ECP MCP server: connect Claude, ChatGPT, Copilot or Cursor
Easy Cyber Protection (ECP) is the app that walks an organisation through CyFun and NIS2. The ECP MCP server lets an AI app you already use read your ECP data and help fill in your policy documents. This page shows how to connect it.
What you need
- Your organisation has an active subscription, or is managed by a partner with an active contract.
- An administrator or owner has switched on AI app connections under Settings, Connected AI apps.
- You have the right to connect AI apps. Owners have it by default.
Each connection belongs to one organisation. For another organisation, make a new connection.
Server URL
Use this address in every app below. Settings, Connected AI apps shows it too, with a copy button.
https://api.easycyberprotection.com/api/mcpSteps per app
Claude (claude.ai and Claude Desktop)
Add the server URL as a custom connector. Pro and Max: Customize > Connectors > Add > Add custom connector, enter a name and the address, then choose Add. Team and Enterprise: an owner adds it first under Organization settings > Connectors (Add > Custom > Web); then each member chooses Customize > Connectors > Connect. Claude Desktop uses the same connectors through your Claude account. A free account may have one custom connector.
ChatGPT
Adding a custom server works in ChatGPT on the web. In a Business, Enterprise or Edu workspace you get full access, read and write, once an administrator of that workspace has switched on developer mode. With Pro, ChatGPT can only read. A free account cannot do this. OpenAI changes its menu names often, so follow its guide and enter the server URL.
OpenAI Codex
Run these two commands in a terminal. The second opens your browser to sign in.
codex mcp add ecp --url https://api.easycyberprotection.com/api/mcp
codex mcp login ecpClaude Code
Run this command, start Claude Code and type /mcp. Follow the steps in your browser to sign in.
claude mcp add --transport http ecp https://api.easycyberprotection.com/api/mcpCursor
Put this in .cursor/mcp.json (this project only) or ~/.cursor/mcp.json (everywhere). Cursor signs in to remote servers that ask for it, and it registers itself with us.
{
"mcpServers": {
"ecp": {
"url": "https://api.easycyberprotection.com/api/mcp"
}
}
}VS Code (GitHub Copilot)
Open the Command Palette and choose MCP: Add Server. Choose HTTP, paste the address, give the server a name such as ecp, and pick where to save it. Sign in if VS Code asks. Your organisation's policy may restrict this.
Every app then sends you to an ECP page. Sign in if asked, check the organisation and what the app may do, then approve. If ECP refuses, the page says why and what to do.
What the AI can and cannot do
- Read: audit readiness per group, the compliance score, one control with its evidence, the work in progress, your documents and their status, your evidence list, and a search across your documents and ECP's public help content.
- Write, only if you approved read and write: fill in one field of a policy document, after you approved the exact value. This never publishes the document. A bigger change only creates a draft that a person approves in ECP. Nothing changes before that.
- It cannot: publish a document, change settings or who has access, or see another organisation.
The AI app acts with the rights of the person who connected. A viewer's connection can read and never write. One connection covers one organisation.
How to disconnect
Owners and admins: open Settings, Connected AI apps and choose Disconnect next to the app. Switching off the setting at the top of that section ends all connections at once. After you switch it on again, everyone connects and approves again.