Picture this: it’s Monday morning, you’ve got 47 SaaS tools to keep tabs on, a new hire starting Wednesday, and a CFO who wants to know why the AWS bill jumped. Instead of opening six tabs, you open Claude and type “What apps cost us more than $20 per active user last quarter, and who actually still uses them?” Forty seconds later you’ve got your answer, your spreadsheet, and your morning back.
That’s not a future demo. That’s today. ShiftControl now ships as a remote MCP server — a connection point that lets any MCP-aware AI (Claude, Cursor, ChatGPT, Windsurf, you name it) read your org’s data through natural conversation. One sign-in. Same permissions your account already has. Every answer scoped to your org, no admin god-mode hiding in the background.
What you can actually ask it
A few prompts that work on day one:
- “List every app where my Engineering team has access but Sales doesn’t — and tell me which ones are paid per-seat.”
- “Which SaaS subscriptions renew in the next 60 days? Sort by spend.”
- “Find every group with our new hire missing and add them.” (read-only today, but it’ll flag the gap)
- “The Notion contract just renewed at $14/seat through 2027 — update it.” (this one actually writes)
- “Show me apps sitting idle for more than 30 days that we’re still paying for.”
The trick isn’t that AI got smarter. The trick is that your AI finally has the same view of your org you do.
How It Works
- One sign-in. Zero API keys. Click Login with ShiftControl in your MCP client, approve the consent screen once, and your AI is connected — no tokens to rotate, no
.envfiles, no secrets to lose. - Nine read tools, one write tool. Query apps, groups, teams, departments, locations, and subscriptions. Update a subscription’s cost, billing frequency, contract term, or notes when you’re ready to write — with a
confirm: truegate so an LLM can’t silently change a plan it shouldn’t. - Works everywhere MCP works. Claude Desktop, Claude Code, claude.ai, Cursor, Windsurf, Continue.dev — if it speaks MCP, it speaks ShiftControl.
- Your permissions follow you. Every call runs as you. If you can’t see an app in the UI, neither can your AI. If you’re scoped to one org, you stay scoped to one org. Same Role Based Access Control (RBAC), no shortcuts.
- Sessions live for 30 days. Background token refresh keeps the connection warm, so your AI picks up tomorrow exactly where it left off today.
Getting Started
- In your MCP client, add a new remote server:
https://mcp.shiftcontrol.io/mcp - Click through the Login with ShiftControl prompt and approve the consent screen.
- Try a prompt that’s been bugging you all week. “Which apps are due for renewal in the next 90 days?” is a good warm-up.
Detailed per-client setup is in INSTALL.md — Claude, Cursor, Windsurf, ChatGPT, and friends all covered.
Next up: more write tools (user provisioning, group membership, app assignment), saved-prompt workflows, and the rest of the read surface you’ve been quietly hoping for. If there’s something you want to ask your data that we don’t support yet, tell us — we’re prioritising the next batch from real customer prompts.