# Connect Claude Desktop
URL: https://docs.autociso.io/developers/mcp/claude-desktop/
Description: Add AutoCISO as a remote MCP server in Claude Desktop and verify it works.

Add AutoCISO to Claude Desktop and you can ask Claude about your compliance posture in plain language.

## Prerequisites

- An MCP token with the `mcp:read` scope — see the [MCP Quickstart](https://docs.autociso.io/developers/mcp/quickstart/) or [MCP Auth and Scopes](https://docs.autociso.io/developers/mcp/authentication/). It needs the **MCP Read** scope.
- Claude Desktop installed.

## Step 1 — Open your config file

Find `claude_desktop_config.json`:

- **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
- **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`

If the file doesn't exist, create it.

## Step 2 — Add AutoCISO as a server

Paste the `mcpServers` block. Use the **Remote (HTTP)** tab if your Claude Desktop supports remote MCP servers directly; otherwise use the **mcp-remote bridge** tab, which proxies a remote server through a local command.

**Remote (HTTP)**

```json
{
  "mcpServers": {
    "autociso": {
      "url": "https://api.autociso.io/mcp",
      "headers": { "Authorization": "Bearer aci_REPLACE_ME" }
    }
  }
}
```

**mcp-remote bridge**

```json
{
  "mcpServers": {
    "autociso": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://api.autociso.io/mcp",
               "--header", "Authorization: Bearer aci_REPLACE_ME"]
    }
  }
}
```

**Warning — Treat your token like a password**

Replace `aci_REPLACE_ME` with your real token. This config file holds a live credential — don't commit it to source control or share it. To revoke access, revoke the token in **user menu → API Tokens**. See [API tokens](https://docs.autociso.io/developers/api-tokens/).

## Step 3 — Restart and verify

1. Quit and reopen Claude Desktop (a restart is required to load the new server).
2. Look for the MCP tools icon — AutoCISO's tools should be listed.
3. Ask Claude: **"What's my access posture summary?"** — Claude calls `posture_summary` and answers from your data. For more questions to try, see [MCP Capabilities](https://docs.autociso.io/developers/mcp/capabilities/).

## If something's wrong

| What you see | Likely cause | Fix |
|--------------|--------------|-----|
| No AutoCISO tools appear | Bad JSON, wrong file path, or no restart | Validate the JSON, confirm the path, fully restart Claude |
| `401` | Token typo or revoked | Re-copy the token; create a new one if needed |
| No AutoCISO tools, or fewer than expected | The token lacks the scope, or your plan does not include the feature | See [Scope is not entitlement](https://docs.autociso.io/developers/mcp/authentication/#scope-is-not-entitlement) |
| `404 NOT_FOUND` | MCP is not enabled for your deployment | Contact support |

For every other code, see [MCP Errors and Retries](https://docs.autociso.io/developers/mcp/errors/) and [MCP Troubleshooting](https://docs.autociso.io/developers/mcp/troubleshooting/).