Connect any MCP client

If your tool is not Claude Code, the same account MCP endpoint still works. You need a personal access token and a client that supports HTTP MCP with a custom Authorization header.

1. Create a token

In chat.ismscopilot.com, open Settings → Connected apps → Create token. Copy the pat-isms-… value once.

For the full Claude Code walkthrough (permissions table, reconnect, troubleshooting), see Connect ISMS Copilot to Claude Code.

2. Endpoint

https://account.ismscopilot.com/v1/account/mcp

Transport: HTTP MCP.
Auth: Authorization: Bearer pat-isms-…

3. Client-specific notes

Claude Code (reference)

claude mcp add --scope user --transport http ismscopilot \
  https://account.ismscopilot.com/v1/account/mcp \
  --header "Authorization: Bearer pat-isms-..."

Keep --scope user so the server is available in every folder.

Cursor / Codex / other

Add an MCP server entry with:

• URL: https://account.ismscopilot.com/v1/account/mcp
• Header: Authorization: Bearer pat-isms-…

For concrete mcp.json and config.toml shapes, see Connect Cursor and Codex. If the client only supports OAuth connectors and rejects personal access tokens, it cannot use this path yet (ChatGPT connectors are in that category).

4. Modes (Fast, Think, Beyond)

create_conversation and send_message take optional mode:

The connection does not auto-pick a mode from the question. Ask the agent to “use Beyond” when you want that path. Details: Using Beyond mode.

5. Smoke test

Ask the agent to list your ISMS Copilot workspaces. If tools do not appear, restart the client after adding the server, and confirm the token was not truncated when pasted.

If you hit a usage limit

The connection uses the same 4-hour UTC session window as the chat app. If create_conversation or send_message hits the cap, the first error text is the wait-or-upgrade sentence (including the next reset time). The JSON block includes reset_at and upgrade_url.

Wait until reset_at, or open upgrade_url in a browser while logged into the same ISMS Copilot account. When the JSON carries fallback_available: true and your plan's overflow is available, you can also tell the agent to continue: on your explicit go-ahead it re-sends with overflow_consent: true and the turn runs on the same up-to-2x overflow the web app offers (the reply carries overflow_active: true). Read tools still work after the chat cap.

See What to do when you hit your usage limit.

6. Rotate

claude mcp remove ismscopilot

Then mint a new token and re-add. Always revoke the old token in Settings if it may have leaked.