Connect your agent

Use your existing AI assistant to turn approved cyber advisories into a sourced action report for your infrastructure.

Beta. Review the issue dates, sources and coverage before acting. Usage disclaimer.

Choose the software inventory your agent may read. You can also read the brief without connecting an assistant.

Before you connect

Your agent does the assessment
It reads only the inventory you authorize, submits products for matching and prepares the report. The MCP supplies approved advisories, compares software identities and validates the evidence record.
What is sent
Matching sends product names and versions. Validation sends the evidence record, including its asset labels and summary. Use approved labels or pseudonyms and exclude secrets. Your assistant provider's data handling also applies.
Access and limits
No additional Sovereign GRC account or API key is required. You need an assistant with MCP support and permission to read the chosen inventory. Your provider's access and usage requirements apply. The MCP does not retain inventories or reports.
Daily runs need separate setup
Connecting does not start monitoring or install a schedule. Start with a manual run; recurring checks need an operator-configured runtime and scheduler. The MCP does not patch software or independently inspect your machine.

Claude Code

Run once in your terminal.

claude mcp add --transport http sovereign-crb https://www.sovereigngrc.com/mcp

Cursor

Add to your MCP settings or ~/.cursor/mcp.json.

{
  "mcpServers": {
    "sovereign-crb": {
      "url": "https://www.sovereigngrc.com/mcp"
    }
  }
}

Codex

Add to ~/.codex/config.toml.

[mcp_servers.sovereign-crb]
url = "https://www.sovereigngrc.com/mcp"

Prompt to any AI assistant

Tell your assistant to connect in chat.

Connect to the remote MCP server "sovereign-crb" at https://www.sovereigngrc.com/mcp using Streamable HTTP.

Read, check and report

Give your agent the skill below. It checks the issue date, matches the complete authorized inventory and validates the report before returning it. For large inventories, the skill includes a deterministic batching helper so records are not silently skipped. Unknown versions remain unknown; a missing match does not establish safety.

The MCP serves approved issues only, including historical ones when no newer issue is available. Test drafts are excluded. The read-only service allows 60 requests per minute, up to 100 products per matching call and 60 KB per evidence record.

Browse approved issuesWhy this brief exists