Connect ISMS Copilot to Claude Code

You can use your ISMS Copilot account directly from Claude Code, Cursor, or any MCP-compatible AI tool. Once connected, your AI tool can read your workspaces, documents, and memories, and hold real ISMS Copilot conversations, acting as you and covered by your existing subscription.

What you need

• An ISMS Copilot account. The connection is covered by your subscription, with no separate billing.
• A terminal with Claude Code (or another MCP client) installed.
• Some capabilities depend on your plan (see Choosing how it answers).

Connect in three steps

1. In ISMS Copilot, open Settings, then Connected apps.
2. Click Create token. Give it a name (for example, "Claude Code laptop"), choose the permissions it should have (see Permissions), and copy the token. You will only see it once.
3. Paste the command shown into your terminal. It looks like this:

claude mcp add --scope user --transport http ismscopilot https://account.ismscopilot.com/v1/account/mcp --header "Authorization: Bearer pat-isms-..."

Then start your AI tool and ask, for example, "list my ISMS Copilot workspaces."

For Cursor, ChatGPT, or any other MCP client, add the server URL https://account.ismscopilot.com/v1/account/mcp with your token as a Bearer header.

What your AI tool can do

A connected token can read and do the following, and nothing else:

So from your AI tool you can pull up a document, list your workspaces, add or edit a memory, and hold a grounded ISMS Copilot conversation, all without leaving your editor.

Choosing how it answers (Fast and Think)

When you start or continue a conversation from your AI tool, you can choose how much reasoning ISMS Copilot applies:

• Fast (default): quick answers, no extended reasoning.
• Think: deeper reasoning for harder questions. Think requires a paid plan. On a free plan, a Think request automatically falls back to Fast.

In practice, ask your AI tool for deeper analysis (for example, "think carefully about this") and it will request Think mode for you.

Settings stay in the web app

Your account settings are read-only from the connection. In particular, Advanced Data Protection (which routes your data through an EU-based, zero-retention provider) cannot be turned on or off from your AI tool.

If you ask your AI tool about Data Protection, it can report whether it is enabled for your account and will point you to Settings, Data Protection at chat.ismscopilot.com to change it. This is deliberate: a connection token should not be able to flip a global data-residency setting.

Permissions

When you create a token, you choose exactly what it can do (read workspaces, read documents, read and write memories, start conversations, and so on). Grant only what you need. A token that only reads your workspaces cannot change your memories or start conversations.

You can see and revoke every token at any time in Settings, Connected apps.

Reconnecting or rotating a token

If you have connected before and want to reconnect (for example, after creating a fresh token), remove the existing server first. Otherwise your AI tool keeps the old token:

claude mcp remove ismscopilot

Then paste the new command from Settings, Connected apps.

Security

• A token acts as you, so it can reach exactly what your account can already reach, limited by the permissions you granted.
• It is covered by your subscription, with no separate billing.
• You can revoke it any time in Settings, Connected apps. Revoking takes effect immediately.
• Treat a token like a password. If one is exposed, revoke it and create a new one.

Troubleshooting

• Connected but the tools do not show up: re-run the connect command with --scope user, or run claude mcp remove ismscopilot and add it again.
• Authentication failed: the token may have been revoked or expired. Create a new one in Settings, Connected apps.
• Think mode does not seem deeper: Think requires a paid plan. On a free plan it falls back to Fast.