For IT
One endpoint, one key, a few minutes.
disclosures.dev is a hosted Model Context Protocol (MCP) server — the open standard Claude, ChatGPT, and Copilot use to reach external data. No software to install, no infrastructure to run.
The essentials
Endpoint https://disclosures.dev/mcp (MCP, streamable HTTP)
Auth Authorization: Bearer <API_KEY>
Health GET https://disclosures.dev/healthz
Egress HTTPS to disclosures.dev only — no inbound access needed
Keys are issued per organisation from the access page. Treat a key like a password: we store only its hash, and can revoke and reissue instantly.
Connecting each assistant
Claude
Team & Enterprise, or Claude Desktop
- Org admins: add a custom connector in Admin settings with the endpoint URL and the key as a bearer header — it becomes available across the workspace.
- Individual desktop use: Settings → Developer → Edit Config, add the block below to claude_desktop_config.json, then quit and reopen the app fully.
{
"mcpServers": {
"disclosures": {
"type": "http",
"url": "https://disclosures.dev/mcp",
"headers": {
"Authorization": "Bearer <API_KEY>"
}
}
}
}ChatGPT
Team & Enterprise workspaces
- Workspace admins: Settings → Connectors → add a custom connector (MCP) with the endpoint below; authentication is an API key sent as a bearer token.
- Members use it in chat once approved. ChatGPT requires connectors to be admin-added for workspaces.
Endpoint https://disclosures.dev/mcp
Auth Bearer <API_KEY>
Microsoft Copilot
Copilot Studio
- Add an MCP connection (generic MCP over streamable HTTP) with the endpoint and an Authorization: Bearer header.
- Expose it to the agents or topics that should have company-research capability.
Endpoint https://disclosures.dev/mcp
Header Authorization: Bearer <API_KEY>
Any other MCP-compatible client (Cursor, VS Code, and others) connects with the same endpoint and bearer header. Client admin paths change often — check your vendor's current MCP documentation if a menu has moved.
Operational notes
- Plans carry per-minute usage limits. When one is reached the assistant receives a plain retry message rather than an error, and refused calls are never billed.
- Original filing PDFs are delivered as time-limited download links; files are removed after 30 days.
- We store a hashed key, your tenant name, and per-request usage records — no query content beyond operational logs, and no cookies. See the privacy policy.
- Upstream registers impose their own rate limits and terms; the service enforces fair use against them on your behalf.
- Some exchanges restrict redistribution of their data. Where we serve one — the Philippine Stock Exchange, for instance — answers carry its terms notice, and that content should not be passed outside your organisation.
Developers: the engine is the open-source disclosures project — full tool reference, schemas, and self-hosting on GitHub.
Request a key