--- title: MCP Server description: How to connect to the MCP Server of ISOPlanner and use it in ChatGPT and Claude. --- [Skip to content](https://docs.isoplanner.app/mcp#main-content) [![ISOPlanner 2000x500 transparent no shadow](https://docs.isoplanner.app/hs-fs/hubfs/ISOPlanner%202000x500%20transparent%20no%20shadow.png?width=200&height=50&name=ISOPlanner%202000x500%20transparent%20no%20shadow.png)](https://isoplanner.app) Open main navigation Close main navigation How can we help you? - There are no suggestions because the search field is empty. 1. [ISOPlanner](https://docs.isoplanner.app/) 2. [Developer](https://docs.isoplanner.app/developer) # MCP Server ### MCP server (Preview) With the ISOPlanner MCP server, an AI assistant such as Claude or ChatGPT can look up your ISOPlanner data and answer questions about it. MCP (Model Context Protocol) is an open standard for connecting AI assistants to other applications. You sign in with the same Microsoft Entra account you use for ISOPlanner. The assistant then works in the ISOPlanner organization you are signed in to. The MCP server is in preview. Tools and their behaviour can change between releases. ### Setting it up You need an ISOPlanner account and an AI client that supports remote MCP servers. 1. In your AI client, add a remote MCP server. Claude calls this a custom connector. 2. Enter `https://mcp.isoplanner.app` as the server URL. 3. Sign in with Microsoft Entra, using the account you use for ISOPlanner. 4. Start a new conversation and ask a question about your ISOPlanner data. **Claude.** Custom connectors work in claude.ai, Claude Desktop and Cowork. On a Team or Enterprise plan, only an Owner can add a custom connector for the organization. See [Get started with custom connectors using remote MCP](https://support.claude.com/en/articles/11175166-get-started-with-custom-connectors-using-remote-mcp). **ChatGPT.** See [Developer mode and MCP apps in ChatGPT](https://help.openai.com/en/articles/12584461-developer-mode-and-mcp-apps-in-chatgpt). ### Working with more than one organization The assistant starts in your own organization. If you have access to organizational units, or to customer organizations as a consultant at a partner, you can ask the assistant to switch. - Ask "Which ISOPlanner organizations can I access?" The assistant lists them and shows which one is active. - Ask "Switch to \[organization name\]". Every question after that uses the new organization, for the rest of the session. - Ask "Switch back to my own organization" to return. Some organizations use a different Microsoft Entra directory. The assistant cannot switch to those. Open them in the ISOPlanner web app instead. ### What the assistant can read and change The assistant can read most modules of ISOPlanner. It can only change risks. - **Risks:** read the risk register and the risk matrix. Create risks, edit them, link or unlink controls, assets, objectives, processes, processing activities and tasks, and delete a risk. - **Requirements and controls:** read the requirements and controls of your standards. - **Internal audits:** read audits, the audit criteria of a standard, audit results and findings. - **Tasks and forms:** read your own tasks, a single task, tasks by status, and forms. - **Objectives and KPIs:** read objectives and KPIs. - **Assets and classifications:** read assets and classifications. - **Processes:** read processes, also by process code. - **Processing activities:** read the processing activities (GDPR register). - **Library:** read library items and categories: name, category, link to the file in SharePoint and how often the item is linked. Read the AI summary of a document. - **Organization:** read the company profile, users and roles, and the AI insight of an implementation project. Before the assistant creates, changes or deletes a risk, ISOPlanner shows you what will change and asks you to confirm. Nothing is written until you approve. A deleted risk cannot be restored. ### Example questions Ask in your own words. Some examples: - Which risks are still in the Analysis state, and who owns them? - Which controls are linked to the risk "Phishing"? - Show the findings of our last internal audit. - Which of my tasks are due this month? - Which documents in the library are not linked to anything? - Create a risk for dependency on our hosting provider, owned by the CISO role, in state New. ### Limitations - **No file contents.** Library documents and evidence stay in your own SharePoint. The assistant sees the name, category and link of a file, but not what is in it. To discuss a document, upload it to the conversation. - **Only risks can be changed.** Tasks, controls, documents and the other modules are read-only. - **Other Entra directories.** Organizations in a different Microsoft Entra directory are only available in the ISOPlanner web app. - [Getting Started](https://docs.isoplanner.app/getting-started) - [Main Concepts](https://docs.isoplanner.app/main-concepts) - [Common Elements](https://docs.isoplanner.app/common-elements) - [Administration Menu](https://docs.isoplanner.app/administration-menu) - [FAQ](https://docs.isoplanner.app/faq) - [Videos](https://docs.isoplanner.app/videos) - [Apps & Add-ins](https://docs.isoplanner.app/apps-add-ins) - [Automated Control Monitoring](https://docs.isoplanner.app/automated-control-monitoring) - [Developer](https://docs.isoplanner.app/developer) - [Power Automate](https://docs.isoplanner.app/power-automate) - [Power BI](https://docs.isoplanner.app/power-bi) - [Release Notes](https://docs.isoplanner.app/release-notes) - [Transition Guides](https://docs.isoplanner.app/transition-guides) [![ISOPlanner 2000x500 transparent no shadow](https://docs.isoplanner.app/hs-fs/hubfs/ISOPlanner%202000x500%20transparent%20no%20shadow.png?width=200&height=50&name=ISOPlanner%202000x500%20transparent%20no%20shadow.png "ISOPlanner 2000x500 transparent no shadow")](https://docs.isoplanner.app/) [mailto:support@isoplanner.app](mailto:support@isoplanner.app) Copyright © 2026, ISOPlanner