Connect Cursor and VS Code

Add AutoCISO to Cursor or VS Code and ask about your compliance data straight from the editor’s AI panel.

Prerequisites

  • An MCP token with the mcp:read scope — see the MCP Quickstart.
  • Cursor or a recent version of VS Code with MCP support.

Step 1 — Add the server config

Cursor reads .cursor/mcp.json; VS Code reads .vscode/mcp.json. VS Code lets you prompt for the token at launch with an inputs entry, so the secret never lives in the file.

{
"mcpServers": {
  "autociso": {
    "url": "https://autociso.io/mcp",
    "headers": { "Authorization": "Bearer aci_REPLACE_ME" }
  }
}
}

Step 2 — Reload and verify

  1. Reload the editor window so it picks up the new config.
  2. Confirm AutoCISO appears in the MCP servers list.
  3. In the AI panel, ask: “List my open risks” — the assistant calls risk_register_list and answers from your register.

If something’s wrong

What you seeLikely causeFix
No AutoCISO tools appearBad JSON, wrong file, or no reloadValidate the JSON, confirm the path, reload the window
401Token typo or revokedRe-enter or recreate the token
404 NOT_FOUNDMCP disabled for your org (beta gate)Expected in beta — see Troubleshooting
SCOPE_FORBIDDENToken missing mcp:readRecreate the token with mcp:read
NOT_PERMITTED on a writeWrite not enabled for your orgExpected — see Tool Catalog

See MCP Errors and Retries for the full mapping.

Last reviewed: 2026-09-09

Was this page helpful?

Esc