Connect an AI assistant

You can connect an AI assistant such as Claude or ChatGPT to Mito and ask it about your results in plain English. For example: “What are our high-risk findings?”, “What changed since last week?” or “Which ISO 27001 controls have weak evidence?”

The assistant connects to the Mito MCP server. MCP (Model Context Protocol) is the standard way AI assistants connect to other services.

What the assistant can and can’t do

• It can read your organisation’s Mito results:
  • the security overview and score;
  • findings and the detail of each one;
  • what changed between assessments;
  • framework coverage;
  • the list of past assessments.
• It can’t change anything, in Mito or in Microsoft 365. Mito has no tools for making changes.
• It sees only your organisation. A key works for one organisation, and only for the person who created it.
• Every request is recorded in your organisation’s AI access log: which assistant, which kind of question, and when. Keys and the answers themselves are never logged.

Anything Mito sends to the assistant is then handled under that assistant’s own terms, like anything else you paste into it. Check that your organisation allows the assistant you use.

Before you start

AI assistants are off for every organisation until you ask for them. To turn them on for your organisation, email mito@virtualpetals.com. Until then, the portal shows “Not turned on” and you can’t create keys.

You also need access to the Mito portal. See Give your people access.

1. Create a key

1. Sign in to the portal at mito-app.virtualpetals.com.
2. Click your initials in the top right and choose Profile and AI access.
3. Under Create a key:
   • give the key a name you’ll recognise, such as “My Claude”;
   • choose how long it lasts: 30, 60 or 90 days;
   • click Create key.
4. Copy the key, which starts with mito_, and keep it somewhere safe until you’ve connected. It is shown only once: Mito stores only a fingerprint of it.

You can have up to 5 active keys.

2. Connect Claude

1. In Claude, open Settings → Connectors and choose Add custom connector.
2. Name it Mito and enter the URL https://mito-mcp.virtualpetals.com/mcp.
3. Choose Connect. A Mito page opens and shows which assistant is asking for access.
4. Paste your key and choose Allow.

In Claude, turn on the Mito connector in a conversation and ask your question.

ChatGPT and other assistants that support custom MCP connectors with sign-in use the same URL and the same steps. Mito accepts only assistants it recognises; if yours isn’t accepted, email us.

Disconnect or revoke

On Profile and AI access:

• Disconnect one assistant to stop it using the key. You can connect it again later with the same key.
• Revoke a key to stop every assistant connected with it. Revoking can’t be undone.

Either takes effect straight away. A key also stops working when it expires, or if your organisation turns AI assistants off.

If someone leaves

A key keeps working until it expires or is revoked, even after the person loses access to the portal. When someone leaves, ask us to revoke their keys or to turn AI assistants off. Short lifetimes, such as 30 days, limit this risk.