ChatGPT
Open Plugins, then Add, then Create MCP App. If that choice is missing, turn on Developer mode under Settings, Apps, Advanced settings. Name it VAHTOR, paste the address, and choose OAuth.
Product
AI data loss prevention platform
Real-time AI prompt guardrails and agentless DLP for the browser — with client-side prompt redacting and company policy controls.
Connect
Choose how you connect
Browser extension
Every major browser. Each person pastes the personal device code from My Connection.
Chrome
Edge
Safari
Firefox
Brave
Opera
- Sees which AI sites are in use
- Can stop a file send before it leaves the tab
- Chat text is not uploaded
- Desktop apps and phones are outside the browser extension
How this works
1 / 4
chatgpt.comChatGPT
Claude
GeminiSomeone opens ChatGPT, Claude, or Gemini in their browser.
MCP
A read-only connection. The assistant can read the current AI policy, the board report, and enrolled devices. It cannot change settings. Prompts and chats are not sent, and this connection does not run detection.
How this works
1 / 4
Connection address
https://app.vahtor.com/api/mcpHow to connect
Claude
Open Customize, then Connectors. Add a custom web connector named VAHTOR and paste the address.
Grok
Open grok.com/connectors. Add a custom connector and paste the address. On a company Grok plan, an admin adds the connector first.
Cursor
Open Settings, then Tools and MCP. Add a server named vahtor, type HTTP, and paste the address. Or put only the address in mcp.json. Do not paste a token.
mcp.json — address only
{
"mcpServers": {
"vahtor": {
"url": "https://app.vahtor.com/api/mcp"
}
}
}Windsurf
Open Settings, then Cascade, then MCP Servers. Add a server named vahtor and set serverUrl to the address. Do not paste a token.
Windsurf config — serverUrl only
{
"mcpServers": {
"vahtor": {
"serverUrl": "https://app.vahtor.com/api/mcp"
}
}
}Sign in with the VAHTOR account for that company and click Allow this company. Choose one company. If the account is not in a company, Allow stays off and the page says the account is not in a company yet.
Open the connection guidePC Software
VAHTOR Detect for Windows. Use the same personal code from My Connection.
- Lists the AI apps installed on the PC
- Records when an app opens and closes: the name and the time
- After sign-in, if Windows shows the message box, a check at send time reads the text in memory and reports only a masked finding
- The message stays on the PC
- No keylogging and no HTTPS interception
- If Windows does not expose the message box, Detect only records that the app is open
How this works
1 / 4
VAHTOR Detect
WindowsVAHTOR Detect
Windows
My Connection
ChatGPTOpenClaudeClosedMasked finding
Stays on this PC
VAHTOR Detect for Windows.
Extension
On the laptop, not on the network
People connect the browser they use with a personal device code. The extension sees which AI sites are in use and can stop a send before it leaves the browser.
- Personal device code in Chrome, Edge, Safari, Firefox, Brave, Opera, and the other browsers people use
- Stops a send before it leaves the tab
- Chat text is never uploaded
VAHTOR
AI Governance Platform
Live detection
Session activeChatGPT
Detected on chatgpt.com · metadata only
OrganizationMRL
ExtensionConnected
Last synchronizationJust now
Monitored AI services
Privacy details
Inventory
See every AI tool in use
ChatGPT, Copilot, Claude, Gemini and the rest land in one registry. Approve, restrict or block. Devices pick it up on the next sync.
- Approve, restrict or block in one registry
- Devices pick it up on the next sync
- Only tools in use need a decision
AI Tools
Detected in your organization
5 detected
ChatGPTApprovedClaudeRestrictedGeminiApprovedPerplexityReviewPolicy
AI policy with acceptance tracking
Start from a template, edit, and publish. Track who accepted the current version. Keep an audit of each publish.
- Publish a version people can accept
- See who is still pending
- Keep an audit of each publish
Company AI Policy
v1.0 · published today
12 of 15 accepted
Alex KimAccepted
Jordan LeeAccepted
Sam RiveraAccepted
Taylor ChenPending
Risk
Stop whole files going into AI
Rules can block PDFs, Excel and office files attached to AI tools. Credentials and secrets are flagged on-device. Chat text is not stored.
- PDF and Excel attaches blocked in the tab
- Secrets flagged on the device
- Chat text is not stored
On-device blocks
In the browser, before the send
report-q3.xlsxBlocked
api-keys.txtFlagged
Chat textNot stored
On-device checkLive
Reports
Names only when you turn them on
Owners choose aggregated reporting, identifiers, department rollups and retention. Member reports follow those Privacy controls.
- Aggregated reporting by default
- Identifiers only if you enable them
- Retention set by the owner
Privacy controls
Names only when you turn them on
Chats: zero
Tools
4
Policy
100%
Training
88%
Chats stored
Zero
Aggregated reporting
Individual identifiers
Department rollups
Retention90 days
Training
Literacy for the whole team
A workspace course with modules and a quiz. You set the pass mark and the timer once for the company.
- One course for the company
- You set the pass mark
- Completion is on the record
Company course
One course for the whole team
88% complete
1. FundamentalsPassed
2. Data leaksPassed
3. CopyrightIn progress
Quiz · pass mark 80%Set
MCP
How the Governance MCP works
In ChatGPT, connect https://app.vahtor.com/api/mcp, sign in, and choose one company. The assistant can read the current AI policy, the board report, and enrolled devices. It cannot change settings. Prompts and chats are not sent.
- Sign in and pick one company
- Ask about policy, reports, and devices
- Read-only — nothing is changed
- Prompts and chats are not sent
Governance MCP
Read-only · one company
app.vahtor.com/api/mcp
1Sign inChatGPT
2One companyYour workspace
3AskPolicy, report, devices
Prompts and chatsNot sent
Compare
How VAHTOR is different
Metadata and on-device checks. Not a proxy, not a chat archive.
Chat text
Typical tools: Often stored or logged
Not collected
File uploads to AI
Typical tools: Usually after the fact
Stopped in the browser
Rollout
Typical tools: Network proxies and certificates
Browser extension + device code
Remote work
Typical tools: Breaks off-VPN
Works wherever they browse
TopicTypical toolsVAHTOR
Chat text
Often stored or logged
Not collected
File uploads to AI
Usually after the fact
Stopped in the browser
Rollout
Network proxies and certificates
Browser extension + device code
Remote work
Breaks off-VPN
Works wherever they browse
FAQs
Your Questions, Answered
Everything you need to know to understand how the platform works, all in one place.
How can you govern AI without reading chats?
The extension matches patterns on the device. The dashboard stores a detection type and a risk level — not the prompt.
What happens if someone attaches a PDF or Excel file?
If a Files rule is on, the attach is cancelled, a banner is shown, and an alert is logged.
Can names be hidden on reports?
Yes. Privacy controls let owners keep aggregated reporting and turn individual identifiers off.
How does the Governance MCP work?
Add https://app.vahtor.com/api/mcp in ChatGPT and sign in. Choose one company. The assistant only reads dashboard facts. The guide is at https://app.vahtor.com/mcp.