What is MCP?

The Model Context Protocol is an open standard, introduced by Anthropic in 2024 and now supported by OpenAI, Google, Microsoft and others, that lets AI assistants use external tools and data safely.

An MCP server publishes a set of named tools — “check availability”, “summarize this ticket”, “brief me on this donor” — and handles the connection to your system itself. Any MCP-capable AI can use those tools; none of them ever sees your credentials or calls your API directly.

Why not just give the AI API access?

Raw API access is all-or-nothing: the AI gets every field and every operation the account allows, and nothing records which person asked for what. That’s why most organizations, rightly, don’t allow it.

An MCP server puts a governed layer in between. It decides who may use each tool, removes sensitive fields, holds changes for approval, limits how much can be queried and logs everything — so you can say yes to AI without giving up control.

How it fits together

AI clients

  • Claude & Claude Code
  • ChatGPTCustom connectors
  • Gemini-based tools
  • Your apps & agentsIncluding customer chatbots
MCP tool calls

Your MCP server

  • IdentitySSO, OAuth or API keys
  • Tool permissionsPer tool, role and field
  • RedactionSensitive fields removed
  • ApprovalsWrites wait for a person
  • Audit & limitsLogs, rate limits, query caps
Scoped API calls

Your systems

  • CRM & databases
  • Ticketing & booking
  • Documents & intranet
  • Finance & line-of-business apps
Runs in
  • Your Azure
  • Your AWS
  • Your Google Cloud
  • or managed by us
AI clients only see named tools. The server checks who is asking, applies your rules, and only then talks to your systems.

Tools, not endpoints

We design tools around the questions people actually ask, not around the shape of your API. A few illustrative examples:

SystemRead toolsWrite tools (with approval)
CRM or donor databasefind_contact, summarize_historylog_note, update_contact
Ticketing or bookingcheck_availability, find_orderhold_seats, resend_confirmation
Help desksummarize_ticket, search_knowledge_basedraft_reply, assign_ticket
Finance or ERPbudget_vs_actual, open_invoices— (kept read-only)
Documents & intranetsearch_policies, get_document—
Data warehouserun_approved_report, compare_periods—

Built for control

  • Works with the AI your team uses

    Claude and Claude Code, ChatGPT (custom connectors), Gemini-based tools, developer tools such as Cursor and VS Code — and your own apps and agents.

  • Authentication to match

    Public (no sign-in, public information only), staff single sign-on through Microsoft Entra ID, Google Workspace or Okta, or API keys for systems.

  • Read, write or both — per role

    Start read-only and add write actions only where they’re needed. Scope access per tool, per role and per field.

  • Human approval for changes

    Write actions — a note, a contact update, a reservation — can require a person to approve them first.

  • Redaction

    Sensitive fields such as payment details, dates of birth and private notes are removed on the server, so they never reach an AI model.

  • Audit logs & limits

    Every tool call is logged — who asked, what ran, what changed — with rate limits and query caps to protect your systems.

  • Hosted where you want

    In your own Azure, AWS or Google Cloud account, or fully managed by us.

  • One integration, many uses

    The same governed server can power staff AI tools, internal apps, AI agents and customer-facing chatbots.

How we deliver

  1. Discovery

    Map the questions and tasks each team wants AI help with.

  2. Tool & permission design

    Define each tool, who can use it and what stays private.

  3. Build & test

    Develop against your test environment first.

  4. Deploy & connect

    Go live in your cloud or ours, and connect your AI tools.

  5. Train & evolve

    Train staff, monitor usage and add tools as your needs grow.

Contact us

Connect your AI tools to your systems

Tell us which systems and teams you have in mind, and we’ll map out the tools and permissions with you.

Contact us