Security
Is it safe to connect Claude to your CRM?
Claude works in Lumenbase as you. It gets your access, not more, and you decide what it may change or send.
Is it safe to connect Claude to your CRM?
Yes, with sensible settings. The connector acts as the signed-in person, so record visibility, workspace roles, OAuth scopes and Lumo Operations controls all apply. Claude asks before each tool call unless you allow it always, and you can make every message wait for your approval in Lumenbase. Each connection is rate limited, and you can revoke it at any time.
Claude acts as you
- Records: Claude sees what you can see. Private records of other people stay hidden.
- Role: your workspace permissions decide which tools work. An admin tool fails for a member.
- Workspace controls: if an admin turns a capability off in Lumo Operations, Claude cannot use it either.
You decide what it may do
Claude asks first
Claude asks before each tool call unless you choose Allow always. Keep send and delete tools on ask.
Review messages in Lumenbase
Review messages from connected AI apps is a personal setting, off by default. Turn it on and messages Claude sends wait for your approval in Lumenbase.
Choose what it may do
When you connect, you approve scopes: read (crm:read), change records (crm:write), send messages (crm:send) and delete (crm:delete). Sending and deleting are separate choices you can leave off.
See what it did
Notes, tasks and emails Claude creates show "via Claude" in Lumenbase, and each connected app has its own Recent activity log in Settings, Connected AI apps.
Limits and revoking
- Each connection can make 60 requests a minute and 5,000 a day.
- Remove the connector in Claude at any time, or revoke the app in Lumenbase.
- Revoke an app at any time in Settings, Connected AI apps.
What Claude can never do
- See another person's private records, or a restricted record you have no access to.
- Act with someone else's permissions, an admin's included.
- Use a capability your workspace turned off.
- Learn your Lumenbase password. You sign in on Lumenbase, and Claude only gets a token for the access you approved.
Good practice
- Start with questions that only read.
- Keep send and delete tools on ask in Claude.
- Turn off Lumenbase tools that write or send before a Research task, where Claude calls tools without asking.
- Read the drafts table before you approve a batch of messages.
Common questions
Sources and scope
Based on Lumenbase product documentation and the Claude Help Center, reviewed 13 November 2026.
Claude is a trademark of Anthropic. ChatGPT is a trademark of OpenAI. Cursor is a trademark of Anysphere. Lumenbase is not affiliated with, sponsored by or endorsed by these companies.