Questionnaires
Find questions, read, change and approve answers, reopen a questionnaire, and send reminders to the people who still owe answers.
MCPEvident MCP server · v1
Evident MCP server.Your questionnaires, in any AI assistant.
Ask about and act on security questionnaires, evidence, reviews and assignments from any MCP-compatible client, such as Claude, Cursor or Cline. Your role and permissions apply to every call.
URL
https://mcp.trustmind.com/mcp- OAuth 2.1 with PKCE
- Your role and permissions apply
- Every call logged
What your assistant can do.The same work as the app.
Your assistant reaches the same questionnaires, assignments, reviews and knowledge you see in Evident, and nothing you can’t.
Knowledge
Search your knowledge with sources, edit saved knowledge, settle conflicts between sources, and restore an earlier document version.
Portals
Send approved answers to a vendor portal, check the portal for changes, and resolve the differences.
Trust Center
Review access requests, manage audience groups and invites, and publish updates, FAQs and subprocessors.
People and settings
Invite people, change roles, set answer preferences and rules, and choose where notifications go.
Reports
Pull Reporting backlog, throughput and cycle time, and read your billing overview.
Try asking
See my workload
Show what is assigned to me, grouped by due date and customer, with how many questions are unanswered in each questionnaire.
Try asking
Check team queues
How many questions are waiting on the finance team, and which questionnaires are they in?
Try asking
Ask about the security program
What does our current policy say about vendor access reviews? Include the supporting Evident sources.
Try asking
Review answers
Show answers that are ready for review, grouped by questionnaire and customer.
Loading MCP capabilities…
Set up in a few minutes.From any client.
Pick the client you already use. Each path ends at the same sign-in with your Evident account.
Connect Claude.ai
A few short steps and you're set.
1
Open Claude.ai connectors
In claude.ai, open Settings, choose Connectors, then select Add custom connector.
2
Paste the Evident MCP endpoint
Use this URL as the custom connector server URL.
https://mcp.trustmind.com/mcp
3
Sign in to Evident
Claude opens an OAuth popup. Sign in to Evident and approve the connection. Your Evident role decides which tools can read context or take actions.
4
Team / Enterprise (admins)
To roll out for the whole org, open Organization settings -> Connectors -> Add -> Custom -> Web, paste the same URL, and save. Users still authenticate individually via OAuth; their Evident role determines what they can call.
OAuth 2.1 and PKCE.No API keys.
Your Evident permissions
Tool access is decided by the same permissions and roles that protect the app. OAuth scopes are not used as product permissions, and MCP never bypasses them.
No API keys
Sign in with your Evident account and approve the connection. Your client handles the rest. No tokens to copy, no client secrets.
Token storage
Access tokens live for 1 hour and refresh tokens for 30 days. Tokens stored on the server are hashed at rest.
What is logged
Every call records your organization, user, tool, outcome, permission, error type and duration. A view of your own audit trail is on the roadmap.
Your client
Claude · Cursor · Cline
local or cloud
MCP server
https://mcp.trustmind.com/mcp
streamable HTTP
Evident
Your workspace
the same data and permissions as the app
Evident sends MCP tool data only to the client you configure. Cloud clients and their providers may process or keep that data under their own policies. Evident keeps no MCP inputs or outputs beyond the data you already have in Evident. If you can’t see it in the app, the MCP server can’t return it.
Technical details.
Transport
Streamable HTTP at https://mcp.trustmind.com/mcp. Connect your client directly to that URL. The server accepts streamable HTTP POSTs at the /mcp path.
OAuth discovery
The server publishes path-aware OAuth protected resource metadata for the /mcp resource, and authorization server metadata under /mcp, at the standard well-known paths.
Dynamic client registration
Clients register themselves with RFC 7591 metadata. No shared secret needed.
Status and changes
See status.trustmind.com for uptime and What’s new for product changes.