MCP server
Connect Claude to your compliance workspace
A Model Context Protocol server over the Obligara API. Point Claude — or any MCP client — at your workspace and it can read and write the records that run your programme, with tools, inside your security boundary.
# Connect Obligara to Claude Code
claude mcp add --transport http obligara \
https://your-workspace/api/mcp \
--header "Authorization: Bearer oblig_…"
# Then just ask
> "What's our ISO 27001 readiness, and the top gaps?"
What the tools do
A second front door onto your data — for AI
Read & write your records
List, get, create, update and archive risks, controls, evidence, CAPAs, suppliers, assets, incidents and documents — the same records that run your programme.
Readiness on demand
Ask for portfolio or per-framework readiness and get the same numbers the app shows — computed over your real controls, not a guess.
Links & control tests
Link records across every entity type in both directions, and record control tests that snapshot the control as they land.
Self-describing tools
A capabilities tool exposes every resource, its operations and its create/update fields, so the model discovers what it can do instead of guessing.
Built for production
The same guarantees as the rest of Obligara
Your API keys & scopes
The exact same keys as the REST API, from Settings → API keys. Every tool call is scope-checked — writing a risk needs risks:write; the wildcard grants all.
Multi-tenant & audited
Every call runs inside your row-level-security boundary and is written to the audit log — the same isolation and traceability as the app and the API. No parallel implementation.
Rate-limited & stateless
Per-key and per-IP limits, and a stateless Streamable-HTTP JSON-RPC transport with nothing to keep in sync — a bearer token, never a cookie.
Any MCP client
Claude, Claude Code, or anything that speaks MCP. A one-line claude mcp add connects it; stdio-only clients bridge with mcp-remote.
Point your AI at your compliance data
Bring your workflow — a readiness question, a bulk update, an audit-prep assistant — and we’ll show you the MCP server and how to connect it.