Agents

Agents here means: connect coding agents and MCP clients to your existing ISMS Copilot account. The agent acts as you, within the scopes you grant, and usage is covered by your chat subscription.

This is not the in-app Agent / Tasks product (that surface is not generally available). It is also not the model API (sk-isms-…) and not the website Embed / Assistants product.

If your agent already carries framework knowledge in a skill file, connecting ISMS Copilot adds things a file does not have: a maintained registry with edition stamps and last-verified dates, per-response module disclosure on the API plane, and a second pass against curated references. The honest version, including what the benchmark does not show: Why connect a specialist.

Status

Live in production. In Claude Code, claude.ai, Claude Desktop and ChatGPT, add the MCP endpoint with no header, then sign in to ISMS Copilot and click Approve. Cursor, Codex and other clients use a personal access token from Settings → Connected apps.

MCP endpoint:

https://account.ismscopilot.com/v1/account/mcp

Fallback token prefix: pat-isms-… (shown once).

Guides

What a connected agent can do

A sign-in connection gets the first five items; a token gets what its scopes cover:

• Read account info, list workspaces, and create personal workspaces with create_workspace (needs the workspaces:write scope, labelled "Create personal workspaces"; up to 10 new workspaces per 24 hours, and the workspace stays personal until you share it in the web app)
• List documents (metadata). There is no separate “download this file by ID” MCP tool; workspace-pinned completed files can still ground conversations when you chat in that workspace
• Read, create, and update memories
• Read and replace your company context (the profile set under Customize) with get_company_context (company_context:read) and set_company_context (company_context:write). set_company_context is a full replace: fields you omit are cleared
• Start conversations and send messages (Fast by default; Think or Beyond on a paid plan when the agent sets mode)
• Manage model API keys and credits: api_keys:read / api_keys:write to list, create, and revoke sk-isms-… keys, and api_credits:read / api_credits:checkout to check balance and open a credit checkout (see Set up the model API from your agent)

Not available over MCP: flipping Advanced Data Protection, and heyGRC. Beyond is available: the agent must pass mode: "beyond" (Fast is the default if mode is omitted). See Using Beyond mode.

Auth model (short)