Secureframe MCP connector
Connect Secureframe to Claude, ChatGPT, Cursor, Microsoft Copilot, or any MCP client through Elaichi, and your team can ask about controls, frameworks, evidence, devices, and cloud resources, then add comments or update scope, all inside each person's own Secureframe access.
- Connects with an API key
- Free 14-day trial
- No credit card
ChatGPT
Elaichi connected
List all Secureframe repositories missing a framework asset scope.
Working in Secureframe with Elaichi
-
List all Secureframe repository framework asset scopes
-
-
Governance
/
Audit log
Last 24 hours
ChatGPT · 9:41 AM
Done
ChatGPT · 9:41 AM
Done
ChatGPT · 9:41 AM
Done
Claude · 9:38 AM
Done
Cursor · 9:35 AM
Done
How to connect Secureframe to Claude, ChatGPT, Cursor or Microsoft Copilot
Step by step, for each AI app
Secureframe MCP connector for Claude
-
1
Open Customize, then Connectors.
-
2
Press Add.
-
3
Name it, paste the MCP server URL, then Continue.
https://api.elaichi.ai/mcp -
4
Sign in and approve.
On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.
Secureframe MCP connector for Claude Code
-
1
In a terminal, run
claude mcp addwith the endpoint.https://api.elaichi.ai/mcp -
2
Start Claude Code and run
/mcp. -
3
Pick elaichi, then sign in and approve in the browser.
Terminal
$ claude mcp add --transport http elaichi --scope user https://api.elaichi.ai/mcp
Use --scope project instead to share it with the repository through .mcp.json.
Secureframe MCP connector for ChatGPT
-
1
Open Plugins, then press the + button.
-
2
Name it and paste the endpoint into Server URL.
https://api.elaichi.ai/mcp -
3
Leave Authentication on OAuth, then tick the risk acknowledgement.
-
4
Press Create, then sign in and approve.
Works on the web. The plugin directory lives at chatgpt.com/plugins.
Secureframe MCP connector for Cursor
-
1
Open
~/.cursor/mcp.json. -
2
Add the endpoint under
mcpServers.https://api.elaichi.ai/mcp -
3
Reload Cursor, then sign in and approve.
~/.cursor/mcp.json
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
Set up per machine, so repeat it on each computer you work from.
Secureframe MCP connector for Microsoft Copilot
-
1
In Copilot Studio, open your agent, then Tools, Add a tool, New tool and Model Context Protocol.
-
2
Paste the endpoint into Server URL, choose OAuth 2.0, then Dynamic discovery, and press Create.
https://api.elaichi.ai/mcp -
3
Create a new connection, sign in and approve, then press Add to agent.
-
4
Under Channels, open Teams and Microsoft Copilot and make the agent available in Microsoft Copilot.
- Server URL
- https://api.elaichi.ai/mcp
- Authentication
- OAuth 2.0
- Type
- Dynamic discovery
Microsoft Copilot was called Microsoft 365 Copilot. Keep the tool on end-user credentials, so each person signs in as themselves.
Connect Secureframe to any MCP client
-
1
Add the endpoint as a remote MCP server.
https://api.elaichi.ai/mcp -
2
Sign in and approve.
{
"mcpServers": {
"elaichi": {
"url": "https://api.elaichi.ai/mcp"
}
}
}
The Elaichi Agent already has these tools, with nothing to set up.
What teams do with Secureframe through Elaichi
Ask in plain English. Each person’s AI can do only what they’re allowed to, and every action it takes in Secureframe is logged.
-
Compliance
Check control status before the audit call
Ask which SOC 2 or ISO 27001 controls in Secureframe still need attention, pull the details on any one of them, and leave a comment for the owner without opening a tab.
-
Security
Find cloud resources missing from a framework
List the cloud resources Secureframe knows about, spot the ones not yet in scope for a framework, and add them so the next test run covers everything it should.
-
IT
Review devices and bring them into scope
See every laptop and workstation Secureframe is tracking, check which ones fall under a given framework, and put a new hire's machine in scope the same afternoon.
-
Engineering
Keep repositories tagged and in scope
Look up how a code repository is recorded in Secureframe, update its details when a service is renamed, and confirm it counts toward the frameworks your customers ask about.
-
Risk
Pull evidence details for a customer questionnaire
Ask for the evidence attached to a specific control in Secureframe and get a plain summary you can paste into a vendor security questionnaire answer.
-
Leadership
Get a readiness summary in plain language
Ask how many controls are passing for each framework in Secureframe and where the gaps are, then record follow-up notes as comments so the team sees them where they already work.
Try asking
- “List all Secureframe repositories missing a framework asset scope.”
- “Show cloud resources added to Secureframe this week.”
- “Summarize open comments on our SOC 2 framework scopes.”
What connecting Secureframe gets you
6 screens from Elaichi, each doing one job for your Secureframe account.
Ask Elaichi to work across your apps.
List all Secureframe repositories missing a framework asset scope.
Show cloud resources added to Secureframe this week.
Summarize open comments on our SOC 2 framework scopes.
Also runs in Claude, ChatGPT, Cursor or Microsoft Copilot
The agent
Ask about repositories, read live Secureframe answers.
Type a question in plain language and get answers from live Secureframe records.
ElaichiAI appsClaude
ChatGPT
Cursor
Microsoft Copilot
Copy the endpoint
AI apps
Claude, ChatGPT, Cursor and Microsoft Copilot reach Secureframe here.
One governed MCP endpoint over OAuth, no SDK and no shared API key.
ElaichiToolsTool catalog
57 Secureframe tools arrive ready to call.
Repositories, cloud resources, framework asset scopes and comments, with no custom code written.
ElaichiToolboxesToolboxes
Every team gets its own Secureframe toolbox.
Curate toolboxes per team so compliance, security and engineering each see their own scope.
ElaichiConnectionsShared connections
Teammates query Secureframe without holding credentials.
See who connected each Secureframe account and how many teams and members share it.
ElaichiAudit logAudit log
Every Secureframe call is written down.
When, who, what happened, type and resource, appended for each Secureframe request.
From answering questions to doing the work
A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations, collections and live dashboards come with the Black plan.
Secureframe digest
Run 418 · started 2 minutes ago · on behalf of Emily Carter
-
✓
Schedule
Every weekday at 8:00 AM
0.2s -
✓
Fetch repositories
Secureframe
1.4s -
✓
Group by owner
Transform
0.1s -
✓
Draft the digest
Agent step
Ran with 4 tools, returned a structured summary
6.2s -
Approve the digest
Needs approval
Assigned to Jake Morgan
Approve Deny -
Post the digest
Secureframe
Queued
Automations
A schedule drafts your Secureframe evidence digest.
Fetch cloud resources, group them, draft a digest, get approval, comment back in Secureframe.
Secureframe health
Refreshed 4 minutes ago · every 15 minutes · from the repositories collection
Repositories
1,284 ↓ 12%
Cloud resources
96 ↓ 8%
Needs attention
3 ↑ 2
Updated this week
412 ↑ 9%
Repositories created
Last 14 days
By team
Share of activity
Compliance 34%
Security Engineering 27%
Platform 21%
Internal Audit 18%
Collections and dashboards
Secureframe compliance numbers refresh on schedule.
Four metrics, 14 days of records created and a team breakdown, computed without a model.
For IT and engineering
Elaichi vs Zapier MCP vs Composio for Secureframe
All three can connect Secureframe to an AI assistant, and all three have admin controls. They differ in where access lives and how you pay.
| What to check | Elaichi | Zapier MCP | Composio |
|---|---|---|---|
| Where the AI connects |
One address for the whole organization.
https://api.elaichi.ai/mcp
|
A server per member, created at sign-in. | An MCP endpoint per team, or an SDK. |
| Control over Secureframe tools | Allow or restrict single Secureframe tools, per role or user. | App and action restrictions on the account. | Role permissions, down to the action. |
| Record of calls | One audit entry per Secureframe call. | A History tab of tool calls. | A log of every tool call. |
| Single sign-on | SAML or OIDC, plus SCIM, on Gold. | SAML on Enterprise. | SAML and OIDC on Enterprise. |
| Price | Free for one person; $15 per user per month on Gold. | 2 tasks per successful call. | Billed per tool call. |
Sources: Zapier MCP docs, security, usage; Composio docs, gateway, enterprise, pricing. Checked September 2026.
Longer take: Zapier MCP alternative and when you don't need an MCP gateway.
Secureframe tools for your AI agents
57 tools are ready to call through Elaichi's MCP endpoint the moment you connect Secureframe, governed by the same roles, restrictions, and audit log as everything else in Elaichi.
No tools match your search.
Questions, answered
How do I connect Secureframe to Claude?
In Elaichi, choose Secureframe and paste in an API key from your Secureframe account. Secureframe connects with an API key, so there is no OAuth application to register and no client ID or secret to generate. Then in Claude, open Customize, then Connectors, then Add, and paste the endpoint https://api.elaichi.ai/mcp. Sign in with your Elaichi account and Secureframe is ready.
Does Secureframe work with ChatGPT and Cursor as well as Claude?
Yes. Once Secureframe is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, Microsoft Copilot, any other MCP client, and the Elaichi Agent. You connect Secureframe once and every client picks it up.
What can an AI agent actually do with my Secureframe data?
An agent can look up frameworks, controls, and the evidence behind them in Secureframe, list the devices, cloud resources, and code repositories being monitored, and tell you which ones are in scope for a framework. It can also add or edit comments, update a repository or cloud resource, put an asset into scope, and record custom connection data. Because Secureframe exposes a lot of actions, short concrete asks such as 'list failing controls for SOC 2' work better than long paragraphs.
Does connecting Secureframe give the AI access to everything in my compliance workspace?
No. Every request runs as the person who signed in, so an agent only sees the frameworks, controls, evidence, and assets that person can already see in Secureframe. Elaichi can narrow that further with restrictions per role or per action, and it can never grant more than the person's own Secureframe permissions allow.
Can I stop an agent from deleting or changing things in Secureframe?
Yes. Restrictions in Elaichi work per action, so you can allow reading controls and evidence in Secureframe while restricting comment deletion, scope changes, or updates to cloud resources and repositories. A restricted action still appears in Elaichi's tool search, flagged as restricted, but the AI client cannot run it, whatever the prompt says.
What happens to a Secureframe connection when someone leaves?
Offboarding a person in Elaichi ends their access to Secureframe through every client at once, with nothing to revoke in Claude, ChatGPT, Cursor, Microsoft Copilot, or Microsoft Copilot separately. A Secureframe connection they shared keeps working for everyone else on the team. If you want to remove Secureframe entirely, disconnecting it once in Elaichi removes it from every client.
Does the Secureframe MCP connector work with Gemini, Codex, Claude Code or other MCP clients?
Yes. Secureframe is reached over the same MCP endpoint every client uses, so anything that speaks MCP can call it — Gemini, Codex, Claude Code, Windsurf, Cline, Zed and OpenCode among them — alongside Claude, ChatGPT, Cursor, Microsoft Copilot, and the Elaichi Agent. The tools on offer and the access behind them are identical whichever client asks. Only the setup screen differs.
Is Elaichi an alternative to Zapier MCP for Secureframe?
Yes. Both let Claude, ChatGPT or Cursor use Secureframe. Zapier MCP fits a team that already automates in Zapier, since each person signs in and acts as themselves in that account. Elaichi fits when IT wants one address for the whole company, per-tool rules by role, and a record of every Secureframe call.
How is Elaichi different from Composio for Secureframe?
Composio gives AI agents tools and sign-in handling across 1,000+ apps, for developers building agents or people using an assistant, billed per tool call. Elaichi gives a company's own people governed access to Secureframe: one address, restrictions per role or user, and $15 per user per month. Both have role permissions and a log of every call.
Put Secureframe in front of your team
14 days of Black, no credit card. Connect it once and pick what each team can call.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
- ChatGPT
- Claude
- Cursor
- Microsoft Copilot