Integration

SecurityScorecard integration

SecurityScorecard API for third party and supply chain risk: read the overall grade and score of a company, break it down into the ten risk factors, follow how the score and the factor scores moved over time, list the individual findings behind a factor by issue type, resolve what an issue type actually means, list the internet facing services discovered on a company, and organise the companies you monitor into portfolios.

Connect SecurityScorecard How integrations work

Ask it in chat

Say what should happen.
The workflow builds itself.

When this happens, do that in SecurityScorecard.Built from the 17 SecurityScorecard tools below, on the connection you add once.

Common SecurityScorecard use cases

scoring a supplier during onboarding
removing a portfolio created for a project that has ended
reporting the current grade of every vendor in a portfolio
building a one page vendor risk summary in a single request
creating a portfolio for the vendors onboarded this quarter
renaming a portfolio after a reorganisation of vendor tiers
comparing the grade of a supplier against its industry peers
identifying which risk factor caused a drop in a supplier grade
explaining to a supplier which factor is dragging their grade down
turning an issue type key into a readable description for a report

What you can do with SecurityScorecard

Each of these is one operation on one endpoint, available both as a workflow step and as a tool an AI agent can call on its own. Nothing bundles several operations into one action, so what a run did stays readable afterwards.

Most endpoints run on the free plan. A few, mainly the ones that publish on your behalf, need a paid plan.

Company, 4 operations

add_company_to_portfolioAdd company to portfolioPUTAdds a company to a SecurityScorecard portfolio so it is monitored with the group.
get_company_scorecardGet company scorecardGETReturns the SecurityScorecard grade, score and industry of one company.
list_portfolio_companiesList portfolio companiesGETLists the companies of a SecurityScorecard portfolio with their grades.
remove_company_from_portfolioRemove company from portfolioDELETERemoves a company from a SecurityScorecard portfolio.

Portfolio, 4 operations

create_portfolioCreate portfolioPOSTCreates a SecurityScorecard portfolio to group the companies you monitor.
delete_portfolioDelete portfolioDELETEDeletes a SecurityScorecard portfolio.
list_portfoliosList portfoliosGETLists the SecurityScorecard portfolios the account owns.
update_portfolioUpdate portfolioPUTUpdates the name, description or visibility of a SecurityScorecard portfolio.

Factor, 2 operations

get_company_factorsGet company factorsGETReturns the per factor scores that make up the grade of a company.
get_company_summary_factorsGet company summary factorsGETReturns a company together with its factor scores and issue counts in a single call.

Factor history, 1 operation

get_company_history_factor_scoresGet company history factor scoresGETReturns the historical per factor scores of a company over a date range.

Industry, 1 operation

get_industry_scoreGet industry scoreGETReturns the benchmark score of an industry for comparison against a company.

Issue, 1 operation

get_company_issuesGet company issuesGETLists the individual SecurityScorecard findings of a given issue type for a company.

Issue type, 1 operation

get_issue_type_metadataGet issue type metadataGETReturns the description, severity and remediation guidance of an issue type.

Score event, 1 operation

get_company_history_eventsGet company history eventsGETLists the events that changed the score of a company over a date range.

Score history, 1 operation

get_company_history_scoreGet company history scoreGETReturns the historical overall score of a company over a date range.

Service, 1 operation

list_company_servicesList company servicesGETLists the internet facing services SecurityScorecard discovered on a company.

Use SecurityScorecard from Claude Code, Cursor or Codex

Connect SecurityScorecard in LiveContext, create an API key in Settings, then add the LiveContext MCP server to your client. Its SecurityScorecard operations become tools the client can call, next to every other integration you connected.

Claude Code

claude mcp add --transport http livecontext https://livecontext.ai/mcp --header "X-API-Key: YOUR_API_KEY"

Codex (~/.codex/config.toml)

[mcp_servers.livecontext]
url = "https://livecontext.ai/mcp"

[mcp_servers.livecontext.http_headers]
"X-API-Key" = "YOUR_API_KEY"

Cursor, Claude Desktop and other JSON configs

{
  "mcpServers": {
    "livecontext": {
      "type": "http",
      "url": "https://livecontext.ai/mcp",
      "headers": {
        "X-API-Key": "YOUR_API_KEY"
      }
    }
  }
}

Set up the MCP server step by step

How to connect SecurityScorecard

Create your workspace
Sign up free. Nothing to install.
Connect SecurityScorecard once
Add your SecurityScorecard connection in Settings. Every tool from this integration reuses it, and secrets are encrypted at rest and visible only to you.
Describe the job in chat
The workflow builds itself in front of you and picks the endpoints it needs. Drag the steps yourself on the canvas whenever you would rather be explicit.

SecurityScorecard integration FAQ

What can you do with the SecurityScorecard integration?

LiveContext exposes 17 operations on SecurityScorecard, covering company, portfolio, factor and factor history. Common uses include scoring a supplier during onboarding, removing a portfolio created for a project that has ended and reporting the current grade of every vendor in a portfolio.