Get SOC 2 without the sales call.

$ codex mcp add strac-comply --url \  https://mcp.comply.strac.io/mcp

# Codex opens your browser to sign in.

$ gemini mcp add --scope user --transport http strac-comply \  https://mcp.comply.strac.io/mcp

# Gemini opens your browser to sign in. If it does not, run /mcp auth strac-comply in a session.

$ grok mcp add --transport http strac-comply \  https://mcp.comply.strac.io/mcp

# Grok opens your browser to sign in the first time you use it.

# ~/.cursor/mcp.json{  "mcpServers": {    "strac-comply": { "url": "https://mcp.comply.strac.io/mcp" }  }}

# Save it, then sign in from Cursor Settings > MCP.

# ~/.config/opencode/opencode.json{  "mcp": {    "strac-comply": { "type": "remote", "url": "https://mcp.comply.strac.io/mcp" }  }}

# OpenCode opens your browser to sign in the first time you use it.

# No more guessing what’s left before the audit.

1. > How close are we to our SOC 2 audit?

   strac-comply · get_compliance_status, get_next_actions

   1.SOC 2 is at 93%: 57 of 61 controls are audit-ready.

   2.Next: approve 2 policy drafts.

# No more dragging screenshots into upload forms.

1. > Add ~/Desktop/badge-access.png as evidence for CC6.4.

   strac-comply · list_controls, begin_document_upload, finalize_document_upload

   Uploaded badge-access.png and linked it to CC6.4.

# No more pasting screenshots into a separate evidence folder.

1. > Attach ~/Desktop/sg-rules.png to the AWS security group check.

   strac-comply · list_tests, begin_test_evidence_upload, finalize_test_evidence_upload

   Attached sg-rules.png to the security group check, beside its result.

# No more uploading evidence one file at a time.

1. > Upload the documents in ./evidence and publish them.

   strac-comply · begin_document_uploads, finalize_document_uploads, publish_document

   Uploaded and published 18 documents, each matched to a required document.

# No more filling in one upload form per policy.

1. > Upload the policies in ./policies and approve them.

   strac-comply · begin_policy_uploads, finalize_policy_uploads, approve_policy

   Uploaded and approved 12 policies, each filed where it belongs.

# No more re-uploading a policy that didn’t change.

1. > We reviewed the Access Control Policy. Nothing changed.

   strac-comply · list_policies, record_policy_review

   Recorded your review. The policy counts as evidence for another year.

# No more hunting for the right settings page.

1. > Connect our AWS account.

   strac-comply · connect_integration

   Here’s your AWS sign-in link. I’ll wait while you finish.

2. > Done.

   strac-comply · get_connection_status

   AWS is connected.

# No more vendor risk spreadsheets.

1. > Score our vendors’ risk and add Okta’s SOC 2 report.

   strac-comply · list_vendors, run_vendor_risk_assessments, begin_vendor_document_upload, finalize_vendor_document_upload

   Scored 16 vendors: 2 high, 5 medium, 9 low.

   Okta’s SOC 2 report is on its vendor record.

# No more copying risks from a spreadsheet row by row.

1. > Add the risks in ~/Downloads/risks.csv to our register.

   strac-comply · import_risks

   Added 11 risks, each with a treatment and a review date.

# No more emailing files back and forth with your auditor.

1. > Answer the auditor’s request for our access review.

   strac-comply · list_audits, list_audit_requests, prepare_audit_request_response, submit_audit_request_response

   Sent. 1 request left.

# No more rebuilding your program by hand when you switch.

1. > Import our old compliance platform’s export from ~/Downloads/export.

   strac-comply · begin_policy_uploads, finalize_policy_uploads, begin_document_uploads, finalize_document_uploads, import_vendors, import_risks, import_test_runs

   Read all 184 files. Imported 24 policies, 37 documents, 16 vendors, 11 risks and your past test runs.

   3 required documents are still missing. I listed them for you.