Summary
MindBridge Model Context Protocol (MCP) connects a supported AI assistant to your MindBridge environment. You can ask questions about completed analyses and explore result data directly from the assistant, without manually exporting results.
MCP supports existing Audit and Enterprise engagements. Each user connects individually, and the assistant can only access data within that user’s existing MindBridge permissions.
What you can do with MCP
Through a connected AI assistant, you can:
- Find analyses you have permission to access.
- Explore result columns, risk scores, and control points.
- Understand how control points contribute to risk scoring.
- Retrieve transactions that meet specific criteria.
For example, you could ask:
“Show me high-risk transactions over $100K from my 2025 Yearend GL Analysis and explain which control points drove the high risk.”
Connect an AI assistant
Before connecting, your Tenant Admin must enable MCP and allow access for your account.
- Open Settings → MCP in MindBridge.
- Copy the connection URL for your assistant.
- Follow the setup instructions for your supported assistant.
- Sign in to MindBridge when prompted.
- Review and approve the requested permissions.
Tested assistants include Claude, Microsoft Copilot Studio, and Cursor. Setup requirements vary by assistant.
You can review and revoke your own connections through Settings → MCP.
Manage MCP access
The following settings are available to Tenant Admins only through Admin → MCP. Organization Admin, User Admin, and Support roles cannot access this page.
MCP permissions limit what a connected assistant can read. They do not expand a user’s existing access to MindBridge data.
Enable MCP
- Open Admin → MCP.
- Turn on MCP access.
- Configure default permissions and any user overrides.
- Select Save settings.
Changes take effect only after you save them.
Set default permissions
Default permissions establish the maximum access users can approve when connecting an assistant.
| Option | Behaviour |
|---|---|
| Allow all scopes by default | Users can approve all available MCP permissions, within their existing MindBridge access. |
| No MCP access by default | Users cannot connect unless a user override allows access. |
| Allow specific scopes by default | Users can approve only the permissions you select, such as access to analysis information without access to transaction rows. |
To introduce MCP to a selected group, choose No MCP access by default, then add user overrides for those who should be allowed to connect.
Configure user overrides
- In the user overrides section, select Add user.
- Choose the user.
- Allow all available permissions, select specific permissions, or deny MCP access.
- Select Save settings.
User overrides take precedence over default permissions. They do not bypass the tenant’s MCP access setting or the user’s existing MindBridge permissions.
Saving a more restrictive policy also removes permissions from existing connections that are no longer allowed.
Review and revoke connections
The Active grants section shows current connections, including the user, application name and domain, approved permissions, and when the connection was last used.
Search by user or application to find a connection, then select Revoke to remove its access.
To prevent a user from connecting again, also update their permitted access, such as by adding a user override with no MCP permissions, and save the settings.
Disable MCP for the tenant
- Open Admin → MCP.
- Turn off MCP access.
- Select Save settings.
Saving this change blocks new connections and revokes all existing MCP grants for the tenant.