Skip to content

Connectors / Security

Security MCP connectors for Claude, ChatGPT and Cursor

10+ Security connectors in the catalog, each behind the same governed MCP endpoint as everything else in Elaichi.

Start 14-day free trial Browse the full catalog
https://api.elaichi.ai/mcp The same for every user.

  • Their own access. An agent never gets more than the person it acts for.

  • One connection, every client. Claude, ChatGPT, Cursor, any MCP client, and the Elaichi Agent.

The connectors

Security connectors in the catalog

Connect one and your whole team reaches it, each inside the access they already have, without anyone handling a credential.

11 connectors

Browse all 400+ connectors →

In practice

What teams do with Security connectors

Drawn from the connector pages in this category, so every line describes something one of these connectors actually does.

Security

  • SecurityScorecard

    Add new vendors to the right portfolio

    After a contract is signed, add the vendor to the correct SecurityScorecard portfolio, tag it by business unit and criticality, and move on without opening a spreadsheet.

  • Infisical

    Review every app connection in one pass

    Ask for a list of the 1Password, Auth0, and AWS app connections in Infisical, who they belong to, and which ones look unused, without clicking through each one.

  • Semgrep

    Triage new findings before standup

    Ask for the Semgrep findings that appeared overnight, grouped by severity and repository, and mark the ones that are already handled as resolved in one pass.

Compliance

  • Orca Security

    Check coverage across cloud accounts

    List every connected AWS and GCP account in Orca Security, see which are scanned, and spot the ones with outstanding remediation before an audit.

  • Strac

    Redact personal details from a document

    Run a redaction on a Strac document and pull back the redacted copy by ID, ready to send outside the company. The original stays untouched for the record.

  • Wiz

    Gather evidence for the audit

    Collect the backup findings, firewall findings and infrastructure logging findings for a project into one summary that maps to the control you are being asked about.

IT

  • UniFi On Prem

    Move a whole team to phone entry

    Batch assign touch passes to a department's UniFi On Prem users in one go instead of handling each person individually.

  • The Auth API

    Fix a locked out teammate fast

    Find the deactivated access key behind a failing login and reactivate it, or update the user role that is missing, while the person is still on the call.

  • Herd Security

    Confirm new hires appear in Herd Security

    Pull the Herd Security user list after a batch of new starters and compare it against the accounts you provisioned that week.

Engineering

  • Infisical

    Bootstrap a fresh Infisical instance

    Run the admin bootstrap for a new self-hosted Infisical instance and confirm the first app connections are in place before the rest of the team signs in.

  • Semgrep

    Understand an issue before fixing it

    Pull up a single Semgrep issue by its ID, read the rule that flagged it and the line it points at, and get a plain explanation of why it matters before opening the file.

  • The Auth API

    Spin up a project with its keys

    Create a new The Auth API project for a service, add the access keys it needs, and hand the details to the team without opening the console.

Once it is connected

Things to ask

Each of these is answered against the access the person asking already has, in the Security account you connected.

  • Show new Censys hosts added in the last week.

    Censys

  • Which users have open Herd Security enrollments this month?

    Herd Security

  • List app connections created in Infisical this month.

    Infisical

  • Show high severity Orca Security alerts opened this week.

    Orca Security

  • List the lowest scoring companies in our vendor portfolio.

    SecurityScorecard

  • List open Semgrep findings for the platform deployment.

    Semgrep

  • Which Strac detections fired on documents uploaded this week?

    Strac

  • List access keys created in the last 7 days.

    The Auth API

The tools

What an agent can call in Security

Connectors
10+

in the Security catalog

Tools
1,417

callable the moment you connect

Hosted sign-in
11

connect with nothing to register

Of those 1,417 tools, 8% delete something. Restricting an agent to reads is not a promise here, it is 648 tools admitted and the rest left out — and a restricted tool is never advertised to the model at all.

Read 46%
648 tools · list, get, search
Write 21%
302 tools · create, update, send
Delete 8%
108 tools · delete, remove, archive
Other 25%
359 tools · vendor-specific verbs

One endpoint

https://api.elaichi.ai/mcp

Every connector above answers here.

Every Security connector, by depth

Tool counts are what the connector exposes today; the split is what those tools do.

Hosted sign-in takes a partnership with each vendor, and more are in progress. Until one lands, Your own app means the connector works today — you register an OAuth app once and connect.

Security connectors with tool counts split by read, write and delete
Connector Tools Read · write · delete Sign-in
SecurityScorecard 405 Hosted
Infisical 352 Hosted
Semgrep 208 Hosted
VirusTotal 150 Hosted
UniFi On Prem 109 Hosted
The Auth API 57 Hosted
Censys 47 Hosted
Orca Security 40 Hosted
Strac 27 Hosted
Wiz 18 Hosted
Herd Security 4 Hosted

FAQ

Frequently asked questions

How many Security connectors does Elaichi have?

10+ Security connectors are in the catalog today, and the list grows as connectors are added. Each one arrives as a set of MCP tools an agent can call through https://api.elaichi.ai/mcp.

Can Claude, ChatGPT and Cursor all use Security connectors?

Yes. Elaichi exposes one organization-wide endpoint, https://api.elaichi.ai/mcp, and Claude, ChatGPT, Cursor, any MCP client and the Elaichi Agent all connect to that same address with OAuth. Connecting a Security account once makes it reachable from every one of them.

Do Security connectors work with Gemini, Codex, Claude Code or other MCP clients?

Yes. Security connectors are reached over the same MCP endpoint every client uses, so anything that speaks MCP can call them — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor and the Elaichi Agent. There is no per-client setup beyond pointing the client at https://api.elaichi.ai/mcp.

Do Security connectors need me to bring my own OAuth app?

No. Every Security connector in the catalog connects through Elaichi's hosted sign-in, so there is nothing to register before you start.

Can I stop an agent from writing to Security tools?

Yes. Tool restrictions apply at role and individual level, and a restricted tool is never advertised to the model, so it cannot be called or guessed at from the tool list. Read-only access to a Security connector is a matter of allowing the reads and leaving the writes out.

Whose access does an agent get on a shared Security connection?

The access of the person the agent is acting for, resolved against their current role on every call — not the access of whoever connected the account. A colleague can use a connection without ever seeing its credential.

Nearby

Teams that connect Security usually connect these too

Put Security connectors in front of your team

14 days on Gold, no credit card. Connect one and pick what each team can call.

Start free trial Talk to us
Works with
Claude ChatGPT Cursor and any other MCP client, or the Elaichi Agent.
When the trial ends
Nothing is deleted. Connections, roles and the audit log stay where they are, so subscribing picks up exactly where you left off.