Per-user tokens
Every MCP connection has a human owner.
AI, MCP & Agents
The model is not the product. The permissioned business context is.
Ask a question, make a decision and take an action — without giving the agent more access than the person who connected it.
One request, end to end
The permissioned action trace
01
User asks
Draft the renewal offer for Nordfeld Klinik.
02
Agent loads a skill
Document creation · versioned with the product
03
MCP selects a tool
Create document from template · write-capable
04
Permission scope is applied
Tenant · role · business unit · commercial visibility
05
Human confirms ambiguity
Two accounts match — candidates returned
06
The record changes
Draft renewal attached to the engagement
07
Audit evidence appears
Write attributed to the connecting user
Ask
Use the model you already trust.
The in-app assistant and approved MCP clients see the same permissioned tools and records. The model endpoint and provider are configurable per workspace.
Anthropic, OpenAI and Google providers
Local and OpenAI-compatible endpoints
Bring your own encrypted provider key
Decide
Procedure before improvisation.
Agents load maintained, versioned skills before non-trivial work. Unclear matches return candidates. Ambiguous writes stop and ask rather than guessing.
Document creation and editing
CRM research and capture
Meeting preparation, transcript filing and minutes generated from a filed transcript
Profile maintenance and email drafting
Presales triage, which stops and asks before it commits
Your own sales rules, searched rather than assumed
Act
Actions on the real record.
The agent uses the same permission-aware services as the product UI, so it can research, draft and update without creating a parallel source of truth.
Resolve accounts and capture contacts
Update every opportunity field available in the UI, find deals by project number, mark them won or lost, create the Harvest project on a win, read any timeline note or filed email in full, and update projects and their notes with the same rules as the UI
Search, create, edit, discuss and delete tasks with the same permissions, audit trail and assignment notifications as the Tasks UI
Book time and start or stop the timer, with the same task budgets and bookers as the time UI
Decommission a project's infrastructure: list it with ids, unlink or retire hosting, unlink domains and licenses, end cost sharing memberships, delete websites and archive the project with the UI's permissions and audit trail
File inquiries, email and meeting transcripts
Correct a timeline note's commercial or shared visibility while its filed SharePoint folder moves with it
Browse, upload, version, move and delete a record's SharePoint files through MCP, with completion verified before audit
Create and revise governed documents
Author templates with shared clauses and conditional SLA sections through the assistant or MCP
Preview and confirm an audited ownership handover when a colleague leaves
Maintain the whole website record with the same rules as the UI: details, owner, customer, CRM record, analytics links, finding mutes and the hosting assignment, including Dokploy services ranked by domain match
Register applications and link Azure DevOps source repositories for dependency vulnerability scanning
Run a prospect report or a start-page quick check on third-party websites, including a WCAG 2.1 AA accessibility audit
Update consultant profiles after review
Rewrite a draft in place, so one current version replaces a stack of them
Export a consultant profile as a PDF, anonymised or whitelabelled
Search your sales knowledge and return the rule that applies
Prove
Every action belongs to a person.
Each MCP token belongs to one user and inherits that user’s tenant, role, business-unit and commercial scope. Writes produce normal audit evidence.
Hash-only tokens shown once
Revocation and last-use history
Idempotent source capture
Human confirmation for critical writes
Governed by design
Inherited scope
The token never widens the connecting user’s access.
Human confirmation
Critical and ambiguous writes stop for review.
Normal audit evidence
Agent actions appear in the same history as UI actions.
Connect your own MCP client. Watch the audit log.
Connect Claude Desktop, Cursor or Copilot Studio to Genedar. In the walkthrough, we set up a user-scoped connection, let the agent complete a controlled task and show the full audit trail.