Scytale has launched Scytale MCP, a Model Context Protocol server that lets AI tools query compliance data directly. According to Help Net Security, tools such as Claude and ChatGPT can use plain language to build reports, populate dashboards, or answer status questions instead of navigating screens and assembling results from manual exports.
The initial release is deliberately read-only. Every action available to a connected tool is a query, so no controls can be closed, audits approved, or statuses changed. Connections use OAuth, are scoped to a single company, are hosted per region, and every call is logged, making MCP activity as visible as activity through the user interface.
The next phase will add a single scoped write capability: an AI tool will be able to attach manual evidence to the correct control or monitoring item on a customer's behalf. Scytale MCP is client-agnostic and works with any MCP-compliant client, including Claude, ChatGPT, or a customer's own internal agent. The MCP standard was introduced by Anthropic in late 2024 and has since been adopted across major AI clients.