This article answers common questions and fixes common problems with the SCW MCP Server. It is for Company Admins.
Common issues
| What you see | Why it happens | How to fix it |
|---|---|---|
| It won't sign in | You're using the other region's server URL | Check your SCW login address or ask your CSM, then add the right server URL |
| It keeps disconnecting or asks me to sign in again | Your connection lasts as long as your SCW session, which ends 1 hour after you sign in | See If the connection drops below |
| Numbers don't match SCW | The chat is reusing data it fetched earlier, or the AI tool added up incorrectly | Start a new chat, ask again and ask the AI tool to show its working |
| Learner counts look too high | Some counts can include disabled users | Ask for enabled or active learners only |
| A Quest shows learners who haven't started | They haven't chosen a language yet, so the Quest can't start for them | Ask who still needs to choose a language and remind them |
| ChatGPT won't connect | ChatGPT needs developer mode, which some companies turn off | Turn on developer mode or ask your IT team |
| I have a use case that isn't listed | The articles cover the most common use cases; you can ask about much more | Ask your question in plain language. If the data isn't available yet, the AI tool will tell you and can log the request with SCW. Let your CSM know too |
If the connection drops
Your AI tool stays connected only while your SCW session is active. The session ends 1 hour after you sign in, even while you're using it, or after 24 hours if you select Remember me when you sign in. SSO sessions always end after 1 hour. When this happens, the AI tool loses access until you sign in again.
To reconnect:
- In your AI tool's connector settings, select Connect (or Reconnect) next to Secure Code Warrior.
- Sign in to SCW in the window that opens and select Authorise.
- Start a new chat and ask your question again.
If the sign-in window gets stuck or keeps loading:
- Close the sign-in window.
- Open SCW in a normal browser tab and sign in there first.
- Go back to your AI tool and select Connect again. It picks up your existing SCW sign-in.
- Still stuck? Remove the Secure Code Warrior connector, add it again with the same server URL, and sign in.
Tip: If you don't use SSO, select Remember me when you sign in to stay connected for up to 24 hours.
Questions
Who can connect it? Only Company Admins. If anyone else tries, sign-in stops before the permissions screen. It works with your own SCW role and permissions.
Do we need a new licence? No. The SCW MCP Server is included with your SCW plan at no additional charge. There's no new licence, seat or API key.
Which AI tools work? Any MCP-compatible AI tool. See Setting up SCW's MCP Server for tool-specific steps.
Can we connect more than one AI tool? Yes. Each AI tool connects separately with your own SCW sign-in, so you can use several at once.
Our company needs to approve third-party MCP connectors. What can SCW share? Some companies review MCP connectors before anyone can use them. Contact your CSM. SCW can share security documentation to support that review, including a technical architecture overview of the MCP Server under NDA.
Can it change anything in SCW? Only Quest drafts. The AI tool can create, edit and delete Quest drafts, and nothing else. Publishing and assigning Quests, sending notifications, and changing users, teams, licences or other settings can only be done by a Company Admin in the SCW platform.
Where does it run, and is our data secure? The SCW MCP Server runs on Amazon Web Services (AWS), in the same environment as the SCW platform:
- Separate US and EU regions. US data is hosted in AWS US West (Oregon) and EU data in AWS Europe (Frankfurt). Your data stays in your region.
- Encrypted. All traffic is encrypted in transit over HTTPS, and stored data is encrypted at rest.
- Your company only. Every request is limited to your company's data and your own role, so the AI tool can't see anything you can't already see in SCW.
- No passwords shared. Your AI tool never receives your SCW password or session. It gets a separate access token that only works with the SCW MCP Server.
- You stay in control. Access ends when your SCW session ends or when you remove the connector.
You can check SCW platform status at any time at status.securecodewarrior.com.
Does SCW send our data to an AI provider? SCW doesn't push data to any AI provider. Your AI tool receives data only when you ask, and it's handled under your agreement with that provider.
What can't it do yet?
- Show Trust Score trends by team. It can show your company's Trust Score trend and each team's current score. To track team trends, run the Trust Score by team report regularly and build the trend in a tool such as Power BI or Excel.
- Show Cybermon start and end dates.
- Create or edit Quest Programs or Tournaments.
- Publish Quests, change training assignments, edit policies, or change users, teams or workspace settings.
New capabilities are added regularly. Ask your CSM about what's coming next.
How up to date is the data? Answers use the same reporting data as your SCW dashboards, which updates a few hours behind platform activity, so very recent activity may not show yet. Ask your AI tool: "When was the SCW reporting data last refreshed?"
Do learners get emails when a Quest draft is created? No. Learners see nothing and no Quest emails are sent until an admin publishes the Quest in SCW.
Can I schedule reports? If your AI tool supports scheduled tasks, you can, but they aren't fully hands-off yet. Sessions expire, so scheduled or automated runs stop until you sign in again.
How do I disconnect? Remove the connector in your AI tool's settings. Access stops straight away.
Where do I send feedback? Contact your CSM. We use your feedback to decide what to build next.
Tip: Check important numbers against the SCW platform before you share them.
Comments
0 comments
Please sign in to leave a comment.