MCP server for the Secfix platform

We would like to connect an AI assistant to the platform and programmatically pull compliance data.

Problem / use case: The customer is preparing for ISO certification. They want to pull platform data — policies, controls, and related artifacts — into their AI workflow, then auto-generate a detailed requirements-and-preparation plan for the cert. They also want to push the output into Jira (e.g., create a ticket documenting the requirements and prep plan). Today this is manual.

Proposed capability:

• An MCP server that exposes Secfix data (policies, controls, frameworks, evidence) as queryable resources/tools for MCP-compatible AI clients.

• Read access at minimum; optionally write/action support for downstream integrations (e.g., creating Jira tickets from generated plans).