Using Mynder from an AI assistant | Mynder

How to connect Mynder to Claude, ChatGPT, Grok, Copilot and Gemini, how to disconnect, what Mynder logs, and how to request access to or deletion of your data.

Using Mynder from an AI assistant

The Mynder connector lets an AI assistant read and update your organization’s data in Mynder. This page explains how to connect, how to disconnect, what we log, and how to request access to or deletion of your data.

What the connector is

The connector is an MCP server (Model Context Protocol). It gives your AI assistant tools for working with your organization's data in Mynder: suppliers, systems, risks, deviations, tasks, governing documents and assessments.

The assistant acts as you. You sign in with your own Mynder account, and the assistant can only reach your own organization.

The assistant uses Mynder's own access control. It only gets access to data in your own organization and in the modules your organization has switched on, governing documents follow your folder access, and what it can change follows the roles your organization has given you in Mynder.

The assistant can both read and write. Requests sent to suppliers must be confirmed by a person before they go out.

The text of governing documents is never sent to the assistant. It sees the title, version, approval and status. You read the text itself in Mynder.

The AI provider (for example Anthropic, OpenAI, xAI, Microsoft or Google) is not Mynder's sub-processor. What you write in the conversation, and the answers the assistant gets from Mynder, are handled under your own or your organization's agreement with that provider.

Who can connect, and what the assistant may do

The rule is simple: the assistant never gets more access than the person who connected it.

Every member of the organization can connect their own assistant to Mynder. Your role in Mynder decides what the assistant may do.

If you only have read access in Mynder, the assistant can only read. A change that needs a particular role in Mynder needs the same role when it is made from an assistant.

An AI agent the assistant registers in the AI register stays unverified until an administrator approves it.

Requests to suppliers are saved as proposals. A person must confirm a proposal before anything is sent.

Modules your organization has not switched on are not available to the assistant.

Who may add Mynder to the AI platform itself, for example in Claude Team, ChatGPT Business or Gemini Enterprise, is set by your organization in that platform.

Revoking access in Mynder

There are two ways to sign in. How you stop access depends on which one you used.

Mynder sign-in (you signed in through a window when you connected): disconnect in the AI assistant, as described above. The assistant then deletes its sign-in. If you want us to stop the sign-in for you, write to personvern@mynder.no.

Personal access token (a token you created in Mynder and pasted into the assistant): go to MCP-integrasjon in Mynder (app.mynder.no/administration/mcp), find the token under «Personlige tilgangstoken» and press «Tilbakekall» (revoke). The token stops working immediately. You only see your own tokens, and you can give a token an expiry date when you create it.

An administrator in your organization can remove a user from the organization in Mynder. All of that user's connections then stop, however they signed in.

The same page shows who in your organization has used the connector, and when it was last used.

What Mynder logs

Every call from an AI assistant is written to your organization's audit log in Mynder. For each call we store:

the organization and the user the call was made as

which tool was used

which client the call came from, as the assistant itself reports it (for example the assistant's name), or the name you gave the access token

the time, and how long the call took

the outcome (succeeded or failed), and the error message when the call stops on a technical error

We never store sign-in tokens or access tokens in the log. The log shows which tool was used, not which records were read or changed. What you ask the assistant, and the answers it gets, are not stored in the audit log. Technical operational logs are deleted after 30 days. More about retention is in the privacy policy.

Access and deletion

You can ask for access to, correction of or deletion of personal data Mynder holds about you, including what is logged from your use of the connector. Write to personvern@mynder.no.

Your organization's own data in Mynder (suppliers, systems, risks and so on) belongs to the organization. Mynder processes it under the data processing agreement. Questions about that data therefore go to your organization's administrator first.

The conversation with the assistant is held by the AI provider. You delete it in the assistant itself, under the provider's rules.

Connecting and disconnecting

The connector address is https://mcp.mynder.no/customer-mcp. The assistants change their menus often, so we link to each provider's own guide.

When you disconnect in the assistant, it stops fetching new data from Mynder. What is already in your conversations with the AI provider stays there until you delete it.