Skip to content

Security

Strac MCP connector

The Strac connector lets Claude, ChatGPT, Cursor, and the Elaichi Agent detect, redact, tokenize, and anonymize sensitive data in documents, sheets, and webhooks through one governed endpoint, with every action recorded in an audit log.

  • How it connects. Connects with an API key. The credential goes into a vault nobody reads back.

  • One address. https://api.elaichi.ai/mcp, the same for every user.

  • Their own access. An agent never gets more than the person it acts for.

How to connect

How to connect Strac to Claude, ChatGPT or Cursor

Two steps, about a minute.

1

In Elaichi

Connect Strac once

  1. Open Connections, choose Add connection, and pick Strac.

  2. Optionally set Share with to give a team access, then press Connect.

  3. Paste a Strac API key. One person generates a token in Strac and pastes it once. Everyone else works through Share with, and never sees it.

The credential is vaulted. Nobody reads it back, not even the AI.

Add connection

Choose a connector.

strac
Strac
Censys
Herd Security
Infisical
Orca Security
SecurityScorecard
2

In your AI client

Point it at one endpoint

Everyone in the organization uses the same address, and each person only ever reaches what their own account allows.

Connect Strac to Claude

  1. 1

    Open Customize, then Connectors.

  2. 2

    Press Add.

  3. 3

    Name it, paste the MCP server URL, then Continue.

    https://api.elaichi.ai/mcp
  4. 4

    Sign in and approve.

On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.

Connect Strac to ChatGPT

  1. 1

    Open Plugins, then press the + button.

  2. 2

    Name it and paste the endpoint into Server URL.

    https://api.elaichi.ai/mcp
  3. 3

    Leave Authentication on OAuth, then tick the risk acknowledgement.

  4. 4

    Press Create, then sign in and approve.

Works on the web today. The plugin directory lives at chatgpt.com/plugins.

Connect Strac to Cursor

  1. 1

    Open ~/.cursor/mcp.json.

  2. 2

    Add the endpoint under mcpServers.

    https://api.elaichi.ai/mcp
  3. 3

    Reload Cursor, then sign in and approve.

~/.cursor/mcp.json

{
  "mcpServers": {
    "elaichi": {
      "url": "https://api.elaichi.ai/mcp"
    }
  }
}

Set up per machine, so repeat it on each computer you work from.

Connect Strac to any MCP client

  1. 1

    Add the endpoint as a remote MCP server.

    https://api.elaichi.ai/mcp
  2. 2

    Sign in and approve.

{
  "mcpServers": {
    "elaichi": {
      "url": "https://api.elaichi.ai/mcp"
    }
  }
}

The Elaichi Agent already has these tools, with nothing to set up.

Use cases

What teams do with Strac through Elaichi

Every one of these runs inside the access the person already has, and lands in the same audit log.

  • Security

    Check a file for sensitive data first

    Upload a contract or export to Strac as a document and ask what it contains before anyone forwards it. Card numbers, national IDs, and other secrets show up in the answer so the file can be cleaned or held back.

  • Compliance

    Redact personal details from a document

    Run a redaction on a Strac document and pull back the redacted copy by ID, ready to send outside the company. The original stays untouched for the record.

  • Support

    Replace card numbers pasted into tickets

    When a customer types a card or account number into a chat, turn it into a Strac token, in a single call or a batch. The agent keeps working with the placeholder and only detokenizes when the job truly needs the real value.

  • Data

    Anonymize a Google Sheet before analysis

    Point Strac at a Google Sheet, anonymize the personal columns, and hand the safe version to the analyst. When the results are ready, reverse the job to map findings back to real people, and check on running jobs along the way.

  • Engineering

    Redact and detokenize traffic through a proxy

    Set up a Strac proxy so incoming webhooks and outgoing requests are redacted or detokenized on the way through, with a function to shape the payload. No service on either side ever handles the raw values.

  • Legal

    Find every token tied to one customer

    When a deletion request arrives, search Strac tokens by tag or by the original datum, read the details on each one, then update or delete them. The log shows exactly which tokens were removed and by whom.

Try asking

  • “Which Strac detections fired on documents uploaded this week?”
  • “Create a Strac redaction for last night's uploaded contract.”
  • “List Strac tokens tagged payroll and who created them.”

See all 27 Strac tools below

AI tools

Strac tools for your AI agents

27 tools are ready to call through Elaichi's MCP endpoint the moment you connect Strac, governed by the same roles, restrictions, and audit log as everything else in Elaichi.

See it in Elaichi

What connecting Strac gets you

6 screens from the product, each doing one job for your Strac account.

The agent

Ask about Strac documents in plain language.

Starter prompts return answers from live Strac documents, detections and tokens.

  • documents
  • detections
  • redactions
  • tokens

Ask Elaichi to work across your apps.

Which Strac detections fired on documents uploaded this week?

Create a Strac redaction for last night's uploaded contract.

List Strac tokens tagged payroll and who created them.

Also runs in Claude, ChatGPT or Cursor

MCP clients

Claude, ChatGPT and Cursor reach Strac together.

One org-wide MCP endpoint over OAuth, no SDK and no shared API key.

ElaichiMCP clients
Claude ChatGPT Cursor

Copy the endpoint

https://api.elaichi.ai/mcp
Client Connected by Status Last used
Claude
E

Emma Laurent

• Connected 4 minutes ago
Cursor
S

Sofia Ricci

• Connected 2 hours ago
ChatGPT
C

Clara Nowak

• Connected Yesterday

Tool catalog

27 Strac tools arrive ready to call.

Browse tool names, resources and methods for documents, redactions and tokens, no custom code.

  • Create a Strac document
  • Get single Strac document by ID
  • Delete a Strac document by ID
  • Create a Strac detect
ElaichiTools
Tool Action Description
Create a Strac document Create Upload a document to the strac vault and receive a reference ID for later retrieval. Returns: documentId. Required: document (binary, max 10 MB). Each upload is immutable — repeating the call creates a new stored document and a new reference ID.
Get single Strac document by ID Get Download the original document from strac by its document ID. Returns the raw binary file content of the document (an opaque binary stream, not a structured JSON response). Required: id.
Delete a Strac document by ID Delete Delete a document from strac by its document ID. Returns an empty 204 response on success. Required: id.
Create a Strac detect Create Detect sensitive data from a document or text using strac. Submits a detection payload to the strac engine and returns the resulting sensitive-data findings. The exact request and response fields are defined by the strac DetectDocumentInput and DetectDocumentOutput schemas respectively — consult the strac API docs for the full field-level breakdown.
Create a Strac redact Create Redact a document in the strac vault by submitting a redaction request. On success, returns a RedactDocumentOutput object that can subsequently be used to retrieve the fully redacted document via the strac Get redacted document API. The specific request body fields and response fields are defined by the RedactDocumentInput and RedactDocumentOutput schemas; consult the upstream strac API documentation for the field-level breakdown.

Toolboxes

Every team gets its own Strac toolbox.

Curate separate toolboxes so Security, Legal and Support see different Strac tools.

  • Security
  • Legal
  • Support
  • Engineering
ElaichiToolboxes
Name Source template Tools Created

Security toolbox

Strac · detections and redactions

Strac starter 18 Mar 4, 2026

Legal toolbox

Strac · documents and retention

9 Mar 2, 2026

Support toolbox

Strac · redacted documents

24 Feb 27, 2026

Engineering toolbox

Strac · tokens and batches

Strac starter 6 Feb 19, 2026

Compliance toolbox

Strac · audit and token searches

31 Jan 30, 2026

Finance toolbox

Strac · payment tokens

12 Jan 22, 2026

Shared connections

Teammates use Strac without seeing a credential.

See who connected each Strac account and how many teams and members share it.

  • Security EMEA
  • Legal
  • Support
  • Compliance
ElaichiConnections
Connection Scope Status Access
ST

Strac (Security EMEA)

Connected by Emma Laurent

Personal • Active 1 team · 6 members
ST

Strac (Legal)

Connected by James Whitfield

Organization • Active 3 teams · 24 members
ST

Strac (Support)

Connected by Sofia Ricci

Organization • Active 2 teams · 11 members
ST

Strac (Compliance)

Connected by Daniel Ortega

Personal • Needs re-auth 1 team · 3 members
ST

Strac (Engineering)

Connected by Clara Nowak

Personal • Active Not shared
ST

Strac (Finance)

Connected by Michael Brennan

Personal • Active 2 teams · 9 members

Audit log

Every Strac call is answerable later.

When, who, what happened, type and resource, appended for each document and token call.

  • When
  • Who
  • What happened
  • Type
ElaichiAudit log
When Who What happened Type

2 minutes ago

Mar 6, 2026, 3:10 PM

E

Emma Laurent

[email protected]

Restriction Created Access

8 minutes ago

Mar 6, 2026, 3:04 PM

J

James Whitfield

[email protected]

Restriction Updated Access

14 minutes ago

Mar 6, 2026, 2:58 PM

S

Sofia Ricci

[email protected]

Role Assigned Access

20 minutes ago

Mar 6, 2026, 2:52 PM

D

Daniel Ortega

[email protected]

Strac Users Updated MCP

26 minutes ago

Mar 6, 2026, 2:46 PM

C

Clara Nowak

[email protected]

Strac Documents Created MCP

32 minutes ago

Mar 6, 2026, 2:40 PM

M

Michael Brennan

[email protected]

Strac Documents List Toolbox

Launching soon

From answering questions to doing the work

A person no longer has to ask. A trigger starts the work, inside the same permissions and the same audit log as everything else. Automations and live dashboards are launching soon, on the Black plan.

Automations

A schedule runs Strac work end to end.

Fetch Strac detections, group them, draft a digest, get approval, post it back.

Strac digest

Run 418 · started 2 minutes ago · on behalf of Emma Laurent

  1. Schedule

    Every weekday at 08:00

    0.2s
  2. Fetch documents

    Strac

    1.4s
  3. Group by owner

    Transform

    0.1s
  4. Draft the digest

    Agent step

    Ran with 4 tools, returned a structured summary

    6.2s
  5. Approve the digest

    Needs approval

    Assigned to Michael Brennan

    Approve
  6. Post the digest

    Strac

    Queued

Collections and dashboards

Strac health arrives computed, not requested.

Four metrics, 14 days of documents created and a team breakdown, refreshed on schedule.

Strac health

Refreshed 4 minutes ago · every 15 minutes · from the documents collection

Live

Documents

1,284 ↓ 12%

Detections

96 ↓ 8%

Needs attention

3 ↑ 2

Updated this week

412 ↑ 9%

Documents created

Last 14 days

By team

Share of activity

Security EMEA 34%

Legal 27%

Support 21%

Compliance 18%

FAQ

Frequently asked questions

How do I connect Strac to Claude?

First connect Strac in Elaichi, which asks only for your Strac API key. There is no OAuth application to register and no client ID or secret to generate. Then in Claude open Customize, then Connectors, then Add, and paste https://api.elaichi.ai/mcp. Sign in with your Elaichi account and Strac is ready to use.

Does Strac work with ChatGPT and Cursor as well as Claude?

Yes. Once Strac is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, any other MCP client, and the Elaichi Agent. You connect Strac once and every client picks it up.

What can an AI agent actually do with my Strac data?

With Strac connected, an agent can upload a document and detect sensitive data in it, produce a redacted copy, and fetch that copy back. It can turn card numbers or IDs into Strac tokens, search tokens by tag, look up their details, update or delete them, and detokenize a batch when the real values are needed. It can also anonymize a Google Sheet and reverse the job later, and set up Strac proxies that redact or detokenize webhook traffic.

Does connecting Strac give the AI full access to my Strac account?

No. Everything an agent does in Strac runs under the API key of the person who connected it, so it can do nothing that key cannot do. Elaichi can then narrow that further, for example allowing detection and redaction while blocking detokenization or deletion. Elaichi never widens access beyond what Strac itself grants.

Can my team share one Strac connection?

Yes. One person connects Strac in Elaichi and shares the connection with a team, and nobody else ever sees or handles the Strac API key. Each teammate still signs in to Elaichi as themselves, so the audit log names the actual person who redacted a document or searched for a token.

Can I stop an agent from deleting or changing things in Strac?

Yes. Restrictions in Elaichi work per action, so you can allow an agent to detect and redact in Strac while blocking it from deleting documents, deleting tokens, or detokenizing values. A blocked action is never shown to Claude, ChatGPT, Cursor, or any other client, so no prompt, however worded, can reach it.

What happens to a Strac connection when someone leaves?

Offboarding a person in Elaichi ends their access to Strac at once, across every client they used. If the Strac connection was shared, it keeps working for everyone else on the team. If you want to remove Strac entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor, and every other client at the same time.

Put Strac in front of your team

Fourteen days on Gold, no credit card. Connect it once and pick what each team can call.