Reco

Reco's MCP server connects Claude directly to your tenant, so you can query live security data (threat alerts, posture issues, identities, OAuth grants, discovered agents) in plain language. Connect via OAuth, which mirrors your existing Reco permissions, or a scoped API key for automated workflows; either way, access never exceeds what that credential is already authorized to see. Claude can also take action, like adding comments or updating a role, and comes with four guided workflows: resolving an identity across systems, investigating recent activity, running a compliance gap analysis, and surfacing your highest-severity open issues.