How it works

From connected system to governed invocation

MCP One sits in the control path between AI capabilities and your enterprise systems. Here is how a capability moves from connection to invocation — with approval, policy, and audit recorded as part of the process, not bolted on after the fact.

  1. Connect a system

    Administrators bring enterprise systems — Jira, GitHub, Salesforce, Stripe, internal APIs — into MCP One as managed integrations. Credentials are stored centrally against the connected system, and every AI capability built on top of it inherits the same governance layer automatically.

  2. Register a capability

    Each AI capability — a connector, an MCP-served action, an internal agent skill — is recorded in the registry with a purpose, an owner, the systems it touches, and a risk classification. The registry is the source of truth for what AI exists in your organisation.

  3. Set approval and access policy

    Configure who is required to review each capability and who is allowed to invoke it. Rules can be defined by role, department, geography, data sensitivity, or the connected system. High-risk capabilities can require a second reviewer before they go live.

  4. Approve the capability

    Designated reviewers assess the capability’s purpose, ownership, connected systems, and risk classification, then approve or reject with a recorded decision. The approval, the reviewer, and the date are part of the permanent record.

  5. Broker the invocation

    When an AI agent or employee invokes a brokered capability, the request passes through MCP One. The platform checks the approval state, applies the relevant policy rules, allows or denies the invocation, and creates an execution event before the action runs.

  6. Audit, discover, and adopt

    Every invocation is recorded with the capability, the caller, the result, and the policy decision. Approved capabilities are published to the Employee Catalogue with plain-language descriptions, owners, and intended users — so staff can find sanctioned options instead of reaching for unmanaged tools.

Want to see this applied to your estate?

MCP One is open now. Start free to explore the platform, or apply for a 90-day hands-on pilot tailored to your organisation’s requirements.

Apply for a pilot