MCP server · Secureframe
Secureframe MCP Server
Secureframe publishes a first-party hosted (remote) MCP server that exposes its compliance platform — controls, tests, evidence, frameworks, risks, vendors, personnel, SSP and POA&M records — as 112 MCP tools across 41 categories. The tools wrap the Secureframe REST API one-for-one; every request runs as a specific Secureframe user in a specific company and is bounded by that user's existing RBAC permissions.
One-click install for Cursor, VS Code, Claude, and 20+ other MCP clients, powered by API Commons MCP Install — visit install.apicommons.org for more information.
Documentation
Documentation link · transport streamable-http
Tools
get_cloud_resource— Get a Cloud Resourcelist_cloud_resources— List Cloud Resourcesupdate_cloud_resource— Update a Cloud Resourcecreate_cloud_resource_framework_asset_scope— Create Framework Asset Scopelist_cloud_resource_framework_asset_scopes— List Framework Asset Scopescreate_comment— Create a Commentdelete_comment— Delete a Commentget_comment— Get a Commentlist_comments— List Commentsupdate_comment— Update a Commentget_control— Get a Controllist_controls— List Controlsdata_custom_integration— Publish dataget_device— Get a Devicelist_devices— List Devicescreate_device_framework_asset_scope— Create Framework Asset Scopelist_device_framework_asset_scopes— List Framework Asset Scopesget_evidence— Get an Evidencelist_evidences— List Evidencecreate_file_upload— Stage a file so its bytes go straight to storage rather than through this API, and getget_framework— Get a Frameworklist_frameworks— List Frameworksget_framework_requirement— Get a Framework Requirementlist_framework_requirements— List Framework Requirementsarchive_integration_connection— Archive an Integration Connectionget_integration_connection— Get an Integration Connectionlist_integration_connections— List Integration Connectionscreate_knowledge_base_answer— Create a Knowledge Base Answerdelete_knowledge_base_answer— Delete a Knowledge Base Answerget_knowledge_base_answer— Get a Knowledge Base Answerupdate_knowledge_base_answer— Update a Knowledge Base Answercreate_knowledge_base_question— Create a Knowledge Base Questiondelete_knowledge_base_question— Delete a Knowledge Base Questionget_knowledge_base_question— Get a Knowledge Base Questionupdate_knowledge_base_question— Update a Knowledge Base Questioncreate_poam_item— Create a POA&M itemdiscard_poam_item— Discard a POA&M itemget_poam_item— Get a POA&M itemlist_poam_items— List POA&M itemsupdate_poam_item— Update a POA&M itemget_policy— Get a Policylist_policies— List Policiesget_repository— Get a Repositorylist_repositories— List Repositoriesupdate_repository— Update a Repositorycreate_repository_framework_asset_scope— Create Framework Asset Scopelist_repository_framework_asset_scopes— List Framework Asset Scopesget_risk— Get a Risklist_risks— List Riskscreate_ssp_duty— Create an SSP Dutydelete_ssp_duty— Delete an SSP Dutyget_ssp_duty— Get an SSP Dutylist_ssp_duties— List SSP Dutiesupdate_ssp_duty— Update an SSP Dutycreate_ssp_duty_role— Create an SSP Duty Roledelete_ssp_duty_role— Delete an SSP Duty Roleget_ssp_duty_role— Get an SSP Duty Rolelist_ssp_duty_roles— List SSP Duty Rolescreate_ssp_policy— Create an SSP Policydelete_ssp_policy— Delete an SSP Policyget_ssp_policy— Get an SSP Policylist_ssp_policies— List SSP Policiesupdate_ssp_policy— Update an SSP Policycreate_ssp_report— Create an SSP Reportget_ssp_report— Get an SSP Reportlist_ssp_reports— List SSP Reportsget_ssp_report_assessment_objective— Get an SSP Report Assessment Objectivelist_ssp_report_assessment_objectives— List SSP Report Assessment Objectivesupdate_ssp_report_assessment_objective— Update an SSP Report Assessment Objectiveget_ssp_report_section— Get an SSP Report Sectionlist_ssp_report_sections— List SSP Report Sectionsupdate_ssp_report_section— Update an SSP Report Sectionget_ssp_report_section_block— Get an SSP Report Section Blocklist_ssp_report_section_blocks— List SSP Report Section Blocksupdate_ssp_report_section_block— Update an SSP Report Section Blockcreate_ssp_role— Create a SSP Roledelete_ssp_role— Delete a SSP Roleget_ssp_role— Get a SSP Rolelist_ssp_roles— List SSP Rolesupdate_ssp_role— Update a SSP Rolecreate_ssp_vendor— Create an SSP Vendordelete_ssp_vendor— Delete an SSP Vendorget_ssp_vendor— Get an SSP Vendorlist_ssp_vendors— List SSP Vendorsupdate_ssp_vendor— Update an SSP Vendorcreate_security_questionnaire— Create a Security Questionnaireget_task— Get a Tasklist_tasks— List Taskscreate_test— Create a Testget_test— Get a Testlist_tests— List Testsupdate_test— Update a Testcreate_test_evidence— Attach an evidence file to a Test.create_test_export— Create a Test Exportget_test_export_reading— Get a Test Exportarchive_third_party_risk_management_vendor— Archive a Third Party Risk Management Vendor.get_third_party_risk_management_vendor— Get a Third Party Risk Management Vendor.list_third_party_risk_management_vendors— List Third Party Risk Management Vendorsget_trust_center_request— Get a Trust Center Requestlist_trust_center_requests— List Trust Center Requestsupdate_trust_center_request— Update a Trust Center Request: approve or reject the resources it asks for, set itsget_user— Get a Userlist_users— List Usersupdate_user— Update a Userget_user_account— Get a User Accountlink_user_account— Link a User Accountlist_user_accounts— List User Accountscreate_user_evidence— Attach an evidence file to a User.list_user_security_settings— Get user security settingsarchive_vendor— Archive a Vendorget_vendor— Get a Vendorlist_vendors— List Vendors
About MCP
The Model Context Protocol (MCP) is an open protocol Anthropic introduced for connecting LLM-based agents to external tools and data sources. Providers publish MCP servers that expose their API surface as structured, discoverable tools — an MCP-compatible client (Claude Desktop, Cursor, Cline, Continue, etc.) can connect to the server and call its tools without any per-provider integration code.
Browse every MCP server on the APIs.io network or compare with the broader Agent Skill surfaces of the same providers.
Work with this as data
Every MCP server here is available over the APIs.io API and to AI agents over MCP.