The agent proposes. The platform decides.
An MCP tool server exposes the ERP as governed, typed tools to any external AI — every read is scoped, every write is a proposal that returns a draft, and every call passes the same entitlement and tenancy gates a person passes. Not a raw API key handed to an agent. Early access, pre-production.
code-inventory
AI tool server / agent gateway (MCP)
Anthropic MCP · OpenAI function-calling · LangChain tools · SAP Joule agents
The ERP exposed as governed, typed tools where every write is a proposal that returns a draft — behind the same entitlement, tenancy and validation gates a person passes — not a raw database key bolted to an agent's prompt. code-inventory
| TOOL | SHAPE | EFFECT |
|---|---|---|
| query_metric | typed in / out | read · scoped |
| get_document | typed in / out | read · scoped |
| propose_journal_entry | typed in / out | write · DRAFT |
| typed tools | schema is the contract | EARLY ACCESS |
The ERP, as typed tools.
Early access · the surfaceThe MCP tool server exposes ERP operations as governed, typed tools — each with a declared input and output schema — so any MCP-speaking AI can read a metric or propose a document without touching the database directly. The contract is the schema, not a raw connection string. code-inventory
return DRAFT je-draft-0912 proposed, not posted
approve a human decides the agent proposes
decide entitlement + tenancy the platform decides
Propose, never post.
Early access · the write pathEvery state-changing tool returns a proposal, not a committed write. propose_journal_entry hands back a balanced draft for a human to approve — the agent proposes, a person approves, the platform decides. Nothing an agent calls crosses into the ledger on its own. code-inventory
| GATE | CHECKS | SAME AS |
|---|---|---|
| Entitlement | can this caller do this? | the UI |
| Tenancy | whose data is in scope? | the UI |
| Validation | is the payload well-formed? | the UI |
| no wider door | logged + auditable | EARLY ACCESS |
The same gates as a person.
Early access · the gateA tool call is not a back door. Every call passes the same entitlement, tenancy and validation checks a human passes in the UI, no tool escalates a privilege the caller does not hold, and every call is logged and auditable. The AI gets the same door, not a wider one. code-inventory
Everything on the Leysco Akili platform.
In this line| MCP Tool Server & Agent Gateway | Early access | This page — the governed, typed tool surface. |
| Governed Semantic Layer | Early access | The metrics query_metric reads from. |
| Leysco Licia (governed AI operator) | Early access | The operator that calls these tools. |
| Master Data Resolver | Early access | Money-safe entity resolution behind a proposal. |
| Document Ingestion | Early access | Email / WhatsApp / PDF to a governed draft. |
| Immutable Multi-book Ledger | Early access | Append-only accounting core — designed native. |
A typed call goes in. A draft comes back.
Signature · A door, not the keysThe agent gets a governed door, not the keys: typed tools through the same entitlement, tenancy and validation gates a person passes — and every write comes back a proposal. One call goes in; a draft handle comes back, proposed and not posted; the gate a person approves through stays closed until a person opens it. Early access, pre-production. code-inventory
reconciliation
A proposed entry lands in the same production ledger the house posts 1.66M+ distribution invoices on — the tool drafts into the real chain a person approves, it does not invent a second set of books to write to freely.
The live ledger the tools propose into is the Leysco100 strength today. The MCP tool server, its typed tools and the propose-to-draft gate are a Leysco Akili capability in early access, pre-production — the agent proposes, a human approves. We chip it as it is.
- give an external AI governed, typed tools instead of a raw database key
- make every AI write a proposal a human approves, never a silent post
- hold every tool call to the same entitlement and tenancy gates a person passes
- log and audit every call an agent makes
An agent handed API keys, writing straight to the database no one reviewed → typed tools, every write a draft, behind the same gates a person passes