MCP Quickstart

This guide gets you from zero to your first AutoCISO MCP call. We’ll fetch your posture summary — a single call that returns data even for a fresh org.

Step 1 — Get a token

1. Open user menu → API Tokens (the user menu is your name at the bottom of the sidebar; the screen is described in the API Tokens console reference).
2. Click Create Token.
3. Enter a name, for example mcp-quickstart.
4. Pick the MCP Read scope.
5. Choose Expires.
6. Click Create Token and copy the token from the Token Created dialog. It is shown once.

MCP Auth and Scopes covers the MCP scopes and org binding; API tokens covers expiry, rotation and revocation. Set the token as an environment variable so you never hard-code it:

export AUTOCISO_MCP_TOKEN="aci_REPLACE_ME"

Step 2 — Make your first call

The MCP endpoint is https://api.autociso.io/mcp. Authenticate with a bearer token. Here is the same posture_summary call three ways:

curl -s \
-H "Authorization: Bearer $AUTOCISO_MCP_TOKEN" \
-H "Content-Type: application/json" \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"posture_summary","arguments":{}}}' \
"https://api.autociso.io/mcp"

import { AutocisoMcpClient } from '@autociso/mcp-client';

const client = new AutocisoMcpClient({
baseUrl: 'https://api.autociso.io/mcp',
token:   process.env.AUTOCISO_MCP_TOKEN!,
});

const posture = await client.posture.summary();
console.log(posture);

import os
from autociso_mcp import AutocisoMcpClient

client = AutocisoMcpClient(
  base_url="https://api.autociso.io/mcp",
  token=os.environ["AUTOCISO_MCP_TOKEN"],
)

posture = client.posture.summary()
print(posture)

A successful response looks like

Results are PII-masked — emails appear as a***@domain.com and personal names are redacted (to resolve an ID to a name, see Employee identity):

{
  "overallScore": 72,
  "staleAccounts": 14,
  "openRisks": 6,
  "isoGapsOpen": 23,
  "topConcern": "14 stale accounts pending review",
  "generatedAt": "2026-06-20T09:00:00Z"
}

Next steps

• What you can ask over MCP
• Connect Claude Desktop
• Connect Cursor and VS Code
• MCP TypeScript SDK · MCP Python SDK
• Browse all 66 tools
• MCP Troubleshooting if the first call fails