AI agents

Rivanorth Oko can be connected to an AI agent, so you can ask it questions about your findings in plain language.

Oko speaks the Model Context Protocol (MCP), the standard AI agents use to reach external tools. You connect once with your normal Oko sign-in, then ask the agent things like “which of our monitored domains had new alerts this week?” and it reads the answer from Oko.

What the agent can see

• The alerts you already see when you sign in, read-only.
• Passwords, hashes, cookies and other exposed secrets never leave Oko. The agent learns that a credential was exposed, never the credential itself.
• The agent cannot change anything in your account.

The connection address is the same for every agent:

https://api.oko.rivanorth.com/mcp

Claude

1. Open Settings, then Connectors, then Add custom connector.
2. Name it Rivanorth Oko and enter the address:

   https://api.oko.rivanorth.com/mcp

3. Choose Connect and sign in with your Oko account. Multi-factor authentication and single sign-on apply as usual.
4. Approve the access request (see the approval screen below). Claude then lists the Oko tools.

Claude Code

claude mcp add --transport http rivanorth-oko https://api.oko.rivanorth.com/mcp

Run /mcp, select rivanorth-oko and choose Authenticate. Your browser opens for the Oko sign-in and the approval screen.

ChatGPT

1. Open Settings, then Connectors. On some plans this is under Apps & Connectors and needs Developer mode switched on.
2. Choose Create, name it Rivanorth Oko, set authentication to OAuth, and enter the address:

   https://api.oko.rivanorth.com/mcp

3. Choose Create, then Connect, and sign in with your Oko account.

Codex CLI

codex mcp add rivanorth-oko --url https://api.oko.rivanorth.com/mcp
codex mcp login rivanorth-oko

GitHub Copilot in VS Code

1. Open the Command Palette and run MCP: Add Server.
2. Choose HTTP, name it rivanorth-oko, and enter the address:

   https://api.oko.rivanorth.com/mcp

3. When prompted, allow the sign-in and complete the Oko sign-in in your browser.

The approval screen

After you sign in, Oko shows an Application Access Request page. It names the agent asking for access, the server (Rivanorth Oko) and, in a yellow box, where the sign-in result will be sent.

Note

For Claude Code, Codex and VS Code that address is http://localhost:<port>/callback. This is correct. The agent runs on your own computer and opens a temporary listener there to receive the sign-in result. The port number is chosen at random each time you sign in. Nothing is sent to a third party.

your browser ── sign in ──▶ Oko sign-in ──▶ api.oko.rivanorth.com
                                                  │
                                                  ▼
                        http://localhost:<port>/callback  (the agent, on your computer)

Before choosing Allow Access, check:

Field	Expected
MCP server	Rivanorth Oko
Credentials will be sent to	localhost for an agent on your computer, or claude.ai / chatgpt.com for a hosted one
Requested scopes	openid, mcp-prod/read

Anything else means an agent Oko does not recognise. Choose Deny.

Disconnect

Remove the connector in your agent’s settings, or run claude mcp remove rivanorth-oko for Claude Code. Access ends immediately, and you can reconnect at any time.