Integration · Developer tools

Connect Claude & ChatGPT to UpGuard

Ask your AI which security risks are open on your own domains and IPs, how a vendor is rated, or which vendors share a given risk. It reads UpGuard CyberRisk data on vendors, risks, vulnerabilities, breaches, threats and questionnaires. It can also start monitoring a vendor, set its tier, add vendor contacts and send security questionnaires, with your approval if you want it.

Connect UpGuard free

Free plan, no credit card. Takes about a minute.

Try asking

“What are the critical risks on our domains right now?”
The AI lists the active risks on your own domains and IPs from the severity you ask for and up.
“What is the security rating of acme.com?”
It looks up the vendor by hostname and reads its details and security rating.
“Which of our vendors have this risk?”
It lists the vendors that have the given risk, and can filter them by tier, label or score.

What your AI can do

Your own assets

Monitored domains and IPs, active risks and risk changes, potential vulnerabilities (CVEs) and look-alike domains.

Vendor risk

Vendor ratings, risks, domains, contacts, assessments and questionnaires, plus monitoring, tiers and new questionnaires.

Breaches and threats

Breached identities, breach details, threat-monitoring findings and recent notifications.

“What changed on our own assets since Monday?”
It lists the risks that were added or resolved on your domains and IPs in that period.
“Start monitoring newvendor.com and put it in tier 2.”
It starts monitoring the vendor by hostname and sets its tier.
“Send our standard security questionnaire to Acme's security contact, due in two weeks.”
It finds the questionnaire type and the vendor contact and sends the questionnaire. The vendor is emailed right away.

143 tools for UpGuard

These tools are switched on when you connect. You can switch any of them off, or require your approval before it runs.

add_a_vipChanges dataCreate a new supplier. Required: email. Search suppliers first to avoid duplicates. API summary: Add a VIP.
add_remediation_request_to_threatChanges dataCreate a new supplier. Required: uuid or email. Search suppliers first to avoid duplicates. API summary: Add remediation request to threat.
add_trust_center_subscribersChanges dataCreate a new supplier. Required: emails. Search suppliers first to avoid duplicates. API summary: Add Trust Center subscribers.
add_trust_center_updateChanges dataCreate a new supplier. Required: trust center uuid, body, category or headline. Search suppliers first to avoid duplicates. API summary: Add Trust Center update.
approve_ndaVisible to othersApprove a nda. Has effects visible outside this system. API summary: Manually approve a user's NDA.
approve_requestVisible to othersApprove a request. Has effects visible outside this system. API summary: Approve Trust Center access request.
archive_documentVisible to othersArchive a document. Has effects visible outside this system. API summary: Archive content library document.
create_a_comment_on_a_questionnaireChanges dataCreate a new supplier. Required: author email address, questionnaire id or text. Search suppliers first to avoid duplicates. API summary: Create a comment on a questionnaire.
create_editChanges dataCreate a new edit. Required: update uuid, body, category or headline. API summary: Edit Trust Center update.
create_hostnameVisible to othersCreate a new hostname. Has effects visible outside this system. API summary: Register a list of hostnames to be scanned for risks.
create_queueChanges dataCreate a new queue. Required: report type. API summary: Queue a report export.
create_relationship_questionnaireChanges dataCreate a new relationship questionnaire. API summary: Send a relationship questionnaire about a vendor.
create_revokeChanges dataCreate a new revoke. Required: email. API summary: Revoke Trust Center access.
create_revoke_revoke_trust_center_nda_accessChanges dataCreate a new revoke. Required: email. API summary: Revoke a user's NDA.
create_setChanges dataCreate a new set. Required: email or mode. API summary: Set Trust Center access.
create_supplierChanges dataCreate a new supplier. Required: uuid or content. Search suppliers first to avoid duplicates. API summary: Add comment to threat.
create_unmonitorChanges dataCreate a new unmonitor. API summary: Stop monitoring a vendor.
create_userChanges dataCreate a new user. Required: uuid or investigator email. Search users first to avoid duplicates. API summary: Update threat's investigator.
create_vendor_contactChanges dataAdd a contact to a vendor by `vendor_id` with a `name` and optional `email_address`, `title` and phone.
create_webhookDeletesCreate a new webhook. Required: name, hook url or notification type ids. Destructive action; may require approval.
delete_deletesDeletesPermanently delete a delete. Destructive action; may require approval. API summary: Delete content library document.
delete_domainsMoves moneyPermanently delete a domain. Financial or irreversible action; may require approval. API summary: Remove custom domains.
delete_hostnamesMoves moneyPermanently delete a hostname. Financial or irreversible action; may require approval. API summary: Deregister a list of hostnames.
delete_ipsMoves moneyPermanently delete a ip. Financial or irreversible action; may require approval. API summary: Remove custom ips.
delete_subscriptionsDeletesPermanently delete a subscription. Destructive action; may require approval. API summary: Remove Trust Center subscribers.
delete_trust_center_updateDeletesPermanently delete a delete. Destructive action; may require approval. API summary: Delete Trust Center update.
delete_webhooksMoves moneyPermanently delete a webhook. Financial or irreversible action; may require approval.
download_document_versionDownload the document for a document. API summary: Download content library document version.
get_breachGet details of one data breach by `id`.
get_content_library_document_historyList documents. Optional filters: uuid. Results are paginated. API summary: Get content library document history.
get_disclosure_statusChanges dataGet the current status of a disclosure. API summary: Update the status of a disclosure.
get_domainGet details and risks for one of your domains by `hostname`.
get_hostnameGet one hostname by hostname. API summary: Get the details for a hostname.
get_ipGet details for one of your IP addresses by `ip`.
get_organisationGet your UpGuard organisation's details. Use to confirm which account you are working in.
get_questionnaireGet one vendor questionnaire by `id`, with its status, due date and score.
get_report_statusGet the current status of a report. API summary: Get the status of an exported report.
get_risk_detailsGet the description and remediation advice for one risk type by `risk_id`.
get_threatGet one threat-monitoring finding by `uuid`.
get_threat_2Get one threat. API summary: Count threats.
get_trust_center_subscriptionsList suppliers. Results are paginated. API summary: Get Trust Center subscriptions.
get_vendorGet a vendor's details and security rating by `id` or `hostname`.
get_vendor_hostnames_affected_by_a_riskList hostnames. Optional filters: risk id, vendor id or vendor primary hostname. API summary: Get vendor hostnames affected by a risk.
list_a_user_appsList suppliers. Optional filters: sort by, sort dir or id. Results are paginated. API summary: List a user apps.
list_a_user_identity_breachesList suppliers. Optional filters: sort by, sort dir or id. Results are paginated. API summary: List a user identity breaches.
list_a_user_permissionsList suppliers. Optional filters: sort by, sort dir or id. Results are paginated. API summary: List a user permissions.
list_access_logsList access logs. Results are paginated. API summary: Get Trust Center access log.
list_accessesList accesses. API summary: Get Trust Center access.
list_additionalevidencesList additionalevidences. Optional filters: evidence ids or zip. API summary: Retrieve (one or more) vendor additional evidence documents by id.
list_allsList alls. Optional filters: vendor labels, vendor label ids match all, include unlabeled, min score, max score or name prefix. Results are paginated. API summary: Get portfolio risk profile overview.
list_answersList answers. Optional filters: id. API summary: Get questionnaire questions and answers.
list_app_categoriesList suppliers. Optional filters: sort by or sort dir. Results are paginated. API summary: List app categories.
list_app_permissionsList suppliers. Optional filters: sort by, sort dir or app name. Results are paginated. API summary: List app permissions.
list_app_usersList suppliers. Optional filters: sort by, sort dir or app name. Results are paginated. API summary: List app users.
list_appsList suppliers. Optional filters: sort by, sort dir, usage policy outcomes, usage policy sources, categories or sources. Results are paginated. API summary: List apps.
list_assessmentsList assessments. Optional filters: id or version number. API summary: Get vendor assessment details.
list_breached_identitiesList your people's identities found in known data breaches, optionally for one `breach_id`.
list_contactsList contacts. Optional filters: id. API summary: Get a vendor contact by ID.
list_content_library_document_typesList suppliers. API summary: List content library document types.
list_content_library_documentsSearch suppliers by filter name, filter document types, filter added to any trust center or archived. Use this to find existing suppliers before creating a new supplier. Results are paginated. API summary: List content library documents.
list_customsList customs. API summary: Get the list of custom report templates defined for the account.
list_detailsList details. Optional filters: domain. API summary: Retrieve typosquat details for a domain.
list_diffs_vendor_risks_diffList diffs. Optional filters: vendor primary hostname, start date, end date or include sources. API summary: Get a list of risk changes for a vendor.
list_diffs_vendors_risks_diffList diffs. Optional filters: start date or end date. Results are paginated. API summary: Get a list of risk changes for monitored vendors.
list_disclosuresList disclosures. Optional filters: min time, max time, statuses or ids. API summary: Get a list of disclosures.
list_documentsList documents. Optional filters: uuid. API summary: Get content library document.
list_documents_attachmentList documents. Optional filters: attachment ids or zip. API summary: Retrieve (one or more) vendor questionnaire attachments by id.
list_domainsList your own monitored domains, optionally filtered by `labels` or active/inactive.
list_domains_vendor_domain_detailsList domains. Optional filters: vendor primary hostname or hostname. API summary: Retrieve details for a domain.
list_fourth_party_vendorsList suppliers. Optional filters: labels, tier, min score, max score or portfolios. Results are paginated. API summary: List fourth party vendors.
list_hostnamesList hostnames. Optional filters: sort desc, omit scan info, omit vendor, omit labels, exclude active or exclude inactive. Results are paginated. API summary: List hostnames and their risks.
list_identity_breach_usersList suppliers. Optional filters: sort by, sort dir or id. Results are paginated. API summary: List identity breach users.
list_identity_breachesList suppliers. Optional filters: sort by, sort dir, statuses, breach date min, breach date max or published date min. Results are paginated. API summary: List identity breaches.
list_inbound_questionnairesSearch suppliers by sort by, sort dir or filter text. Use this to find existing suppliers before creating a new supplier. Results are paginated. API summary: List inbound questionnaires.
list_ipsList your own monitored IP addresses, optionally filtered by `labels`.
list_ips_vendor_ip_detailsList ips. Optional filters: vendor primary hostname or ip. API summary: Retrieve details for an IP address.
list_labelsList labels. API summary: Get the list of registered labels.
list_messagesList messages. Optional filters: id. API summary: Get questionnaire comments.
list_my_risk_changesList risks that were added or resolved on your own assets between `start_date` and optional `end_date`.
list_my_risksList the active security risks found on your own domains and IPs, optionally from `min_severity` up.
list_notification_typesList notification types. API summary: Webhook notification types.
list_notificationsList recent UpGuard notifications (rating changes, new risks and more).
list_onboarding_requestsList onboarding requests. Optional filters: id. API summary: Get onboarding request details.
list_permission_appsList suppliers. Optional filters: sort by, sort dir or id. Results are paginated. API summary: List permission apps.
list_permission_usersList suppliers. Optional filters: sort by, sort dir or id. Results are paginated. API summary: List permission users.
list_permissionsList suppliers. Optional filters: sort by, sort dir, categories, access level or exposure level. Results are paginated. API summary: List permissions.
list_potential_vulnerabilities_of_a_vendorList suppliers. Optional filters: primary hostname. API summary: List potential vulnerabilities of a vendor.
list_questionnaire_typesList the questionnaire types you can send, with their IDs.
list_rangesList ranges. Optional filters: labels, sort by or sort desc. Results are paginated. API summary: Get a list of ip ranges.
list_rolesList suppliers. Optional filters: sort by or sort dir. Results are paginated. API summary: List roles.
list_samplesList samples. Optional filters: id or notification type ids. API summary: Webhook example data.
list_statsList stats. API summary: Get statistics around registered bulk hostnames.
list_subdiary_ipsList ips. Optional filters: subsidiary primary hostname, labels, sort by or sort desc. Results are paginated. API summary: List subdiary ips.
list_subsidiariesList subsidiaries. API summary: Get a list of subsidiaries.
list_subsidiary_domainsList domains. Optional filters: subsidiary primary hostname, active, inactive, labels, sort by or sort desc. Results are paginated. API summary: List subsidiary domains.
list_subsidiary_ip_rangesList ranges. Optional filters: subsidiary primary hostname, labels, sort by or sort desc. Results are paginated. API summary: List subsidiary ip ranges.
list_suppliersList suppliers. Optional filters: category or severity. API summary: Get a list of available risks in the platform.
list_suppliers_list_trust_centersList suppliers. API summary: List Trust Centers.
list_suppliers_vendor_questionnaire_risks_v2List suppliers. Optional filters: vendor id, primary hostname, questionnaire id or ignore waived risks. Results are paginated. API summary: (V2) Get a list of questionnaire risks for one or more watched vendors or a specific questionnaire.
list_teamsList suppliers. Optional filters: sort by or sort dir. Results are paginated. API summary: List teams.
list_threatsList threat-monitoring findings (leaked data, dark web mentions and more), filtered by severity, type, status or date period.
list_trust_centersList trust centers. Optional filters: uuid. API summary: Get Trust Center.
list_typosquat_domainsList the typosquatting (look-alike domain) monitoring results for your domains.
list_usersList suppliers. Optional filters: sort by, sort dir, teams, roles or app names. Results are paginated. API summary: List users.
list_vendor_additional_evidence_instancesList suppliers. Optional filters: vendor primary hostname. Results are paginated. API summary: List vendor additional evidence instances.
list_vendor_assessmentsList risk assessments, optionally for one vendor (`vendor_id` or `vendor_primary_hostname`) or by `status`.
list_vendor_contactsList contacts for a vendor by `vendor_id` or `vendor_primary_hostname`.
list_vendor_documentsList documents. Optional filters: vendor primary hostname. Results are paginated. API summary: List vendor documents.
list_vendor_domainsList the domains of a vendor by `vendor_primary_hostname`.
list_vendor_ip_rangesList ranges. Optional filters: vendor primary hostname, labels, sort by or sort desc. Results are paginated. API summary: List vendor ip ranges.
list_vendor_ipsList ips. Optional filters: vendor primary hostname, labels, sort by or sort desc. Results are paginated. API summary: List vendor ips.
list_vendor_questionnaire_attachmentsList suppliers. Optional filters: questionnaire id. Results are paginated. API summary: List vendor questionnaire attachments.
list_vendor_questionnairesList security questionnaires sent to vendors, optionally for one vendor.
list_vendor_risksList the security risks of a vendor by `primary_hostname`, optionally from `min_severity` up.
list_vendorsList the vendors you monitor, with their ratings; set `include_risks` to add their risks. Use to find a vendor's ID or hostname.
list_vendors_with_riskList which of your vendors have a given risk (`risk_id`), optionally filtered by tier, label or score.
list_versionsList versions. Optional filters: id or status. API summary: List vendor assessment versions.
list_vipsList vips. Optional filters: sort by. Results are paginated. API summary: Get a list of VIPs.
list_vulnerabilitiesList potential vulnerabilities (CVEs) detected on your own assets, optionally filtered by `labels`.
list_webhooksList webhooks.
monitor_vendorChanges dataStart monitoring a vendor by `hostname` (or `id`), optionally setting its `tier` and `labels`.
reject_requestVisible to othersReject a request. Has effects visible outside this system. API summary: Reject Trust Center access request.
remove_a_vipDeletesPermanently delete a delete. Destructive action; may require approval. API summary: Remove a VIP.
reopen_threatVisible to othersReopen a threat. Has effects visible outside this system. API summary: Reopen threat.
retrieve_details_for_a_domainList domains. Optional filters: subsidiary primary hostname or hostname. API summary: Retrieve details for a domain.
retrieve_details_for_an_ip_addressList ips. Optional filters: subsidiary primary hostname or ip. API summary: Retrieve details for an IP address.
retrieve_one_or_more_vendor_documents_by_idList documents. Optional filters: document ids or zip. API summary: Retrieve (one or more) vendor documents by id.
search_suppliersSearch suppliers by sort by, sort desc, status, archived or filter text. Use this to find existing suppliers before creating a new supplier. Results are paginated. API summary: List onboarding requests.
search_usersSearch users by email, org name or org primary hostname. Use this to find existing users before creating a new user. API summary: Get Trust Center access for a user.
send_vendor_questionnaireVisible to othersSend a security questionnaire of type `questionnaire_type_id` to a vendor's `recipients`, from `sender_email`, with a `due_date`. Emails the vendor contacts right away.
set_vendor_tierVisible to othersSet the tier of a monitored vendor by `vendor_primary_hostname` and `tier`.
submit_remediation_requestVisible to othersClose a remediation request. Has effects visible outside this system. API summary: Close threat's remediation request.
submit_threatVisible to othersClose a threat. Has effects visible outside this system. API summary: Close threat.
update_a_vendor_contactChanges dataCreate a new user. Search users first to avoid duplicates. API summary: Update a vendor contact.
update_app_usage_policyChanges dataCreate a new user. Required: app name or base rule. Search users first to avoid duplicates. API summary: Update app usage policy.
update_content_library_documentChanges dataCreate a new user. Required: uuid. Search users first to avoid duplicates. API summary: Update content library document.
update_default_usage_policyChanges dataCreate a new user. Required: base rule. Search users first to avoid duplicates. API summary: Update default usage policy.
update_domainsVisible to othersUpdate an existing domain. Has effects visible outside this system. API summary: Add custom domains.
update_hostname_labelsVisible to othersUpdate an existing label identified by hostname. Has effects visible outside this system. API summary: Assign new labels to a hostname.
update_ipsVisible to othersUpdate an existing ip. Has effects visible outside this system. API summary: Add custom ips.
update_labelsVisible to othersUpdate an existing label. Has effects visible outside this system. API summary: Assign labels to a domain.
update_questionnaire_statusChanges dataCreate a new user. Required: questionnaire id, new status or author email address. Search users first to avoid duplicates. API summary: Update questionnaire status.
update_suppliersVisible to othersUpdate an existing supplier. Has effects visible outside this system. API summary: Assign or update the attributes for a vendor.

Set up in three steps

1
Pick the app
Create a free HeyMyApps account and choose UpGuard from the app list.
2
Paste your key
Paste an UpGuard API key. In UpGuard CyberRisk open Account Settings and find or generate an API key.
3
Add the link to your AI
You get a personal MCP link. Add it to Claude, ChatGPT or Cursor:
1. Click your name, then Settings › Connectors › Add custom connector.
2. Paste your link as the Remote MCP server URL.
3. Switch it on from the + menu in a chat.

Questions

What can the AI do in UpGuard?

The AI can read your organization, domains, IPs, risks, risk changes, vulnerabilities, typosquatting results, breaches, breached identities, threats, notifications and vendors with their risks, contacts, assessments and questionnaires. It can start monitoring a vendor, set a vendor's tier, add a vendor contact and send a security questionnaire.

Does the AI see my UpGuard API key?

No. Your UpGuard API key is encrypted at rest and never shown to the AI. After you save it, it is not shown again, not even to you. The AI only sees the results of the tools it calls.

Can I control what the AI is allowed to do?

Yes. You choose which tools are switched on, so you can start read-only. Sending a questionnaire emails the vendor's contacts right away and changing a vendor's tier affects how you track it, and both can require your approval before they run. Every tool call is logged.

Does it work with ChatGPT?

Yes. In ChatGPT go to Settings › Apps & Connectors › Advanced and turn on Developer mode, then add your HeyMyApps link. Developer mode needs a paid ChatGPT plan: Plus, Pro, Business or Enterprise. The same link also works in Claude (Settings › Connectors › Add custom connector), Cursor and other MCP clients.

What does it cost?

HeyMyApps has a free plan with no credit card required. Paid plans bill per completed task. You also need your own UpGuard account.

Does it cover my own assets or only vendors?

Both. For your own organization the AI reads monitored domains and IPs, active risks, risk changes, potential vulnerabilities, typosquatting results, breached identities and threat findings. For vendors it reads ratings, risks, domains, contacts, assessments and questionnaires.