GRC Oversight

Live demoFictional sample data. Nothing is saved.

Sign up
Northwind Robotics
Settings / API tokens

23Platform

API tokens & MCP

Connect your AI assistant (Claude, Cursor) to this organization's compliance data over MCP. Tokens are scoped to this organization and enforce the same tenant isolation as the app. Action tools are propose-only and never change external systems.

Create

Create a token

Scopes

Action tools (draft_remediation, open_finding) are propose-only and always require human approval before anything is applied.

Your tokens

  • Claude Desktop

    grc_live_••••3f9a

    scopes: read:findings, read:evidence, read:integrations · created 2026-05-14 · last used 2026-07-03

  • Cursor (Ava)

    grc_live_••••7b21

    scopes: read:findings, write:evidence · created 2026-06-02 · last used 2026-07-01

  • CI evidence uploader (revoked)

    grc_live_••••0dc4

    scopes: read:integrations · created 2026-03-19 · never used

    Revoked

Connect Claude Desktop

Add this to your Claude Desktop MCP config (Settings → Developer → Edit config), replacing YOUR_TOKEN with a token created above:

{
  "mcpServers": {
    "grc-oversight": {
      "type": "http",
      "url": "https://mcp.grcoversight.com/v1",
      "headers": { "Authorization": "Bearer YOUR_TOKEN" }
    }
  }
}

For Cursor or other clients, point an HTTP/Streamable MCP server at https://mcp.grcoversight.com/v1 with the same Authorization header.