Skip to main content

WEBAPIX · MODEL CONTEXT PROTOCOL

Bring AI assistants and business systems together.

With MCP, compatible AI assistants can access business data and workflows through controlled, authorised connections. They can do more than answer questions: with the right permissions, they can also prepare actions and proposed changes.

AI DOESN'T HAVE TO WORK IN ISOLATION

A well-designed MCP integration connects AI assistants to real business workflows without handing them unrestricted control.

Four principles behind more useful AI integrations

The MCP connection developed by WEBAPIX is not a standalone chatbot. It is a controlled access layer between an AI client and a business system.

01

A standard way to connect

MCP provides a consistent interface for compatible AI clients, so you don't have to build an entirely separate integration for every assistant.

02

Live data, within permissions

Access projects, tasks, invoices, customers and other business information according to the user's and team's permissions.

03

Proposed actions, not uncontrolled changes

An assistant can initiate actions such as creating tasks or proposing updates. Changes begin as approval requests, not unrestricted writes.

04

Accountable access

OAuth-based authentication, tool-level permissions, auditable calls and revocable connections help you stay in control.

What can an MCP integration actually do?

Practical examples based on business functions supported by the Demona MCP server developed by WEBAPIX.

  • TASKS

    "What's on my task list?"

    Ask about tasks, projects, owners and deadlines in natural language. Propose new tasks or updates through an approval workflow.

  • FINANCE

    "What's the status of our invoices?"

    Retrieve invoice statuses, planned payments and financial overviews. Requests for changes are kept separate from information lookups.

  • SALES

    "What's happening with our proposals?"

    Access customers, opportunities and sales-process information within the permissions of your team.

  • HR

    "How much leave do I have left?"

    View employee and leave information, and initiate requests or administrative steps where permissions allow.

  • CONTENT MANAGEMENT

    "Let's draft a news update."

    Review connected website content and prepare news posts or pages while keeping editors in control.

  • MANAGEMENT OVERVIEW

    "Give me a summary of today."

    Bring together reports, search results, notifications and related workflows from authorised tools.

MCP, APIs and integrations: what's the difference?

A business system's API provides the underlying way to retrieve data and perform business operations. MCP (Model Context Protocol) builds on these capabilities to expose approved tools and data sources to compatible AI assistants through a standard interface.

With appropriate authentication, an assistant can therefore do more than provide general answers. It can use specific business functions, such as finding a task or preparing a proposed change. The user's permissions and the system's business rules determine which tools they can access.

MCP is not a general-purpose API gateway. It does not replace API traffic management or infrastructure. Its role is to provide a controlled tool connection between AI applications and business systems.

From a question to an approved action

In this implementation, information requests and business changes follow different paths.

  1. Connect the assistant

    The user authorises a connection from a supported AI client through OAuth-based sign-in.

  2. Verify identity and permissions

    The server checks the user, selected team and permissions required for the requested operation.

  3. Retrieve data or propose an action

    Read-only tools can return information. Tools that would make changes create requests for approval.

  4. Human approval

    The underlying business system applies a significant change only after an authorised person approves it.

  5. Feedback and traceability

    Action statuses can be checked, tool activity can be logged and connection access can be revoked.

AI can suggest the next step. Your team stays in control.

In the MCP implementation described here, tools that initiate significant changes do not write directly to business records. Instead, they create approval requests. Reading a record, adding a task and performing a financial operation require different permissions. The goal is to make work faster without removing accountability or oversight.

More than a concept. A working technical foundation.

WEBAPIX's Demona MCP implementation is backed by defined authentication, security and operational mechanisms.

01

OAuth 2.1 connectivity

Access is tied to user authentication, granted permissions and team-level access controls.

02

MCP-compatible clients

With the appropriate configuration, the server can connect to ChatGPT and Claude clients.

03

Revocable connections

Dedicated processes support disconnecting integrations and revoking access tokens.

04

Auditable tool calls

Authentication and tool-use events can be logged for review.

05

A defined tool catalogue

Business functions can be exposed as clearly scoped tools with separate permissions.

06

Designed for your environment

We design APIs, permissions and approval checkpoints around your organisation's workflows.

Frequently asked questions about MCP integrations

MCP makes connectivity more consistent, but enterprise data access and permissions still need careful design.

  • Model Context Protocol is a standard that allows compatible AI applications to connect to defined tools and data sources.

WEBAPIX · AI AND BUSINESS INTEGRATIONS

What could an AI assistant safely access in your systems?

Let's map your data sources, permissions and recurring tasks, then identify where an MCP integration could make a meaningful difference.