Skip to content
Contact us
  • There are no suggestions because the search field is empty.

Creating a custom MCP connection with Security Journey

Add Security Journey to ChatGPT, Claude, and more in less than 5 minutes.

About the Security Journey MCP

The new Security Journey MCP connector lets you manage Assignments in Security Journey directly from Claude.
 

Today, you'll be able to do the following within an Assignment as an Admin in Security Journey:

  1. Add users
  2. Get the status of the overall Assignment
  3. Get individual user statuses, down to how many lessons they've completed
  4. Leverage your AI tool's capabilities to take the next steps with the information provided by Security Journey

New tooling will continue to be added to the MCP over time.

Connecting the Security Journey MCP

A Security Journey MCP connection allows you to leverageis tied to the tenant selected during its OAuth sign-in.

Switching tenants in the Security Journey web app does not change an existing AI connection. To use a different tenant, create or authenticate a separate connection for that tenant (instructions, below).

Before you begin

  • You must be an admin in every tenant you want to connect.
Server URLs
Use case Server URL
Standard MCP connection https://my.securityjourney.com/mcp
Tenant-specific connection for acme https://my.securityjourney.com/mcp/tenant/acme

Connecting a single tenant

If you only want to connect a single tenant to your AI client, use the standard Security Journey server URL.

If you are an admin in only one tenant, Security Journey connects that tenant automatically. If prompted to choose a tenant, select the tenant you want this connection to use. Your AI connection continues to use the tenant selected during sign-in, even if you later switch tenants in the Security Journey web app.

Connecting Claude

  1. In Claude, open Settings → Connectors → Add custom connector.
  2. Enter a recognizable connector name, such as Security Journey.
  3. Paste the standard server URL into MCP server URL:
   https://my.securityjourney.com/mcp
  1. Select Continue.
  2. Under Authentication, select Sign in now.
  3. Under OAuth client, select Use Claude’s published identity.
  4. Select Add, then complete Security Journey sign-in.
  5. If prompted, select the tenant you want Claude to use.

Connecting ChatGPT

  1. In ChatGPT, open Settings → Plugins.
  2. Select Add, then select Add MCP server.
  3. Give the server a recognizable name, such as Security Journey.
  4. Select Streamable HTTP as the server type.
  5. Paste the standard server URL into the URL field:
   https://my.securityjourney.com/mcp
  1. Select Save.
  2. On the Plugins page, select Authenticate for the new server.
  3. Sign in with Security Journey.
  4. If prompted, select the tenant you want ChatGPT to use.

Connecting to multiple Security Journey tenants

Connecting Claude 

Create one Claude connector for each Security Journey tenant.

  1. In Security Journey, switch to the tenant you want to connect.
  2. Navigate to Admin → Connections → MCP.
  3. Copy the tenant’s server URL:
   https://my.securityjourney.com/mcp/tenant/<tenant>
  1. In Claude, open Settings → Connectors → Add custom connector.
  2. Enter a recognizable connector name, such as Security Journey — <Your Tenant Name>.
  3. Paste the tenant-specific URL into MCP server URL.
  4. Select Continue.
  5. Under Authentication, select Sign in now.
  6. Under OAuth client, select Use Claude’s published identity.
  7. Select Add, then complete Security Journey sign-in.
  8. Repeat these steps for every additional tenant, using a different tenant-specific URL and connector name.

Each tenant-specific URL creates a separate OAuth resource. The resulting connection is limited to that tenant.

Important: do not use Claude request-header tokens for tenant isolation

Claude request-header tokens are shared across the entire Claude organization. Treat a request-header token as an organization-wide credential:

  • It is not limited to one Claude user.
  • It is not a safe substitute for a tenant-specific OAuth connection.
  • Do not configure a tenant credential in a request header if other people in the Claude organization should not be able to use that tenant’s Security Journey access.

Use OAuth and tenant-specific server URLs instead.

Connecting ChatGPT 

ChatGPT uses the standard Security Journey server URL:

https://my.securityjourney.com/mcp

To add a connection:

  1. In ChatGPT, open Settings → Plugins.
  2. Select Add, then select Add MCP server.
  3. Give the server a recognizable name, such as Security Journey - <Tenant Name>.
  4. Select Streamable HTTP as the server type.
  5. Paste the standard server URL into the URL field.
  6. Select Save.
  7. On the Plugins page, select Authenticate for the new server.
  8. Sign in with Security Journey.
  9. When prompted, select the tenant for this connection.

To connect another tenant, repeat the process with the same standard server URL and select the other tenant during sign-in.

Use a pre-registered Client ID

Most Claude and ChatGPT setups do not need a Client ID. Create one only when your AI client does not support automatic registration, requires a Client ID, or your organization needs a client-specific kill switch.

A Client ID is owned by one Security Journey tenant.

  1. In Security Journey, switch to the tenant that should own the connection.
  2. Go to Connections → MCP.
  3. Under Client IDs, select Create Client ID.
  4. Copy the Client ID and Server URL shown after creation.
  5. Configure your AI client with both values.
  6. Keep the Client ID and server URL paired with the same tenant.

Do not mix a Client ID from one tenant with a tenant-specific URL for another tenant. Security Journey rejects that combination.

Troubleshooting

The connection is using the wrong tenant

Switching tenants in the Security Journey web app does not update an existing AI connection.

For Claude, verify that the connector uses the intended URL:

https://my.securityjourney.com/mcp/tenant/<tenant>

If needed, remove the connector and create it again with the correct tenant URL.

If you set up the connection with a Client ID, verify that the Client ID is owned by the intended tenant. If needed, create a new Client ID in the correct tenant and configure your AI client with that new Client ID.

I do not see a tenant picker

This is expected in the following cases:

  • You set up the connection with a tenant-specific URL.
  • You set up the connection with a Client ID.

In either case, Security Journey does not ask you to choose another tenant during sign-in.

The connection says authorization is invalid or expired

Reconnect the MCP server and complete OAuth sign-in again. If the problem continues, confirm that you are an admin in the tenant you are trying to connect.