Skip to main content
Use Oplane directly in your dev environment through the Model Context Protocol (MCP) or the Claude Code plugin. Get security recommendations and threat modeling assistance while you code.

​
Getting Started

To connect Oplane MCP to your dev environment, visit your Oplane dashboard and follow the setup instructions for your specific environment. The setup process takes just a few minutes. Once connected, simply prompt your AI assistant with “Use Oplane” to get started. If you choose to create a new threat model, the entire workflow below runs automatically — from identifying use cases and threats to providing implementation advice and assessing your code.

​
Supported Environments

Oplane works with any environment that supports the Model Context Protocol:
Add the following to your mcp.json configuration file:
{
  "mcpServers": {
    "Oplane": {
      "url": "https://gravity.oplane.io/mcp/"
    }
  }
}

​
What You Can Do

Once connected, just tell your AI assistant what you want to do. Here are the workflows available:
WorkflowExample prompt
Guided walkthrough of threat modeling tools and workflowsGet started with Oplane
Analyse your codebase and suggest what to threat modelSuggest what to threat model with Oplane
Run a full automated threat modeling workflow end-to-endThreat model my authentication changes with Oplane
Threat model a pull request by analysing the diffThreat model this PR with Oplane
Get guidance for writing threat model descriptionsHelp me describe my changes for Oplane
Security review of your AI coding agent’s permissions and accessReview my agent setup with Oplane
Analyse recent commits for security-relevant updatesAnalyse my recent changes with Oplane
Analyse changes since a specific commit or tagAnalyse changes since last release with Oplane

​
Tool Reference

These are the MCP tools available to your AI assistant. You don’t need to call them directly — they run automatically as part of the workflows above.
ToolDescription
new_threatmodelCreate a new threat model with security requirements for your described changes.
my_recent_threatmodelsList your recent threat models to review or continue working on them.
get_threatmodelFetch the full content of a threat model by ID.
get_requirementFetch the full details of a single security requirement by ID.
request_implementation_adviceGet specific implementation guidance for a security requirement.
update_implementation_stateRecord your assessment of a requirement as implemented, not implemented, accepted risk, out of scope, or not applicable.
update_requirement_severityAdjust the severity of a security requirement with justification.
add_threatmodel_commentAdd context to a threat model to refine or regenerate its requirements.
search_workspacesSearch your workspaces by name to find where to create or view threat models.
create_workspaceCreate a new workspace in your organisation for organising threat models.
create_security_ruleCreate a keyword-matched security rule for your organisation.
list_security_rulesList security rules for your organisation.
get_security_ruleFetch a specific security rule by ID.
update_security_ruleUpdate an existing security rule.
delete_security_ruleDelete a security rule.
You can start by asking “Use Oplane to suggest threat modeling scopes” if you’re not sure where to begin.

​
Choosing a Workspace

By default, threat models you create via MCP go to your personal workspace. To target a specific workspace, just mention it by name in your prompt:
  • “Use Oplane to threat model my auth changes in the workspace name workspace”
The agent will search your workspaces by name, find the match, and create the threat model there. You never need to look up workspace IDs manually.
If you’re not sure which workspaces you have, ask “Search my Oplane workspaces” to see a list.
You can find your workspaces in the Oplane dashboard. Your personal workspace is marked with a Yours badge.
Oplane workspaces overview
Personal workspace with Yours badge

Learn about workspaces

Understand workspace types and how to create them.