MCP Platform

Agent-first data is no longer a nice-to-have. Deliver customer data straight to the agent clients where your customers already work, governed, per-customer, and yours.

Your data

Tenanted, per-customer

Your MCP

Auth & RBACTenant isolationGoverned metricsAudit trail

Skills & charts

Bundled skillsInteractive widgetsCharts

Rendered in the client

Claude

More than an endpoint

Everything around the chart that a customer-facing data MCP needs, governed and ready out of the box.

Charts grounded in real queries

Interactive charts from the agent's actual query, never hallucinated HTML. Agent-friendly: row caps, type hints, and errors that tell the agent what to fix. Live and open source today.

Multi-tenant by default

Per-customer isolation and role-based access. One model for everyone or a different schema per tenant, your call. Tenancy passes through in headers; your SQL is never rewritten.

Auth that actually connects

OAuth with WorkOS, Okta, Google, and Microsoft, plus a registration broker for when your IDP cannot do dynamic client registration. Every customer connects on the first try.

Query your way

A governed semantic query path and a raw SQL tool, over Postgres, dbt, a semantic layer, or your warehouse. Connect with one runSql callback.

Catch problems before customers do

Deterministic data-readiness checks (grains, additivity, descriptions) plus agent eval sets, so you know the MCP works before you ship it.

Observability with intent

See which tools get used, where agents fail, and why they asked, captured as intent. Learn what your customers want and what data you are missing.

Connect your auth

Plug in your auth, and every customer gets access scoped to their own data.

WorkOS

Clerk

Supabase

Auth0

Okta

Microsoft Entra

Google

Multiple auth methods

OAuth 2.1, API keys, and bearer tokens, plus a registration broker for IDPs that cannot do dynamic client registration.

Tenant isolation by default

Every request carries a verified identity, scoped to one tenant and enforced where your data lives.

Role-based access

Control what each user inside a customer can reach. Finance sees finance, support sees support.

Deploy anywhere

Managed by us, in your VPC, on-prem, or air-gapped. Your data never leaves your boundary.

Managed cloud

We host and run it.

Bonnard cloud

Your VPC

Runs in your own cloud account.

AWSGCPAzure

On-prem

Run it in your own data center.

DockerKubernetes

Air-gapped

For regulated and high-security environments.

no egress

Self-hosted with Docker, Kubernetes, or Helm. Deploy in any region.