How to Connect LinkedIn to an AI Assistant
“Connect LinkedIn to AI” sounds like one thing. It is really two, and they have almost nothing in common except the word LinkedIn. One of them is sanctioned and fairly boring. The other is the reason people’s accounts get restricted. Before you pick a tool, it is worth knowing which of the two you are actually buying.
What does “connect LinkedIn to AI” actually mean?
When people search this, they usually want one of these:
- Reading — “let the AI look at profiles, my feed, comments, other people’s posts, or search results”.
- Publishing — “let me write a post by chatting, then have it appear on my LinkedIn”.
Those two needs are met by completely different machinery. Reading LinkedIn at scale is not something LinkedIn opens up to ordinary developers, so most tools offering it get the data by pretending to be your browser. Publishing, on the other hand, has an official, free, self-serve permission that any developer can apply for. So the honest answer to “can AI use my LinkedIn” depends entirely on which half you mean.
Why is reading LinkedIn the risky half?
LinkedIn does not hand out a general read permission. The one that would let an app read the posts and activity on your account, r_member_social, is closed — a self-serve developer cannot get it. Analytics, comments and company-page reading sit behind LinkedIn’s partner-only Community Management API, which requires a registered legal company and an application review.
So how do the reading tools do it? Almost always by scraping — automating a logged-in browser, or using a copied session cookie (the small string your browser holds that proves you are already signed in) to fetch pages as if it were you. The tools themselves are usually upfront about the consequence. The most-linked open-source LinkedIn MCP server on GitHub warns in its own README that accounts “can be restricted or banned”, and states plainly that it “does not publish or create posts on your behalf”.
Worth sitting with. A copied session cookie is not limited to reading. It carries your whole account — messages, connections, settings — because that is simply what a browser session is. You also cannot revoke one cookie from LinkedIn’s settings; your only lever is changing your password or signing out everywhere, on every device.
Data vendors such as Apify and Bright Data offer LinkedIn endpoints for extraction rather than posting. That is a different commercial arrangement from a personal tool riding your own session, but it is still firmly the reading side of the split. If reading is genuinely what you need, go in knowing which trade you are making.
Why is publishing the sanctioned half?
Publishing has an official route, and it costs nothing. Two LinkedIn products are open to any developer with no partner status and no payment:
- Sign In with LinkedIn (OIDC) — proves who you are, so the tool knows which account it is acting for.
- Share on LinkedIn — grants the scope (a named permission)
w_member_social, which allows publishing a post on your behalf and nothing else.
You grant these on LinkedIn’s own page. You never type your password into the tool. The tool receives an access token — a limited key tied to that one app, that one member, those named permissions — and the grant is then listed in your LinkedIn settings, where one click removes it. Posting happens through LinkedIn’s documented endpoints: POST /v2/ugcPosts, and the newer versioned /rest/posts for multi-image and document posts.
That is the whole difference. One route borrows your identity wholesale; the other asks LinkedIn for a narrow, revocable permission and stays inside it.
What is the piece in the middle called?
The AI app does not talk to LinkedIn directly. Something sits between them, and the current standard for that something is MCP — the Model Context Protocol, an open standard for letting AI assistants call outside tools. An MCP server publishes a list of actions (“publish a post”, “schedule a post”), the assistant reads that list, and calls one when your instruction matches.
You will meet the same idea under three names, which is a large part of why this topic feels confusing:
- MCP server — the technical name for the thing being connected to.
- Connector — what Claude calls it inside its own settings.
- Plugin — the older, looser word people carry over from other software.
A remote or hosted MCP server is one that already runs on the internet, so you add it by pasting a URL. A local one you install and keep running on your own machine. For a normal LinkedIn workflow, hosted is the practical choice — nothing to install, nothing to babysit.
Which AI assistants can connect to LinkedIn today?
This is where a lot of articles start inventing menu paths. We will not. The table says what we have tested and what we have not.
| AI app | Can it connect? | What it takes |
|---|---|---|
| Claude | Confirmed working | Add it as a custom connector. Works on Claude’s free plan. |
| ChatGPT | Confirmed working | Needs Developer Mode, which is on paid plans (Plus, Pro, Team, Enterprise, Edu), web only, and the connector must be switched on per conversation from the tools menu. |
| Codex | Not supported by us | Connecting inside ChatGPT does not carry over — each app connects and signs in separately. |
| Gemini, Microsoft Copilot, Perplexity, Cursor, n8n, everything else | Untested by us | We have not tested Kalovio there and will not claim it works. Check that app’s own documentation for whether it can connect to outside tools at all. |
That last row is deliberately unhelpful in one specific way. Support for outside tools inside AI apps changes month to month, and an article that invents a settings path for an app it never opened is worse than one that says “check the docs”. Here is the useful part: if your app can add a remote MCP server or a custom connector, the LinkedIn side works the same everywhere, because the LinkedIn permission lives with the connector rather than with the AI app. Whether your app can add one is a question only that app’s own documentation can answer today.
For the two we have confirmed, there are step-by-step pages: connecting LinkedIn to Claude and connecting LinkedIn to ChatGPT.
What does the setup actually look like?
For a hosted connector such as Kalovio, the shape is the same in both apps:
- Open your AI app’s connector or custom-tool settings.
- Paste the connector address. For Kalovio that is
https://kalovio.com/mcp. - Sign in. LinkedIn shows its own consent screen listing the permissions being asked for. Approving it creates your account and connects LinkedIn in one step.
- Ask the assistant to write a post. It shows you the exact text before anything is sent.
There is no download, no cookie to hunt for in browser settings, no browser extension, and no password given to anyone except LinkedIn.
What can you actually do once it is connected?
On the publishing side, more than most people expect. Kalovio exposes 26 actions, including: publish now, schedule for later, run a weekly posting queue, keep drafts, post one image, post 2–9 swipeable images, post a PDF or document carousel, tag company pages and other Kalovio users so the mention is clickable, save a writing-voice profile so posts sound like you, track clicks on links inside your posts, and delete a post it published. Posts cap at 3,000 characters, files at 20 MB each, and the caption is optional when a file is attached.
Every action that changes something on LinkedIn is two-step. The first call returns a preview plus a signed token covering the exact content; nothing publishes until a second call arrives with your confirmation and a matching token. That gate exists because AI assistants read web pages and documents, and hidden instructions buried inside them are a real attack — prompt injection. Requiring you to approve the exact wording is the practical defence against it.
What can it still not do?
The honest list, because these are the things people otherwise discover on day three:
- It cannot read posts it did not create. That needs the closed
r_member_socialpermission. - There is no engagement analytics. Impressions, likes and comment data need the partner-gated Community Management API. Link-click tracking is available, and it is not the same thing.
- You reconnect periodically. Member tokens last around 60 days and self-serve apps get no refresh token, so you re-approve when one lapses.
- Company tagging needs the page’s numeric id. Kalovio keeps a shared directory, so a company tagged once resolves by name afterwards.
- Multi-image and document posts use LinkedIn’s newer versioned interface, which may not be switched on for every self-serve app. A refusal is reported clearly, so try it on your own account.
- Document and PDF posts cannot be scheduled yet — immediate publish only.
- No direct messages, no connection requests, no lead scraping. None of that is in scope.
- Chat image attachments do not reach a connector. Neither Claude nor ChatGPT can hand a connector an image you dropped into the chat, so images go through an upload panel or a browser upload link instead.
Is connecting LinkedIn to AI allowed?
The honest answer. LinkedIn’s API Terms of Use, section 3.1(26), restricts using the APIs “to automate posting on the LinkedIn Services”, and there is no written exception for member-approved posting. Anyone telling you their tool carries no risk at all is overstating the position. The defensible framing is narrower: the permission is open and self-serve, you consent through LinkedIn’s own screen, you approve the exact text of every post before it goes out, nothing is scraped, and you can revoke access whenever you like. Compare that with the cookie route, where the tools themselves warn about restrictions and bans.
Where should I start?
If you mainly want to write and publish, start with whichever app you already use. Claude works on its free plan and is the shortest path from nothing to a published post. ChatGPT works too, but only on a paid plan, only on the web, and you have to switch the connector on in each conversation. If you mainly want to read and analyse other people’s LinkedIn activity, understand first that you are shopping in the scraping half of this market, and read the tool’s own warnings before connecting it to an account you care about.
Kalovio is free while it is in public beta, with no card required. Pricing may change later, and we would rather say that now than surprise you.
Questions people ask
Can I connect LinkedIn to ChatGPT or Claude without coding?
Yes. A hosted connector is added by pasting an address into the app’s connector settings and then approving the connection on LinkedIn’s own page. There is nothing to install and no code to run. Claude works on its free plan; ChatGPT needs Developer Mode, which is on paid plans and web only.
Does connecting LinkedIn to AI mean giving it my password?
No, not if the tool uses OAuth — the sign-in standard behind every “Continue with LinkedIn” button. You type your password only into LinkedIn’s own page, and the tool receives a scoped access token instead. A tool that asks for your password, a session cookie, or a browser extension that reads your session is not using OAuth, whatever its marketing says.
Can AI read my LinkedIn feed or my competitors' posts?
Not through LinkedIn’s official self-serve permissions. The read permission for member activity is closed to ordinary developers, and analytics sit behind a partner-only API. Tools offering feed or profile reading generally scrape it with a logged-in browser session, and the popular open-source one warns in its own README that accounts can be restricted or banned.
Does Kalovio work in Gemini, Copilot, Perplexity or Cursor?
We have not tested it in those apps, so we will not claim that it does. Kalovio is confirmed working in Claude and in ChatGPT’s Developer Mode. If an app supports adding a remote MCP server or custom connector, the LinkedIn side would work the same way — but whether it supports that today is a question for that app’s own documentation, not something we should guess at.
How do I disconnect an AI assistant from my LinkedIn account?
If the connection was made with OAuth, open your LinkedIn settings, find the permitted services or third-party apps list, and remove it. Access stops immediately and your password is untouched. If a tool used a copied cookie instead, there is no entry to remove — you would have to change your password or sign out of every session.
Will an AI assistant post something without asking me?
With Kalovio, no. Publishing, scheduling, queueing and deleting are two-step: the first call returns a preview plus a signed token covering the exact content, and nothing happens until a second call arrives with your confirmation and a matching token. That gate is there specifically to stop hidden instructions inside content the model reads from triggering a post.
Sources
Try Kalovio free
Run your LinkedIn from a chat with Claude or ChatGPT. Add this as a custom connector — free while in beta, and you approve every post before it goes live.
https://kalovio.com/mcpHow to connect