Agents

Use your ISMS Copilot account from Claude Code, Cursor, Codex and any MCP client with a pat-isms token.

Contenido en inglés

Esta página aún no está traducida a este idioma. Debajo se muestra la versión en inglés hasta que haya traducción.

Agents here means: connect coding agents and MCP clients to your existing ISMS Copilot account. The agent acts as you, within the scopes you grant, and usage is covered by your chat subscription.

This is not the in-app Agent / Tasks product (that surface is not generally available). It is also not the model API (sk-isms-…) and not the website Embed / Assistants product.

If your agent already carries framework knowledge in a skill file, connecting ISMS Copilot adds things a file does not have: a maintained registry with edition stamps and last-verified dates, per-response module disclosure on the API plane, and a second pass against curated references. The honest version, including what the benchmark does not show: Why connect a specialist.

Status

Live in production. Create a token in chat under Settings → Connected apps, then connect your MCP client.

MCP endpoint:

https://account.ismscopilot.com/v1/account/mcp

Token prefix: pat-isms-… (shown once).

Guides

Why connect a specialist

Skill file vs maintained registry, with the benchmark's numbers and losses stated plainly.

Connect Claude Code

Full setup: create a token, one-line MCP install, scopes, troubleshooting.

Connect any MCP client

Cursor, Codex, and generic Bearer setup for the same endpoint.

Connect Cursor and Codex

Config-file shapes for mcp.json and config.toml, smoke test, rotation.

Tokens, scopes, and security

Least privilege, revoke, expiry, and what a token can never do.

What a connected agent can do

Depending on scopes you grant:

Read account info and list workspaces
List documents (metadata). There is no separate “download this file by ID” MCP tool; workspace-pinned completed files can still ground conversations when you chat in that workspace
Read, create, and update memories
Start conversations and send messages (Fast by default; Think or Beyond on a paid plan when the agent sets mode)
Manage model API keys and credits where enabled: api_keys:read / api_keys:write to list, create, and revoke sk-isms-… keys, and api_credits:read / api_credits:checkout to check balance and open a credit checkout (see Set up the model API from your agent)

Not available over MCP: flipping Advanced Data Protection, and heyGRC. Beyond is available: the agent must pass mode: "beyond" (Fast is the default if mode is omitted). See Using Beyond mode.

Auth model (short)

Item	Value
Token prefix	`pat-isms-…`
Where to mint	chat.ismscopilot.com → Settings → Connected apps
Header	`Authorization: Bearer pat-isms-…`
Billing	Chat subscription (not prepaid API credits)

Agents (Account MCP) is live. This docs site, the agents feed, and Settings → Connected apps are the source of truth for product status.