MCP & APImcp.remote-pro.ai

get_security_docs MCP tool

The get_security_docs MCP tool returns public summaries from the Remote Pro Ai Trust Center, such as certification status, data residency, subprocessors and policies, each with a source link and review date. For confidential documents it returns the NDA request link. Use it when a user asks a security or compliance question about Remote Pro Ai. It's public and read-only.

Developer preview until live: the MCP server and the platform API are not running yet. Tools, endpoints and examples on these pages describe the interface we are building; a call made today returns nothing.

What the get_security_docs MCP tool does

  • Use it for: "Does Remote Pro Ai support in-Kingdom data residency?" · "What's their ISO 27001 status?"

Input

FieldTypeRequiredNotes
topicsenum[]Nooverview, certifications, residency, subprocessors, policies, risk_profile, incident_history, insurance
frameworksenum[]Noiso27001, soc2, nca_ecc, sama_csf, pdpl_ksa, pdpl_uae, gdpr, nesa, dora, nis2
languageenumNoen (default) or ar

Output

  • summaries[]: topic, title, summary (≤ 120 words), source_url (on trust.remote-pro.ai), last_reviewed
  • certifications[]: standard, status (e.g. ISO/IEC 27001: in progress, target Q2 2027; SOC 2 Type II planned for 2027)
  • gated_documents[]: name, availability (after_nda or not_yet_issued), request_url (https://trust.remote-pro.ai/request-access)

Example

The assistant calls get_security_docs with topics "residency" and "certifications" and framework "nca_ecc". The response returns a residency summary explaining the UAE and EU hosting regions, in-Kingdom hosting on request and the 3 access patterns, an NCA ECC-2:2024 summary describing the control mapping, the current status for ISO/IEC 27001 and SOC 2 Type II, and 2 gated documents (the NCA ECC mapping and the penetration-test summary) marked after_nda with the request link. Each summary carries its source URL so the assistant can cite it.

Request

tools/call
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_security_docs",
    "arguments": {
      "topics": [
        "residency",
        "certifications"
      ],
      "frameworks": [
        "nca_ecc"
      ],
      "language": "en"
    }
  }
}

Response

result
{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "content": [
      {
        "type": "text",
        "text": "Client data is hosted in the UAE or the EU; in-Kingdom hosting is available on request."
      }
    ],
    "structuredContent": {
      "summaries": [
        {
          "topic": "residency",
          "title": "Where your data lives",
          "summary": "The three hosting regions are planned for the platform launch and are not contracted yet. A region changes to Available when its hosting contract is signed, and the region you choose is then written into your SOW. Until then, client code and data stay in your own environment.",
          "source_url": "https://trust.remote-pro.ai/",
          "last_reviewed": "2026-10-01"
        },
        {
          "topic": "certifications",
          "title": "NCA ECC-2:2024 alignment",
          "summary": "For Saudi government and critical-infrastructure clients, we map our controls to the National Cybersecurity Authority's Essential Cybersecurity Controls (ECC-2:2024) and the mapping document is in preparation; it is shared under NDA once issued. In-Kingdom delivery and on-site engineers are available today; in-Kingdom hosting in Riyadh is planned.",
          "source_url": "https://trust.remote-pro.ai/compliance",
          "last_reviewed": "2026-10-01"
        }
      ],
      "certifications": [
        {
          "standard": "ISO/IEC 27001",
          "status": "in progress, target Q2 2027"
        },
        {
          "standard": "SOC 2 Type II",
          "status": "planned for 2027"
        }
      ],
      "gated_documents": [
        {
          "name": "NCA ECC-2:2024 mapping",
          "availability": "after_nda",
          "request_url": "https://trust.remote-pro.ai/request-access"
        },
        {
          "name": "Penetration-test summary",
          "availability": "after_nda",
          "request_url": "https://trust.remote-pro.ai/request-access"
        }
      ]
    }
  }
}

Errors

  • invalid_argument: Unknown topic "value". Use one of: overview, certifications, residency, subprocessors, policies, risk_profile, incident_history, insurance.
  • rate_limited · unavailable

Limits and access

  • Public. No token needed.
  • Never returns gated content, even with OAuth. Gated documents require the click-through NDA on the Trust Center.
  • Standard limits apply.

Frequently asked questions

No. It returns public summaries only. For confidential documents, it lists each one with its availability and the Trust Center request link. The user verifies their work email and accepts a click-through NDA there, and most requests are approved within a minute.

Yes. The tool reads the same source as the Trust Center compliance page, so status changes appear in both at once. Each summary includes a last_reviewed date, and assistants should cite the source_url rather than paraphrase from memory. That keeps answers verifiable.

Yes. Set language to "ar" and summaries return in Arabic, with framework, product and regulator names kept in Latin script, such as NCA ECC-2:2024 or PDPL. Source URLs point to the Arabic version of each Trust Center page where one exists. If you leave language empty, summaries return in English by default.

Quote the summary, cite the source_url and state the last_reviewed date. If the user needs evidence, point them to the request link for gated documents. For a full questionnaire, suggest the RFP agent, which returns reviewed answers within 24 hours.

ISO/IEC 27001, SOC 2, NCA ECC-2:2024, SAMA CSF, Saudi PDPL, UAE PDPL, GDPR, NESA / UAE IA, DORA and NIS2. Filter with the frameworks field, or leave it empty to get the overview for all of them. Unknown values return invalid_argument.