Connect Cursor and VS Code

Add AutoCISO to Cursor or VS Code and ask about your compliance data straight from the editor’s AI panel.

Prerequisites

• An MCP token with the mcp:read scope — see the MCP Quickstart or MCP Auth and Scopes.
• Cursor or a recent version of VS Code with MCP support.

Step 1 — Add the server config

Cursor reads .cursor/mcp.json; VS Code reads .vscode/mcp.json. VS Code lets you prompt for the token at launch with an inputs entry, so the secret never lives in the file.

{
"mcpServers": {
  "autociso": {
    "url": "https://api.autociso.io/mcp",
    "headers": { "Authorization": "Bearer aci_REPLACE_ME" }
  }
}
}

{
"inputs": [
  {
    "id": "autociso_token",
    "type": "promptString",
    "description": "AutoCISO MCP token",
    "password": true
  }
],
"servers": {
  "autociso": {
    "url": "https://api.autociso.io/mcp",
    "headers": { "Authorization": "Bearer ${input:autociso_token}" }
  }
}
}

Step 2 — Reload and verify

1. Reload the editor window so it picks up the new config.
2. Confirm AutoCISO appears in the MCP servers list.
3. In the AI panel, ask: “List my open risks” — the assistant calls risk_register_list and answers from your Risk Register. For more questions to try, see MCP Capabilities.

If something’s wrong

For every other code, see MCP Errors and Retries and MCP Troubleshooting.