Openlane MCP Server

A secure, open-source Model Context Protocol server for the Openlane GRC platform. Its 40 documented tools cover openlane, control, controls, evidence.

People who work with openlane, control and controls and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-09-25 · ★ 2 · #222 OF 241 MAINTAINED AUTOMATION · VERIFIED 2026-09-30

Apache-2.0 · Go servers · how we verify → /methodology

01 · Install Openlane MCP Server

before you install - you'll need

Set OPENLANE_API_TOKEN, OPENLANE_ORGANIZATION_ID, OPENLANE_MCP_TRANSPORT, OPENLANE_MCP_HTTP_ADDR before connecting.

Docker

docker run -i --rm ghcr.io/gregdog/mcp-server-theopenlane:v0.8.0

Claude Desktop - add to config

{
  "mcpServers": {
    "gregdog-mcp-server-theopenlane": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/gregdog/mcp-server-theopenlane:v0.8.0"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

repo age created 2026-09-01 - young repo, little track record yet

license Apache-2.0 - declared in the repository

registry namespace io.github.GregDog is GitHub-verified and matches the repo owner

03 · What Openlane MCP Server can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

What you can build

With this server connected, an agent can list controls, search controls by ref code, title, or description, get a control by ID (with relationship summaries), and list programs (optional name filter).

The 40 tools it gives your agent

Extracted from the project's README - what Openlane MCP Server lets an agent do.

openlane_controls_list: - List controls
openlane_controls_search: - Search controls by ref code, title, or description
openlane_control_get: - Get a control by ID (with relationship summaries)
openlane_programs_list: - List programs (optional name filter)
openlane_program_get: - Get a program by ID (with relationship summaries)
openlane_evidence_list: - List evidence metadata (optional program/control filters)
openlane_evidence_get: - Get evidence metadata by ID
openlane_policies_list: - List internal policies (optional status filter)
openlane_policies_awaiting_approval: - List policies awaiting approval (native NEEDS_APPROVAL + your pending workflow assignments)
openlane_policy_get: - Get a policy by ID
openlane_risks_list: - List risks (optional program/entity/control/status filters)
openlane_risk_get: - Get a risk by ID (with relationship summaries)

show all 40 tools

openlane_findings_list: - List findings (optional program/assessment/open/status/severity filters)
openlane_finding_get: - Get a finding by ID
openlane_assessments_list: - List assessments
openlane_assessment_get: - Get an assessment by ID
openlane_control_implementations_list: - List control implementations
openlane_control_implementation_get: - Get a control implementation by ID
openlane_mapped_controls_list: - List cross-framework control mappings (MappedControl)
openlane_mapped_control_get: - Get a control mapping by ID
openlane_standards_list: - List standards / frameworks
openlane_standard_get: - Get a standard by ID
openlane_tasks_list: - List tasks
openlane_task_get: - Get a task by ID
openlane_entities_list: - List entities (vendors; optional risk/tier/review/security filters)
openlane_entity_get: - Get an entity by ID (vendor/security/commercial fields)
openlane_assets_list: - List assets
openlane_asset_get: - Get an asset by ID
openlane_platforms_list: - List platforms (system boundaries; optional name, display id, status, environment, region, criticality filters)
openlane_platform_get: - Get a platform by ID (narrative, owner roles, scope links, diagram metadata)
openlane_contacts_list: - List contacts
openlane_contact_get: - Get a contact by ID
openlane_reviews_list: - List vendor Risk Reviews (optional entity filter)
openlane_review_get: - Get a vendor Risk Review by ID
openlane_groups_list: - List groups (optional name filter)
openlane_group_get: - Get a group by ID
openlane_users_list: - List users (optional name/email filters)
openlane_user_get: - Get a user by ID
openlane_workflows_list: - List workflow definitions (optional schema/kind/active filters)
openlane_workflows_search: - Search workflow definitions by name or description

Latest releases

v0.8.0 · 2026-09-25

Add platform MCP tools for system boundary management. · Fix gofmt formatting to unblock CI. · Fix platform list panic and gofmt CI failures. · Release v0.8.0 with platform MCP tools.

v0.7.1 · 2026-09-23

Add MappedControl tools for cross-framework control linking.

v0.7.0 · 2026-09-23

Add evidence-control linking and control assignee resolution. · Bump github.com/99designs/gqlgen from 0.17.94 to 0.17.95 (#8) · Bump github.com/theopenlane/go-client from 0.14.0 to 0.14.1 (#3) · Document Openlane user…

04 · Who maintains Openlane MCP Server

Openlane MCP Server is maintained by gregdog. We track 2 MCP servers from gregdog - 2 actively maintained, 2 combined GitHub stars, oldest repo from Sep 2026.

05 · Facts

repository: github.com/gregdog/mcp-server-theopenlane
website: https://github.com/GregDog/mcp-server-theopenlane
category: automation - ranked #222 of 241 actively-maintained automation servers as of 2026-09-30.
release cadence: 10+ releases in the last 90 days (latest 2026-09-25)
registry: io.github.GregDog/mcp-server-theopenlane (active, first published 2026-09-02 · 5 versions)
packages: oci:ghcr.io/gregdog/mcp-server-theopenlane:v0.8.0

06 · Openlane MCP Server FAQ

Is Openlane MCP Server still maintained?

Yes - as of 2026-09-30, its last commit was 2026-09-25 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

What can Openlane MCP Server do?

How do I install Openlane MCP Server?

Run `docker run -i --rm ghcr.io/gregdog/mcp-server-theopenlane:v0.8.0`. The README documents 4 environment variables (OPENLANE_API_TOKEN, OPENLANE_ORGANIZATION_ID, OPENLANE_MCP_TRANSPORT…) to set first. Set OPENLANE_API_TOKEN, OPENLANE_ORGANIZATION_ID, OPENLANE_MCP_TRANSPORT, OPENLANE_MCP_HTTP_ADDR before connecting. You can also paste the ready-made client config above.

07 · Alternatives to Openlane MCP Server

Alternatives to Openlane MCP Server

Maintained automation servers if Openlane MCP Server isn't the fit.

More automation MCP servers · GuniWeb SAP MCP · Desktop Touch MCP · n8n Pro MCP · Cucumberstudio

More Go MCP servers · Terraform · Pi-hole MCP Server (hexamatic) · Homebutler · Mem Authority · WhatsApp Connect · see all