Mark HollandSenior AI Solutions Engineer

Enterprise Platform MCP

In developmentBuilt at work for a national healthcare data company

AI assistants reach a large healthcare data platform through four adapters: a command line, a local server, a hosted server behind company sign-in, and an Agent Skill. Thirteen tools sit behind three permission levels, and nothing reaches production until a person approves it.

Diagram: four adapters (command line, local server, hosted server behind company sign-in, Agent Skill) lead to one shared core with policy and a PHI guard, then to 13 tools under three permission levels and an audit trail on every write.

What it does

  • One shared core with four adapters: a command line, a local server, a hosted server behind company sign-in, and an Agent Skill.
  • 13 tools under three permission levels, and nothing is promoted to production without a person approving it.
  • A PHI guard in the core and an audit trail on every write.

From the app's own materials.

Who it is for

Engineering teams giving AI assistants access to a large healthcare data platform.

How it works

Enterprise Platform MCP, step by step
  1. Ask

    A person or an AI assistant asks for something through one of four adapters.

  2. Core

    The shared core applies the same policy and PHI guard to every request.

  3. Tools

    13 tools, under read, write, and promote permissions.

  4. Approve

    Promotion to production waits for a person, every time.

  5. Audit

    Every write is recorded in the audit trail.

The design

Diagram: four adapters (command line, local server, hosted server behind company sign-in, Agent Skill) lead to one shared core with policy and a PHI guard, then to 13 tools under three permission levels and an audit trail on every write.
Design diagramIn development. Four adapters, one core, and 13 tools under three permission levels.
Diagram: three permission levels, read, write, and promote, with a person approving before anything is promoted to production.
Design diagramIn development. Read access can be broad because promotion cannot: a person approves every promotion to production.

The decision that matters

One core for every adapter

The command line, the local server, the hosted server, and the Agent Skill all call the same core, so a different adapter never means a different set of rules.

Built with

  • Model Context Protocol
  • Python
  • Agent Skills