Connecting Claude gives it no extra access. Every tool runs as you, in the organization you chose when you connected.

What decides which tools Claude sees

Three things are checked every time Claude lists or calls a tool:

  1. Membership. You must still be a member of the organization.
  2. Active modules. A module's tools only appear while the organization has that module active. Third-party risk management, privacy policies and notices, cookie consent, privacy rights, and website accessibility are separate modules.
  3. Your role. Each tool uses the same permission as the app, such as canViewVendors, canManagePrivacy, canViewConsent, canManagePrivacyRights, or canManageAccessibility. With view permission you get the read tools. With manage permission you also get the tools that create, change, archive, or delete. Deleting is part of manage; there's no separate delete permission.

Changes apply straight away. If a module is turned on, its tools appear the next time Claude lists tools, without signing in again. If a module is paused or its subscription lapses, its tools disappear and any call fails with "Module … is not enabled for this organization."

When Claude asks first

  • Read tools run without asking.
  • Tools that change existing data (update, publish, copy, archive, delete, cancel, restore) are marked so Claude asks you before running them.
  • High-impact tools also need confirm: true in the call. These delete or archive records, cancel runs or scans, restore a previous version, publish cookie consent settings to the CDN, start a cookie scan, or create a website that uses a paid licence. Without it, the call is refused and the reply explains what would happen.
  • Tools that only add something new (create a record, start a run or scan) are not marked as changing data, but still need manage permission.

Sign-in and tokens

  • Sign-in uses OAuth with PKCE. The scope is core-grc.
  • An access token lasts up to 30 days. Refresh tokens are replaced each time they're used, expire after 30 days unused, and stop working 90 days after you connected. After that, connect again.
  • If your organization requires two-factor sign-in and you haven't set it up, the connection is revoked.

What's recorded

Changes made through the connector are saved with source mcp, and changes made with the Core GRC CLI with source cli, so they can be told apart from changes made in the app.

The CLI uses the same permissions. It also has Core IQ full reviews (tprm_start_full_review, tprm_get_full_review_status), which aren't available in Claude because they're long-running and count against your plan's review quota.