CSFaaS

CSFaaS is a GRC platform that runs your entire security and compliance program in one place: 40+ ready-to-deploy frameworks (including ISO 27001, SOC 2, NIST CSF, NIS2, DORA, CyFun and others), risk management, policies, third parties, audits and evidence; plus built-in AI access via API and MCP.

View on csfaas.com

Hosted MCP Server

npx add-mcp 'https://mcp.csfaas.com/mcp'

Installs into Claude Code, Codex, Cursor and more

Documentation

Your workspace, connected.

Work with your CSFaaS records from your AI client. CSFaaS, the cyber security framework as a service platform for governance, risk and compliance, answers from the records you already have.

Connect a client Read-only by default

Connect a client

  1. 01

    Choose your client

    ClaudeChatGPTCursorOther client Open Customize → Connectors in Claude and add a custom connector with this URL. Setup guide 
    https://mcp.csfaas.com/mcp
  2. 02

    Authorize your workspace

    Sign in and choose a workspace. No API key needed.
  3. 03

    Try a prompt

    Show my workspace Show my connected CSFaaS workspace and what I can access.Copy prompt

MCP is included with every workspace. Owners and Account Managers can connect now; they add other members in Settings.

Open API & MCP settings

Start with a question

Example prompts

Summarize the highest-priority risks in my workspace. Include their owners and current remediation status. Highlight missing information.

Copy prompt Explore all 50 examples Find a prompt or follow a guided workflow.

Access & questions

What can my AI client access?

Only data allowed by the workspace and roles you approve. Writes need your explicit grant and the workspace write setting. Deletion over MCP is deliberately disabled. Revoke connections anytime in API & MCP settings.

Which clients can I connect?

Use Claude, ChatGPT, Cursor or any client supporting remote MCP over Streamable HTTP with OAuth. The server provides 20 tools and 9 review prompts.

Why can’t I connect my workspace?

MCP is included with every workspace, with no request to CSFaaS. Owners and Account Managers can connect straight away unless excluded; a workspace manager includes other members and can pause MCP for the workspace. REST API access is separate and approved by CSFaaS. Open API & MCP settings

Can I connect more than one workspace?

Yes, if your client supports multiple connections. Authorize a separate connection for each workspace.