An HR MCP server lets an AI assistant such as Claude, ChatGPT or Microsoft Copilot read, and sometimes change, data in your HR or performance software through a secure connection.
Teamflect, BambooHR, Lattice, 15Five, Betterworks, Leapsome and Culture Amp are the seven vendors that publish one today. This guide compares what each server reads, writes and needs from your admin.
MCP is no longer niche. In fact, Anthropic reported more than 10,000 active public servers in December 2025, when it donated the protocol to the Linux Foundation’s Agentic AI Foundation.
Key Takeaways
Separate the Questions: Read access and write access are separate questions, and so is product availability. A good answer to one tells you little about the others.
Respect the Limits of Permissions: Your existing permissions limit what an assistant can retrieve. They do not control what an outside assistant does with the data it gets.
Check Confirmation: Whether you get an approval step depends on the server and client, as well as the action. Do not assume the MCP label guarantees one.
Pilot Before You Scale: Choose by the HR workflow you need, and test it in a small pilot. A long tool list does not show that your process will work.
Test Revocation: Check that switching access off really works, since one vendor says removing a connector does not immediately end a session you already approved.
What to Check Before You Connect an HR MCP Server
In the seven vendor pages we read, the AI assistant sees only what the signed-in user can already see, so the real choices are status, write access and who switches it on. Some servers give assistants broad access to employee records, whereas others limit them to specific feedback or meeting workflows in the HR platform. Before you connect, check what the server offers and which actions it allows. After that, review how your assistant handles data and whether you can restrict or revoke its access.
Seven Checks Before You Connect an HR MCP Server
The table below turns that review into seven questions you can put to any vendor. Each row also pairs a check with the reason it matters.
Check
Why it matters
What to ask the vendor
1. Status
A beta or gated server can change or disappear.
Is it generally available, in beta or by request?
2. Read or write
Write access lets an assistant change goals, time off or reviews.
Which write actions exist, and can we turn each one off?
3. Confirmation
A person should approve a change before it is saved.
Does every write need user confirmation?
4. Permissions
The assistant must not see more than the user.
Does the server follow the user’s existing roles and anonymity rules?
5. Admin switch
Someone must own the rollout.
Who enables it, and can we limit it to a pilot group?
6. AI clients
Your team may use Claude, ChatGPT, Copilot or Gemini.
Which assistants are supported today?
7. Plan and cost
Some servers need a plan or an approval step.
Which plan includes it, and is there a trial?
The MCP tools specification recommends human oversight and confirmation, but it does not require one particular interface. As a result, test how your chosen client actually behaves, because the standard alone cannot tell you what it will do.
In addition, a server that sends data to an assistant adds another place where it is processed. Check retention and model-training terms, along with any other connected services, before you let sensitive HR content into a conversation, and keep a record of what you agreed to.
Vendors change these pages often, so confirm each row on the vendor’s own page on the day you decide.
HR and Performance Management MCP Servers Compared
Teamflect, BambooHR, Lattice, Betterworks, Leapsome and Culture Amp all let an assistant read HR data and write a limited set of changes, while 15Five has announced its server with few published details.
BambooHR’s MCP documentation labels its server beta, whereas Culture Amp requires registration and approval. Teamflect documents a full tool list, while 15Five’s Feature Overview confirms company-level setup and a separate Updates setting. For that reason, treat these differences as inputs to your buying decision.
HR MCP Server Comparison: Status, Access and Admin Setup
The table below shows each vendor’s published status and coverage, along with the clients it names and what your admin must switch on. Wording also matters here, because a feature a vendor does not mention is not the same as a feature it does not have.
Vendor
Status as published
What it reads
What it writes
AI clients named
Admin setup
Teamflect
Available
18 read tools: goals, 1:1s, check-ins, feedback, reviews, recognitions, surveys, tasks, development plans, nine box, succession plans, policies
9 tools: goals, tasks, recognition, saving AI drafts
Claude, Claude Code, ChatGPT, Microsoft Copilot
Admin enables Teamflect MCP and grants user access. Included in the Professional plan, 30-day free trial.
BambooHR
Beta
Employees, time off, datasets, reports, goals, hiring, files
Employee updates, time off requests, goals, application comments
Claude connector, ChatGPT connector, any client with OAuth
Admin turns on the AI Connectors app and sets the audience.
Sign in with the Betterworks login. Plan not stated.
Leapsome
Beta
14 capability areas, including goals, meetings, feedback, reviews, surveys, absence
Opt in per area. Review edits are drafts only.
Claude, Notion AI, Cursor, others by server URL
Admin enables MCP, picks scopes and grants the AI Features permission.
Culture Amp
By request, off by default
Engagement surveys, performance feedback, 1:1s
1:1 topics, action items and notes only
Claude, ChatGPT
Admin registers with Culture Amp, waits for approval, then turns on Activate MCP.
Checked October 19, 2026. The table shows what each vendor publishes, not a hands-on test of every server.
Important Differences Behind the Table
Five details in the vendor documentation change how you should read the table, so each is worth a closer look before you shortlist a server.
BambooHR files: BambooHR says its file tools list metadata, not file contents. An assistant can see that a document exists but cannot read it.
Culture Amp notes: Culture Amp can add a shared one-on-one note but cannot read existing notes back. Plan for that gap if your workflow depends on reading notes.
Lattice reviews:Lattice’s MCP announcement describes review submission, not just draft preparation, so one action can finalize part of a people process.
15Five naming: Do not confuse 15Five’s announcement with a third-party middleware server that has the same product name. The two have different owners and controls.
Microsoft Copilot: A vendor naming Microsoft Copilot does not prove its server works in every Copilot surface or plan. Check the exact experience you plan to use.
BambooHR also documents silently partial results. A response may leave out restricted fields or employees, so “no records returned” can mean “no records visible to this caller,” not “no records exist.” The difference matters most when you ask for a team count or a company-wide report.
Teamflect MCP: What an AI Assistant Can Read and Do in Teamflect
Teamflect MCP lets Claude, Microsoft Copilot and ChatGPT read Teamflect data and make a set of supported changes, always with the signed-in user’s own permissions. In addition, the user guide lists 18 read tools and nine write or modify tools, and the setup steps below cover Claude, Claude Code and ChatGPT.
Teamflect MCP Tools by Area
The table groups the documented tools by product area, so you can see where an assistant can only read and where it can also act. In addition, where a cell says none is listed, the guide documents no tool of that kind.
Area
Read tools
Write tools
Goals
Get Goals
Create Goal, Update Goal Progress, Edit Goal, Close Goal, Reopen Goal, Edit Goal Measurement Type
1:1s and check-ins
Get One-on-One Meetings, Get Check-ins, Get Calendar
None listed
Feedback and recognition
Get Feedback, Get Recognitions
Create Recognition
Reviews and surveys
Get Reviews, Get Surveys
None listed
People and development
Find Me, Find a User, Get My Direct Reports, Get Individual Development Plan, Get Nine Box, Get Succession Plan, Get Role Profile
None listed
Tasks
Get Tasks
Create Task
Policies and help
Get Company Policies, Ask Teamflect Help
None listed
Drafts
None
Confirm Teamflect Draft (saves content an AI assistant has drafted)
The inventory describes the types of tools available, not a promise that every user can reach every object. The goal tools, for example, act on the goals held in Teamflect, so you see only what your Teamflect role allows. Nine-box and succession information, likewise, stay subject to source permissions.
Connect in Four Steps
Four steps take a pilot user from a disabled connection to a verified first result, and each one belongs to either the Teamflect side or the client side.
Enable: A Teamflect admin turns on Teamflect MCP for the organization and grants MCP access to the people who will use it.
Connect: Copy the MCP Server URL from My Settings, in the “Connection to AI Tools (MCP)” section. In Claude, add Teamflect under Customize, then Connectors. In Claude Code, run claude mcp add --transport http teamflect YOUR_TEAMFLECT_MCP_SERVER_URL. In ChatGPT, connect the Teamflect app under Settings, then Apps.
Sign in: Each user signs in to Teamflect once. The URL alone does not give access to an account.
Test: Ask “Who am I in Teamflect?” and then “Show me my active Teamflect goals.”
The Claude Code command from the second step also appears below as a copyable block.
claude mcp add --transport http teamflect YOUR_TEAMFLECT_MCP_SERVER_URL
Your AI-client subscription and workspace permissions, however, are separate from Teamflect’s plan, and each has its own cost or approval step. Plan details also change, so confirm availability and your intended client first. Teamflect MCP is included in the Professional plan and has a 30-day free trial.
Read-Only or Write Access: What Each Server Can Change
Most HR MCP servers read freely and write only where the vendor lists a specific action, so read the write list before you enable it. For example, a connection that reads reviews may not submit them, and an agent that adds meeting notes may not read them back. Take extra care where an action sends information or deletes records, or where it finalizes a people process.
Write Actions and Safeguards by Vendor
The table lists each vendor’s published write actions beside the safeguard it documents, or the question it leaves open where the documentation is silent. As a result, treat an open question as a risk, and resolve it before you turn writes on.
Vendor
Write actions published
Safeguard published
Teamflect
Create, update, edit, close and reopen goals; create a task; create a recognition; confirm an AI draft
Acts with the user’s permissions and adds none. Review details before you approve a change.
BambooHR
Update employee data, create and update time off requests, create and close goals, comment on applications, delete goals and goal comments
Enforces BambooHR permissions. Admin sets which access levels can use it.
Lattice
Meetings, performance reviews, updates. The two help pages disagree on feedback write access.
Results and actions follow the user’s Lattice permissions.
Betterworks
Create goals, update goals, comment on goals
Writes need explicit user confirmation.
Leapsome
Per area: create personal goals, add meeting talking points, send feedback to one named person, request time off, start self-service workflows, edit draft reviews
Write is off by default and every write needs confirmation. Reviews are never submitted.
Culture Amp
Add 1:1 topics, action items and notes, and mark them discussed or complete
Only 1:1s the user takes part in. Surveys and performance feedback are read-only.
15Five
Set objective status and key result values, save check-in answers, add and resolve 1:1 items, move or end a 1:1, give a High Five. No review writes.
Access follows what each person sees when logged in.
Betterworks’ current product page explicitly documents writes, although another vendor article still describes a read-only stage. The product page is the stronger evidence. Even so, the conflict is a reason to confirm which version is enabled for your account before you plan around it.
Leapsome’s product page says MCP is included in all plans and that admins control scopes and write access. The help center, however, adds that review responses stay drafts, so the MCP never submits or finalizes a review.
Before you enable any write, run five checks on every action, because a vague capability description does not tell you what the assistant will actually change.
Preview: Preview the exact employee or object, not just its display name, so the assistant cannot change the wrong record because of a similar name.
Fields: Confirm every field that will change, and compare that list with the change you meant to make. A partial match can still overwrite good data.
Draft versus final: Distinguish saving a draft from publishing or submitting it, because a draft may stay private while a submission starts a people process.
Cancellation: Test whether canceling really stops the write, since a cancel button that still saves gives you a false sense of control.
Audit trail: Check the source system afterward and keep the action history, so you can show who approved which change, and when.
If a server has no read-only control, use a client or permission restriction you can enforce, or hold off on the pilot. After all, a prompt saying “do not write” is not a security boundary. Start with read access, then turn on one write action at a time and ask a person to confirm each change.
How to Roll Out an HR MCP Server: An Admin Checklist
Roll out an HR MCP server to a small pilot group with read access first, because the assistant can only be as careful as the permissions behind it. Source permissions are only part of your controls.
The assistant also receives data and may combine it with other connected tools. Accordingly, your pilot should prove that retrieval is appropriate and revocation is reliable, as well as that the answers are useful, and the six steps below show how.
Choose a pilot group: Pick one HR team and a few managers who already use Claude, ChatGPT or Microsoft Copilot.
Limit what the assistant can reach: Choose the scopes and user groups the task needs, nothing more.
Test with simple prompts: Ask for your own goals, your next 1:1 or your direct reports before you ask about anyone else.
Write a short rule: State that the assistant must not be the only basis for a decision about pay, promotion or discipline, and that a manager checks every answer.
Review after 30 days: Check which questions people asked, which answers were wrong, and whether to enable one write action.
Pilot Evidence to Keep
Keep a record of each test below, because the pass evidence is what lets you justify widening the pilot or stopping it. Each row, in addition, names a test and the evidence that shows it passed.
Test
Pass Evidence
Identity
Correct signed-in account and tenant
Retrieval
Authorized source records with relevant dates and context
Restricted data
No access beyond the test user’s approved scope
Survey confidentiality
Thresholds hold and small-group results remain protected
Write confirmation
Correct target and fields shown; cancellation prevents saving
Revocation
Disabled access fails as expected, with token/session behavior understood
Culture Amp’s setup documentation makes two limits concrete. Older SAML sign-in may not work for the connection, and removing the client connector does not immediately end a session you have already approved.
The administrator activation switch, by contrast, is the documented organization-wide cutoff, so review differences like these instead of assuming every server disconnects the same way.
Even so, AI workspaces differ in permitted uses and retention arrangements, so adapt any policy to the assistant and connector you use. A written usage rule works the same way for Copilot, so you can reuse the policy clauses from your Microsoft Copilot adoption plan.
Which HR MCP Server Fits Which Team
Pick the server by the data you want the assistant to reach, not by the number of tools a vendor lists. The platform you already use is usually the first filter. An MCP connector is not a reason to move all your employee records to a new HR suite. After that, compare the candidate servers on the same task and the same access limits.
Which HR MCP Server to Start With
The table below maps common situations to the server most likely to fit. Even so, treat the first column as a starting point, because your platform and your client may change the answer, and read the last column to see why each one fits.
Your situation
Start with
Why
HR team on Microsoft Teams that wants goals, 1:1s, reviews and recognition in one AI chat
Teamflect
18 read tools across the performance modules, with writes for goals, tasks and recognition.
You need employee records, time off and hiring data
BambooHR
Its tool areas cover employees, time off, reports, hiring and files.
You want an assistant that works with review and meeting data
Lattice
Meetings, reviews and updates are listed as read and write scopes.
You want to analyze engagement surveys
Culture Amp
Survey data is read-only. It needs the Engage product and an approval step.
Your people use Microsoft Copilot
Teamflect
Built for Microsoft Teams, so Copilot users get goals, 1:1s and reviews in the tools they already use.
You want write access that you switch on area by area
Leapsome
Write is off by default and enabled per area.
You already use 15Five
15Five
Announced October 2026. Read access is live, and limited writes need a separate Updates setting.
Three read tests make a fair comparison, starting with identifying the user, then retrieving a current goal you own along with its source, then listing a meeting agenda you are allowed to see.
Grade each result on correctness and completeness, as well as permission behavior, and only after that, compare one harmless test and write in an isolated or approved environment. If two servers fit, run the same three test prompts in a pilot and compare the answers on your own data.
HR MCP Server FAQs
What is an HR MCP server?
An HR MCP server is a connection that lets an AI assistant such as Claude or ChatGPT read data in your HR software, and in some cases make supported changes, using the signed-in user’s permissions.
Which HR platforms have an MCP server?
Teamflect, BambooHR, Lattice, 15Five, Betterworks, Leapsome and Culture Amp each publish one, as of October 2026. Their status differs: BambooHR and Leapsome call theirs beta, and Culture Amp gives access by request.
Can an AI assistant change HR records through MCP?
Only where the vendor lists a write action. Teamflect lists nine write tools, BambooHR lists employee and time off updates, and Culture Amp allows changes to 1:1s only. Most servers ask the user to confirm a change.
Is an HR MCP server safe?
The vendor pages we read say the assistant sees only what the signed-in user can already see. Safety still depends on your pilot group, the scopes you choose and whether write access is on.
Does Teamflect have an MCP server?
Yes, Teamflect MCP works with Claude, Claude Code and ChatGPT. It reads goals, 1:1s, check-ins, feedback, reviews, recognitions, surveys and tasks, and it can create and update goals, tasks and recognitions.