Secureframe

About

This is an MCP connector that gives the Sazabi agent tools from Secureframe's hosted MCP server. Secureframe authenticates via OAuth with dynamic client registration, supporting accounts in the US and UK regions. Once connected, the agent can query compliance frameworks, inspect controls and automated tests, monitor vendor security posture, and track evidence collection. Write operations are governed by the per-connection read-only toggle.

What the agent can do:

• Query compliance frameworks (SOC 2, ISO 27001, HIPAA, PCI DSS, NIST, GDPR) and control status
• Run and inspect automated compliance tests and remediation steps
• Audit vendor security posture, questionnaires, and risk tiers
• Monitor personnel onboarding, security training, MFA, and device endpoint compliance
• Track manual evidence collection, compliance tasks, and System Security Plan (SSP) details

Prerequisites

• An active Secureframe account in the US or UK region
• A Secureframe API key, or a membership with admin privileges or permission to create one
• Your Secureframe region — United States (US) or United Kingdom (UK); you select it when connecting

Set up in the dashboard

Configure connectors in the dashboard under Settings > MCP connectors.

Set up with the CLI

You can also connect Secureframe with the Sazabi CLI (installed and authenticated — see sazabi mcp-connectors reference).

Secureframe authenticates over OAuth, so the CLI opens a browser to complete authorization:

sazabi mcp-connectors connect secureframe

Add --read-only to restrict the connector to read-only tools, or --project-id <project> to target a specific project. In --json mode the command prints an authorization URL to open, then polls until the connection completes. Confirm the result with sazabi mcp-connectors list.

Verify

Open the connector's connection page under Settings > MCP connectors and confirm Sazabi lists the tools it discovered. Then, in a thread, ask the agent to use one of those tools and confirm it runs. If no tools appear, confirm the connection is authorized and you selected the correct region.

Troubleshooting

No tools discovered — Disconnect and reconnect from Settings > MCP connectors, ensuring you select the correct region for your Secureframe account.

Connection shows needs attention — The authorization may have expired or been revoked; reconnect from Settings > MCP connectors.

Further reading