CSFaaS MCP
Your workspace, connected.
Work with your CSFaaS records from your AI client. CSFaaS, the cyber security framework as a service platform for governance, risk and compliance, answers from the records you already have.

Connect a client
- 01
Choose your client
Open Customize → Connectors in Claude and add a custom connector with this URL. Setup guide
Server URLhttps://mcp.csfaas.com/mcpWith Developer mode enabled for your account, add this URL in ChatGPT Plugins. Setup guide
Server URLhttps://mcp.csfaas.com/mcpAdd this to .cursor/mcp.json, then connect in Cursor’s MCP settings. Setup guide
.cursor/mcp.json{ "mcpServers": { "csfaas": { "url": "https://mcp.csfaas.com/mcp" } } }Add a remote MCP server in your client and paste this URL. Choose OAuth if prompted.
Server URLhttps://mcp.csfaas.com/mcp - 02
Authorize your workspace
Sign in and choose a workspace. No API key needed.
- 03
Try a prompt
Show my workspace
Show my connected CSFaaS workspace and what I can access.
MCP is included with every workspace. Owners and Account Managers can connect now; they add other members in Settings.
Open API & MCP settingsStart with a question
Example prompts
Summarize the highest-priority risks in my workspace. Include their owners and current remediation status. Highlight missing information.
Help me prepare for an audit. Find the relevant controls and available evidence, and identify gaps I should review.
Find the reusable prompts in my CSFaaS workspace and help me choose one for a risk review.
Access & questions
What can my AI client access?
Only data allowed by the workspace and roles you approve. Writes need your explicit grant and the workspace write setting. Deletion over MCP is deliberately disabled. Revoke connections anytime in API & MCP settings.
Which clients can I connect?
Use Claude, ChatGPT, Cursor or any client supporting remote MCP over Streamable HTTP with OAuth. The server provides 20 tools and 9 review prompts.
Why can’t I connect my workspace?
MCP is included with every workspace, with no request to CSFaaS. Owners and Account Managers can connect straight away unless excluded; a workspace manager includes other members and can pause MCP for the workspace. REST API access is separate and approved by CSFaaS. Open API & MCP settings
Can I connect more than one workspace?
Yes, if your client supports multiple connections. Authorize a separate connection for each workspace.