Skip to main content
Five Steps for Cloud Compliance Readiness·A practical playbook for security teamsDownload

AI Integration (MCP)

ConfigCobra ships a native MCP (Model Context Protocol) server. Connect it to your AI assistant and ask plain-language questions about your Microsoft 365 compliance posture — no dashboard login required.

IntegrationsClaude · ChatGPT · Cursor · Any MCP client
i

What your AI can access

Once connected, your AI assistant can query your live scan results, posture score, per-control findings, per-user evidence (e.g. CA policy exclusions, MFA status), and remediation guidance — all sourced from your most recent ConfigCobra assessment.

Connection details

All three clients below use the same server. Keep these values handy before you start:

FieldValue
Remote server URLhttps://mcp.configcobra.com/mcp
OAuth Client ID1427b4c7-9093-405b-a701-cf027073e035

Connect Claude (claude.ai)

Claude supports MCP connections natively through its Connectors settings. No extra setup required.

  1. Open Settings → Connectors

    In Claude, click your profile picture (top right) → SettingsConnectors.

  2. Add a custom connection

    Click Add connection, then select Add custom connection at the bottom of the list.

  3. Fill in the connection details

    Enter the following values:

    NameConfigCobra
    Remote server URLhttps://mcp.configcobra.com/mcp
    OAuth Client ID1427b4c7-9093-405b-a701-cf027073e035
  4. Authorize with Microsoft

    Click Connect. You'll be redirected to a Microsoft sign-in page — log in with the same account you use for ConfigCobra. ConfigCobra only requests read-only access to your scan data.

  5. Start a conversation

    Open a new Claude conversation and ask anything about your M365 posture. Claude will use the ConfigCobra integration automatically when your question is compliance-related.

    Try: "What are my top 5 critical findings right now?" or "Who are my global admins and do they have any issues?"

Connect ChatGPT

ChatGPT supports custom MCP connections through its Connectors feature. You need to enable the feature first before the connection settings appear.

  1. Enable Connectors (developer step)

    Go to SettingsBeta features and turn on Connectors. If you don't see this option, make sure you're on a ChatGPT Plus, Team, or Enterprise plan — Connectors is not available on free accounts.

  2. Open Settings → Connectors

    Once Connectors is enabled, go to SettingsConnectorsAdd connection.

  3. Add a custom connection

    Select Add custom connection and fill in the same details as Claude:

    NameConfigCobra
    Remote server URLhttps://mcp.configcobra.com/mcp
    OAuth Client ID1427b4c7-9093-405b-a701-cf027073e035
  4. Authorize and start chatting

    Click Connect, complete the Microsoft sign-in, and you're done. ChatGPT will use ConfigCobra data when you ask compliance questions.

Connect Cursor

Cursor supports MCP servers via its settings UI or a JSON config file. Use whichever method you prefer.

Option A — Settings UI

  1. Open Cursor Settings → MCP

    Press Ctrl+, (or +, on Mac) to open Settings, then navigate to Tools & IntegrationsMCP Servers.

  2. Add a new server

    Click Add new MCP server and enter:

    NameConfigCobra
    TypeHTTP / SSE
    Server URLhttps://mcp.configcobra.com/mcp
  3. Save and authorize

    Click Save. Cursor will open a browser window for Microsoft OAuth — sign in with your ConfigCobra account to complete the connection.

Option B — mcp.json config file

Alternatively, add ConfigCobra directly to your Cursor MCP config file at ~/.cursor/mcp.json:

{
  "mcpServers": {
    "ConfigCobra": {
      "url": "https://mcp.configcobra.com/mcp",
      "transport": "sse"
    }
  }
}

After saving the file, reload Cursor. You'll be prompted to authorize via Microsoft OAuth on first use.

Other MCP-compatible clients

Any tool that supports the Model Context Protocol can connect to ConfigCobra using the same details:

FieldValue
Remote server URLhttps://mcp.configcobra.com/mcp
OAuth Client ID1427b4c7-9093-405b-a701-cf027073e035
TransportHTTP / SSE
Auth typeOAuth 2.0 (Microsoft)

Refer to your client's documentation for the exact steps to add a custom MCP server. If you get stuck, email info@configcobra.com and we'll help you connect.

What you can ask

Once connected, your AI assistant has access to your live ConfigCobra scan data. Some example queries:

  • What are my top critical findings right now?
  • Who are my global admins and do they have any issues?
  • What's my current compliance score?
  • Which users have no MFA methods registered?
  • Generate a remediation plan for the PIM approval gap.
  • What controls regressed since last week?
  • Show me all failing controls in the Identity section.
!

Data scope

The MCP connection is read-only. Your AI assistant can query findings and evidence, but cannot modify your ConfigCobra settings, trigger scans, or change anything in your Microsoft 365 tenant.

Free trial