devguard - Your Compliance Platform
PlatformSolutionsFrameworksDevelopersPricing
devguard

One workspace for your whole ISMS — Swiss-hosted, one control set, mapped to every framework you run.

All systems operational
Product
PlatformFeaturesSolutionsFrameworksPricing
Developers
API & CLIIntegrationsDocumentationChangelogSwiss hosting
Company
AboutBlogCompare
© 2026 devguard AG. All rights reserved.
Terms of servicePrivacy policySite noticeTrust centerLLM info
Swiss Made Software
Integrations · Developer tools

MCP server
your compliance data, queryable

The devguard MCP server lets your own AI assistant read your compliance workspace. Point Claude, Cursor or any MCP client at your organization and ask questions your dashboards can't answer yet.

What you can ask

Questions your dashboards can’t answer yet

Real prompts against your own workspace — scoped to a token you create and can revoke

Which controls have no evidence newer than 90 days?

Summarize our open findings by severity and owner

Which policies still need their annual review?

What changed in our ISO 27001 coverage since last month?

Draft an access-review task list from the latest check results

Which vendors are overdue for reassessment?

How it connects

Connected by you, scoped by you

Setup is minutes, not a migration project — and every step stays on your side

01

Create a token in devguard

Create an MCP token in your devguard workspace and point Claude, Cursor or any MCP client at it — a URL and a token, nothing to install

02

Ask, in your own tools

Your assistant reads live compliance data, from controls and evidence to findings and deadlines, scoped to what the token allows and with every access logged

03

Evidence lands on the control

Passing results attach as evidence to the controls they support; failures become findings you triage. When the audit comes, the proof is already connected.

Related

More from your stack

Open any page for its full check register.

Read-only, revocable, Swiss-hosted

You create and scope every credential yourself, and you can revoke it at any time. Checks only read; results and evidence are stored in Switzerland and stay exportable.

FAQ

Questions about MCP server

Where do the results live?

Checks run from Swiss infrastructure, and results and evidence are stored in Switzerland. Everything is exportable — your evidence stays yours.

What can the AI see through the MCP server?

Exactly what the token you create is scoped to see, in your organization only. Tokens are created explicitly, are revocable at any time, and every access is logged.

Which clients work with it?

Any MCP-compatible client: Claude, Claude Code, Cursor and others. Setup is a URL and a token, no installation on our side.

Connect MCP server and see the evidence land

20 minutes on how you run certification today. Bring your current test or control list and we'll map it against these checks — honestly, gap by gap.

Book a conversation
Two-way sync
GitHub
4 checks
Two-way sync
Slack
3 checks
OpenAI
4 checks
Anthropic
4 checks
See all integrations
Book a conversation
Sign in
Start for free
Book a conversation
Start for free