This article shows Company Admins how to connect the SCW MCP Server to an AI tool, what it can access, and how to disconnect it. Setup takes about five minutes.
Tip: Prefer to start read-only? The only write access is creating, editing and deleting Quest drafts, which learners never see until a Company Admin publishes them. Most AI tools let you switch off individual tools, so you can turn off the Quest draft tools and turn them back on later.
In this article:
What you need
- An SCW Company Admin login.
- Any MCP-compatible AI tool. See Notes per tool for tool-specific steps.
- Your region's server address:
| Region | Server URL |
|---|---|
| US | https://portal-api.securecodewarrior.com/mcp |
| EU | https://portal-api.eu.securecodewarrior.com/mcp |
Tip: Not sure which address to use? Check the web address you use to sign in to SCW. If it includes .eu., use the EU server URL; otherwise use the US one. Still unsure? Ask your CSM. The wrong address simply fails to sign in; it never shows another company's data.
Connect in any MCP-compatible AI tool
- In your AI tool, open the settings for connectors, integrations or MCP servers.
- Add a new custom connector (sometimes called an MCP server) and name it Secure Code Warrior.
- Paste the server URL for your region.
- In the browser window that opens, sign in to SCW as you normally do, with your password or SSO.
- Review the permissions and select Authorise.
- Go back to your AI tool and ask a first question:
Using the SCW connector, how engaged were our learners in the last 90 days?
If you get an answer with your learner numbers, you're connected.
Tip: Can't find connector settings in your AI tool? Your IT team may have turned custom connectors off. Ask them to allow the SCW server URL.
Notes per tool
- Claude: On an individual plan, go to Customize → Connectors → Add custom connector. On a Team or Enterprise plan, an organisation Owner first adds it in Organization settings → Connectors → Add → Custom → Web. Members then connect it from Customize → Connectors.
- Cursor: Add the server URL in Cursor's MCP settings and sign in in the browser tab that opens.
- ChatGPT: Turn on developer mode first (Settings → Apps → Advanced settings). Then go to Settings → Apps → Create app, add the server URL and sign in. In a chat, select + → More → Secure Code Warrior.
- OpenClaw and other tools: Add a server connection in the MCP or integrations settings, then sign in.
What it can access
The sign-in screen lists three permissions:
- Read Learning data (Trust Score, Quests, completions, engagement)
- Read Trust Agent activity
- Write actions on your behalf, such as creating draft Quests
The AI tool works with your own SCW role and permissions, so it can't see anything you can't already see in SCW. Write actions are limited to Quest drafts: it can create, edit and delete drafts. Only a Company Admin can publish or assign Quests, send notifications, or change users, teams, licences or other settings, and only in the SCW platform.
Disconnect
Remove the connector in your AI tool's settings. Access stops straight away.
Next steps: try a use case from 2. What You Can Do or copy a prompt from 3. Prompt Library.
Comments
0 comments
Article is closed for comments.