Aceda a todas as capacidades do BrickGRC a partir do Claude Desktop, ChatGPT, Cursor ou qualquer host compatível com MCP. O seu agente orquestra o ciclo de auditoria: instala templates, carrega evidência, dispara o scoring e exporta relatórios. O motor de IA instalado no BrickGRC é quem executa o scoring no servidor, sob o seu log de auditoria.
Se algo é possível no BrickGRC, o seu agente de IA também consegue fazê-lo via MCP. 52 ferramentas cobrindo todo o ciclo de auditoria, da instalação do template ao relatório final.
List templates, install framework bricks (single or multi-framework), spin up new engagements, update them, close them. The agent owns the lifecycle.
Queue maturity-scoring jobs (BrickGRC's installed AI engine runs them server-side under your audit log and BYO key), fetch results, apply state transitions, override risk, snapshot gap analyses. Async jobs surface with explicit status.
Upload documents over the wire (path or base64), trigger AI auto-linking against controls, rescan the document set, read or replace content in place.
Final audit report, evidence bundle, gap-analysis snapshot, remediation snapshot. All returned as single-use signed download URLs, scoped to your engagement.
Build your own framework brick programmatically: create templates, state flows, transitions, controls. Compose them into engagements end-to-end.
Manage engagement projects, override risk scores, match employees to controls, suggest control statuses. The operational layer your agent needs to actually finish the audit.
O MCP é o standard aberto para uso de ferramentas por agentes de IA, adoptado por todos os hosts relevantes. Configure uma vez. Qualquer cliente MCP liga-se ao BrickGRC da mesma forma.
Pick the flow that fits your team.
OAuth (recommended): sign in once through your normal BrickGRC login. Your agent gets scoped, revocable access.
Personal API key: mint a token in the app, paste it into your host's config. Static and simple.
A one-time consent flow through your normal BrickGRC login (Google, Microsoft, SAML, SSO and 2FA all work). Your agent gets a scoped, revocable token that respects your RBAC role.
app.brickgrc.com and go to API Keyszpl_ token (shown once, save it in a password manager)The same security model that protects your BrickGRC account protects every agent connection. Revoke a key, kill an agent.
Authorisation Code with S256 PKCE. No paste-your-key flow on supported hosts. Your agent runs through your real BrickGRC login.
Personal keys SHA-256 hashed; OAuth-issued keys AES-256-GCM encrypted server-side. Plaintext never touches disk.
Every agent action runs through the same RBAC permissions your user has in the UI. An agent can't escalate beyond what you can do.
Default 120 requests/min per key, tunable. Stops a runaway agent from burning your AI budget overnight.
Revoke a key in the BrickGRC UI; every active session for that key is cut within seconds, OAuth tokens included.
Frankfurt, like the rest of BrickGRC. No data leaves the EU. GDPR + Schrems II clean.
A full inventory of what your agent can call. Each tool is a thin wrapper around the same BrickGRC API your UI uses. Same RBAC, same audit log, same data.
Demora 60 segundos. Faça login no BrickGRC, conecte através do seu host de IA e veja o seu agente conduzir o ciclo completo, da instalação do brick ao relatório final.