These tools are available in Claude and in the Core GRC CLI. Claude only sees a module's tools when your organization has that module active, and only the tools your role allows (see Permissions). The lists are refreshed each time Claude asks for them.

Type column:

  • Read: only reads. Claude runs it without asking.
  • Add: creates something new or starts a job. Needs manage permission.
  • Change: changes existing data. Claude asks you first.
  • Confirm: Claude asks you first, and the call must include confirm: true.

Record types in third-party risk management are singular: vendor, asset, service, element, processing-activity, ai-system.

Platform

Always available.

Tool Type What it does
coregrc_whoami Read Your user, role, organization, active modules, and view or manage access per module
coregrc_find_tool Read Finds a tool by exact name or by searching names and descriptions
coregrc_read_resource Read Reads a coregrc:// resource, such as a guide, the organization, or a record summary

Third-party risk management (tprm_)

Register

Tool Type What it does
tprm_list_entities Read Lists register records of one type, with paging and filters
tprm_get_entity Read Gets one record
tprm_get_entities_by_ids Read Gets several records by id
tprm_list_entity_summaries Read Lists id and name only, for picking or linking records
tprm_get_dashboard Read Overview counts, upcoming items, and the organization's risk level
tprm_create_vendor, tprm_create_asset, tprm_create_service, tprm_create_element, tprm_create_processing_activity, tprm_create_ai_system Add Creates a record of that type, including your enabled custom fields
tprm_update_entity Change Updates fields on any register record
tprm_archive_entity Confirm Hides a record from default lists. Can be undone
tprm_unarchive_entity Add Restores an archived record
tprm_delete_entity Confirm Permanently deletes a record. Its documents are removed, open workflow runs cancelled, and assessments archived

Risks and issues

Tool Type What it does
tprm_list_risks, tprm_list_issues Read Lists the risk or issue register
tprm_get_risk_analytics Read Heatmap, appetite, and top risks
tprm_create_risk, tprm_create_issue Add Creates a risk or issue
tprm_update_risk, tprm_update_issue Change Updates a risk or issue
tprm_archive_risk, tprm_archive_issue Confirm Archives a risk or issue. Can be undone
tprm_delete_risk, tprm_delete_issue Confirm Permanently deletes a risk or issue

Assessments

Tool Type What it does
tprm_list_templates Read Lists assessment form templates
tprm_create_template Add Creates an assessment template from a name and a list of questions. Counts toward your plan's template limit
tprm_update_template Change Changes a template's name, description, category or questions
tprm_delete_template Confirm Permanently deletes a template. Assessments already run from it are kept
tprm_list_assessments, tprm_get_assessment Read Lists assessments or gets one with its results
tprm_start_assessment_job Add Starts an assessment of a record against a template, using its documents and public web evidence
tprm_get_assessment_job_status Read Checks progress of an assessment job
tprm_archive_assessment Confirm Archives an assessment. Can be undone
tprm_delete_assessment Confirm Permanently deletes an assessment

Documents

See Documents for the upload steps.

Tool Type What it does
tprm_list_documents Read Lists documents for the organization or one record
tprm_list_entity_document_refs Read Lists documents attached to a record
tprm_get_document Read Gets a document's details, and its extracted text if you ask
tprm_create_document_upload_url Add Creates a 15-minute upload link for a file
tprm_create_document Add Adds an uploaded file or a web link to a record, or attaches an existing document
tprm_update_document Change Updates a document's name, category, description, or tags
tprm_delete_document Confirm Permanently deletes a document

Trust data and vendor intelligence

Tool Type What it does
tprm_get_trust_centre Read The trust and security profile shown for a record
tprm_search_vendor_intel, tprm_get_vendor_intel_company Read Searches the vendor intelligence catalog or gets one company
tprm_store_vendor_intel Change Saves catalog data onto a record
tprm_copy_entity_trust Change Copies legal-entity or trust-centre data from one record to another

AI incidents

Tool Type What it does
tprm_list_ai_incidents, tprm_get_ai_incident Read Lists AI incidents or gets one
tprm_create_ai_incident Add Reports an AI incident
tprm_update_ai_incident Change Updates an AI incident
tprm_delete_ai_incident Confirm Permanently deletes an AI incident

Privacy policies and notices (policy_)

Tool Type What it does
policy_list_policies, policy_get_policy Read Lists policies or gets one with its sections
policy_list_notices, policy_get_notice Read Lists notices or gets one with its sections
policy_create_policy, policy_create_notice Add Creates a draft policy or notice
policy_update_policy, policy_update_notice Change Updates a policy or notice. Setting status to Published makes it live, and may need a completed approval workflow first
policy_delete_policy, policy_delete_notice Confirm Permanently deletes a policy or notice
policy_list_translations, policy_get_translation Read Lists translations or gets one
policy_create_translation Add Adds a translation
policy_update_translation Change Updates a translation
policy_delete_translation Confirm Permanently deletes a translation
policy_list_translation_versions Read Lists saved versions of a translation
policy_restore_translation Confirm Restores a saved version of a translation
policy_list_geo_contents, policy_get_geo_content Read Lists jurisdiction-specific variants or gets one
policy_create_geo_content Add Adds a jurisdiction-specific variant
policy_update_geo_content Change Updates a variant
policy_delete_geo_content Confirm Permanently deletes a variant
policy_list_content_versions Read Lists published snapshots of a policy or notice
policy_restore_content_version Confirm Restores a snapshot. The record goes back to Draft and its live page is taken down

Writing, reviewing, and translating policies with AI happen in the Core GRC app, not through the connector.

Tool Type What it does
consent_list_websites, consent_get_website Read Lists consent websites or gets one
consent_create_website Confirm Creates a website and assigns one paid licence
consent_update_website Change Updates a website's name, URL, description, domains, or automatic cookie control
consent_list_cookies, consent_list_categories, consent_list_banners, consent_list_rules Read Lists the cookie inventory, categories, banners, or targeting rules
consent_create_cookie_scan Confirm Queues a cookie discovery scan of a URL
consent_list_scans Read Lists cookie scans and their status
consent_preview_publish Read Shows what publishing would change, without publishing
consent_publish_website Confirm Publishes the consent configuration to the public CDN. Needs the draftHash from the preview. Optionally asks visitors who already chose to choose again
consent_list_records, consent_get_record Read Lists stored consent records or gets one with visitor history
consent_get_stats Read Consent statistics

Publishing includes every unpublished edit, including ones made in the app. Claude previews first, and publishing fails if the draft changed after the preview.

Privacy rights (rights_)

Tool Type What it does
rights_list_requests, rights_get_request Read Lists data subject requests or gets one
rights_get_stats Read Request statistics
rights_create_request Add Logs a new request
rights_update_request Change Updates status, assignee, notes, or dates. A request can only be completed once the requester's identity is verified
rights_delete_request Confirm Permanently deletes a request
rights_list_entities Read Lists intake forms, automations, or email templates
rights_create_entity Add Creates an intake form, automation, or email template
rights_update_entity Change Updates one of those
rights_delete_entity Confirm Permanently deletes one of those

Website accessibility (webaccess_)

Tool Type What it does
webaccess_list_websites, webaccess_get_website Read Lists accessibility websites or gets one
webaccess_create_website Confirm Creates a website and assigns one paid licence
webaccess_update_website Change Updates a website
webaccess_archive_website Confirm Archives a website. Can be undone
webaccess_delete_website Confirm Permanently deletes a website
webaccess_start_scan Add Starts a full accessibility scan of a site
webaccess_list_scan_jobs, webaccess_get_scan_job Read Lists scans or gets one
webaccess_cancel_scan Confirm Cancels a running scan
webaccess_list_scan_issues Read Lists the issues a scan found

Workflows

Each module has its own workflow tools, named with its prefix (tprm_, policy_, rights_, webaccess_). For example, policy_list_workflows only covers privacy policy workflows.

Tool Type What it does
*_list_workflows Read Lists workflow definitions and their trigger events
*_create_workflow Add Creates a workflow with its steps
*_update_workflow Change Updates a workflow. Sending steps replaces the whole list
*_archive_workflow Confirm Archives a workflow. There is no hard delete
*_list_assignment_groups Read Lists the groups that can be assigned to steps
*_create_assignment_group Add Creates an assignment group
*_update_assignment_group Change Updates a group's name, description, or members
*_archive_assignment_group Confirm Archives an assignment group
*_list_workflow_runs Read Lists runs and their steps
*_start_workflow_run Add Starts a run for a record
*_update_workflow_run_item Change Completes, skips, overrides, or rejects the current step, or adds a note to any step. When the run moves to the next step, users assigned to it get an email
*_cancel_workflow_run Confirm Cancels a run. Work already saved is kept

Approval steps with named approvers can only be closed by an approver.

CLI only

Available in the Core GRC CLI and the app, not in Claude, because they're long-running and count against your plan's review quota. They need the canManageCoreIq permission.

Tool Type What it does
tprm_start_full_review Add Starts a Core IQ full research review of a record
tprm_get_full_review_status Read Checks progress of a full review