Connect Claude and other AI tools to Mondoo with the MCP server

Your team already works in an AI assistant. Until now, answering a security question meant leaving it: open the console, find the space, read the finding, switch back, and paste what you learned. The Mondoo MCP server closes that gap.

The Mondoo MCP server is a Model Context Protocol server that connects AI assistants directly to Mondoo Platform. Mondoo hosts it for you. You connect over HTTP, authenticate with a Mondoo API token, and your assistant can explore your spaces, read your findings, and work with your policies without you leaving the conversation.

Use a read-only (Viewer) API token. It is enough to explore findings and policies, and it limits what a connected assistant can change.

What you can do

Once your assistant is connected, you can ask it to:

List the spaces available to you.
List critical findings in a space.
List the active policies in a space, and explain what a policy checks and why a finding matters.

It also helps you write Policy as Code:

Generate MQL queries and policies from a description.
Compile and validate queries.
Format policy bundles.

How to connect

Pick the endpoint for your region:

United States: https://us.api.mondoo.com/mcp
European Union: https://eu.api.mondoo.com/mcp

Then add the server to your client. The docs include copy-paste configuration for:

Claude Desktop (through npx mcp-remote)
Claude Code (an http server in your settings)
VS Code (user settings, plus a shareable workspace file that prompts each teammate for their own token)

After you connect, ask the assistant to list your Mondoo spaces. If it returns them, you are connected.

Keep your token safe

Treat your API token like any other secret. Anyone with the token and the endpoint can act in Mondoo with the token's permissions. Use a read-only token, and rotate it if you suspect it leaked.

Availability

The Mondoo MCP server is available to every Mondoo customer at no add-on cost. All you need is a Mondoo Platform account and a read-only API token.

Get started

Read Connect Claude and other AI tools to Mondoo with the MCP server for the full walkthrough, including configuration for each client and how to verify the connection.

To scan and assess the security of MCP servers themselves, read Secure MCP servers with cnspec.

Connect Claude and other AI tools to Mondoo with the MCP server