CYBO Attest in Claude: Team and Enterprise Setup¶
How it works on Team and Enterprise¶
On Team and Enterprise plans, custom connectors are added at the organization level, not by individual users. An Owner adds CYBO Attest once; it then appears in every member's connector list, and each member connects it to their own Attest account. Nobody shares a credential, and Claude only ever sees what that person can already see in Attest.
Two roles, two short flows:
| Who | What they do | Time |
|---|---|---|
| Owner (or Enterprise admin with Manage Libraries) | Adds the connector to the organization, once | 2 minutes |
| Each member | Clicks Connect and signs in with their Attest account | 1 minute |
Everyone needs an Attest account first, created at attest.ulapcybo.app. The connector details, in case you are asked:
| Item | Value |
|---|---|
| Connector type | Custom connector (remote MCP) |
| Server URL | https://attest.ulapcybo.app/mcp |
| Sign in | OAuth, each member with their own Attest account |
For Owners: add Attest to the organization¶
You need to be an Owner or Primary Owner (Team), or an Owner, Primary Owner, or a custom role with Manage access to Libraries (Enterprise).
- Open Organization settings > Connectors.
- Click Add.
- Hover Custom, then select Web.
- Name it
CYBO Attest. This is the name members will see. - Paste the server URL
https://attest.ulapcybo.app/mcpand click Continue. - Claude detects that the server uses OAuth. Click Continue.
- Under Authentication, choose Sign in when needed (members sign in the first time they use it) or Sign in now (members are prompted as soon as they connect). Either works.
- Under OAuth client, choose Register automatically.
- Leave Request headers empty. Attest does not use API keys.
- Click Add.
That is it for the organization. Tell members to follow the section below. You can also connect your own account the same way.
For members: connect and sign in¶
Once your Owner has added Attest, it is waiting in your connector list.
- Open Customize > Connectors. On the web that is your profile menu at the bottom left, then Customize.
- Find CYBO Attest in the list. It carries a Custom label.
- Click Connect. Your browser opens the Attest sign in page.
- Log in with your Attest account and click Yes on the consent screen that lists what Claude may do.
- Back in Claude, start a new chat. Click the + button at the bottom left of the message box, choose Connectors, and make sure CYBO Attest is toggled on.
- Type: List my Attest applications
Claude calls Attest, shows a small tool card in the reply, and lists your applications. The first time it uses a tool that changes something (starting a scan, submitting a justification) it asks you to allow it; choose Allow once until you are comfortable, then Allow always for tools you trust.
Useful next prompts:
- What is the security posture of [app]?
- Show me the critical findings from the latest scan and explain the first one
- Draft a justification for finding [id]; we do not ship that component
- Which gates are we failing, and what controls do they map to?
The connection follows your Claude account to the web, the desktop app, mobile, and Cowork. There is nothing to install.
Admin controls¶
Removing it for everyone. Organization settings > Connectors, the three dots next to CYBO Attest, Remove. Every member's connection is revoked at once. To change a setting (for example the authentication mode) you remove and re add; connectors cannot be edited in place.
A member leaving Attest. Members can Disconnect their own connection under Customize > Connectors without affecting anyone else, and reconnect later with a different Attest account.
Interactive tool calls. Some connectors can render interactive cards in chat. Owners can disable specific tool calls of that kind under Organization settings > Connectors. Attest's tools return text, so there is nothing to turn off today.
Research. Claude can call Attest tools on its own during a Research run. Ask members to turn off the write tools (start scan, submit justification, request authorization) in the Connectors menu before starting Research, so it reads freely and changes nothing.
Network. Claude reaches Attest from Anthropic's cloud, not from members' devices, so no corporate firewall or VPN change is needed on your side.
If something goes wrong¶
| Symptom | Who fixes it | Fix |
|---|---|---|
| A member does not see CYBO Attest in Customize > Connectors | Owner | Confirm it was added under Organization settings > Connectors, not under a personal account |
| Member sees Add custom connector but no Connect button | Owner | Custom connectors on Team and Enterprise must be added by an Owner; follow the Owner steps above |
| Sign in page says invalid scopes or unknown client | Owner | Remove the connector and add it again with OAuth client set to Register automatically |
| Sign in loops or never completes | Member | Customize > Connectors, three dots next to CYBO Attest, Disconnect, then Connect again |
| Claude says it cannot find the Attest tools | Member | Click + in the message box, choose Connectors, toggle CYBO Attest on for this chat |
| Tools return 401 or 403 | Member | Session expired or the member's Attest role lacks access to that application; Disconnect and Connect, then check the role in Attest |
Still stuck? Contact Ulap support with the exact error text, a screenshot, and whether the person is an Owner or a member.