MCP Connect
MCP Connect
Microsoft Copilot, Claude, and ChatGPT can now answer questions about your deposits, loans, fraud, and compliance — with audit, approval, and PII controls built in. Included for AI Growth Agents customers. Live in days.
Six of the seven workflows piloting with first-wave institutions. Every query is audited. PII is masked by default. The AI summarizes — it does not decide.
MCP Connect is the next layer on a platform that runs in production today — through the same human-in-the-loop, audit, and integration architecture you've already evaluated.
Choose your AI client below to walk through the connection flow. About fifteen minutes start to finish, with no core changes and no custom development.
In the Cotribute customer portal, your IT lead opens "MCP Connect" and selects Microsoft Entra as the identity provider. Cotribute pre-fills your tenant ID based on your domain.
Your IT lead pastes the Application ID from the Entra admin console — a 30-second copy and paste — and clicks Authorize.
Your Claude for Work admin opens Integrations → Add MCP Server. Cotribute pre-fills the three values you need in the customer portal: your tenant URL, the server name, and the OAuth metadata URL.
Three paste actions. One click to save.
Your ChatGPT Enterprise workspace admin opens Connectors → Add MCP Server. The Cotribute customer portal pre-fills your config — paste it into the connector form.
NCUA's 2026 supervisory posture evaluates AI through the regulatory frameworks already in place — BSA/AML, fair lending, vendor management, third-party oversight. MCP Connect was designed to fit inside that posture.
Timestamp, user, tool, parameters, result summary. Immutable, 7-year retention, examiner-exportable.
SSN, DOB, full account numbers redacted in responses. Full access requires elevated permission and stepped-up auth.
The AI cannot move money, change a decision, or update a member record. Period.
Consistent with Cotribute's existing AI Growth Agents architecture. The AI summarizes; your staff decides.
Pre-filled, mapped to 2026 priorities. Drop into the examiner's evidence binder.
Inherited from the Cotribute platform with documented MCP scope addendum.
MCP Connect rides on top of the platform that already produces these results. Same platform. Same trust. With the AI overlay on top.
$1.6 billion in assets, 123,000 members across five states. Mid–core conversion from Fiserv XP2 to Corelation KeyStone. Branch and online lending ran on two different systems. RRCU partnered with Cotribute as the modern digital origination layer on top of KeyStone — kickoff September 2024 to go-live April 2025.
Every plan is read-only by design in v1.0. Credits are how we measure usage — one MCP tool call equals one credit, with a few heavier reads (member 360, audit pack, search audit events) counting as three.
MCP Connect is a governed access layer, not an AI product. Same data your authorized staff can see in Cotribute today — accessed through the same identity, with a fuller audit trail than they have now. Designed so your Chief Risk Officer and TPRM team can say yes in one committee meeting.
Cotribute commits no-train on the MCP layer. Enterprise AI platforms the FI has already approved — Microsoft 365 Copilot, Claude for Enterprise, ChatGPT Enterprise — carry the same contractual commitment. No bulk extracts leave the Cotribute boundary; the agent asks one scoped question at a time.
OAuth 2.1 passes the staff member's identity through to every tool call. Sarah's Copilot query is logged as Sarah, with Sarah's role-based permissions. Clean answer for GLBA Safeguards 314.4(c) and FFIEC IT access control sections.
Credit, fraud, and account-opening decisions remain in Decision Intelligence+, FraudGuard+, and the underwriter's hands. That keeps MCP Connect out of SR 11-7 model-risk scope and out of CFPB adverse-action territory. Written into the contract, surfaced in the audit log.
Turn off tools at the institution, branch, or role level. PII is masked by default — full account numbers, SSN, DOB require elevated permission and stepped-up auth. OAuth tokens are revocable at any time. The FI's posture, applied automatically to every agent that connects.
Timestamp, user, tool, parameters, response summary. Immutable, 7-year retention, examiner-exportable. NCUA-aligned vendor questionnaire pack ships pre-filled and mapped to 2026 supervisory priorities. SOC 2 Type II inherited from Cotribute platform with documented MCP scope addendum.
Member-facing emails, adverse-action notices, and chat replies are drafted by the AI and sent by your staff. Same posture as Cotribute's existing AI Growth Agents architecture. Disclosure obligations under CFPB and the prudential regulators are satisfied by the human signing the message.
Book a 30-minute walkthrough. We'll show your team Maya's, Lisa's, and David's workflows live, against demo data. If you're already an AI Growth Agents customer, MCP Connect is included — your account manager can amend the contract this week.
Book a 30-minute walkthrough