Skip to content
Let's talk
  1. ai
  2. mcp servers & agent-ready apis

your systems, open to your ai.

We build MCP servers that let Claude, ChatGPT, Codex and your own agents read, write and act in the software you run. Every assistant signs in as one of your people, works within that person's permissions, and asks before anything that sends, deletes or costs money.

for teams that already ask ai for help

Your staff already paste work into ChatGPT or Claude. An MCP server lets the assistant open the real record itself, signed in as them.

it suits
  • Law firms on Clio
  • Trades and field-service businesses with job and estimating tools
  • Software companies whose customers expect an MCP server
  • Any business with a custom app or an API

from first task to daily use

  1. 01

    map the work

    We sit with your team and list what they'd hand an assistant. Each task gets a rating for time saved and risk, and a point where we'd stop.

  2. 02

    reads first

    The first tools look things up: matters, jobs, invoices, documents. Your team builds trust before anything can change.

  3. 03

    writes that ask

    Every write tool gets a risk level. Routine ones run. Anything that sends, deletes or costs money returns a summary and waits for a yes.

  4. 04

    roll out

    Each person connects their own assistant with one sign-in, and we write a setup guide for every assistant your team uses.

  5. 05

    keep it current

    New assistants, new spec versions and new business rules arrive over time. We keep the server working through all of them.

a server your team can trust with real work

  • The MCP server, deployed and monitored
  • A tool catalogue with a risk level and a plain description for every tool
  • Sign-in for every person: OAuth 2.1 with dynamic client registration, Client ID Metadata Documents and PKCE, or scoped tokens that expire
  • Confirmations on risky actions, with idempotency so a retried request never runs twice
  • An audit log of every call, with sensitive fields redacted
  • Automated tests covering the tools and the full sign-in flow
  • If you have a REST API, a check that keeps every API action and its AI tool in step
  • Agent-ready docs: llms.txt, OpenAPI, and setup guides for Claude, ChatGPT, Codex and Cursor
  • A sandbox or test mode wherever your system supports one

built to say no

The safety rules live in the server, where the assistant can't talk its way around them.

  • credentials stay on the server The AI client gets its own token and never sees your system's keys.
  • one real person per assistant Every assistant acts as one of your people, with that person's role checked on every call.
  • admins decide who connects Choose who may connect, and revoke any connection.
  • risky actions wait for a yes Anything that sends, deletes or costs money comes back for approval.
  • text is data, not instructions Document and record text never steers the assistant, which guards against prompt injection.
  • keys never sit in an agent Files move through one-time upload links.
  • nothing runs twice Retries are idempotent and edits check revisions, so nothing is overwritten silently.
  • every call is logged Each user is rate-limited, and every call lands in the audit log.

mcp, in plain words

What is an MCP server?
MCP (Model Context Protocol) is the standard way AI assistants connect to outside systems. An MCP server gives your assistant a set of tools, such as "find a matter" or "send an invoice", and decides who may use each one.
Which assistants can connect?
Claude, Claude Code, ChatGPT, Codex and Cursor, plus agents you build. Each connects through OAuth sign-in or a scoped token.
Can we start read-only?
Yes, and we usually recommend it. Reads go live first, and writes follow with risk levels and confirmations.
Who looks after it once it's live?
We do, on a care plan, as assistants and the spec change.

plan your first server.

Bring one system and one task. We'll map the first tools with you.

info@vicamconsulting.com 509.761.4771

Plan your first server