# Conveyor — how to use (mcp.ai)

Connect your Conveyor account and use 25 tools for security and identity straight from your AI agent. Connect with your own API key. Conveyor is a platform that automates security reviews by providing a Trust Center, AI-driven questionnaire automation, and integrations with various tools to streamline compliance processes.

## Option A — via MCP (recommended)
Remote MCP endpoint (HTTP, streamable): `https://api.mcp.ai/p_conveyor?ms=1787291280000`
Add it as a custom/remote MCP connector in your client (Claude, Cursor, VS Code…), then authenticate when prompted. Once connected, ask the agent to use the server's tools (e.g. `conveyor_delete_document`).

## Option B — via direct REST API
Base URL: `https://api.mcp.ai/api/conveyor`
Auth: `Authorization: Bearer sk_live_…` — create a workspace API key at https://mcp.ai/settings/api-keys
Discover endpoints: `GET https://api.mcp.ai/api/conveyor/_endpoints`

### Endpoints
- `POST https://api.mcp.ai/api/conveyor/delete/document` — Tool to delete a specific document. Use when you need to remove a document by its ID.
  - body: { document_id: string }
- `POST https://api.mcp.ai/api/conveyor/delete/folder` — Permanently deletes a folder from the Conveyor Exchange by its UUID. Use GET_FOLDERS first to retrieve the folder_id. This action is irreversible.
  - body: { folder_id: string }
- `POST https://api.mcp.ai/api/conveyor/get/access/groups` — Tool to retrieve all access groups for a program. Use when you need to fetch the complete list of access groups configured in the Conveyor Exchange.
- `POST https://api.mcp.ai/api/conveyor/get/authorization/request` — Retrieves details of a specific authorization request from Conveyor Exchange by its ID. Use this to get information about a pending or processed access request, including the requestor's email, messag
  - body: { authorization_request_id: string }
- `POST https://api.mcp.ai/api/conveyor/get/authorization/requests` — Retrieves authorization requests from Conveyor's Trust Center. Use this tool to: - List all authorization requests (no filters) - Get pending requests awaiting approval (status='requested') - Filter b
  - body: { email?: string, status?: string }
- `POST https://api.mcp.ai/api/conveyor/get/authorizations` — Retrieve authorizations from your Conveyor Trust Center. Authorizations control who has access to view documents. Use this to list all authorizations or filter by status ('gated', 'authorized', 'revok
  - body: { email?: string, status?: string }
- `POST https://api.mcp.ai/api/conveyor/get/connections` — Tool to retrieve all connections. Use when you need to fetch the complete list of your Conveyor connections. Use after authenticating with a valid API key.
  - body: { page?: integer, domain?: string, per_page?: integer }
- `POST https://api.mcp.ai/api/conveyor/get/documents` — Retrieves all documents from the Conveyor trust center. Returns a list of documents with their metadata including name, description, access level, versions, and timestamps. No parameters required - si
- `POST https://api.mcp.ai/api/conveyor/get/folders` — Retrieves all folders from the Conveyor Exchange workspace. Returns a list of folders with their IDs, names, timestamps, and associated document IDs. Use this to discover available folders before uplo
- `POST https://api.mcp.ai/api/conveyor/get/interactions` — Tool to get all interactions (document interactions, q&a interactions) with optional filters. Use when you need to retrieve and filter interactions across all documents and Q&A sessions.
  - body: { page?: integer, per_page?: integer, interaction_type?: string }
- `POST https://api.mcp.ai/api/conveyor/get/interactions/by/connection/id` — Tool to fetch interactions associated with a specific connection. Use when you need to list all interactions for a given connection after validating its existence.
  - body: { page?: integer, per_page?: integer, connection_id: string, interaction_type?: string }
- `POST https://api.mcp.ai/api/conveyor/get/interactions/by/document/id` — Tool to fetch interactions associated with a specific document. Use when you need to list all interactions for a given document after validating its existence.
  - body: { page?: integer, per_page?: integer, document_id: string, created_at_end?: string, created_at_start?: string }
- `POST https://api.mcp.ai/api/conveyor/get/knowledge/base/questions` — Retrieves knowledge base questions from Conveyor. Use to list, search, or paginate through Q&A entries stored in the knowledge base for compliance and security questionnaires.
  - body: { page?: integer, search?: string, per_page?: integer }
- `POST https://api.mcp.ai/api/conveyor/get/product/lines` — Retrieves all product lines configured in Conveyor. Use this action to list available product lines for organizing trust documentation, authorizations, and security reviews by business segment. This i
- `POST https://api.mcp.ai/api/conveyor/get/questionnaires` — Retrieves all questionnaires from Conveyor with optional filters. Use this to list questionnaires by status, product line, or date ranges. Returns questionnaire metadata including assignee, connection
  - body: { status?: string, due_at_end?: string, due_at_start?: string, created_at_end?: string, completed_at_end?: string, created_at_start?: string, product_line_ids?: string, completed_at_start?: string }
- `POST https://api.mcp.ai/api/conveyor/patch/authorization` — Update an existing authorization by revoking access or modifying Access Group assignments. Use this tool to: - Revoke a user's access to the Trust Center (set revoke=true) - Update which Access Groups
  - body: { revoke?: boolean, access_group_ids?: string[], authorization_id: string }
- `POST https://api.mcp.ai/api/conveyor/patch/document` — Update a Conveyor document's metadata. Use this to change a document's name, description, access level, folder location, or other properties. Requires the document UUID.
  - body: { name?: string, featured?: boolean, folder_id?: string, description?: string, document_id: string, access_level?: string, access_group_ids?: string, product_line_ids?: string, disable_downloads?: boolean, use_for_question_answering?: boolean }
- `POST https://api.mcp.ai/api/conveyor/patch/questionnaire/request` — Tool to update a questionnaire request in Conveyor. Use this to modify an existing questionnaire request's external ID, case IDs, raw data, or source system information.
  - body: { id: string, file?: string, source?: string, case_ids?: string, raw_data?: string, external_id?: string }
- `POST https://api.mcp.ai/api/conveyor/post/authorization` — Tool to create a new authorization in Conveyor Exchange. Use this to grant access to a user by email address or by approving an existing authorization request. Provide either 'email' (to create a new 
  - body: { email?: string, expires_at?: string, nda_bypass?: boolean, request_id?: string, access_group_ids?: string[] }
- `POST https://api.mcp.ai/api/conveyor/post/document` — Tool to upload a new document to Conveyor's Knowledge Library. Use when you need to add a file (<=100MB) for security compliance documentation.
  - body: { file: object, name: string }
- `POST https://api.mcp.ai/api/conveyor/post/folder` — Tool to create a new folder in Conveyor Exchange. Use when you need to organize items into folders programmatically after obtaining an API key.
  - body: { name: string, parent_id?: string }
- `POST https://api.mcp.ai/api/conveyor/post/questionnaire` — Tool to submit a new questionnaire to Conveyor. Use when you need to create a security questionnaire or RFP submission with file uploads, portal links, or Salesforce integration.
  - body: { file?: object, email: string, notes?: string, crm_id?: string, domain: string, due_at?: string, filename?: string, crm_amount?: number, portal_url?: string, content_type?: string, customer_name?: string, original_format: string, product_line_ids?: string, content_version_id?: string, questionnaire_type?: string }
- `POST https://api.mcp.ai/api/conveyor/post/questionnaire/request` — Tool to create a new questionnaire request in Conveyor. Use when you need to submit a security questionnaire or compliance request for processing. Requires submitter_email and either external_id with 
  - body: { file?: object, source?: string, case_ids?: string, raw_data?: string, external_id?: string, submitter_email: string, submitter_external_id?: string, submitter_external_name?: string }
- `POST https://api.mcp.ai/api/conveyor/post/review` — Tool to create a review in Conveyor with optional references to external VM unique IDs. Use when you need to create a vendor review programmatically.
  - body: { email: string, vendor_name: string, external_vm_unique_id?: string }
- `POST https://api.mcp.ai/api/conveyor/post/single/question` — Submit a single question to Conveyor's AI knowledge base and receive an immediate answer. Use this when responding to security questionnaires, compliance inquiries, or knowledge base queries. Returns 
  - body: { question: string, product_line_ids?: string[] }

## Example prompts
- "What can I do in Conveyor?"
- "Show me a summary of my Conveyor account"

## More
- Page: https://mcp.ai/conveyor
- Agent spec (llms.txt): https://mcp.ai/conveyor/llms.txt
- Postman collection: https://mcp.ai/conveyor/postman.json