Secure & Govern · Prompt
Plain-language questions across one client or all of them.
Needs an LLM client connected to ScalePad MCP — Claude Desktop, Cursor, Windsurf or similar. Without it the assistant cannot call the recipe's tools.
Using ControlMap through the ScalePad MCP, answer this question for [SCOPE]: [QUESTION] Give the answer first, then the supporting records in a table. Tell me how confident you are and anything you couldn't check. How to work with the ControlMap API (ScalePad MCP): - Find the client with GET /controlmap/v1/clients/health and use its tenant ID (for example "dundmif") in every request. Some clients have no UUID. - Send the header Content-Type: application/json on every POST, PUT and PATCH, including searches. - Use page_size of 50 or less and follow next_cursor. The "fields" parameter is ignored, so responses are large. - Judge controls by "status", not the "compliant" flag. Objective lists include sub-objectives, so take totals from objective_summary. - Use framework-level scores and labels. The overall score_label on client health can be wrong. - Older policy sections may be URL-encoded twice: decode them and use the highest version of each section. - If a call returns 502 or fails to connect, wait a few seconds and retry once. If it still fails, tell me exactly which data is missing.
# Ask your compliance program anything
Hook: Plain-language questions across one client or all of them.
Whenever you'd otherwise click through several screens.
A direct answer with the records behind it.
Tested against the ControlMap API on October 16, 2026. Only asks for what the API supports.
