Compliance
Secureframe
Connect Secureframe once and hand every teammate a governed MCP endpoint with 57 tools ready to call from Claude, ChatGPT, Cursor, or any MCP client, inside the same permissions they already have, with every call checked and logged.
Automations & dashboards
From answering questions to doing the work
A person no longer has to ask. A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations and live dashboards ship on the Black plan.
Automations
Put Secureframe work on a schedule.
A trigger starts a sequence of steps: call a Secureframe tool, transform the result, branch, wait, and ask a person when it matters.
Secureframe digest
Run 418 · started 2 minutes ago · on behalf of Emma Laurent
-
✓
Schedule
Every weekday at 08:00
0.2s -
✓
Fetch comments
Secureframe
1.4s -
✓
Group by owner
Transform
0.1s -
✓
Draft the digest
Agent step
Ran with 4 tools, returned a structured summary
6.2s -
Approve the digest
Needs approval
Assigned to Michael Brennan
Approve Deny -
Post the digest
Secureframe
Queued
Collections and dashboards
Report on Secureframe without asking.
Collections hold your own data, written by an automation and read by a dashboard that refreshes on a schedule.
Secureframe health
Refreshed 4 minutes ago · every 15 minutes · from the comments collection
Comments
1,284 ↓ 12%
Repositories
96 ↓ 8%
Needs attention
3 ↑ 2
Updated this week
412 ↑ 9%
Comments created
Last 14 days
By workspace
Share of activity
Engineering 34%
Product 27%
Support 21%
Sales 18%
AI tools
Secureframe tools for your AI agents
57 tools are ready to call through Elaichi's MCP endpoint the moment you connect Secureframe, governed by the same roles, restrictions, and audit log as everything else in Elaichi.
list_all_secureframe_repository_framework_asset_scopes
List Framework Asset Scopes for a secureframe repository. The absence of a Framework Asset Scope indicates the asset is not in scope for the Framework. Returns: id, active, framework_id, manually_scoped_reason, created_at. Required: repository_id.
create_a_secureframe_repository_framework_asset_scope
Create a Framework Asset Scope for a secureframe repository. Framework Asset Scopes are immutable — once created they cannot be modified; create a new scope to update. Returns: id, active, framework_id, manually_scoped_reason, created_at. Required: repository_id.
update_a_secureframe_repository_by_id
Update a Secureframe repository by id. Returns: id, created_at, updated_at. Required: id.
list_all_secureframe_repositories
List repositories in Secureframe. Returns: id, created_at, updated_at. Supports Lucene syntax filtering via the q parameter and optional relationship sideloading via include and relationships.
get_single_secureframe_repository_by_id
Get a single Secureframe repository by id. Returns: id, created_at, updated_at. Required: id.
list_all_secureframe_cloud_resources
List Secureframe cloud resources. Returns: id, cloud_resource_type, vendor_name, region, third_party_id, in_audit_scope, owner_id, created_at, updated_at. Use `q` for Lucene-syntax filtering and `include` to embed related data.
get_single_secureframe_cloud_resource_by_id
Get a single Secureframe cloud resource by id. Returns: id, cloud_resource_type, vendor_name, region, third_party_id, in_audit_scope, owner_id, created_at, updated_at. Required: id.
update_a_secureframe_cloud_resource_by_id
Update a Secureframe cloud resource by id. Returns: id, cloud_resource_type, vendor_name, region, third_party_id, in_audit_scope, owner_id, created_at, updated_at. Required: id.
list_all_secureframe_cloud_resource_framework_asset_scopes
List framework asset scopes for a Secureframe cloud resource. Returns: id, in_audit_scope, out_of_audit_scope_reason for each scope record associated with the specified cloud resource. Required: cloud_resource_id.
create_a_secureframe_cloud_resource_framework_asset_scope
Create a framework asset scope for a Secureframe cloud resource, setting its audit scope status for a given framework. Returns: id, in_audit_scope, out_of_audit_scope_reason. Required: cloud_resource_id.
list_all_secureframe_comments
List Secureframe comments with optional filtering and full-text search. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id. Use q for Lucene-syntax filtering and include to sideload related resources.
get_single_secureframe_comment_by_id
Get a single Secureframe comment by id. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id. Required: id.
create_a_secureframe_comment
Create a new comment in Secureframe attached to a commentable resource. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id.
update_a_secureframe_comment_by_id
Update an existing Secureframe comment's content by id. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id. Required: id.
delete_a_secureframe_comment_by_id
Delete a Secureframe comment by id. Returns an empty 204 response on success. Required: id.
list_all_secureframe_controls
List Controls in Secureframe. Returns: id, name, key, health_status, enabled, custom, owner_name, frameworks, created_at, updated_at. Filter using Lucene syntax via the q parameter, or include related objects (author, company, owner) via include.
get_single_secureframe_control_by_id
Get a single Secureframe Control by id. Returns: id, name, key, health_status, enabled, custom, owner_name, frameworks, created_at, updated_at. Required: id.
create_a_secureframe_custom_connection_datum
Submit resource data to a Secureframe custom connection for asynchronous processing. Accepts an array of resource objects conforming to a specified schema and vendor slug. Returns a 202 Accepted response with no body indicating the data is enqueued for processing. Required: id, resource_data, schema_slug, vendor_slug.
list_all_secureframe_devices
List Secureframe devices. Returns: id, device_name, os, make, model, serial_number, mac_address, owner_name, hard_drive_encrypted, local_firewall_enabled, created_at, updated_at. Supports Lucene-syntax search and filtering via the q parameter.
get_single_secureframe_device_by_id
Get a single Secureframe device by id. Returns: id, device_name, os, make, model, serial_number, mac_address, owner_name, hard_drive_encrypted, local_firewall_enabled, created_at, updated_at. Required: id.
list_all_secureframe_device_framework_asset_scopes
List Framework Asset Scopes for a Secureframe device. The absence of a scope indicates the device is not in scope for the given Framework. Returns: id, device_id, framework_id, active, manually_scoped_reason. Required: device_id.
create_a_secureframe_device_framework_asset_scope
Create a Framework Asset Scope for a Secureframe device. Scopes are immutable once created; to change scope, create a new record. Returns: id, device_id, framework_id, active, manually_scoped_reason. Required: device_id.
get_single_secureframe_evidence_by_id
Get a single Evidence record from Secureframe by id. Returns: id. Required: id.
list_all_secureframe_frameworks
List Secureframe frameworks. Returns: id, title, created_at, updated_at. Supports full-text search via q (Lucene syntax) and optional relationship includes via include.
get_single_secureframe_framework_by_id
Get a single Secureframe framework by id. Returns: id, title, created_at, updated_at. Required: id.
list_all_secureframe_framework_requirements
List Secureframe Framework Requirements. Returns: id, name, key, enabled, health_status. Filter by enabled, health_status, id, key, or name using Lucene syntax via the q parameter.
get_single_secureframe_framework_requirement_by_id
Get a single Secureframe Framework Requirement by id. Returns: id, name, key, enabled, health_status. Required: id.
list_all_secureframe_integration_connections
List Secureframe integration connections. Returns: id, name, status, updated_at, vendor_name. Supports Lucene-syntax filtering via q, and relationship sideloading via include or relationships.
get_single_secureframe_integration_connection_by_id
Get a single Secureframe integration connection by id. Returns: id, name, status, updated_at, vendor_name. Required: id.
secureframe_integration_connections_archive
Archive a Secureframe integration connection by id. Returns the updated connection record including id, name, status, updated_at, and vendor_name. Required: id.
get_single_secureframe_knowledge_base_answer_by_id
Get a single Secureframe Knowledge Base Answer by id. Returns: id, content, type, primary_answer, knowledge_base_question_id. Required: id.
create_a_secureframe_knowledge_base_answer
Create a new Secureframe Knowledge Base Answer linked to an existing Knowledge Base Question. Returns: id, content, type, primary_answer, knowledge_base_question_id. Required: content, knowledge_base_question_id, type.
update_a_secureframe_knowledge_base_answer_by_id
Update an existing Secureframe Knowledge Base Answer by id. Returns: id, content, type, primary_answer, knowledge_base_question_id. Required: id.
delete_a_secureframe_knowledge_base_answer_by_id
Delete a Secureframe Knowledge Base Answer by id. Returns an empty 200 response on success. Required: id.
list_all_secureframe_risks
List risks in Secureframe. Returns: id, custom_risk_id, description, owner_name, archived. Filter results using Lucene syntax via the q parameter, or include the related owner object via the include parameter.
get_single_secureframe_risk_by_id
Get a single Secureframe risk by id. Returns: id, custom_risk_id, description, owner_name, archived. Required: id.
create_a_secureframe_security_questionnaire
Create a new Security Questionnaire in Secureframe by uploading a questionnaire file with associated metadata. Returns the created questionnaire object including its id, owner_id, and company_name. Required: owner_id, file.
list_all_secureframe_tests
List tests in Secureframe. Returns: id.
get_single_secureframe_test_by_id
Get a single Secureframe test by id. Returns: id. Required: id.
update_a_secureframe_test_by_id
Update a Secureframe test by id. Returns: id. Required: id.
create_a_secureframe_test_export
Create a Test Export for a Secureframe test. Returns: id, test_id. Required: test_id.
get_single_secureframe_test_export_by_id
Get a Secureframe Test Export by id. Returns: id, test_id. Required: id.
list_all_secureframe_trust_center_requests
List Trust Center Requests in Secureframe. Returns: id, email, requester_name, reviewed, created_at. Use q to filter with Lucene syntax; use include to sideload trust_center_resource_requests.
get_single_secureframe_trust_center_request_by_id
Get a single Secureframe Trust Center Request by id. Returns: id, email, requester_name, reviewed, created_at, document_security. Required: id.
update_a_secureframe_trust_center_request_by_id
Update a Secureframe Trust Center Request by id, including approving or rejecting resource requests and setting document security. Returns: id, email, requester_name, reviewed, created_at, document_security. Required: id.
get_single_secureframe_user_security_setting_by_id
Get user security settings in Secureframe for the authenticated company and user. Returns the UserSecuritySetting object including id and security configuration fields specific to the company and user; consult Secureframe API documentation for the full field breakdown.
list_all_secureframe_vendors
List Secureframe vendors. Returns: id, name, archived, owner_name, risk_level, updated_at. Supports Lucene-syntax search and filtering via q. Deprecated — prefer the Third Party Risk Management Vendor endpoint.
get_single_secureframe_vendor_by_id
Get a single Secureframe vendor by id. Returns: id, name, archived, owner_name, risk_level, updated_at. Required: id. Deprecated — prefer the Third Party Risk Management Vendor endpoint.
secureframe_vendors_archive
Archive a Secureframe vendor by id. Returns the updated vendor record including id, name, archived, owner_name, risk_level, and updated_at. Required: id. Deprecated — prefer the Third Party Risk Management Vendor endpoint.
get_single_secureframe_knowledge_base_question_by_id
Get a Secureframe Knowledge Base Question by id. Returns: id, content, owner_id, review_frequency, manual_review_requested. Required: id.
create_a_secureframe_knowledge_base_question
Create a new Secureframe Knowledge Base Question. Returns the created question including id, content, owner_id, review_frequency, and manual_review_requested. Required: content.
update_a_secureframe_knowledge_base_question_by_id
Update a Secureframe Knowledge Base Question by id. Returns the updated question including id, content, owner_id, review_frequency, and manual_review_requested. Required: id.
delete_a_secureframe_knowledge_base_question_by_id
Delete a Secureframe Knowledge Base Question by id. Returns an empty 200 OK response with no body on success. Required: id.
list_all_secureframe_tprm_vendors
List Third Party Risk Management Vendors in Secureframe. Returns: id, name, risk_level, archived, owner_name, updated_at, created_at. Filter results with Lucene syntax via q; optionally include related data using include or relationships.
get_single_secureframe_tprm_vendor_by_id
Get a single Third Party Risk Management Vendor in Secureframe by id. Returns: id, name, risk_level, archived, owner_name, updated_at, created_at. Required: id.
secureframe_tprm_vendors_archive
Archive a Third Party Risk Management Vendor in Secureframe by id. Returns: id, name, archived, risk_level, owner_name, updated_at, created_at. Required: id.
create_a_secureframe_test_evidence
Upload evidence to a test in Secureframe by attaching a file via multipart form. Returns: id. Required: test_id, file. Optionally supply activity_completion to record the date the activity was completed.
No tools match your search.
How it works
From Secureframe account to governed MCP endpoint
Connect
Link a Secureframe account through Elaichi's hosted connect flow. Credentials are vaulted, so nobody, including the AI, ever sees them.
Compose
The connection becomes a toolbox instantly. Curate which Secureframe tools are exposed, rename them, or freeze arguments.
Authorize
Point Claude, ChatGPT, Cursor, or any MCP client at the one Elaichi endpoint and sign in with OAuth, governed by roles, restrictions, and audit logs.
Put your agents to work in the tools you already use
Start a 14-day Gold trial. Connect a product, curate a toolbox, and paste a governed MCP endpoint into Claude, ChatGPT, or Cursor in minutes.