Connecting an AI assistant

certo has an MCP server: a standard way for an AI assistant to use certo for you. You ask in plain words ("Who is ready for the warehouse role?") and the assistant calls certo, with your permission and only within what your role allows.

The address

https://mcp.certo.bio/mcp

Connecting

1. In your assistant, add a custom connector (it may be called an MCP server or an integration) with the address above.
2. The assistant opens certo's consent page. Sign in there with your work e-mail and the code certo e-mails you. If you were already signed in more than ten minutes ago, certo asks for a new code first.
3. Pick your organisation if you belong to more than one. The assistant works for that one organisation; connect it again to use it for another.
4. certo shows what the assistant will be able to do, as plain sentences, ticked up to your own role. Untick anything it should not do. Reading passports is listed on its own: every read is logged and the candidate sees it.
5. Approve. You go back to the assistant, which can now use certo as you. Deny sends it back with nothing connected.

Only people in an organisation can connect an assistant; a candidate's account cannot, and neither can a certo staff account.

What you can ask

• "Invite these twelve people to the Data Analyst position" (paste the list).
• "Which candidates for the warehouse role are ready, and what is missing for the rest?"
• "What did the employer confirm about Ada's last job?"
• "Issue the spring cohort's certificates from this spreadsheet."
• "Did anyone claim last week's degrees?"
• "How do sponsored invitations work?" (it reads this help center)

Nothing is sent without you

Before the assistant invites people, asks to read a passport or issues records, it shows you what would happen: how many rows, how many verifications, which rows would be refused and why. It goes ahead only after you confirm, and a confirmation covers exactly that list.

Disconnecting

Open Account, then Connected apps, and press Disconnect beside the assistant. It stops working at once. Owners and admins see every assistant connected to the organisation on Company profile, under Connected assistants, and can disconnect any of them. If your role changes, the assistant can do only what your new role allows.

For an agent with no person

A program that runs on its own can connect with an API key instead of signing in: send it as the bearer token. The key's scopes decide what the agent can do.