Orca Security MCP connector
The Orca Security connector brings your cloud alerts, assets, vulnerabilities, cloud accounts and scans to Claude, ChatGPT, Cursor, Microsoft Copilot and the Elaichi Agent, so each person can ask about and act on Orca Security findings inside their own access.
- Connects with an API key
- Free 14-day trial
- No credit card
Show high severity Orca Security alerts opened this week.
Working in Orca Security with Elaichi
-
List all Orca Security alerts
-
Get single Orca Security alert by ID
-
List all Orca Security alerts scheme
How to connect Orca Security to Claude, ChatGPT, Cursor or Microsoft Copilot
Step by step, for each AI app
Orca Security MCP connector for Claude
-
1
Open Customize, then Connectors.
-
2
Press Add.
-
3
Name it, paste the MCP server URL, then Continue.
https://api.elaichi.ai/mcp -
4
Sign in and approve.
On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.
Orca Security MCP connector for Claude Code
-
1
In a terminal, run
claude mcp addwith the endpoint.https://api.elaichi.ai/mcp -
2
Start Claude Code and run
/mcp. -
3
Pick elaichi, then sign in and approve in the browser.
Terminal
$ claude mcp add --transport http elaichi --scope user https://api.elaichi.ai/mcp
Use --scope project instead to share it with the repository through .mcp.json.
Orca Security MCP connector for ChatGPT
-
1
Open Plugins, then press the + button.
-
2
Name it and paste the endpoint into Server URL.
https://api.elaichi.ai/mcp -
3
Leave Authentication on OAuth, then tick the risk acknowledgement.
-
4
Press Create, then sign in and approve.
Works on the web. The plugin directory lives at chatgpt.com/plugins.
Orca Security MCP connector for Cursor
-
1
Open
~/.cursor/mcp.json. -
2
Add the endpoint under
mcpServers.https://api.elaichi.ai/mcp -
3
Reload Cursor, then sign in and approve.
~/.cursor/mcp.json
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
Set up per machine, so repeat it on each computer you work from.
Orca Security MCP connector for Microsoft Copilot
-
1
In Copilot Studio, open your agent, then Tools, Add a tool, New tool and Model Context Protocol.
-
2
Paste the endpoint into Server URL, choose OAuth 2.0, then Dynamic discovery, and press Create.
https://api.elaichi.ai/mcp -
3
Create a new connection, sign in and approve, then press Add to agent.
-
4
Under Channels, open Teams and Microsoft Copilot and make the agent available in Microsoft Copilot.
- Server URL
- https://api.elaichi.ai/mcp
- Authentication
- OAuth 2.0
- Type
- Dynamic discovery
Microsoft Copilot was called Microsoft 365 Copilot. Keep the tool on end-user credentials, so each person signs in as themselves.
Connect Orca Security to any MCP client
-
1
Add the endpoint as a remote MCP server.
https://api.elaichi.ai/mcp -
2
Sign in and approve.
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
The Elaichi Agent already has these tools, with nothing to set up.
What teams do with Orca Security through Elaichi
Ask in plain English. Each person’s AI can do only what they’re allowed to, and every action it takes in Orca Security is logged.
-
Security operations
Triage this morning's alerts
Ask for the open Orca Security alerts on production accounts, sorted by severity, and get the event log and recommended remediation for the ones that matter.
-
Cloud engineering
Find what a vulnerability actually touches
Ask which assets carry a given CVE and which cloud accounts they sit in, then read the remediation steps before opening a change.
-
Incident response
Pull the full story behind one alert
Get a single Orca Security alert with its event history, malware findings and linked Jira ticket in one place while the call is still going.
-
Compliance
Check coverage across cloud accounts
List every connected AWS and GCP account in Orca Security, see which are scanned, and spot the ones with outstanding remediation before an audit.
-
Platform engineering
Kick off a scan after a deploy
Start an Orca Security scan on a new environment or a vendor's asset and check the result later without leaving the tool you are working in.
-
Security leadership
Summarize risk for the weekly review
Ask for a plain-language rundown of alert counts by severity and account, with the assets driving the most findings, ready to paste into a report.
Try asking
- “Show high severity Orca Security alerts opened this week.”
- “Which cloud accounts have the most open vulnerabilities?”
- “List remediation actions for critical alerts on production assets.”
What connecting Orca Security gets you
6 screens from Elaichi, each doing one job for your Orca Security account.
Ask Elaichi to work across your apps.
Show high severity Orca Security alerts opened this week.
Which cloud accounts have the most open vulnerabilities?
List remediation actions for critical alerts on production assets.
Also runs in Claude, ChatGPT, Cursor or Microsoft Copilot
The agent
Ask about Orca Security alerts in plain language.
The agent answers from live alerts, assets and cloud accounts, no query syntax.
Copy the endpoint
AI apps
Claude, ChatGPT, Cursor and Microsoft Copilot reach Orca Security.
One org MCP endpoint over OAuth, no SDK and no shared API key.
Tool catalog
40 Orca Security tools, ready on connect.
Alerts, vulnerabilities, remediation actions, assets and cloud accounts, with no custom code.
Toolboxes
Each team gets its own Orca Security toolbox.
Curate one toolbox per team so people see the tools their work needs.
Shared connections
Share an Orca Security account, never the key.
See who connected each account and how many teams and members use it.
Audit log
Every Orca Security call is on the record.
When, who, what happened, type and resource, in an append only log.
From answering questions to doing the work
A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations, collections and live dashboards come with the Black plan.
Orca Security digest
Run 418 · started 2 minutes ago · on behalf of Emily Carter
-
✓
Schedule
Every weekday at 8:00 AM
0.2s -
✓
Fetch alerts
Orca Security
1.4s -
✓
Group by owner
Transform
0.1s -
✓
Draft the digest
Agent step
Ran with 4 tools, returned a structured summary
6.2s -
Approve the digest
Needs approval
Assigned to Jake Morgan
Approve Deny -
Post the digest
Orca Security
Queued
Automations
A schedule turns Orca Security alerts into action.
Fetch alerts, group them, draft a digest, get approval, post back to Orca Security.
Orca Security health
Refreshed 4 minutes ago · every 15 minutes · from the alerts collection
Alerts
1,284 ↓ 12%
Assets
96 ↓ 8%
Needs attention
3 ↑ 2
Updated this week
412 ↑ 9%
Alerts created
Last 14 days
By team
Share of activity
Security operations 34%
Cloud platform 27%
Compliance 21%
Incident response 18%
Collections and dashboards
Orca Security health, counted on a schedule.
Four metrics, 14 days of alerts created, and a breakdown by team.
For IT and engineering
Elaichi vs Zapier MCP vs Composio for Orca Security
All three can connect Orca Security to an AI assistant, and all three have admin controls. They differ in where access lives and how you pay.
| What to check | Elaichi | Zapier MCP | Composio |
|---|---|---|---|
| Where the AI connects |
One address for the whole organization.
https://api.elaichi.ai/mcp
|
A server per member, created at sign-in. | An MCP endpoint per team, or an SDK. |
| Control over Orca Security tools | Allow or restrict single Orca Security tools, per role or user. | App and action restrictions on the account. | Role permissions, down to the action. |
| Record of calls | One audit entry per Orca Security call. | A History tab of tool calls. | A log of every tool call. |
| Single sign-on | SAML or OIDC, plus SCIM, on Gold. | SAML on Enterprise. | SAML and OIDC on Enterprise. |
| Price | Free for one person; $15 per user per month on Gold. | 2 tasks per successful call. | Billed per tool call. |
Sources: Zapier MCP docs, security, usage; Composio docs, gateway, enterprise, pricing. Checked September 2026.
Longer take: Zapier MCP alternative and when you don't need an MCP gateway.
Orca Security tools for your AI agents
40 tools are ready to call through Elaichi's MCP endpoint the moment you connect Orca Security, governed by the same roles, restrictions, and audit log as everything else in Elaichi.
No tools match your search.
Questions, answered
How do I connect Orca Security to Claude?
Two steps. In Elaichi, choose Orca Security and paste in your Orca Security API key, which is the only sign-in step, with no OAuth application to register and no client ID or secret to generate. Then in Claude open Customize, then Connectors, then Add, and paste the endpoint https://api.elaichi.ai/mcp. Claude signs you in through Elaichi and Orca Security is ready to use.
Does Orca Security work with ChatGPT and Cursor as well as Claude?
Yes. Once Orca Security is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, Microsoft Copilot, any other MCP client and the Elaichi Agent. You connect Orca Security once and every client picks it up.
What can an AI agent actually do with my Orca Security data?
An agent can list and read Orca Security alerts, pull an alert's event log, vulnerabilities, malware findings, remediation actions and linked Jira ticket, browse your assets and cloud accounts, and start or check a scan. It cannot do anything the connector does not cover, and it cannot do anything the signed-in person could not do in Orca Security. Because Orca Security has many actions, short concrete asks such as "critical alerts on the payments account" get better results than long paragraphs.
Does connecting Orca Security give the AI every cloud account and alert?
No. Access follows the person who signed in, so the agent sees the Orca Security cloud accounts, assets and alerts that person's own Orca Security account can see, and nothing beyond it. Elaichi can narrow that further, for example to read-only or to a subset of actions, but it can never widen access past what Orca Security already grants.
Can I stop an agent from changing or deleting things in Orca Security?
Yes. Restrictions in Elaichi work per action, so you can allow reading Orca Security alerts and assets while restricting starting scans or changing alert state. A restricted action still appears in Elaichi's tool search, flagged as restricted, but Claude, ChatGPT, Cursor, Microsoft Copilot or any other client cannot run it, whatever the prompt says.
What happens to an Orca Security connection when someone leaves?
Offboarding a person in Elaichi ends their access to Orca Security through every client at once, with no need to touch Orca Security itself. If they were using a shared Orca Security connection, it keeps working for everyone else on the team. Disconnecting Orca Security once in Elaichi removes it from Claude, ChatGPT, Cursor, Microsoft Copilot and every other client at the same time.
Does the Orca Security MCP connector work with Gemini, Codex, Claude Code or other MCP clients?
Yes. Orca Security is reached over the same MCP endpoint every client uses, so anything that speaks MCP can call it — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor, Microsoft Copilot, and the Elaichi Agent. The tools on offer and the access behind them are identical whichever client asks. Only the setup screen differs.
Is Elaichi an alternative to Zapier MCP for Orca Security?
Yes. Both let Claude, ChatGPT or Cursor use Orca Security. Zapier MCP fits a team that already automates in Zapier, since each person signs in and acts as themselves in that account. Elaichi fits when IT wants one address for the whole company, per-tool rules by role, and a record of every Orca Security call.
How is Elaichi different from Composio for Orca Security?
Composio gives AI agents tools and sign-in handling across 1,000+ apps, for developers building agents or people using an assistant, billed per tool call. Elaichi gives a company's own people governed access to Orca Security: one address, restrictions per role or user, and $15 per user per month. Both have role permissions and a log of every call.
Put Orca Security in front of your team
14 days of Black, no credit card. Connect it once and pick what each team can call.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
ChatGPT
Claude
Cursor
Microsoft Copilot