The ComplyJet connector lets an AI app read your compliance program and, if you allow it, make changes for you. You connect once, sign in with your ComplyJet account, and then ask questions in plain words.
Before you start
You need a ComplyJet Admin account. Other roles are stopped at the sign-in step.
The connector address is https://api.complyjet.com/mcp.
The AI app only ever sees the organization you pick when you sign in.
Claude (web and desktop)
In Claude, open Customize → Connectors.
Click Add → Add custom connector.
Enter the name ComplyJet and the URL https://api.complyjet.com/mcp, then click Continue and Add, keeping the sign-in options Claude detects.
Click Connect next to ComplyJet. A ComplyJet window opens.
Sign in to ComplyJet and choose your organization.
Decide whether Claude may make changes (see below), then click Connect.
On a Team or Enterprise plan, an owner adds the connector for the workspace first. Each person then clicks Connect and signs in with their own ComplyJet account.
ChatGPT
In ChatGPT on the web, open Settings → Connectors → Advanced and turn on Developer mode.
Go back to Connectors and click Create.
Enter the name ComplyJet and the URL https://api.complyjet.com/mcp, with OAuth as the authentication.
Sign in to ComplyJet, choose your organization and click Connect.
Developer mode is available on ChatGPT Plus and Pro, on the web only.
Claude Code
Run this in your terminal:
claude mcp add --transport http complyjet https://api.complyjet.com/mcp
Then start Claude Code, type /mcp, pick complyjet and choose Authenticate. Your browser opens the ComplyJet sign-in.
Allowing changes
On the ComplyJet sign-in screen there is a switch, Allow (app name) to make changes.
Off (default): the app can only read your data.
On: the app can also create and update records, such as risks, vendors and vendor reviews. Depending on your AI app's settings, it can ask you before each change.
The connector can never delete anything or approve a policy, whichever way the switch is set. To change the setting later, disconnect and connect again.
Disconnecting
Remove ComplyJet from the AI app's connector settings (in Claude Code, run claude mcp remove complyjet). Access also ends on its own if your ComplyJet account is deactivated or is no longer an Admin.
What you can do with the ComplyJet connector
Once connected, you can ask an AI app about your compliance program in plain words, and with changes allowed, have it update records for you. It works on the organization you chose when you signed in.
What it can read
Area | What the app sees |
Frameworks | The frameworks you're working towards and how ready you are |
Controls | Enabled controls, their owner, category and linked tests and documents |
Tests | Automated tests that are failing or erroring |
Policies | Approval status, owner and linked frameworks |
Risks | Inherent and residual scores and treatment plans |
Vendors | Vendors with their review data and owners |
People | Start and end dates and background check status |
Devices | Ownership, disk encryption and antivirus |
Vulnerabilities | Severity, status and the affected system |
Documents | Evidence documents and their status |
What it can change (with changes allowed)
Add risks and update their scores or treatment plans
Add vendors by website, and start, update or complete vendor reviews
Change a control's owner, switch a control on or off, and link or unlink its tests and documents
Start a new draft version of a policy
Attach a web link as evidence on a document
Update a person's employment status, for example when someone leaves
Close a vulnerability once it's fixed, or dismiss it with a reason
Open or close tickets in your connected task tracker, such as Jira or Linear
Your AI app can ask you before every change; check its tool permission settings. It can't delete anything or approve a policy.
Things to try
"How ready are we for SOC 2?"
"Which tests are failing right now, and what should we fix first?"
"Which policies are still in draft, and who owns them?"
"Which vendors haven't been reviewed yet?"
"Add a risk for a lost or stolen laptop, mitigated by disk encryption."
"Open a Jira ticket to fix the failing MFA test."
Security and privacy
Only ComplyJet Admins can connect, and each person signs in with their own account.
The app only reaches the one organization chosen at sign-in.
Your access is checked on every request. If your account is deactivated or loses the Admin role, the connection stops working right away.
Each change made through the connector is logged with the person who connected.
The AI app processes the data it reads under its own terms. Check your AI provider's data settings if that matters for your organization.