MCP for Nonprofits: Donor CRM, Grant Research and Protecting Supporter Data

MCP lets an AI assistant look up donor and gift records in your CRM, research funders and peer organizations, and draft grant sections and donor updates, in one conversation. As of November 2026, Blackbaud, Candid and Benevity offer connectors for Claude, and Candid's is free for registered users including its free tier. Donor and client data still needs the same care it always has.

MCP (Model Context Protocol) is an open standard for connecting AI apps to other software through MCP servers. New to it? Start with What Is MCP?.

This guide covers what MCP can do for nonprofits, which connectors are documented, the privacy limits and a low-cost starter stack. Facts were checked on 2 November 2026. It is not legal advice: your board, counsel or privacy lead should approve how donor and client data is used.

What MCP can do for a nonprofit

Small teams feel the time savings most:

• Prospect research. Find foundations that fund your cause in your region, with their focus areas and past grants.
• Donor briefings. Pull a donor's giving history and event attendance before a meeting.
• Grant drafts. Draft a needs statement or organization background from your own documents for staff to edit.
• Peer research. Compare similar organizations by mission, location and size.
• Reporting. Summarize campaign results or event attendance for a board update.

The AI drafts and looks up. Staff decide what to ask for, from whom, and what to send.

Which nonprofit MCP connectors exist

Candid

Candid's connector announcement, dated 2 December 2025, describes "a direct, secure pipeline from Claude to Candid's data and search functionality." It gives "access to our nonprofit data, funder information, and sector knowledge," and answers link back to Candid profiles. It is "Available to all registered Candid users, including those on our free tier." You add it from Claude's connector directory and sign in with a Candid account, with no API setup.

Blackbaud

Claude's Blackbaud connector listing names Blackbaud as the maker and shows six tools: get_constituent_details, search_for_constituent_by_name, search_for_event_by_name, get_event_details, get_gift_details and generate_content. The connector URL is https://mcp.sky.blackbaud.com/, and sign-in is required. The listing does not label tools as read-only. The names suggest look-ups, but check Blackbaud's documentation before assuming nothing can change.

Benevity

Anthropic's Claude for Nonprofits announcement says the Benevity connector gives access to "more than 2.4 million validated nonprofits" for volunteering and donation searches. It is more useful to corporate giving teams and grant-makers than to small charities.

Tools many nonprofits already use

Plenty of nonprofits run on general tools such as Salesforce and Google Workspace, and both have MCP servers we profile in our MCP Guide. For low-budget planning, read MCP for Small Business, since most of its advice applies to small nonprofits too.

The cost picture

Anthropic's announcement says nonprofits are "eligible for a discount of up to 75% on Team and Enterprise plans." Eligibility rules are set by Anthropic, so check the current terms before budgeting. Candid's connector is available to registered Candid users, including its free tier. Blackbaud's connector requires sign-in to Blackbaud.

Privacy limits

Donor identities

The IRS page on public disclosure of exempt organization returns says that, with the exception of private foundations, "an exempt organization is not required to disclose the name and address of any contributor to the organization." Many donors give on that expectation of privacy.

Connecting a donor CRM to an AI tool sends donor names, gift amounts and notes to at least one more vendor. Before you do:

• Check your privacy policy and any promises made to donors.
• Read the AI vendor's terms on data use and retention.
• Limit who can connect the CRM, and prefer per-user sign-in.

Client and program data

Many nonprofits serve people whose records are protected by other laws: health, education, housing or immigration status. Keep those systems out of AI tools until your counsel has reviewed the specific use. If you are a health or education provider, see our guides on MCP for healthcare and MCP for education.

Mixing data across connectors

A single conversation with a donor CRM and an email tool connected can move donor data into a draft email. That may be fine for a thank-you note and not fine for a board packet sent outside. Read MCP Data Exfiltration for how data leaks between tools.

Example prompts

• "Find foundations that fund youth literacy programs in Ohio and summarize their focus areas." (Candid)
• "Compare our organization with three similar literacy nonprofits in the state by mission and location." (Candid)
• "Before my meeting with this donor, summarize their giving history and the events they attended last year." (donor CRM)
• "Draft a one-page organization background for a grant application using our annual report." (your documents)

The first two use public sector data and are a safe way to learn the tools. The third touches donor records, so it should wait until your privacy review is done.

A simple 30-day plan

1. Week 1. Pick one staff member and connect only Candid. Run funder research for one upcoming grant.
2. Week 2. Write a one-page AI use policy: what data may go in, who approves outputs, and what never leaves your CRM.
3. Week 3. If your board and privacy policy allow it, connect the donor CRM for two named staff members with their own logins.
4. Week 4. Review what worked, what the AI got wrong and whether the time saved is worth the cost.

For a fuller version, see our pilot rollout playbook. It is written for companies, but the steps work for a small nonprofit team too.

A low-cost starter stack

Our readiness quiz takes a few minutes and shows where to start.

What to keep human

• Asking donors for gifts and setting ask amounts.
• Gift acceptance and restricted gift decisions.
• Grant submissions and reports to funders.
• Decisions about clients or program participants.
• Public statements and impact claims.
• Changes to donor records, such as merges or opt-outs.

The MCP specification says applications "SHOULD" show confirmation prompts so a human stays in the loop, per the 2026-07-28 tools specification.

Next step

Our MCP readiness audit reviews your tools, data and donor promises before you connect an AI. If you need a small custom server, for example a read-only view of your program outcomes data for grant reports, see MCP development. For a list of servers that help small teams, read Best MCP Servers for Small Business.

Frequently asked questions