Copilot Studio adds remote MCP servers as Model Context Protocol tools on an agent.
Server URL: https://certikit.io/mcp
- In the agent, open Tools → Add a tool → New tool → Model Context Protocol.
- Server name: "ISO compliance". Server URL: the URL above. Authentication: OAuth 2.0.
- Client ID and secret: register a client first with one
POST https://certikit.io/oauth/registercarrying{"client_name":"Copilot Studio","redirect_uris":["<the redirect URL Copilot Studio shows>"]}; paste the returnedclient_id(andclient_secretif one is issued). Authorization URLhttps://certikit.io/oauth/authorize, token URLhttps://certikit.io/oauth/token, scopemcp:use, PKCE S256. - Create the tool, then Connect and sign in when prompted.
- Add the tool to the agent and publish.
Copilot Studio's own tool descriptions come from the server; the tool names (search_knowledge, get_requirement, …) are what the agent sees.
First three things to ask
- "Which standards does this knowledge base cover?"
- "What evidence will the auditor want for ISO 27001 clause 9.2?"
- "Map ISO 27001 A.5.1 onto ISO 27701."
What you will not get
No ISO standard text and no original toolkit files; one template per get_document call, with a daily limit per workspace.