Assemble Audit Evidence in Notion

For a security team that does not want to lose a week to every audit. One prompt pulls the access reviews, exports the WAF config, and drops a tidy evidence pack in Notion, ready for the auditor walkthrough.

CLCloudflareSEServiceNow

Notion

The grind

Audit prep is a week of collecting screenshots

Here's what doing this by hand looks like today, and why it doesn't scale.

Being compliant is done. Proving it is the actual work. Every audit cycle the team spends days re pulling evidence that was captured at the source and then lost to memory.
Access reviews live in ServiceNow while the evidence lives in scattered screenshots.
The WAF config gets exported by hand and version stamped badly.
Every audit cycle repeats the same collection work from zero.

MewCP collapses all of this into one prompt. Here's what that looks like.

The flow

5 steps · 3 servers

Your agent runs it end-to-end

List the access reviews from ServiceNow for the audit window.

Export the current Cloudflare WAF configuration.

Work out the WAF rule diff against the prior quarter.

Flag any access reviews that were closed without a reviewer signature.

Assemble the evidence pack in Notion under Audits and the cycle name.

The payoff

Audits prepared in hours, not weeks

The evidence is assembled straight from the systems of record, and any gaps surface before the auditor sees them. The walkthrough turns into a quick review instead of a scramble.

Paste this into Claude, Codex, or any MCP-connected agent. It'll connect your apps and run the task from start to finish.

Run it yourself

Copy the prompt

prompt

Goal: Assemble Audit Evidence in Notion

MCP servers needed (connected through MewCP): Cloudflare, ServiceNow, Notion

Steps:
1. List the access reviews from ServiceNow for the audit window.
2. Export the current Cloudflare WAF configuration.
3. Work out the WAF rule diff against the prior quarter.
4. Flag any access reviews that were closed without a reviewer signature.
5. Assemble the evidence pack in Notion under Audits and the cycle name.

Check with me before sending any message or changing data in a connected app.

More recipes