Integrating SailPoint ISC with Claude Desktop

A Step by Step Guide Using Model Context Protocol (MCP)

Introduction

SailPoint Identity Security Cloud (ISC) supports the Model Context Protocol (MCP), enabling AI agents like Claude Desktop to interact directly with your ISC tenant, letting you manage access requests using plain, natural language.

What is Model Context Protocol (MCP)?

Model Context Protocol  is an open standard that allows AI models to securely connect to external data sources and tools. It acts as a bridge between AI agents (like Claude) and enterprise platforms (like SailPoint ISC), enabling real-time, context aware interactions.

SailPoint's MCP Server translates Claude's natural language requests into SailPoint API calls , so you can ask Claude "What can I request access to?" and get a real answer from your ISC tenant instantly.

Prerequisites

Before getting started, make sure you have the following:

• A SailPoint ISC tenant (demo tenant works fine)

• Claude Desktop installed (free download from claude.ai/download)

• Node.js installed (v20+ recommended - download from nodejs.org)

• A Personal Access Token (PAT) from your ISC tenant

Step-by-Step Integration Guide

Step 1: Install Claude Desktop

1. Go to claude.ai/download and download the Windows installer

2. Run the installer and sign in with your Claude account

3. Complete the setup wizard

Step 2: Install Node.js

Node.js is required because Claude Desktop uses npx (Node's package runner) to launch the MCP server.

4. Visit nodejs.org and download the LTS version (.msi for Windows 64-bit)

5. Install with all default options  especially keep 'Add to PATH' checked

6. Verify installation: open cmd and run node --version and npx --version

Step 3: Generate a Personal Access Token (PAT) in ISC

7. Log in to your ISC tenant

8. Click your profile icon (top right) → Preferences

9. Go to Personal Access Tokens → New Token

10. Name it Claude-MCP-Test and click Create

11. Copy the Client ID and Client Secret

Then generate an OAuth access token using this curl command:

curl -X POST "https://[tenant].api.identitynow-demo.com/oauth/token?grant_type=client_credentials&client_id=YOUR_CLIENT_ID&client_secret=YOUR_CLIENT_SECRET"

Step 4: Install mcp-remote Globally

To avoid path issues on Windows, install mcp-remote globally:

npm install -g mcp-remote

Step 5: Configure Claude Desktop

Create or edit the config file at %APPDATA%\Claude\claude_desktop_config.json with the following content:

{

  "mcpServers": {

    "SailPoint MCP": {

      "command": "mcp-remote",

      "args": [

        "https://[tenant].api.identitynow-demo.com/v2025/access-requests/mcp",

        "--header",

        "Authorization: Bearer YOUR_ACCESS_TOKEN"

      ]

    }

  }

}

Step 6: Restart Claude Desktop & Verify

12. Fully quit Claude Desktop (system tray → right-click → Quit)

13. Reopen Claude Desktop

14. Go to Settings → Developer -  you should see SailPoint MCP with a 'running' status

15. Start a New Chat and click the '+' button to confirm SailPoint MCP is listed

SailPoint MCP running successfully in Claude Desktop:

What Can You Do with SailPoint MCP + Claude?

Once connected, you can use natural language to interact with your ISC tenant:

• "What can I request access to?" - Lists all requestable items for your identity

• "Request access to [application/role]" -Initiates an access request on your behalf

• "What is the status of my access request?" — Queries the status of pending requests

• "Cancel my pending access request" — Cancels a pending request

Challenges & How I Solved Them

• Session token vs PAT: Session tokens don't work with MCP — you need to generate an OAuth access token using your PAT credentials

• Windows PATH issue: Claude Desktop couldn't find npx due to spaces in 'C:\Program Files' — fixed by installing mcp-remote globally

• Two config file locations: Claude Desktop reads from a different config location depending on the installer version used

Conclusion

Integrating SailPoint ISC with Claude Desktop via MCP opens up exciting possibilities for AI-driven identity management. With just a few configuration steps, you can interact with your ISC tenant using natural language making access requests, checking statuses, and more.