Monday.com
Connect Monday.com to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Monday.com to collect ticketing evidence with automated compliance tests, switched on per workspace.
| Category | Ticketing |
| Connect with | API token, MCP server |
| What a connection produces | Automated compliance tests |
| Monday.com's guide | support.monday.com |
Connect with an API token
-
In Monday.com:
- In monday.com, click your profile picture in the top right corner and select Developers; the Developer Center opens in another tab.
- Click API token › Show and copy your personal token.
- (Account admins can also use Administration › Connections › Personal API token.)
Monday.com's public documentation does not cover every step.
Source: developer.monday.com, checked 2026-10-07.
The permissions Safeguard needs:
boards:read,users:read. Safeguard's compliance tests for Monday.com need the credential on the API token tab: an OAuth connection cannot read everything they check. -
On Compliance › Connectors, open Monday.com, click Connect, choose API token and fill in:
Field What to enter API token Required. Stored encrypted and never shown again. Board IDs Required. Separate several with commas. -
Click Connect with token.
Connect with the MCP server
Choose MCP server: the address https://mcp.monday.com/sse is filled in. Sign in to Monday.com when asked. It lets Griffin AI search Monday.com; the compliance evidence comes from the API token connection.
Frameworks
Safeguard's automated tests read Monday.com and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.2, CC6.3, CC7.1, CC7.3, CC7.4, CC7.5 | 8 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.5.25, A.5.26, A.5.27, A.6.5, A.8.2, A.8.8 | 8 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4), 164.308(a)(6) | 8 |
| PCI DSS | Automated tests | 6.3.3, 7.2.2, 7.2.4, 8.2.5, 12.10.1, 12.10.6 | 8 |
| NIST CSF 2.0 | Automated tests | ID.IM-03, PR.AA-01, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-02 | 8 |
These tests are switched on per workspace by the Safeguard team.
Related
- Ticketing connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks