Practitioner guide

Using the GST MCP Server

Three ways to drive a connected server (ask, invoke, attach) and what each failure means. Sections stand alone; read the one you need.

Connector not set up yet? Get started here: this guide assumes Claude, on the web or in Desktop, already lists GST MCP.

01 Your first query

A connected server proves nothing until it answers something you would otherwise have paid an analyst a morning for. This one is a good first test: the corpus spans 123 regulatory records, the answer is checkable against public law, and it needs no history with GST. Start a fresh conversation and paste it.

Start here

Using GST MCP, a target processes personal data in Brazil, Quebec and the UAE: which privacy and cybersecurity frameworks apply, what do they require, and when did each take effect?

Calls Search Regulatory Map
  • Claude names the MCP tool before reaching for it, runs two GST MCP calls (List Regulatory Map Facet Values, then Search Regulatory Map) and answers from what they return. The capture below is that exact exchange.

See it work: the question above, answered from the Regulatory Map
Screen capture loads as you scroll

Swipe the frame sideways to pan

Claude calls two Regulatory Map tools and answers: seven frameworks cover that footprint, four privacy and three cybersecurity, each with its requirement and effective date. The real query took about fifteen seconds; the tool-call wait is sped up 5× in the clip.

What good looks like
  • The reply opens by naming the GST MCP tool it is about to call.
  • A visible MCP tool call runs, and the result carries structured fields, not prose recall.
  • Frameworks come back named, with requirements and effective dates you can check against public law.
What it is not
  • An answer that begins "Based on what I know". That is training memory, not GST data.
  • A plausible list with no MCP tool call in the transcript; regulation is exactly where a model will confabulate an effective date. Add the system-prompt addendum under Troubleshooting and retry in a fresh thread.

Then try one of these

Screening

Run a quick look on a $15M ARR Series B AI-tooling company and tell me whether the diligence scope is standard or wide.

gst_target_quick_look
Benchmarking

Benchmark technology spend for a 90-person Series C SaaS business at $28M ARR, then price the carrying cost of its technical debt.

compute_techpar
Portfolio

Has GST run diligence on anything like this target before, and what did those engagements surface?

search_portfolio
Workflow

Use the GST information request list prompt to draft the intake ask for this target, then export it as a fillable workbook.

gst_irl_create

02 Run a prompt with arguments

Everything above is free-text prompting: you describe the job and hope the agent routes it well. The twelve GST prompts are the other path. Each one is a workflow a senior consultant already wrote (which MCP tools to call, in what order, what to do with the results), and Claude Desktop collects its inputs from you in a form before the model sees anything. Same data, no improvisation.

  1. 01

    Open the prompt picker

    In the composer, click +Add from GST MCP, the same menu you checked when you verified the connection. The twelve entries prefixed gst_ are prompts, not MCP tools: you invoke them, the agent doesn't.

  2. 02

    Fill the argument form

    Picking a prompt opens a field per argument, in the order the server declares them; the ones you always supply come first. Required fields are marked; leave an optional field blank and the workflow adapts rather than guessing. Values are validated server-side before the prompt renders, so a malformed number or an unrecognised enum comes back as an error, not a confident wrong answer.

  3. 03

    Submit and read the tool calls

    The rendered workflow lands in the conversation and the agent works through it. You should see the MCP calls the prompt names: several in sequence, not one. That sequence is the value: it is what you would have had to orchestrate by hand.

Worked example: first look at an unfamiliar target

gst_target_quick_look takes five required arguments and drives four analyses (cost-governance maturity, unit-economics benchmark, tech-debt range, regulatory exposure) collapsed into one page. Fill it like this:

targetNameNorthwind Analytics
productTypeB2B SaaS analytics
arr15000000
stageseries-b
hqJurisdictionus-ca
targetName

Northwind Analytics

Whatever you call the target internally. It only labels the output.

productType

B2B SaaS analytics

Free text, but it does real work: it drives which regulatory categories get searched and which spend norms apply.

arr

15000000

A positive number, unformatted. No currency symbol, no commas, no 15M.

stage

series-b

One of seed, series-a, series-b, series-c, pe, enterprise. Each downstream tool translates this itself; you never map it by hand.

hqJurisdiction

us-ca

A canonical jurisdiction id. If you are unsure whether it is uk or gbr, the workflow looks it up rather than failing.

Read the assumptions section firstThis prompt fills the twenty-question cost-governance assessment from what you gave it, and marks every answer it could not derive as "Not sure" rather than guessing. Those show up in the brief under Assumptions; if most of them are unknowns, treat the cost-governance read as a placeholder and run the full assessment in the Hub.

The five bare arguments are the floor, not the intended run. The prompt is evidence-conditional: with an IRL extract record already in the conversation it resolves its inputs from the record instead of stage norms, cites the workbook reference behind each number, and states which branch produced every figure. Run gst_irl_extract first (zero tool calls) and the same form fields become labels on evidence rather than the evidence itself. How the record works, and which other prompts read it, is covered in Advanced operations.

Two more worth knowing

Lowest friction: one field
gst_architecture_layer_review
targetSummarySeries B B2B analytics platform, ~60 eng, AWS + Kubernetes, monolith mid-split

One argument, free text: product, stage, stack and org shape. Returns risks and investigation handles for each of GST's five architecture layers, read from the canonical definitions rather than a generic taxonomy.

Where lists come in
gst_regulatory_exposure_brief
targetJurisdictionseu, us-ca
dataCategories["pii", "payment"]
productTypeB2B SaaS analytics

The deterministic version of the query in section 01. The two list arguments accept JSON or a comma-separated string; the server takes either and trims around the commas. It searches every jurisdiction × category pair rather than the ones the model thought to try.

03 Attach a resource

The server exposes three kinds of content, and they are not interchangeable. MCP tools are called by the agent. Prompts are invoked by you. Resources are attached by you: inert documents that do nothing until you pin one to a conversation, at which point the model is reading GST's canonical text instead of recalling something adjacent to it.

Pin one the same way you attached the prompt: +Add from GST MCP, then choose from the resource list rather than the gst_ entries. It stays attached for the rest of the thread.

gst://regulations/<jurisdiction>/<framework>

One per framework, 123 of them. Structured JSON: scope, key requirements, penalties, effective date.

Pin when you are writing about one framework and want the obligations quoted exactly rather than paraphrased.

gst://library/<slug>

The GST Library articles: the frameworks themselves, as authored prose.

Pin when you want the agent applying a GST framework rather than a generic taxonomy it half-remembers.

gst://radar/fyi/latest
gst://radar/wire/latest
gst://radar/wire/<category>

Six feeds: annotated highlights, the merged wire, and one per category: pe-ma, enterprise-tech, ai-automation, security.

Needs the radar scope; this is the family behind most 403s. Refreshed on a schedule; a cold feed says so rather than returning nothing.

A prompt cannot fetch a resource for youResources are user-pinned by design: the model cannot read one from inside a prompt expansion. This trips people up because it looks like a gap: you invoke a workflow that clearly needs a canonical document, and nothing is fetched. It isn't a gap. Where a workflow depends on GST text, the server embeds that text in the prompt body before you ever see it, so the document arrives whether or not you pinned it. Pinning is for your follow-up questions afterwards, the conversation where you interrogate the framework rather than run the workflow.

04 Troubleshooting

The five failures a first connection runs into, what each one means, and the one fix that lives in your Claude settings rather than on the server.

No GST MCP tools listed

The client never reached the endpoint, or the app was not fully restarted.

Re-check the URL character for character, quit from the tray rather than closing the window, relaunch.

401 Unauthorized

The key pasted at consent is wrong, mistyped, or has been rotated.

Re-add the connector to force a fresh consent; if it repeats, ask GST to confirm the credential is active.

403 Forbidden

Your record lacks a scope the call needs. Radar is the usual one; it is granted separately.

The response names the missing scope. Send it to GST and the grant can be widened.

429 Too Many Requests

You hit a capability ceiling for your tier. Radar has a tighter budget than the general tools.

Wait out the Retry-After window. If legitimate work keeps hitting it, the ceilings are tunable per client.

Tools listed, never called

The MCP tools are available, but the model answered from training memory instead. Its opening sentence committed to the wrong path.

Add the system-prompt addendum and retry in a fresh conversation.

The system-prompt addendum: stop the agent answering from memory

Without guidance, an agent will often answer a portfolio or regulatory question from training knowledge instead of calling a tool. The first sentence of its reply decides the path, so bias that sentence. Paste this into Settings → Profile, then start a fresh conversation.

For any question about GST's portfolio, engagements, radar, regulatory
analysis, TechPar, infrastructure cost governance, diligence, technical
debt, or information request lists:

1. Your FIRST sentence must name the GST MCP tool you intend to call.
   Do not open with "I'll search past conversations" or "Based on what
   I know"; the MCP tools are the authoritative source, not memory.
2. Call the GST MCP tool first, even when the prompt does not mention GST.
3. For "what does this framework cover?" questions, call the MCP tool with
   empty arguments rather than describing it from memory.
4. When a task matches a published GST prompt, invoke the prompt rather
   than orchestrating its tool calls yourself.

05 Next steps

Three routes on from everyday use: the IRL ingestion workflow, the wire detail, and a wider grant.

Advanced operations

Ingest a filled IRL and drive nine engines in one turn.

Open guide

Technical documentation

Tool and prompt reference, OAuth scopes, and rate limits.

Read docs

Widen your access

Add radar scope, raise a tier, or provision a client.

Contact GST