Agents

Agents here means: connect coding agents and MCP clients to your existing ISMS Copilot account. The agent acts as you, within the scopes you grant, and usage is covered by your chat subscription.

This is not the in-app Agent / Tasks product (that surface is not generally available). It is also not the model API (sk-isms-…) and not the website Embed / Assistants product.

If your agent already carries framework knowledge in a skill file, connecting ISMS Copilot adds things a file does not have: a maintained registry with edition stamps and last-verified dates, per-response module disclosure on the API plane, and a second pass against curated references. The honest version, including what the benchmark does not show: Why connect a specialist.

Status

Live in production. Create a token in chat under Settings → Connected apps, then connect your MCP client.

MCP endpoint:

https://account.ismscopilot.com/v1/account/mcp

Token prefix: pat-isms-… (shown once).

Guides

What a connected agent can do

Depending on scopes you grant:

• Read account info and list workspaces
• List documents (metadata). There is no separate “download this file by ID” MCP tool; workspace-pinned completed files can still ground conversations when you chat in that workspace
• Read, create, and update memories
• Start conversations and send messages (Fast by default; Think or Beyond on a paid plan when the agent sets mode)
• Manage model API keys and credits where enabled: api_keys:read / api_keys:write to list, create, and revoke sk-isms-… keys, and api_credits:read / api_credits:checkout to check balance and open a credit checkout (see Set up the model API from your agent)

Not available over MCP: flipping Advanced Data Protection, and heyGRC. Beyond is available: the agent must pass mode: "beyond" (Fast is the default if mode is omitted). See Using Beyond mode.

Auth model (short)