot be read, access is refused.
Performativ enforces data access. Every read goes to Performativ's API with the user's own login, so Performativ applies its normal access rules. The connector adds no visibility of its own.
Claude's token never reaches Performativ. The connector runs its own OAuth 2.0 sign-in for Claude and obtains a separate login for each user from your firm's identity provider.
Firms are isolated. The firm and user come only from the connector's own validated token, never from the request or tool inputs.
Read-only by design. All tools are marked read-only and non-destructive. Only read requests can reach Performativ, and a fixed deny-list blocks anything that trades, settles orders or moves cash or assets.

What Data Claude Receives

Only the fields each tool needs to answer the question:

Data	Tools
Your own name, email, language, and admin flag	Get signed-in user
Client id, name, type, status, and advisor id	Find clients
Holdings, performance, and risk figures	Holdings, performance, fact box
Log entry titles and notes written by staff	Client log entries
Record changes and the name of the staff member who made them	Client activity
Advisor names, emails, and roles	Client advisors

These results can include personal data about clients and staff. Once a result reaches Claude, its handling is governed by your organization’s agreement with Anthropic. The connector does not read your Claude chats, memory, or files; it receives only the tool inputs.

What the Connector Stores

Stored: the encrypted sign-in records needed to keep you connected, for at most 30 days. They are held in an encrypted database in the EU.
Not stored: tool results, client data, or Performativ responses.
Logged: one audit record per tool call, with the tool name, the names of the inputs, the outcome, your firm, and your user identifier.
Never logged: input values, response contents, passwords, or tokens.

Performativ's own audit logging also applies to every read, as it does in the platform.

Infrastructure

Hosted by Performativ on AWS in Stockholm, Sweden (eu-north-1).
HTTPS only, with HSTS. Data is encrypted at rest with keys managed in AWS KMS.
Secrets are kept in AWS Secrets Manager; signing keys are generated inside AWS.
A web application firewall with rate limits protects the public endpoint.
Sign-in uses OAuth 2.0 with PKCE (S256), short-lived access tokens (1 hour), and single-use, rotating refresh tokens.

Multi-Factor Authentication

Sign-in uses your firm's own Performativ login. Users who sign in through your firm's single sign-on get the multi-factor authentication of your identity provider.

Policies

• Privacy policy

• Terms and conditions

‍

For Administrators

Nothing is enabled until your firm opts in. Two settings in Performativ control access, and both must be in place.

1. Switch It on for Your Firm

In Performativ, go to Settings → General → Features and turn on Enable Performativ MCP. It is off by default.

2. Choose Which Users May Use It

Give the users a role that includes the Mcp.Read.Global permission. No role has it by default.

The MCP permission grants no data on its own. Users read with their normal Performativ permissions, so give the MCP permission alongside their usual read role.
Activity history uses Performativ's audit-log permission (AuditLog.Read.Global). That permission covers the change history of all clients, not only those the user can otherwise access. Decide deliberately whether connector users should have it.
Mcp.CreateUpdate.Global is reserved for future write tools. No write tools exist today.

Who Can Use It

Staff of your firm with a Performativ staff login.
End clients cannot use it. They are refused at sign-in.

What You Approve on the Claude Side

Item	Value
Connector URL	https://mcp.onperformativ.com/mcp (one URL for every firm)
Authentication	OAuth 2.0 with PKCE; per-user sign-in at your firm's Performativ login
Client registration	Claude's published identity (CIMD) or automatic registration (DCR); no client secret
Scopes requested	openid, profile, email, offline_access
Tools	8, all read-only
Hosting	Performativ, AWS eu-north-1 (Stockholm)

Changing or Removing Access

Change	Takes Effect
Permission granted or removed	Within about 1 minute
Firm switch turned on or off	Within about 6 minutes

After access is removed, the user's tool calls are refused with "You don't currently have access to Performativ MCP. Check with your administrator." Claude may still list the tools until the user reconnects. Turning off the firm switch is your firm-wide kill switch.

Data Residency

The connector is hosted in the EU. Tool results are passed to Claude, where your organization’s agreement with Anthropic applies. Firms whose Performativ platform is hosted in Switzerland should contact Performativ before enabling it.

‍

Current Limitations

This first version is read-only and covers client lookup, holdings, performance, risk figures, advisors, log entries, and activity history.

No write actions. Claude cannot create notes, update clients, or upload documents.
Not covered yet: cash movements, transactions and orders, documents, prospects, and lookups.
Reporting currency. Holdings and the fact box are in your firm's reporting currency; no currency code is returned.
Activity history follows Performativ's audit-log permission rather than your client access.
Very large portfolios may exceed a single Performativ read for holdings.
Staff only. Use by end clients is not supported.

We plan to add more read areas and, later, carefully gated write actions. Anything that trades or moves money stays out of scope.

‍

Troubleshooting

You See	What It Means	What to Do
"No access to Performativ MCP"	Your user doesn't have the MCP permission	Ask your administrator for a role with the MCP permission, wait a minute, then connect again
"Performativ MCP is switched off"	Your firm hasn't switched it on	Ask your administrator to turn it on in Settings → General → Features (allow about 6 minutes)
"We could not find that workspace"	The workspace name is unknown	Check the spelling of your firm's Performativ workspace name, or use "Sign in with your organization"
"Sign-in failed"	The sign-in request could not be completed	Close the tab and start again from Claude; contact support if it repeats
"Too many attempts"	Too many sign-in attempts in a short time	Wait a minute and try again
"Sign-in unavailable"	A temporary problem	Wait a moment and try again
"Connection not recognized"	Claude's saved connection has expired	Clear the saved sign-in for Performativ in your app (or remove and re-add the connector), then reconnect
"You don't currently have access to Performativ MCP"	Access was removed after you connected	Ask your administrator; reconnect once access is restored
"Not permitted for this user (HTTP 403)"	You lack a Performativ permission this read needs	Ask your administrator for the relevant permission
"Not found in Performativ, or not visible to you"	The client doesn't exist or you can't see it	Search for the client again by name
"Performativ sign-in has expired"	Your login is no longer accepted	Reconnect the connector
"The tool result exceeds the size limit"	Too much data for one answer	Ask for fewer items or a later start date

When you contact support, include the request id shown at the end of the message.

‍

FAQ

Do I need an API key? No. You only need Claude and your normal Performativ staff login.

Can Claude change anything in Performativ? No. This version is read-only. It cannot trade, place orders or move money.

Will Claude see clients I can't see in Performativ? No. Every read uses your own permissions. The one exception is activity history, which follows Performativ's audit-log permission.

Does the connector store my clients' data? No. It stores only your encrypted sign-in so it can call Performativ for you. Tool results go to Claude and are not kept by the connector.

Are the figures live? They are read from Performativ on every request. Holdings and performance default to the previous day's close unless you ask for another date.

Can our end clients use it? No. It is for staff only.

How do I disconnect? Remove the connector in Claude's settings. In Claude Code, run claude mcp remove performativ.

‍

Support

‍