generated: '2026-07-31'
method: searched
status: published
source: https://help.anecdotes.ai/technical-setup/api/using-anecdotes-mcp
server:
  name: anecdotes
  product_name: Anecdotes MCP Proxy
  transport: http
  protocol: json-rpc-2.0
  url: https://mcp.anecdotes.ai
  endpoint_pattern: https://mcp.anecdotes.ai/{domain}/mcp
  endpoints:
  - url: https://mcp.anecdotes.ai/all/mcp
    domain: all
    description: All tools (main proxy).
  - url: https://mcp.anecdotes.ai/risk/mcp
    domain: risk
    description: Risk domain only. Any domain name below can be substituted.
  bridge_package: '@anecdotes.ai/mcp'
  bridge_install: npx -y @anecdotes.ai/mcp https://mcp.anecdotes.ai all
authentication:
  scheme: api-key
  header: X-anecdotes-api-key
  notes: >-
    Requires an Anecdotes API token created under Administration -> API Tokens with Admin privileges.
    The tenant must also have the AI suite package active and AI consent opted in.
  environment_variable: ANECDOTES_API_KEY
introspection:
  attempted: '2026-07-31'
  method: 'POST {"jsonrpc":"2.0","id":1,"method":"tools/list"}'
  urls_probed:
  - https://mcp.anecdotes.ai/all/mcp
  - https://mcp.anecdotes.ai/risk/mcp
  http_status: 403
  result: gated
  detail: >-
    Anonymous JSON-RPC calls are rejected at the edge by Cloudflare with an HTML 403 before reaching the
    MCP server, so the live tools/list manifest (and therefore each tool's real inputSchema) could not be
    captured. The tool list below is transcribed verbatim from the provider's published domain/tool table
    and carries names and descriptions only; input schemas require an authenticated introspection.
  well_known_probed:
  - path: /.well-known/oauth-authorization-server
    status: 403
  - path: /.well-known/oauth-protected-resource
    status: 403
discovery_tools:
- name: list_domains
  description: >-
    Discover the currently available domains and their tools. The provider states the proxy is
    continuously growing and recommends calling list_domains rather than relying on a static list.
domains:
- domain: risk
  description: Get information about risks in the system. Can filter by specific risk IDs, with an option to exclude risks currently under review.
  tools:
  - name: get_risks
    description: Get information about risks in your system; filter by risk IDs; option to exclude risks under review.
- domain: control
  description: Business controls - read and update.
  tools:
  - name: get_controls
    description: Get information about business controls; filter by control IDs; option to exclude controls under review.
  - name: update_controls
    description: Update existing control information.
- domain: evidence
  description: Evidence metadata, run history and full data tables.
  tools:
  - name: get_evidence
    description: Get evidence information and metadata; filter by evidence IDs; option to reduce data size for faster responses.
  - name: get_evidence_run_history
    description: View the history of evidence runs; set limits on entries; filter by date range.
  - name: get_evidence_full_data
    description: Get detailed evidence data tables - the same data shown in the Anecdotes platform.
- domain: policy
  description: Company policies.
  tools:
  - name: get_customer_policies
    description: Get a list of all company policies.
- domain: framework
  description: Compliance frameworks.
  tools:
  - name: get_frameworks
    description: Get information about compliance frameworks; filter by framework IDs; option to show only applicable frameworks.
- domain: uar
  description: User access review.
  tools:
  - name: get_user_access_review
    description: Get user access review information; option to show only approved reviews; filter for latest evidence only.
- domain: analysis
  description: Analysis rules.
  tools:
  - name: get_analysis_rules
    description: Get analysis rules for specific evidence; helps with reporting and analysis configuration.
- domain: comments
  description: Comments and feedback.
  tools:
  - name: get_comments
    description: Get comments and feedback; filter by conversation thread, search within comment text, filter by author.
- domain: requirement
  description: Requirements.
  tools:
  - name: get_requirements
    description: Get requirement information; filter by requirement IDs; shows all requirements when no filter is applied.
- domain: search
  description: >-
    Smart semantic search across Anecdotes domains. Supports natural language queries to find risks,
    controls, evidence, frameworks and requirements. The provider documents the domain but does not name
    its tool in the published table.
  tools: []
clients_documented:
- Claude Desktop
- Cursor IDE
- Microsoft Copilot
- ChatMCP
x-evidence:
  fetched: '2026-07-31'
  url: https://help.anecdotes.ai/technical-setup/api/using-anecdotes-mcp
  http_status: 200
  tool_names_from: provider documentation table (10 domains, 12 named tools)