IntelligenceIntelligence
Know what your AI's up to.
You pointed an agent at your own systems and it worked. Now nobody can say what it changed last Tuesday, what it would do if you asked it something slightly wrong, or why it keeps getting your own business facts wrong.
Three problems, and they are the whole job.
-
What it can reach
Connectors onto the system you already run, so an agent can act on your real data rather than a copy you pasted into a chat. The MCP software itself is free and takes ten minutes. Deciding which operations to expose at all is the entire risk surface, and that decision is the work.
-
What it is allowed to do
Permissions, approval gates, scoped credentials, an audit trail you can read. In April an agent deleted a production database and its backups in nine seconds, and the cause was a token that had write access during the build and that nobody revoked afterwards. OWASP now has a name for the principle: Least Agency. Autonomy is earned rather than granted by default.
-
What it knows
Most people ask to have a model trained on their data. Almost always what they need is retrieval, because training bakes facts into weights that go stale and cannot cite a source. Your CMS is already the corpus.
Two hard ends, and the middle is the easy part. Getting twelve years of inconsistent fields out cleanly is content modelling rather than AI. And most retrieval systems leak: the index has no idea a document was a draft, or private, or belonged to one customer, so the assistant quietly quotes it to whoever asks. Carrying your permission model all the way through to query time is the version almost nobody builds.
Maybe you've not got a data lake, just a data pond, and you want to do something with it.
That is who this is for. Big enough to have systems worth protecting and somebody upstairs asking what the AI is actually doing. Small enough to have no security team, no data engineer, and no patience for a platform that comes with a sales call.
Robin Metcalfe. Fifteen years building approval and audit interfaces, back when the thing being approved was a payment rather than a prompt. Edinburgh. Part of Solarise.
Proper site shortly. Until then, if any of the above is a problem you currently have, email me and we will talk for half an hour with nothing attached to it.