Posts
45 posts
Read-only ChatGPT access to your company apps
Read-only ChatGPT access comes from a restriction rule on a role, not from a consent checkbox or a client setting that sounds like one.
MCP without JSON config files: one URL, OAuth
Run MCP without JSON config files: point Claude, ChatGPT and Cursor at one remote URL with OAuth sign-in, instead of per-laptop files holding pasted API keys.
Share an AI tool setup with a team, once
How to share an AI tool setup with a team: build a toolbox or template once, share it, and let everyone connect the same MCP address.
Video: Block a Risky Tool for a Whole Role, Once
Block a risky tool for a whole role: one Elaichi restriction on Stripe's Create a coupon, set once for the Member role, holds in every AI app your team uses.
Gemini access to company apps: admin controls
Gemini access to company apps splits three ways across Gemini Enterprise, the Gemini app and Gemini CLI, and Google documents each surface separately.
Glean or connect apps to Claude and ChatGPT?
Glean or connect apps to Claude and ChatGPT: what a search layer gives you, what a direct governed connection gives you, and when each path is the right call.
Video: Give Each Team Only the Tools It Needs
Give each team only the tools it needs: build a read-only Stripe toolbox with Claude, share it, and connect support's Claude to only that toolbox.
Video: Connect ChatGPT to Your Work Apps With One URL
Watch how to connect ChatGPT to your work apps with one URL: add Elaichi as a custom MCP server, choose what ChatGPT may do, and check it in the audit log.
Video: Connect Cursor to Your Work Apps With One URL
Watch how to connect Cursor to your work apps with one URL: add Elaichi in Cursor's MCPs list, choose what Cursor may do, and check it in the audit log.
Video: Connect Your First Work App to Elaichi
Watch how to connect your first work app to Elaichi: add a connection, sign in with OAuth 2.0, see it turn Active, and fix it if it will not connect.
Video: Connect Claude to Your Work Apps With One URL
Watch how to connect Claude to your work apps with one URL: add Elaichi as a custom connector, choose what Claude may do, and check it in the audit log.
FedRAMP MCP AI agent access: when to buy and when to wait
How to evaluate fedramp mcp ai agent access when the vendor has no authorization, and when the right call is to wait.
GitHub MCP server for a company with SSO
A GitHub MCP server for a company with SSO has two sign-ins to settle: your identity provider, and whose GitHub account the tool call actually runs as.
JSON-RPC 2.0 over Streamable HTTP MCP: one request on the wire
Trace one MCP tool call end to end: the JSON-RPC 2.0 over Streamable HTTP MCP envelope, the stateless POST, and what OAuth adds on top.
MCP restriction resolver precedence, as a decision tree
How the mcp restriction resolver precedence works across Elaichi's enforcement points, traced through one real tool call from browse to outbound request.
Google Sheets MCP access for Claude, team-wide
Google Sheets MCP access for Claude, team-wide: each person signs in with their own Google account, and two block rules keep Drive reads from writes.
Notion MCP access for ChatGPT, without private pages
Set up Notion MCP access for ChatGPT so private pages stay private: per-person connections, two restrictions, one locked argument, one audit query.
Stripe MCP access for finance team: what to block
Stripe MCP access for finance team work in ChatGPT: reads on charges and invoices, refunds blocked by a restriction rather than an OAuth scope.
Okta MCP server for IT admins: the mechanic
An Okta MCP server for IT admins changes who a call runs as and what one tool can do, not what your directory holds. Here is the mechanic.
Connect Jamf to Claude for device management
How to connect Jamf to Claude for device management, the two restrictions that stop an account escalation, and the audit filter that proves both held.
Contractor Guest role configuration in Elaichi
Contractor Guest role configuration in Elaichi: what Guest actually holds, why most contractors need Member plus restrictions, and what removal revokes.
MCP execute_tool indirection security
MCP execute_tool indirection security rests on one rule: the wrapper unwraps to a name and arguments, then meets the gates a direct call would meet.
Managed MCP connectors vs open-source MCP servers
Managed MCP connectors vs open-source MCP servers is a question about operating cost: sign-in, credentials, per-person access, the audit trail and offboarding.
What AI tool spend on expense reports reveals
AI tool spend on expense reports shows what four teams bought, not what those tools reached. What consolidating onto one governed endpoint changes.
Put AI to work in your own apps
14 days of Black, no credit card. Start with one app and one team.
When the trial ends, nothing is deleted. You move to the free Personal plan, and connections, roles and the audit log stay where they are.
Add one link to your AI app
The same link for everyone on your team.
https://api.elaichi.ai/mcp
ChatGPT
Claude
Cursor
Microsoft Copilot