VComply

VComply MCP lets Claude work with your VComply GRC account over Model Context Protocol. After you sign in with OAuth, Claude can discover your programs and responsibility centers, list and inspect responsibilities and due dates, check compliance performance, add comments, attach evidence through a secure browser upload page, and mark assigned work complete. Key capabilities: - Look up who you are in VComply (`current_user`) - List programs and responsibility centers - Search and filter responsibilities (active, overdue, upcoming, not completed) - Fetch responsibility details and due-date schedules - View compliance performance for a program or responsibility center - Request a short-lived browser upload page for evidence or comment attachments (file bytes never go through Claude or MCP tool arguments) - Confirm uploads, then complete responsibilities or add comments with file refs How evidence upload works: Claude calls `request_evidence_upload`, you open the returned `uploadPageUrl` in your browser, upload the file to secure storage, then Claude confirms the session and attaches the file reference when completing work or commenting. Security notes: - OAuth 2.0 against your VComply login - Read tools are annotated `readOnlyHint`; write tools are annotated `destructiveHint` - Calls go only to VComply first-party APIs