compliance
Secureframe
Connect Secureframe to Elaichi and hand every teammate a governed MCP endpoint — 57 tools ready to call from Claude, Cursor, or any MCP client, clamped by roles, restrictions, and an audit log.
AI tools
Secureframe tools for your AI agents
57 tools are ready to mint as an MCP endpoint the moment you connect Secureframe — governed by the same roles, restrictions, and audit log as everything else in Elaichi.
list_all_secureframe_repository_framework_asset_scopes
List Framework Asset Scopes for a secureframe repository. The absence of a Framework Asset Scope indicates the asset is not in scope for the Framework. Returns: id, active, framework_id, manually_scoped_reason, created_at. Required: repository_id.
create_a_secureframe_repository_framework_asset_scope
Create a Framework Asset Scope for a secureframe repository. Framework Asset Scopes are immutable — once created they cannot be modified; create a new scope to update. Returns: id, active, framework_id, manually_scoped_reason, created_at. Required: repository_id.
update_a_secureframe_repository_by_id
Update a Secureframe repository by id. Returns: id, created_at, updated_at. Required: id.
list_all_secureframe_repositories
List repositories in Secureframe. Returns: id, created_at, updated_at. Supports Lucene syntax filtering via the q parameter and optional relationship sideloading via include and relationships.
get_single_secureframe_repository_by_id
Get a single Secureframe repository by id. Returns: id, created_at, updated_at. Required: id.
list_all_secureframe_cloud_resources
List Secureframe cloud resources. Returns: id, cloud_resource_type, vendor_name, region, third_party_id, in_audit_scope, owner_id, created_at, updated_at. Use `q` for Lucene-syntax filtering and `include` to embed related data.
get_single_secureframe_cloud_resource_by_id
Get a single Secureframe cloud resource by id. Returns: id, cloud_resource_type, vendor_name, region, third_party_id, in_audit_scope, owner_id, created_at, updated_at. Required: id.
update_a_secureframe_cloud_resource_by_id
Update a Secureframe cloud resource by id. Returns: id, cloud_resource_type, vendor_name, region, third_party_id, in_audit_scope, owner_id, created_at, updated_at. Required: id.
list_all_secureframe_cloud_resource_framework_asset_scopes
List framework asset scopes for a Secureframe cloud resource. Returns: id, in_audit_scope, out_of_audit_scope_reason for each scope record associated with the specified cloud resource. Required: cloud_resource_id.
create_a_secureframe_cloud_resource_framework_asset_scope
Create a framework asset scope for a Secureframe cloud resource, setting its audit scope status for a given framework. Returns: id, in_audit_scope, out_of_audit_scope_reason. Required: cloud_resource_id.
list_all_secureframe_comments
List Secureframe comments with optional filtering and full-text search. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id. Use q for Lucene-syntax filtering and include to sideload related resources.
get_single_secureframe_comment_by_id
Get a single Secureframe comment by id. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id. Required: id.
create_a_secureframe_comment
Create a new comment in Secureframe attached to a commentable resource. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id.
update_a_secureframe_comment_by_id
Update an existing Secureframe comment's content by id. Returns: id, content, commentable_type, commentable_id, company_id, conversation_id. Required: id.
delete_a_secureframe_comment_by_id
Delete a Secureframe comment by id. Returns an empty 204 response on success. Required: id.
list_all_secureframe_controls
List Controls in Secureframe. Returns: id, name, key, health_status, enabled, custom, owner_name, frameworks, created_at, updated_at. Filter using Lucene syntax via the q parameter, or include related objects (author, company, owner) via include.
get_single_secureframe_control_by_id
Get a single Secureframe Control by id. Returns: id, name, key, health_status, enabled, custom, owner_name, frameworks, created_at, updated_at. Required: id.
create_a_secureframe_custom_connection_datum
Submit resource data to a Secureframe custom connection for asynchronous processing. Accepts an array of resource objects conforming to a specified schema and vendor slug. Returns a 202 Accepted response with no body indicating the data is enqueued for processing. Required: id, resource_data, schema_slug, vendor_slug.
list_all_secureframe_devices
List Secureframe devices. Returns: id, device_name, os, make, model, serial_number, mac_address, owner_name, hard_drive_encrypted, local_firewall_enabled, created_at, updated_at. Supports Lucene-syntax search and filtering via the q parameter.
get_single_secureframe_device_by_id
Get a single Secureframe device by id. Returns: id, device_name, os, make, model, serial_number, mac_address, owner_name, hard_drive_encrypted, local_firewall_enabled, created_at, updated_at. Required: id.
list_all_secureframe_device_framework_asset_scopes
List Framework Asset Scopes for a Secureframe device. The absence of a scope indicates the device is not in scope for the given Framework. Returns: id, device_id, framework_id, active, manually_scoped_reason. Required: device_id.
create_a_secureframe_device_framework_asset_scope
Create a Framework Asset Scope for a Secureframe device. Scopes are immutable once created; to change scope, create a new record. Returns: id, device_id, framework_id, active, manually_scoped_reason. Required: device_id.
get_single_secureframe_evidence_by_id
Get a single Evidence record from Secureframe by id. Returns: id. Required: id.
list_all_secureframe_frameworks
List Secureframe frameworks. Returns: id, title, created_at, updated_at. Supports full-text search via q (Lucene syntax) and optional relationship includes via include.
get_single_secureframe_framework_by_id
Get a single Secureframe framework by id. Returns: id, title, created_at, updated_at. Required: id.
list_all_secureframe_framework_requirements
List Secureframe Framework Requirements. Returns: id, name, key, enabled, health_status. Filter by enabled, health_status, id, key, or name using Lucene syntax via the q parameter.
get_single_secureframe_framework_requirement_by_id
Get a single Secureframe Framework Requirement by id. Returns: id, name, key, enabled, health_status. Required: id.
list_all_secureframe_integration_connections
List Secureframe integration connections. Returns: id, name, status, updated_at, vendor_name. Supports Lucene-syntax filtering via q, and relationship sideloading via include or relationships.
get_single_secureframe_integration_connection_by_id
Get a single Secureframe integration connection by id. Returns: id, name, status, updated_at, vendor_name. Required: id.
secureframe_integration_connections_archive
Archive a Secureframe integration connection by id. Returns the updated connection record including id, name, status, updated_at, and vendor_name. Required: id.
get_single_secureframe_knowledge_base_answer_by_id
Get a single Secureframe Knowledge Base Answer by id. Returns: id, content, type, primary_answer, knowledge_base_question_id. Required: id.
create_a_secureframe_knowledge_base_answer
Create a new Secureframe Knowledge Base Answer linked to an existing Knowledge Base Question. Returns: id, content, type, primary_answer, knowledge_base_question_id. Required: content, knowledge_base_question_id, type.
update_a_secureframe_knowledge_base_answer_by_id
Update an existing Secureframe Knowledge Base Answer by id. Returns: id, content, type, primary_answer, knowledge_base_question_id. Required: id.
delete_a_secureframe_knowledge_base_answer_by_id
Delete a Secureframe Knowledge Base Answer by id. Returns an empty 200 response on success. Required: id.
list_all_secureframe_risks
List risks in Secureframe. Returns: id, custom_risk_id, description, owner_name, archived. Filter results using Lucene syntax via the q parameter, or include the related owner object via the include parameter.
get_single_secureframe_risk_by_id
Get a single Secureframe risk by id. Returns: id, custom_risk_id, description, owner_name, archived. Required: id.
create_a_secureframe_security_questionnaire
Create a new Security Questionnaire in Secureframe by uploading a questionnaire file with associated metadata. Returns the created questionnaire object including its id, owner_id, and company_name. Required: owner_id, file.
list_all_secureframe_tests
List tests in Secureframe. Returns: id.
get_single_secureframe_test_by_id
Get a single Secureframe test by id. Returns: id. Required: id.
update_a_secureframe_test_by_id
Update a Secureframe test by id. Returns: id. Required: id.
create_a_secureframe_test_export
Create a Test Export for a Secureframe test. Returns: id, test_id. Required: test_id.
get_single_secureframe_test_export_by_id
Get a Secureframe Test Export by id. Returns: id, test_id. Required: id.
list_all_secureframe_trust_center_requests
List Trust Center Requests in Secureframe. Returns: id, email, requester_name, reviewed, created_at. Use q to filter with Lucene syntax; use include to sideload trust_center_resource_requests.
get_single_secureframe_trust_center_request_by_id
Get a single Secureframe Trust Center Request by id. Returns: id, email, requester_name, reviewed, created_at, document_security. Required: id.
update_a_secureframe_trust_center_request_by_id
Update a Secureframe Trust Center Request by id, including approving or rejecting resource requests and setting document security. Returns: id, email, requester_name, reviewed, created_at, document_security. Required: id.
get_single_secureframe_user_security_setting_by_id
Get user security settings in Secureframe for the authenticated company and user. Returns the UserSecuritySetting object including id and security configuration fields specific to the company and user; consult Secureframe API documentation for the full field breakdown.
list_all_secureframe_vendors
List Secureframe vendors. Returns: id, name, archived, owner_name, risk_level, updated_at. Supports Lucene-syntax search and filtering via q. Deprecated — prefer the Third Party Risk Management Vendor endpoint.
get_single_secureframe_vendor_by_id
Get a single Secureframe vendor by id. Returns: id, name, archived, owner_name, risk_level, updated_at. Required: id. Deprecated — prefer the Third Party Risk Management Vendor endpoint.
secureframe_vendors_archive
Archive a Secureframe vendor by id. Returns the updated vendor record including id, name, archived, owner_name, risk_level, and updated_at. Required: id. Deprecated — prefer the Third Party Risk Management Vendor endpoint.
get_single_secureframe_knowledge_base_question_by_id
Get a Secureframe Knowledge Base Question by id. Returns: id, content, owner_id, review_frequency, manual_review_requested. Required: id.
create_a_secureframe_knowledge_base_question
Create a new Secureframe Knowledge Base Question. Returns the created question including id, content, owner_id, review_frequency, and manual_review_requested. Required: content.
update_a_secureframe_knowledge_base_question_by_id
Update a Secureframe Knowledge Base Question by id. Returns the updated question including id, content, owner_id, review_frequency, and manual_review_requested. Required: id.
delete_a_secureframe_knowledge_base_question_by_id
Delete a Secureframe Knowledge Base Question by id. Returns an empty 200 OK response with no body on success. Required: id.
list_all_secureframe_tprm_vendors
List Third Party Risk Management Vendors in Secureframe. Returns: id, name, risk_level, archived, owner_name, updated_at, created_at. Filter results with Lucene syntax via q; optionally include related data using include or relationships.
get_single_secureframe_tprm_vendor_by_id
Get a single Third Party Risk Management Vendor in Secureframe by id. Returns: id, name, risk_level, archived, owner_name, updated_at, created_at. Required: id.
secureframe_tprm_vendors_archive
Archive a Third Party Risk Management Vendor in Secureframe by id. Returns: id, name, archived, risk_level, owner_name, updated_at, created_at. Required: id.
create_a_secureframe_test_evidence
Upload evidence to a test in Secureframe by attaching a file via multipart form. Returns: id. Required: test_id, file. Optionally supply activity_completion to record the date the activity was completed.
How it works
From Secureframe account to governed MCP endpoint
Connect
Link a Secureframe account through Elaichi's hosted connect flow. Credentials are vaulted — nobody, including the AI, ever sees them.
Compose
The connection becomes a toolbox instantly. Curate which Secureframe tools are exposed, rename them, or freeze arguments.
Mint
Mint a personal MCP endpoint on that toolbox and paste it into Claude, Cursor, or any MCP client — governed by roles, restrictions, and audit logs.
Give every teammate a governed MCP server
Start a 14-day Gold trial — connect a product, curate a toolbox, and paste an endpoint into Claude or Cursor in minutes.