{"versionId":"5c592eff-d47e-45b0-7295-08df3875e214","articleId":"176dd98d-26f8-4c1b-46ec-08df2fe57700","title":"Connect an AI tool to Glasstrail","tags":["setup","All articles"],"content":"<html><head></head><body><aside></aside>\n<p>Connect an AI tool, such as Theta Assist or Claude, to&nbsp;Glasstrail to search and summarise findings, review scan information, and update findings through a conversation.</p>\n<p>The connection uses Model Context Protocol (MCP). Your AI tool acts on your behalf and can only access the organisations and actions your Glasstrail permissions allow.</p>\n<div class=\"mce-toc\">\n<h2>Quick links</h2>\n<ul>\n<li><a href=\"#before-you-start\">Before you start</a></li>\n<li><a href=\"#allow-ai-access\">Allow AI access in Glasstrail</a></li>\n<li><a href=\"#connect-your-ai-tool\">Connect your AI tool</a>\n<ul>\n<li><a href=\"#mcetoc_1k6cph64u49q\">Example: Claude Code</a></li>\n<li><a href=\"#mcetoc_1k6cph64u49r\">Example:&nbsp;Glasstrail connection in Theta Assist</a></li>\n</ul>\n</li>\n<li><a href=\"#work-with-data\">Work with Glasstrail data</a>\n<ul>\n<li><a href=\"#mcetoc_1k64lds22kl\">Update findings</a></li>\n<li><a href=\"#mcetoc_1k64lds22km\">Check the information behind an answer</a></li>\n</ul>\n</li>\n<li><a href=\"#connected-apps\">Review and disconnect connected apps</a></li>\n<li><a href=\"#block-ai-access\">Block AI access</a></li>\n<li><a href=\"#troubleshoot\">Troubleshoot your connection</a>\n<ul>\n<li><a href=\"#mcetoc_1k64lds22kn\">Your AI tool cannot access an organisation</a></li>\n<li><a href=\"#mcetoc_1k64lds22ko\">Your AI tool can read findings but cannot update them</a></li>\n<li><a href=\"#mcetoc_1k64lds22kp\">Your tool is authenticated but requests fail</a></li>\n</ul>\n</li>\n</ul>\n</div>\n<h2 id=\"before-you-start\">Before you start</h2>\n<p>You need:</p>\n<ul>\n<li>A Glasstrail user account (<a href=\"https://app.glasstrail.com/register?utm_source=organic&amp;utm_medium=helpfruit&amp;utm_campaign=helppages\">try free for 14 days</a>).</li>\n<li>An AI tool that supports remote MCP connections.</li>\n<li>AI agent access enabled by a Glasstrail account admin.</li>\n<li>Access enabled for the organisations you want to work with.</li>\n</ul>\n<p>AI agent access is off by default. Connecting an AI tool does not give you additional Glasstrail permissions.</p>\n<h2 id=\"allow-ai-access\">Allow AI access in Glasstrail</h2>\n<p><em>For account admins</em></p>\n<ol>\n<li>Open <strong>Account</strong> and select your account.</li>\n<li>Find <strong>AI agent access</strong> on the account details page.</li>\n<li>Select <strong>Allow AI agents (MCP clients, such as Claude) to access this account’s data</strong>.</li>\n<li>Select the organisations that AI tools can access.</li>\n</ol>\n<p>Changes apply immediately. Members can then connect their own AI tools, using their existing Glasstrail permissions.</p>\n<p><strong>Note:</strong> Allowing an organisation does not give every member access to it. Each member’s existing permissions still apply.</p>\n<p>&nbsp;</p>\n<div><em><img src=\"https://storage.faqbot.nz/prod/b7ddc16d2555452e0f9808da01de68e4/files/pasted_image_article_connect-an-ai-tool-to-glasstrail_3b917d53-c42b-4d40-ab7c-a9296a4a6781.png\" alt=\"AI agent access enabled for an&nbsp;organisation, with its name hidden.\" width=\"800\" height=\"135\"></em></div>\n<p>&nbsp;</p>\n<h2 id=\"connect-your-ai-tool\">Connect your AI tool</h2>\n<p>The connection steps depend on your AI tool.</p>\n<ol>\n<li>Open your AI tool’s connector or MCP settings.</li>\n<li>Add the Glasstrail MCP connection using the server address <span data-teams=\"true\"><a id=\"menur8vt0\" title=\"https://app.glasstrail.com/mcp\" href=\"https://app.glasstrail.com/mcp\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\"Link https://app.glasstrail.com/mcp\">https://app.glasstrail.com/mcp</a></span></li>\n<li>Sign in with your usual Glasstrail account when prompted.</li>\n<li>Review the access requested by the tool.</li>\n<li>If you only want the tool to read data, deselect write access on the consent page.</li>\n<li>Approve the connection and return to your AI tool.</li>\n</ol>\n<p>Your connection can have:</p>\n<ul>\n<li><strong>Read access:</strong> Search and view Glasstrail data.</li>\n<li><strong>Write access:</strong> Update findings, within your Glasstrail permissions.</li>\n</ul>\n<p>Write access does not override your role or the rules that apply in Glasstrail.</p>\n<details class=\"mce-accordion\">\n<summary>\n<h3 id=\"mcetoc_1k6cph64u49q\">Example: Claude Code</h3>\n</summary>\n<p>Connect Claude Code to&nbsp;Glasstrail to search and work with your findings through a conversation. Claude Code uses your Glasstrail permissions and the access you approve when connecting.</p>\n<h4 id=\"mcetoc_1k64ss7vs3fa\">Before you start</h4>\n<p>Ask your Glasstrail account admin to enable&nbsp;<strong>AI agent access</strong>&nbsp;for your account and the organisations you need.</p>\n<h4 id=\"mcetoc_1k64ss7vs3fb\">1. Open MCP settings</h4>\n<p>In Claude Code, enter&nbsp;<code>/mcp</code>, then select&nbsp;<strong>MCP servers</strong>.</p>\n<h4 id=\"mcetoc_1k64ss7vs3fc\">2. Add a server</h4>\n<p>In the&nbsp;<strong>MCP servers</strong>&nbsp;window, select&nbsp;<strong>Add server</strong>. You may need to scroll to find it.</p>\n<h4 id=\"mcetoc_1k64ss7vs3fd\">3. Enter the Glasstrail connection details</h4>\n<p>Complete the&nbsp;<strong>Add MCP server</strong>&nbsp;form:</p>\n<ul>\n<li><strong>Name:</strong>&nbsp;Enter&nbsp;<code>glasstrail</code>.</li>\n<li><strong>Transport:</strong>&nbsp;Select&nbsp;<strong>HTTP (remote)</strong>.</li>\n<li><strong>URL:</strong>&nbsp;Enter&nbsp;<code><a href=\"https://app.glasstrail.com/mcp\">https://app.glasstrail.com/mcp</a></code>.</li>\n<li><strong>Headers:</strong>&nbsp;Leave this field blank.</li>\n<li><strong>Scope:</strong>&nbsp;Select&nbsp;<strong>Local</strong>&nbsp;to make the connection private to you in this project. Alternatively, select&nbsp;<strong>User</strong>&nbsp;to make it available in all your projects.</li>\n</ul>\n<p>Select&nbsp;<strong>Add server</strong>.</p>\n<ul>\n<li>Enter the&nbsp;MCP address in the URL field.&nbsp;</li>\n</ul>\n<h4 id=\"mcetoc_1k64ss7vs3fe\">4. Start a new session</h4>\n<p>Claude Code confirms that Glasstrail has been added and will be available in new sessions.</p>\n<p>Start a new Claude Code session, then enter&nbsp;<code>/mcp</code>&nbsp;and open&nbsp;<strong>MCP servers</strong>&nbsp;again.</p>\n<p><img src=\"https://portal.helpfruit.com/api/images/b7ddc16d2555452e0f9808da01de68e4/files/image%20%288%29.png\"></p>\n<h4 id=\"mcetoc_1k64ss7vs3ff\">5. Select&nbsp;Glasstrail</h4>\n<p>Select&nbsp;<strong>glasstrail</strong>&nbsp;in the server list. The&nbsp;<strong>Needs Auth</strong>&nbsp;status means you still need to sign in and approve the connection.</p>\n<p><img src=\"https://portal.helpfruit.com/api/images/b7ddc16d2555452e0f9808da01de68e4/files/Claude%20code%20needs%20auth.png\"></p>\n<p><em>Screenshot: Glasstrail listed with the Needs Auth status.</em><br><em>Alt text: Glasstrail MCP server waiting for authentication.</em></p>\n<h4 id=\"mcetoc_1k64ss7vs3fg\">6. Authenticate the connection</h4>\n<p>Select&nbsp;<strong>Authenticate</strong>&nbsp;to open the sign-in process in your browser.</p>\n<p>&nbsp;</p>\n<h4 id=\"mcetoc_1k64ss7vs3fh\">7. Sign in to Glasstrail</h4>\n<p>Sign in using your usual Glasstrail sign-in method:</p>\n<ul>\n<li>Enter your email address and password, then select&nbsp;<strong>Sign in</strong>; or</li>\n<li>Select&nbsp;<strong>Microsoft work account</strong>&nbsp;if that is how you normally sign in.</li>\n</ul>\n<p>If an access approval page appears, review the requested permissions. Deselect write access if you only want Claude Code to read your data, then approve the connection.</p>\n<h4 id=\"mcetoc_1k64ss7vs3fi\">8. Return to Claude Code</h4>\n<p>When your browser shows&nbsp;<strong>Authentication successful</strong>, close the tab and return to Claude Code.<br><br><img src=\"https://portal.helpfruit.com/api/images/b7ddc16d2555452e0f9808da01de68e4/files/CC%20Auth%20successful.png\" width=\"600\"></p>\n<p>Try a request such as:</p>\n<p>“List the Glasstrail organisations I can access.”</p>\n<p>Then ask about a specific organisation, for example:</p>\n<p>“Summarise the current findings for [organisation].”</p>\n</details>\n<details class=\"mce-accordion\">\n<summary>\n<h3 id=\"mcetoc_1k6cph64u49r\">Example:&nbsp;Glasstrail connection in Theta Assist</h3>\n</summary>\n<p>For an assistant already configured with the Glasstrail MCP:</p>\n<ol>\n<li>Select the <strong>wrench icon</strong> beside the message box.</li>\n<li>Open <strong>Authentication</strong>.</li>\n<li>Click <strong>Authenticate</strong>.</li>\n<li>A pop up will open where you can sign in to your Glasstrail account to connect.</li>\n</ol>\n<p>&nbsp;</p>\n<div><img src=\"https://storage.faqbot.nz/prod/b7ddc16d2555452e0f9808da01de68e4/files/pasted_image_article_connect-an-ai-tool-to-glasstrail_32dbc2e7-3a4b-4d90-8a12-9d7ebe82f4a1.png\" width=\"800\"></div>\n<p>&nbsp;</p>\n</details>\n<p>&nbsp;</p>\n<h2 id=\"work-with-data\">Work with Glasstrail data</h2>\n<p>Start by asking your AI tool a question. Include the organisation, domain or finding you want it to use.</p>\n<p>For example:</p>\n<ul>\n<li>“Summarise my current findings for [organisation].”</li>\n<li>“Show high-risk CVE findings for [organisation].”</li>\n<li>“Show DMARC findings across my domains.”</li>\n<li>“Find new breached accounts for [organisation].”</li>\n<li>“List certificates that are due to expire.”</li>\n<li>“When did the last scan complete?”</li>\n</ul>\n<p>The connection can retrieve findings, comments, activity, scan information and entity details. It can also compare scan results.</p>\n<h3 id=\"mcetoc_1k64lds22kl\">Update findings</h3>\n<p>If your connection has write access and your Glasstrail permissions allow it, you can ask your AI tool to:</p>\n<ul>\n<li>Update a finding’s status.</li>\n<li>Add, edit or delete a comment.</li>\n<li>Assign a finding or change its target date.</li>\n<li>Add or remove tags.</li>\n<li>Manage ticket links.</li>\n<li>Create or update a manual finding.</li>\n</ul>\n<p>For example: “Add a comment to finding [ID]: ‘Review scheduled for 5 November 2026.’”</p>\n<p>The same rules apply as in Glasstrail. For example, changing a finding to <strong>Tolerated</strong> or <strong>Not relevant</strong> requires a comment. Read-only members can only edit findings assigned to them.</p>\n<p>Changes made through a connected tool are attributed to that tool in Glasstrail’s activity trail.</p>\n<h3 id=\"mcetoc_1k64lds22km\">Check the information behind an answer</h3>\n<p>Check which organisation and scan dates the AI tool used. A finding marked as current does not necessarily come from a recent scan.</p>\n<p>Review important findings and changes in Glasstrail. Starting scans remains a task you complete in Glasstrail, not through the MCP connection.</p>\n<p><img src=\"https://portal.helpfruit.com/api/images/b7ddc16d2555452e0f9808da01de68e4/files/glasstrail_ai_example_redacted.png?width=1000&amp;height=\" width=\"800\"></p>\n<h2 id=\"connected-apps\">Review and disconnect connected apps</h2>\n<p>Open <strong>Account &gt; Connected apps</strong> in Glasstrail to review AI tools connected by members.</p>\n<p>The page shows the member, organisation information, app, allowed actions and connection date.</p>\n<p>What you can see depends on your role:</p>\n<ul>\n<li>Members can view and disconnect their own tools.</li>\n<li>Organisation admins can view their members’ connections.</li>\n<li>Account admins can view connections across the account.</li>\n</ul>\n<p>To remove a connection:</p>\n<ol>\n<li>Open <strong>Connected apps</strong>.</li>\n<li>Find the relevant member and app.</li>\n<li>Select <strong>Disconnect</strong>.</li>\n</ol>\n<p>Disconnecting stops that connection’s access immediately.</p>\n<p><img src=\"https://portal.helpfruit.com/api/images/b7ddc16d2555452e0f9808da01de68e4/files/glasstrail_connected_apps_redacted.png?width=1000&amp;height=\" width=\"800\"></p>\n<p>&nbsp;</p>\n<h2 id=\"block-ai-access\">Block AI access</h2>\n<p><em>For account admins</em></p>\n<p>To block every AI tool from accessing the account:</p>\n<ol>\n<li>Open the account details page.</li>\n<li>Find <strong>AI agent access</strong>.</li>\n<li>Clear <strong>Allow AI agents (MCP clients, such as Claude) to access this account’s data</strong>.</li>\n</ol>\n<p>The change applies immediately, including to existing connections. It blocks access but does not disconnect the apps.</p>\n<p>To exclude one organisation instead, clear that organisation’s checkbox. To remove an individual connection, use <strong>Connected apps</strong>.</p>\n<h2 id=\"troubleshoot\">Troubleshoot your connection</h2>\n<h3 id=\"mcetoc_1k64lds22kn\">Your AI tool cannot access an organisation</h3>\n<p>Ask an account admin to check that AI agent access is enabled for both the account and the organisation. Also check that your Glasstrail user has access to that organisation.</p>\n<h3 id=\"mcetoc_1k64lds22ko\">Your AI tool can read findings but cannot update them</h3>\n<p>Check that you approved write access when connecting. Your Glasstrail role and finding permissions must also allow the requested change.</p>\n<h3 id=\"mcetoc_1k64lds22kp\">Your tool is authenticated but requests fail</h3>\n<p>Authentication alone does not guarantee access. An account admin may have blocked AI access or excluded the organisation.</p>\n<p>Check the account settings and whether the connection still appears under <strong>Connected apps</strong> in Glasstrail.</p>\n<p>&nbsp;</p></body></html>","description":"Connect an AI tool (eg Claude) to Glasstrail via MCP to work with Glasstrail data in that tool.","isMarkdown":false,"publishedOnUtc":"2026-11-02T00:16:03.7153639","modifiedOnUtc":"2026-10-29T02:44:34.1291887"}